xentral data protection

Change your Privacy Settings.

1. Data protection at a glance

Overview and personal data

Personal data includes all information that pertains to an identified or identifiable person (hereinafter also referred to as “data”).

In this declaration, you will be informed in Part A, in general, of

  1. who is responsible for processing your personal data
  2. the contact information of the data protection officer
  3. Your rights with respect to the processing of your data

You will be informed in Part B concerning individual services, respectively and specifically:

In Part C, we inform you about data protection in the framework of using the app, in particular:

Unless otherwise stipulated in Part B or Part C, the data will be saved for the period required to fulfill the indicated in each case. If different data processing purposes overlap with respect to the same data, the purpose that takes longest to fulfill shall apply for the retention period.

Part A - General Information

1. Responsible body

Unless otherwise stipulated in Part B, the following party is responsible for processing data with respect to individual services:

Xentral ERP Software Co.
228 East 45th Street, Suite 9E
New York, NY 10017

2. Data protection officer contact information

You can reach the appointed data protection officer at: legal@xentral.com

3. What rights you have with respect to your data

In accordance with the respective statutory requirements, you have the following rights to protect your personal data: Right to information (Articles 15 of the GDPR), right to deletion (Article 17 of the GDPR), right to correction (Article 16 of the GDPR), right to limit processing (Article 18 of the GDPR), right to data transferability (Articles 20 of the GDPR), right to file a complaint with a data protection supervisory authority (Article 77 of the GDPR), right to revoke consents (Article 7(3) of the GDPR) and the right to object to specific data processing measures (Article 21 of the GDPR).

If you have questions regarding this or anything else pertaining to data protection, please contact us anytime at Xentral ERP Software GmbH, Fuggerstraße 11,86150 Augsburg, Tel +49 821 268 41 0 40, Fax +49 821 268 41 0 42, Email: kontakt@xentral.com.

Please note that you may be directed via links on our website to other websites which we do not operate and which are instead operated by third parties. We either clearly mark such links or make them recognizable by means of a change in the address bar in your browser. We are not responsible for compliance with data protection regulations and the safe handling of your personal data on these third-party-operated websites.

Objection to advertising emails

The use of the contact data we publish in the framework of the legal obligation to provide a masthead to send us advertisements that have not been requested or any unsolicited informational materials is herewith prohibited. The operator of the site expressly reserves the right to take legal steps in case unrequested advertising information, such as SPAM emails are sent.

Part B - Information about individual services

1. Data processing via our website xentral.com

SSL or TLS encryption

This site uses SSL or TLS encryption for security ppurposes and to protect the transmission of confidential content like orders or requests you send us as the site operator. You can recognize an encrypted connection by the “http://” changing to “https://” and the lock symbol in your browser bar.
If the SSL or TLS encryption is enabled, the data you transmit to us cannot be intercepted by third parties.

1.0 Hosting

We host our website and forum using Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA, whereby data processing is limited to the EU. The processed data categories and processing purposes can be found in the following clauses. Incidentally, there is a legitimate interest in accordance with Art. 6(1) lit. f of the GDPR in operating our website and forum.

1.1 Cookies

Some of the pages use cookies. Cookies are not harmful to your computer and do not contain any viruses. Cookies are used to make our website more user friendly, effective and secure. Cookies are small text files stored on your computer and which your browser saves.
Most of the cookies we use are “session cookies”. They are automatically deleted after your visit to the site. Other cookies remain saved on your end device until you delete them. These cookies allow us to recognize your browser the next time you visit the site.
You can set your browser settings to inform you if cookies are saved and only allow cookies in individual cases, the acceptance of cookies in specific cases or generally deny the use of cookies and enable automatic deletion of cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.

Purpose of the data processing:
Cookies required to execute the electronic communication process or provide specific features you want to use (e.g. shopping cart), will be saved on the basis of Art. 6 (1) lit. f of the GDPR. The website operator has a legitimate interest in saving cookies for the technically fault-free and optimized provision of its services. If other cookies (e.g cookies to analyze your surfing behavior) are saved, they will be discussed separately in this Data Privacy Statement.

1.2 Server log files

Processed data categories:
The page provider automatically collects and saves information in server log files which your browser automatically transmits to us. These include:

These data are not merged with other data sources.

Purpose of the data processing:
The basis of the data processing is Art. 6(1) lit. f of the GDPR to provide the website including fault analysis and correction, and defense of IT-side risks and attacks and to conclude and execute contracts.

1.3 Contact form and newsletter

Processed data categories:
We process the data you provide us in each specific input field or via email when submitting requests and registrations for our newsletter; we always process your email address.

Purpose of the data processing:
If you send us requests using the contact form, we will save the information you provide in the input field including the contact information you specify there for the purpose of processing the request and in the event of follow-up questions.

If you order our newsletter, we will process your data to send you information about our products and services at the contact address you provided.

The data are processed on the basis of your consent (Art. 6(1) lit. a of the GDPR). You can revoke this consent at any time. An informal notification sent to us via email is adequate. The legality of the data processing procedures remains unaffected by the revocation until the revocation is submitted. With respect to the newsletter, the following also applies: You can unsubscribe from the newsletter at any time by clicking on the corresponding link (unsubscribe) or by sending an email to: kontakt@xentral.com.

The data you provided us on the contact form or when signing up for the newsletter will remain with us until you request they be deleted, revoke your consent to them being saved or the reason for the data being saved no longer applies (e.g. after your request has been fully processed). Mandatory statutory regulations, in particular retention periods, remain unaffected.

1.4 Registering with this website

You can register with our website in order to use additional functions. We only use the data entered for the purpose of your use of the specific offer or service for which you have registered.

Processed data categories:
The mandatory fields on the registration form must be complete. Otherwise, we will deny the registration.
We use the email address you specify during registration to keep you up-to-date on important changes, for instance to the range of offers or technically necessary changes.

Purpose of the data processing:
The data entered during registration is processed on the basis of your consent (Art. 6(1) lit. a of the GDPR). You can revoke your consent at any time. An informal notification sent to us via email is adequate. The legality of data processing that has already been executed remains unaffected by the revocation.
We save the data collected during registration as long as you are registered with our website; they will be deleted thereafter. Statutory retention periods remain unaffected.

1.5 Data processing (customer and contract data)

If you order goods or services via our website, the following data processing purpose and data categories apply:

We collect, process and use personal data only insofar as is required for the substantiation, content-related form or change in the contractual relationship (inventory data). This is done on the basis of Art. 6(1) lit. b of the GDPR which allows the processing of data to fulfill a contract or pre-contractual obligations. We only collect, process and use personal data pertaining to the utilization of our websites (usage data) and to the extent necessary to allow the user to utilize the service and for invoicing.
The collected customer data will be deleted after the completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

1.6 Data transmission upon conclusion of a contract for online shops, merchants and goods shipping.

If you order goods or services via our website, the following data processing purpose and data categories apply:

We transmit personal data to third parties only if and insofar as is required in the framework of the execution of the contract, for instance, to the companies entrusted with the delivery of the goods or the credit institute tasked with processing payments. The data are not further transmitted and only will be if you have expressly consented. Your data will not be passed on to third parties without express consent, for instance, advertising purposes.
The basis of the data processing is Art. 6(1) lit. b of the GDPR which allows data to be processed to fulfill a contract or pre-contractual obligations.

1.7 Data transmissions upon conclusion of the contract for services and digital content

We transmit personal data to third parties only if and insofar as this is necessary within the framework of executing the contract, for instance to the credit institute tasked with processing payments.
The data are not transmitted any further and only will be if you have expressly consented. Your data will not be passed on to third parties without express consent, for instance, advertising purposes.
The basis for the data processing is Art. 6(1) lit. b of the GDPR which allows data to be processed to fulfill a contract or pre-contractual obligations.

1.8. Analysis tools and advertising

1.8.1 Google Analytics

Data recipients:
This website uses functions of the Google Analytics website analysis service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies. These are text files that are saved on your computer and which allow for an analysis of your usage of the website. The information generated by the cookie about your use of the website is, as a rule, transferred to a Google server in the USA and stored there.

Purpose of the data processing:
Google Analytics cookies are saved on the basis of Art. 6(1) lit. f of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize its website and its advertising.

IP anonymization
We have enabled the IP anonymization function on this website. Google truncates your IP address within European Union member states or in other states party to the Agreement on the European Economic Area prior to being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website to create reports about website activities and to provide additional services to the website operator in conjunction with the use of the website and the use of the Internet. The IP addresses transmitted by your browser in the framework of Google Analytics is not combined with other data from Google.

Browser plugin
You can prevent the cookies from being saved by changing the corresponding settings in your browser software; we would like to make you aware, however, that if you do so, you may not be able to use all of the functions of the website to their full extent. Furthermore, you can prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (incl. your IP address) by loading down and installing the browser plug-in available under the following link: Google opt-out.

Object to data collection
You can also prevent Google Analytics from collecting your data by clicking on the following button. An opt-out cookie will be saved that prevents your data from being collected when you visit the site in the future: Disable Google Analytics

Processed data categories and additional information
You can find more information about how Google Analytics handles user data in the Google data privacy statement.

Contract-based data processing
We have concluded a contract with Google for contract-based data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics at Google Analytics
This website uses the “demographic characteristics” function from Google Analytics. This allows reports to be created that contain statements regarding the age, gender and interests of the people who visit the page. These data come from interest-related advertising from Google and from visitor data from third-party providers. These data cannot be assigned to a particular person. You can disable this feature at any time via the display settings in your Google account or you can generally prohibit the collection of your data by Google Analytics as described under “Objecting to data collection”.

1.8.2 Google Analytics Remarketing

Data recipients:
Our websites use the Google Analytics Remarketing functions in conjunction with the cross-device Google AdWords and Google DoubleClick functions. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

General purpose of the data processing:
This function allows for the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device Google AdWords and Google DoubleClick functions. This way, interest-related, personalized advertising adapted to you based on your previous usage and surfing behavior on an end device (e.g. cell phone) can be displayed on another one of your devices (e.g. tablet or PC).

The purpose of data processing and processed data categories with consent
If you have issued a corresponding consent declaration, Google links your Internet and app browser history to your Google account. This way, the same personalized advertisements can be displayed on every end device with which you log into your Google account.
To support this function, Google Analytics records google-authenticated IDs of the users which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.
You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google account; to do this, click on this link: Advertising settings.

The data collected in your Google account is compiled exclusively on the basis of your consent which you can provide to or revoke from Google at any time (Art. 6(1) lit. a of the GDPR).

The purpose of data processing and processed data categories without consent
With respect to data collection processes that are not compiled in your Google account (e.g. because you do not have a Google account or have objected to the compilation), the collection of data is based on Art. 6(1) of lit. f of the GDPR. The legitimate interest results from the website operator having an interest in the anonymized analysis of the website visitors for advertising purposes.
You can find additional information and the data protection provisions here in Google’s data privacy statement.

1.8.3 Google AdWords and Google Conversion Tracking

Data recipients:
This website uses Google AdWords. AdWords is online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Purpose of the data processing:
In the framework of Google AdWords, we use conversion tracking. If you click on an advertisement displayed by Google, a cookie for conversion tracking will be saved. Cookies are small text files the Internet browser saves on the user’s computer. These cookies expire after 30 days and are not used to personally identify the user. If the user visits certain pages on this website and the cookie has not expired, Google and we recognize that the user has clicked on the advertisement and was forwarded to this page.
Each Google AdWords customer receive a different cookie. The cookies cannot be traced via AdWords customer websites. The information collected with the help of conversion cookies is used to create conversion statistics for AdWords customers who have chosen to use conversion tracking. The customers learn the total number of users who clicked on their advertisement and were forwarded to a page equipped with a conversion tracking tag. They do not, however, receive any information with which users can be personally identified. If you do not want to participate in tracking, you can object to this use by simply disabling the Google conversion tracking cooking via your Internet browser user settings. You will then not be included in the conversion tracking statistics.

Conversion cookies are saved on the basis of Art. 6(1) lit. f of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize its website and its advertising.

Additional information and processed data categories:
You can find more information about Google AdWords and Google Conversion Tracking here in Google’s data privacy statement.
You can set your browser settings to inform you if cookies are saved and only allow cookies in individual cases, the acceptance of cookies in specific cases or generally deny the use of cookies and enable automatic deletion of cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.

1.8.4 Google reCAPTCHA

Data recipients:
We use Google reCAPTCHA (hereinafter referred to as “reCAPTCHA”) on our websites The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Purpose of the data processing:
reCAPTCHA is used to check whether the data input on our websites (e.g. on a contact form) is executed by a person or an automated program. To this end, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor accesses the website. For the analysis, reCAPTCHA uses a variety of information (e.g. IP address, how long the visitor spends on the website or mouse movements the user executes). The data collected during the analysis are forwarded to Google.
The reCAPTCHA analyses run in the background. Website visitors are not notified that an analysis is taking place.

The data are processed on the basis of Art. 6(1) lit. f of the GDPR. The website operator has a legitimate interest in protecting its website against improper automated spying and SPAM.

Additional information and processed data categories:
You can find additional information about Google reCAPTCHA and the Google data privacy statement by clicking on the following links: Google data privacy statement and introducing reCAPTCHA.

1.9 Newsletter

Newsletter data

If you register for the newsletter offered on the website, the following purpose of the data processing and processed data categories apply:

We require an email address and information from you that allows us to ensure that you are the owner of the provided email address and that you agree to the receipt of the newsletter. Further data will not be collected or will only be collected on a voluntary basis. We use these data exclusively to send the requested information and do not pass it on to third parties.

The data entered on the newsletter registration form is processed exclusively on the basis of your consent (Art. 6(1) lit. a of the GDPR). You can revoke the consent you issued to save the data, email address and the use thereof to send the newsletter at any time by clicking the “unsubscribe” link the newsletter. The legality of data processing procedures that have already been executed remains unaffected by the revocation.
We will save the data you provide us for the purpose of receiving the newsletter until you unsubscribe from the newsletter at which point they will be deleted. Data we save for other purposes (e.g. email addresses for the member area) remain unaffected.

1.10 Plugins and tools

1.10.1 YouTube

Data recipients:
Our website uses plugins from YouTube, operated by Google. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is the operator of the websites.

Purpose of the data processing:
If one of our pages are equipped with a YouTube plugin, a connection to the YouTube servers will be established. The YouTube server will be notified of which of our pages you visited.
If you are logged into your YouTube account, you enable YouTube to directly assign your surfing behavior to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of making our websites visually appealing. This constitutes a legitimate interest in accordance with Art. 6(1) lit. f of the GDPR.

Additional information and processed data categories:
You can find more information about how YouTube handles user data in the YouTube data privacy statement.

1.10.2 Vimeo

Data recipients:
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

Purpose of the data processing:
If one of our pages are equipped with a Vimeo plugin, a connection to the Vimeo servers will be established. The Vimeo server will be notified of which of our pages you visited. Vimeo also receives your IP address. This also applies if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo are transmitted to the Vimeo servers in the USA.
If you are logged into your Vimeo account, you enable Vimeo to directly assign your surfing behavior to your personal profile. You can prevent this by logging out of your Vimeo account.

Additional information and processed data categories:
Additional information and processed data categories can be found in the Vimeo Privacy Policy.

1.10.3 Google Web Fonts

Data recipients:
We use Google WebFonts on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Purpose of the data processing:
This page uses these web fonts, provided by Google, for the uniform presentation of fonts. When opening a page, your browser loads the necessary web fonts into your browser cache so it can correctly display texts and fonts.
To this end, the browser you use must establish a connection to Google’s servers. This notifies Google that our website was accessed via your IP address.

Google Web Fonts is used in the interest of making our websites visually uniform and appealing. This constitutes a legitimate interest in accordance with Art. 6(1) lit. f of the GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.

Additional information and processed data categories:
Additional information about Google Web Fonts and the Google data privacy statement.

1.10.4 Adobe Typekit Web Fonts

Data recipients:

We use Adobe Typekit WebFonts on our websites. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA

Purpose of the data processing:
This page uses these web fonts, provided by Adobe, for the uniform presentation of fonts. When opening a page, your browser loads the necessary web fonts into your browser cache so it can correctly display texts and fonts.
To this end, the browser you use must establish a connection to Adobe’s servers. This notifies Adobe that our website was accessed via your IP address.

Adobe Typekit Web Fonts is used in the interest of making our websites visually uniform and appealing. This constitutes a legitimate interest in accordance with Art. 6(1) lit. f of the GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.

Additional information and processed data categories:
You can find more information about Google Web Fonts at Adobe Fonts and Adobe’s data privacy statement.

1.10.5 Google Maps

Data recipients:
This page uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Purpose of the data processing:
Your IP address must be saved to use the Google Maps functions. Information collected in this way is, as a rule, be transferred to a Google server in the USA and saved there. The provider of this website has no influence over this data transmission.

Google Maps is used in the interest of making our websites visually appealing and to make locations specified on the website easier to find. This constitutes a legitimate interest in accordance with Art. 6(1) lit. f of the GDPR.

Additional information and processed data categories:
You can find more information about how Google Maps handles user data in the Google data privacy statement.

1.10.6 HubSpot

We use HubSpot Inc. (“HubSpot Inc.”), 25 First Street, 2nd Floor, Cambridge, MA 02141, USA marketing functions on our website that allow us to create a user profile for you, with your consent, so we can display personalized and interest-related advertisements on our website. We also use HubSpot to send individual, topic-related emails. This, too, requires your consent.

By integrating HubSpot, when visiting our website, a connection is established with HubSpot as soon as you access content provided by HubSpot. HubSpot can assign this information (e.g. IP address, information provided on forms) to your user profile if one has been created.

The data are used for the purpose of personalized advertising via HubSpot. This constitutes a legitimate interest in accordance with Art. 6(1) lit. f of the GDPR. In addition, we have concluded a contract for contract-based processing with HubSpot. If the data are transmitted to HubSpot Inc. in individual cases, this is done in accordance with Resolution (EU) 2016/1250 (“EU-US Data Privacy Shield”). In addition, the contract-based processing contract contains standard EU clauses in accordance with Art. 46(2) lit. d of the GDPR to which HubSpot Inc. is subject.

You can find more information in HubSpot’s data privacy statement and cookie guidelines.

1.10.7 GoToWebinar

To execute customer webinars, xentral utilizes the GoToWebinar software from LogMeIn Ireland Limited (contract-based processor). Personal data are collected/saved in the framework of logging onto LogMeIn’s (Bloodstone Building Block C70 Sir John Rogerson’s Quay Dublin 2, Ireland) infrastructure. This includes, in particular, the last name, first name and email address. The legal basis of the data processing is Art. 6(1) lit. f of the General Data Protection Regulation.

The data are processed by LogMeIn (as a contract-based processor) on the basis of Article 28 of the General Data Protection Regulation. The data are processed in Germany, the European Union and the USA within the scope permitted by law. Please also refer to LogMeIn’s data privacy provisions.

1.10.8 OneSignal

Notifications, also known as push notifications, are implemented with the help of OneSignal, 2850 S Delaware St #201, San Mateo, CA 94403, USA which provides this function as a service. You can find more information about OneSignal and its functions on the OneSignal website. Your data will also be processed by OneSignal and saved on OneSignal’s systems. The terms of use and data privacy statement from OneSignal apply to the collection, processing and use of the relevant data. The subscription to notifications can be temporarily suspended or terminated at any time via the corresponding browser’s settings and via the following page.

OneSignal-Webseite
Privacy Policy of OneSignal

1.11 Online job application

You can send us a job application online via our application form. When you submit your online application, we will collect and process your personal data for the purpose of executing the application process. Only data pertaining to your application, which you provide us (in particular master data; communication data; if you provide it to us, also: certificates, additional qualifications, CV, desired salary, earliest possible start date, potential messages and content regarding documents you have uploaded) will be saved. As soon as the form is sent, the information will be forwarded to us.

The legal basis for the execution of the application process is Art. 88(1) of the DSGVO in conjunction with Sec. 26(1) p. 1 of the BDSG-new (Federal Data Protection Act), and for the saving of data for future application processes, Art.(1) lit. a) of the GDPR in conjunction with Art. 7 of the GDPR, § 26(2) of the BDSG-new. Your data will not be shared.

We save your data until the application process is completed. Three months after that, data pertaining to unsuccessful applications will be deleted. This also applies if you revoke your consent. If you expressly provide your consent, we will save your data for up to two years; after that, the data will be deleted if the application was unsuccessful. This also applies if you revoke your consent. Your personal data will not be transmitted to a third country or any international organization. You are not obligated to provide this personal data; however, your application cannot be processed without it.

2. Data processing via our forum at forum.xentral.com

With respect to data processing via our forum at forum.xentral.com (hereinafter referred to as: “Forum”), the information specified in Part B Clause 1 apply as does the following:

Data categories:
Your support requests are processed via our forum and linked to support requests. The data from free text fields, the user name and the date of the questions and responses are processed.

Purpose of the data processing:
You can publicly ask support questions and see the support questions from other users via our forum.

The purpose of the forum is to increase knowledge regarding our products and services and provide it publicly on a permanent basis, Art. 6(1) lit. f of the GDPR.

3. Data processing as part of a remote session and remote maintenance

Data categories:
As part of remote data access (remote session) or remote maintenance, we can process personal data to which you want to give us access and personal data required to establish and operate the remote data connection. You can find details on this in the data privacy statement of the provider of the tool; they are also the recipient of the data: “Teamviewer” from TeamViewer GmbH Jahnstr. 30 73037 Göppingen (TeamViewer data privacy statement (there, Teamviewer IoT) and “Anydesk” from Anydesk Software GmbH, Rosenbergstr. 46 70176 Stuttgart: https://anydesk.com/privacy (there, subitem: “Software”).

Purpose of the data processing:
The purpose of the data processing is essentially to facilitate the establishing of a remote session, e.g. product request, product demonstration (each for the purpose of concluding a contract) or maintenance and updating of the software you have licensed (each for the purpose of executing the contract).

Part C - Apps

General Information

1. Firebase Cloud Messaging

Data recipients:

Our app uses Firebase Cloud Messaging. The recipients are (1) Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) with additional recipients within and outside of the EU, EEC and secure third countries on the basis of EU standard contract clauses and the EU-US Privacy-Shield; you can find more information at: https://firebase.google.com/support/privacy and (2) OneSignal, Inc.2850 S Delaware St Suite 201, San Mateo, CA 94403, USA (“OneSignal”) with additional recipients within and outside of the EU, EEC and secure third countries on the basis of EU standard contract clauses.

General purpose of the data processing:

This function is used to delivery push notifications via OneSignal on mobile end devices. The objective is to identify our various visitors’ individual end devices to which the OneSignal notifications should be sent.

Processed data categories with consent, legal basis, revocation

If you have provided consent to enable this function, your instance IDs will be processed with Google and OneSignal data, which you enter (email address or tags) as well as data pertaining to your current usage (session), the profile of your device and its communications connection, including the IP address; GPS data will only be processed if you have allowed the app to do so. You can find additional information at: https://documentation.onesignal.com/docs. The legal basis for the processing is Article 6 (1) a of the GDPR. You can revoke your consent in the app settings by resetting the checkmark for this function.

Retention period:

The aforementioned data categories will be saved until consent is revoked. A final deletion of the data categories from live and backup systems will be performed after no later than 180 days (Google) and 30 days (OneSignal) after the deletion request, plus an internal processing time of up to 14 days.

What will happen if the data are not provided?

The data processing and your consent are voluntary. In the event you refuse, you cannot receive notifications from OneSignal.

2. Google Analytics for Firebase

Data recipients:

Our app uses Google Analytics for Firebase. The recipient is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA with additional recipients within and outside of the EU, EEC and secure third countries on the basis of EU standard contract clauses and the EU-US Privacy Shield. You can find additional information at: https://firebase.google.com/support/privacy

General purpose of the data processing:

This function is used to collect usage data and usage statistics regarding your app usage to improve the app and related processes and provide anonymous reports.

Processed data categories with consent

If you have issued your consent to the enabling of this function, your mobile ad IDs, IdentifierForVendor (UUID)/ Android IDs, Instance IDs, Analytics App Instance IDs will be processed. The legal basis for the processing is Article 6 (1) a of the GDPR. You can revoke your consent in the app settings by resetting the checkmark for this function.

Retention period:

The aforementioned data categories are saved for 60 days.

What will happen if the data are not provided?

The data processing and your consent are voluntary. If you refuse, we cannot pursue the purpose of the data processing.

3. Firebase Performance Monitoring

Data recipients:

Our app uses Firebase Cloud Messaging. The recipient is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA with additional recipients within and outside of the EU, EEC and secure third countries on the basis of EU standard contract clauses and the EU-US Privacy Shield. You can find additional information at: https://firebase.google.com/support/privacy

General purpose of the data processing:

This function results in the collection of performance data when you use the app, such as loading time or network latency and is used to improve the app and related processes and provide anonymous reports.

Processed data categories with consent

If you have issued your consent to the enabling of this function, your instance IDs and IP addresses will be processed. The legal basis for the processing is Article 6 (1) a of the GDPR. You can find additional information at: https://support.google.com/firebase/answer/6318039m You can revoke your consent in the app settings by resetting the checkmark for this function.

Retention period:

The aforementioned data categories are saved for 30 days.

What will happen if the data are not provided?

The data processing and your consent are voluntary. If you refuse, we cannot pursue the purpose of the data processing.

Grow your business with xentral

Get started with xentral today

  • Scales seamlessly with your business success
  • Automation from order processing to logistics
  • Easy to use - integrate today, benefit immediately
Schedule a Demo

No credit card required. No obligations.

Get a product tour

Let one of our experts show you all features.

Schedule a Demo

No credit card required. No obligations.

How to automate your business processes with xentral

Download Free eBook