Privacy Policy

Privacy Policy for the AIVITEX Web app, services obtained through it, and the AIVITEX website

Information on the processing of personal data and data controller

We are pleased that you are interested in our service. The protection of your privacy and compliance with applicable data protection laws is extremely important to us, the iuhhoo GmbH, Brühlstraße 7, 70563 Stuttgart, Germany (“AIVITEX” or “we” or “our” or “us”). We therefore use your data in compliance with the strict provisions of the relevant data protection law (in particular the General Data Protection Regulation), provided that we collect, use or store ("process") personal data from you within the scope of the services offered. Our Privacy Policy is intended to inform you about which data we record, for which purposes, how it is used as part of the app, the services acquired through the app, the customer account and the website (collectively “service/s”). You should therefore take the time to read our Privacy Policy.

The controller for data processing pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR):
iuhhoo GmbH
Brühlstraße 7
70563 Stuttgart, Germany
Managing director: Antonia Zock

You can contact our data protection officer at:
Data Protection Officer
iuhhoo GmbH, Brühlstraße 7, 70563 Stuttgart, Germany
E: dataprotection@aivitex.com

If you have any questions, suggestions and/or feedback regarding our services, please contact us:
iuhhoo GmbH,
Brühlstraße 7
70563 Stuttgart, Germany
E: info@aivitex.com

The app may contain links to websites or the services of other providers over which we have no control and are therefore not covered by this Privacy Policy. We assume no liability for the content, the technical security or activities of these external websites or services. We therefore recommend that you read the Privacy Policy carefully.
General Privacy Policy information and Privacy Policy for the AVITEX App and services obtained through it (Last amended on: March 17, 2022)
Privacy Policy for the AIVITEX website (Last amended on: June 10, 2021)

A. General Privacy Policy information and Privacy Policy for the use of the AIVITEX Web App

§ 1 General information on data processing

We only process personal data of our users if this is necessary to guarantee the functionality of the Web App. Personal data is information that can be used to identify you individually (for example name, address, postal address, telephone number or your e-mail address). No personal data, however, are details such as the number of users of our services.
When using the app for information purposes, i.e. if you do not register or otherwise provide us with information, we collect the personal data described below, which is technically necessary for us to offer you the functions of our app and to guarantee stability and security:
Device-Identification: DeviceID for Android, IDFA for iOS
Language and version of the app
Operating system
Date and time of the request
The volume of data transferred in each case

§ 2 Data processing when using the AIVITEX Web Apps

The AIVITEX video call is used by our business partners, e.g. to remotely advise and support end users and to record on-site conditions for service issues. Our business partner is the data controller and AIVITEX is the processor. The AIVITEX privacy policy as well as the privacy policy of our business partner can be viewed by the end user at the latest when starting the video call. Since AIVITEX is a web application, there is no need to install the AIVITEX solution on the end user's device. To start the video call, the end user receives a link that is transmitted by our business partner. There is no need to download an app. To start the video call, the end user is asked to share their camera and microphone. During the video call, our business partner can fill in fields in a form, take notes, take photos and video.

1. Recipients of personal data

Your personal data will not be transmitted to third parties unless this is necessary for the purpose of contract processing or due to legal requirements or you have expressly consented.
1.1. Disclosure of personal data to public authorities
Your personal data will only be transmitted to public authorities if the information is requested on the basis of legal requests for information.
1.2. Create service videos
We use our web app, among other things, to create videos of assembly, installation and service conditions for our contractual partners regarding your installations and repair requests, etc. ("service video"). If you use the web app, you will be prompted to enable the app to access the camera of your end device permanently or for the individual use case, depending on your preferences. At the scheduled appointment to create a service video, our service representatives will notify you when the video recording starts, pauses, restarts, and ends. The video is transmitted to our client as part of your order and deleted after the service case has been completed with us.

2. Service providers used

In addition to the aforementioned, we use external service providers (e.g. computer centres) to process your data. These have been carefully selected by us and process the personal data exclusively according to our instructions and under our control.

For authentication, storing and reading data from the Firestore database, storing and reading files in memory and hosting our web application, we use Firebase, a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - providing "Firebase".
When customers use Firebase, Google is generally a data processor under GDPR and processes personal data on their behalf. Firebase terms and conditions include data processing and security terms and conditions that list these responsibilities.
Certain Firebase services that fall under the Google Cloud Platform (GCP) Terms of Service are already covered by the associated Data Processing Terms, the GCP Data Processing and Security Terms. For a complete list of Firebase services currently covered by the GCP Terms of Use, please see the Firebase Services Terms of Use.
Firebase is certified to the most relevant privacy and security standards.
All Firebase services (except App Distribution and Crashlytics) have successfully completed the ISO 27001 and SOC 1 , SOC 2 and SOC 3 evaluation process.
Firebase's privacy policy can be found here: https://firebase.google.com/terms/data-processing-terms.

Twilio (375 Beale Street Suite 300 San Francisco, CA 94105 USA) provides TURN/STUN servers to stabilize subscriber connections.
Twilio is certified to ISO/IEC 27001. Twilio is committed to keeping the Twilio Platform GDPR compliant.
Twilio's privacy policy can be found here: https://www.twilio.com/legal/data-protection-addendum.

For sending the dial-in link via email or SMS we use Messagebird.
The privacy policy of Messagebird can be found here: https://www.messagebird.com/en/legal/dpa.

3. Withdrawal of consent

If the data processing is based on your consent, this consent can be revoked at any time with effect for the future. Revocations of the consent given can be sent by post to iuhhoo GmbH, Datenschutz, Brühlstraße 7, 70563 Stuttgart, Germany, or by e-mail to info@aivitex.de. You will not incur any costs for the revocation, except for the costs incurred for the transmission at the basic rate. Your revocation does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation. Likewise, further processing of this data on the basis of another legal basis remains unaffected.

4. Rights of the data subject

As a person affected by data processing, you have the right to information about the data stored by us (Art. 15 GDPR), to have incorrect data corrected (Art. 16 GDPR), to have data deleted if there is no legal reason for further storage (Art. 17 GDPR), to demand restriction of the processing of your data (Art. 18 GDPR) as well as data portability with regard to the data you have provided to us (Art. 20 GDPR). To exercise these rights, you can send us an email at any time to info@aivitex.de.

5. Right to object

You may object at any time, free of charge and with effect for the future, to data processing which is based on Art. 6 (1) e) or f) GDPR or which is carried out for direct marketing purposes. To exercise your right to object, you can send us an e-mail to info@aivitex.de.

6. Revision clause

We reserve the right to change this privacy policy from time to time. Updated versions will be published here. Please check for an updated version before each use.

B. Privacy Policy for the AIVITEX website

Thank you for visiting our website and for your interest in our company. We want you to feel comfortable when visiting our internet pages. The protection of your privacy and compliance with the applicable data protection laws is extremely important to us. For this reason, we would like to inform you with our data protection declaration which data is collected by us during your visit to our website, for which purposes and how it is used. This privacy policy applies to our website and the various subdomains (hereinafter referred to as "our website") that can be accessed via it. You should therefore take a moment to read our Privacy Policy and contact us at info@aivitex.de if you have any questions about it. Our website may contain links to websites or services of other providers over which we have no control, so this Privacy Policy does not extend to them and we do not accept any liability for the content, technical security or activities of such third party websites or services. We therefore recommend that you read their privacy notices carefully.

The controller for data processing pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR):
iuhhoo GmbH
Brühlstraße 7
70563 Stuttgart, Germany
Managing director: Antonia Zock

You can contact our data protection officer at:
Data Protection Officer
iuhhoo GmbH
Brühlstraße 7
70563 Stuttgart, Germany
E: dataprotection@aivitex.com

1. How and for what purposes we process the information

When you visit our website, our web servers store by default, among other things, information about the browser and operating system you use, the website from which you visit us, the web pages you visit on our site, the date of the visit and, for security reasons, e.g. to detect attacks on our websites, and for a period of seven days, the IP address assigned to you by your Internet service provider. In addition to the aforementioned data, with the exception of the IP address, personal data is only stored if you provide it to us, e.g. as part of a registration, a survey, a contact request, a competition or to execute a contract.
You are under no legal or contractual obligation to provide us with your personal data. However, it is possible that certain functions of our websites depend on you providing personal data. If you do not provide personal data in these cases, this may result in functions not being available or only being available to a limited extent.
We collect personal data when you provide it to us as part of your order or when you contact us (e.g. by contact form or e-mail). Mandatory fields are marked as such, because in these cases we need the data to process the contract, or to process your contact and you can not complete the order or send the contact without their information. Which data is collected can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 Para. 1
We use your personal data for purposes of technical administration of the website, customer administration, product surveys and marketing only to the extent necessary in each case.

2. Social plugins

We use so-called social plugins (hereinafter "buttons") of social networks such as Twitter and linkedin. When you visit our website, these buttons are deactivated by default, i.e. they do not send any data to the respective social networks without your intervention. Before you can use the buttons, you must activate them with a click. The button remains active until you deactivate it again or delete your cookies.
After activation, a direct connection is established with the server of the respective social network. The content of the button is then transmitted by the social networks directly to your browser, which integrates it into the website.
After activating a button, the respective social network can already collect data, regardless of whether you interact with the button. If you are logged into a social network, it can assign your visit to this website to your user account. If you are a member of a social network and do not want it to link the data collected during your visit to our website with your stored membership data, you must log out of the respective social network before activating the buttons. We have no influence on the scope of the data collected by the social networks with their buttons. The purpose and scope of the data collection and the further processing and use of the data by the respective social networks, as well as your rights in this regard and setting options for protecting your privacy, we ask you to refer to the privacy notices of the respective social networks.

3. Cookies

This website uses cookies. Cookies are text files that are stored on your terminal device. Cookies can be read, transferred and changed by the website when you access it.
It is always possible to object to the setting of cookies by changing the setting in the Internet browser accordingly. Cookies that have been set can be deleted. Please note that by disabling cookies, you may not be able to fully use all the features of our website.
For information on the exact functions of cookies, please refer to the detailed information in this Privacy Policy.
Note: Deleting your cookies will delete the deactivation cookie of this service and may need to be reactivated on your next visit.

4. Data Security

We use technical and organizational security measures to protect the data supplied by you against manipulation, loss, destruction, and access by unauthorized parties. Our security measures are continuously improved in accordance with technological development.

5. Revision clause

We reserve the right to change the present Privacy Policy from time to time. Updated versions will be released here.

6. Legal bases

If you have given us your consent for the processing of your personal data, this will be the legal basis for the processing (Art. 6 para. 1 letter a GDPR).
For a processing of personal data for the purpose of initiating or fulfilling a contract with you, Art. 6 para. 1 letter b GDPR is the legal basis.
Insofar as the processing of your personal data is necessary for the fulfillment of our legal obligations (e.g. for data retention), we are authorized to do so pursuant to Art. 6 para. 1 lit. c GDPR.
We also process personal data for the purposes of safeguarding our legitimate interests as well as the legitimate interests of third parties pursuant to Art. 6 (1) (f) GDPR. Maintaining the functionality of our IT systems, but also the marketing of our own and third-party products and services and the legally required documentation of business contacts are such legitimate interests.

7. Rights of the data subject

As a person affected by the data processing, you have the right to obtain information about the data stored by us (Art. 15 GDPR), to have incorrect data corrected (Art. 16 GDPR), data erasure if there is no legal reason for further storage (Art. 17 GDPR), to demand restrictions on the processing of your data (Art. 18 GDPR) and data transferability with regard to the data that you have provided us (Art. 20 GDPR). To exercise this right, you can send us an e-mail to info@aivitex.com at any time.

8. Withdrawal of Consent

If the data processing is based on your consent, this consent can be revoked at any time with effect for the future. Revocations of granted consents can be sent by mail to iuhhoo GmbH, Datenschutz, Brühlstraße 7, 70563 Stuttgart, Germany, or by e-mail to info@aivitex.de. You will not incur any costs for the revocation, except for the costs incurred for the transmission at the basic rate. Your revocation does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation. Likewise, further processing of this data on the basis of another legal basis remains unaffected.

9 Right of objection

You may object at any time, free of charge and with effect for the future, to data processing which is carried out on the basis of Art. 6 (1) e) or f) GDPR or which is carried out for the purposes of direct advertising. To exercise your right to object, you can send us an e-mail to info@aivitex.de.