Data privacy

Status: September 2022

In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

Person responsible for data processing

Nemetschek SE
Konrad-Zuse-Platz 1
81829 Munich
Germany

Data protection officer of the responsible party

intersoft consulting services AG
Bernhard-Wicki-Straße 7
D-80335 Munich, Germany

Reachable by email via:

dataprotection@nemetschek.com

In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server (log file data). If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. (Legal basis is the legitimate interest according to Art. 6 para. 1 p. 1 lit. f GDPR).

Within the framework of the balancing of interests pursuant to Art. 6 (1) lit. f GDPR, we have taken into account and weighed our interest in providing and your interest in processing your personal data in accordance with data protection. Since the following data is sometimes technically necessary for the provision of our service in order to be able to offer you our website and also to ensure stability and security, in particular to provide protection against misuse, we have come to the conclusion that this data can be processed -with a guarantee of data security oriented to the state of the art-, taking appropriate account of your interest in data protection-compliant processing.

Storage duration

The data is deleted in log files for the purpose of operating the website and to protect against misuse in accordance with our security regulations, generally after 7 days.

When you contact us by e-mail or via various contact forms, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR. Insofar as we request input via our contact form that is not required for contacting you, we have always marked this as optional. This information serves us to specify your request and to improve the processing of your request. A communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para.1 lit. a GDPR. Insofar as this involves information on communication channels (for example, e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request. Of course, you can revoke this consent at any time for the future.

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can always have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

(a) Subscription

If you register for our Investor Relations mail service, you will receive e-mails from us at regular intervals several times a year with news and current information from the Investor Relations area.
We use the so-called double-opt-in procedure to register for our mail service. This means that after you have provided us with your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm. If you confirm, we will use your e-mail address to send mail until you unsubscribe from the mail service. The storage serves the sole purpose of being able to send you the requested information. Furthermore, we store your IP addresses and the times of registration and confirmation to prevent misuse of your personal data for up to three years after registration (statute of limitations). The legal basis for logging the registration is our legitimate interest according to Art. 6 para. 1 p. 1 lit. f GDPR in proving a formerly given consent, see also Art. 7 para. 1 GDPR.

Mandatory information for sending the newsletter are only your name, first name and e-mail address. The provision of further information not marked as mandatory is voluntary and will only be used to personalize the mail service.
You can revoke your consent to the mail service at any time. You can revoke your consent by clicking on the link provided in every e-mail sent by us as part of the mail service or by sending an e-mail to dataprotection@nemetschek.com.

The following data is collected when subscribing to the mail service.

* voluntary indication

(b) Newsletter tracking

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels that are stored on our website. Technical information such as browser type, time of opening and IP address are transmitted. For the evaluations, we link the aforementioned data and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID and allow us to analyze your click behavior.

With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them and infer your personal interests from this. We link this data to actions you have taken on our website. The legal basis for data processing is your consent, Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by clicking the separate link provided in each email.

You can revoke your consent at any time with effect for the future. In this case, the revocation includes the entire newsletter, since a separate revocation of the tracking is unfortunately not technically possible. To do this, simply click the unsubscribe link provided in each email.

Tracking the opening of the newsletter is also not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the tracking mentioned above will take place. However, if you click on links from the newsletter, your click behavior will still be analyzed, even if the display of images is disabled.

The tracking information is stored for as long as you are subscribed to the newsletter. After unsubscribing, the data is anonymized and used for purely statistical purposes.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

You can apply to our company electronically. We will, of course, only use your details to process your application and will not pass them on to third parties. Please note that unencrypted e-mails will not be transmitted without access protection.

Your information will be used for processing your application and deciding on the establishment of an employment relationship. The legal basis is Section 26 (1) in conjunction with. Para. 8 p. 2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p.1 lit. f GDPR. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 (1) of the German Federal Data Protection Act (BDSG), further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representative body resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

The applicant's personal data collected, processed and used in connection with the application process will be deleted no later than 6 months after completion of the application process if the employment relationship does not materialize, provided that no other legitimate interests on our part oppose deletion or you have not given us permission to store the data for a longer period (e.g. for consideration in future application processes). Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

You can find more information in the data protection information for applicants, which you can view here: Applicant Information (PDF)

Our website may use cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are files that are deposited on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, that you have to re-enter required form data each time you use the site. The information stored in cookies can also be used to recognize preferences and to tailor content according to areas of interest.

There are different types of cookies: session cookies are sets of data that are only temporarily held in memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website is allowed to read information from these cookies.

Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used, for example, by marketing companies.

The legal basis for possible processing of personal data by means of cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and - with your consent - to tailor our services to preferred areas of interest.

You can delete cookies already stored on your end device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your internet browser. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.

When accessing our website, all users of our website are also informed by an information banner about our use of cookies and referred to this data protection notice. As a user, you will also be asked for your consent to the use of certain cookies, in particular for the personalization of services and for marketing measures. Once you have given your consent, you can revoke it at any time with future effect by clicking on the "Cookie settings" link in the bottom right-hand corner of each page to call up our cookie info banner. In this info banner, you allow us with "Allow cookies" to use the cookies, which are described under "Show details". With "Allow only necessary cookies" only the cookies will be used as described in the cookie declaration in the section "Necessary" (available via "Show details"). Under "Cookie Notice" in the bottom right corner of each page you will find more information about the cookies we use.

This website uses cookies. We use cookies to personalize content and ads, provide social media features, and analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners.

Under "Cookie Notice" in the bottom right corner of each page, you will find more information about the cookies we use and your current cookie settings for this.

(1) Cookiebot (by Usercentrics)

Cookiebot is a consent management platform that enables websites to protect user privacy and comply with the GDPR when it comes to cookies and tracking. "Cookiebot" is an offer from the provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter referred to as "Cybot".

Through the "Cookiebot" function, we inform our website visitors about the use of cookies on our website and allow them to make a decision about their use.

If the visitor gives consent to the use of cookies, the following data is automatically logged:

• The IP address of the user
• Date and time of consent
• User agent of the end user's browser
• The URL of the provider
• The user's allowed cookies (cookie status), which are required as proof of consent.
• An anonymous, random and encrypted key.

The encrypted key and the cookie status are stored on the user's terminal device by means of a cookie in order to establish the corresponding cookie status when the page is called up in the future. This cookie is automatically deleted after 12 months. 

The legal basis for this is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the user-friendliness of the website as well as the fulfillment of the legal requirements from the GDPR.

The installation of the cookie as well as its storage, and thus its cookie consent, can be prevented or terminated by the user at any time through browser settings. You can open the cookie bot
settings via the following link.

For more information about Cookiebot, please visit:
https://www.cookiebot.com/en/privacy-policy/

(3) Google Analytics 4

If you have given your consent, this website also uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics 4 uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the User ID feature. The User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices.

We use Google Signals. This captures additional information in Google Analytics about users who have activated personalized ads (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your website visit, your user behavior is recorded in the form of "events". Events can be:

• Page views
• First visit to the website
• Session start
• Your "click path", interaction with the website
• Scrolls (whenever a user scrolls to the end of the page (90%))
• Clicks on external links
• internal queries
• Interaction with videos
• Ads seen / clicked

Also recorded:

• Your approximate location (region)
• Your IP address (in shortened form)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your Internet provider
• the referrer URL (via which website/advertising medium you came to this website)

On behalf of Nemetschek, Google will use this information for the purpose of evaluating your use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)

Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that U.S. authorities will access the data stored by Google.

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

The data sent by us and linked to cookies are automatically deleted 2 months after your last visit to our website. The deletion of data whose retention period has been reached takes place automatically once a month.

The legal basis for this data processing is your consent according to Art. 6 para. 1 p.1 lit. a GDPR. Once you have given your consent, you can revoke it at any time with future effect by changing your selection in the tracking settings (see above, under Cookies). Alternatively, you can delete your cookies (all or only from this website). The banner with the selection options will then be displayed again.

Alternatively, you can prevent cookies from being stored in the first place by configuring your browser software accordingly. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by selecting

a. Do not give your consent to the setting of the cookie or

b. download and install the browser add-on to disable Google Analytics HERE.

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/gb/ and https://policies.google.com/?hl=en.

(4) HubSpot

This website uses HubSpot for online marketing activities. HubSpot is a software company from the USA with a branch in Germany. Contact: HubSpot, Koppenstrasse 93, 10243 Berlin.

This is an integrated software solution that covers various aspects of online marketing. These include email marketing, social media publishing & reporting, contact management, landing pages and contact forms. Cookies are also stored on the end device you use.

Our sign-up service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all collected information exclusively to optimize our marketing measures. HubSpot's privacy policy can be found at: HTTPS://LEGAL.HUBSPOT.COM/PRIVACY-POLICY.

Insofar as data is processed outside the EU/EEA, we have concluded the standard data protection clauses adopted by the EU Commission in accordance with Art. 46 GDPR with the service provider in order to establish a secure level of data protection, which permit the transfer of personal data to a third country in individual cases.

For more information from HubSpot regarding EU data privacy regulations, please visit: HTTPS://LEGAL.HUBSPOT.COM/DATA-PRIVACY

For more information on the cookies used by HubSpot, please visit HERE and HERE.

The legal basis for the described data processing is your consent, Art. 6 para. 1 p. 1 lit. a GDPR. Once you have given your consent, you can revoke it at any time with future effect by changing your selection in the cookie settings (see above Cookies- General Information). Alternatively, you can delete your cookies (all or only from this website). The banner with the selection options will then be displayed again.

You can unsubscribe from emails sent by HubSpot via a link in the respective email.

LinkedIn Ads / Conversion Tracking (Pixel)

We use the LinkedIn Conversion Tracking service of LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, 94085-2810 USA as part of the evaluation of our online advertising. The responsible entity for users in the EU/EEA and Switzerland is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

For this purpose, we define target groups of users based on certain characteristics in the LinkedIn Campaign Manager , who will subsequently be shown advertisements within the LinkedIn network. The users are selected by LinkedIn based on the profile information they provide, as well as other data provided when using LinkedIn. If a user clicks on an advertisement and subsequently arrives on our website, LinkedIn receives the information that the user has clicked on the advertising banner via the conversion tag embedded on our website.

The LinkedIn tag thus enables the collection of the following data:

• Visited website, including the URL,
• Referrers
• IP address
• Device and browser properties (User Agent)
• and time stamp.

IP addresses are shortened or hashed (for cross-device use) by LinkedIn. The direct identifiers of the members are removed within 7 days to pseudonymize the data. The remaining pseudonymous data is then deleted within 180 days.

LinkedIn does not share the personal data with us, as the website operator, but only provides us with reports and notifications (which do not identify the user) about website visits and ad performance. LinkedIn also provides so-called retargeting, so we, as website operator, can show personalized ads outside our website using this data without identifying individual members. Data that does not identify you is also used to improve ad relevance and reach LinkedIn members across devices. LinkedIn members can control the use of their personal information for advertising purposes through their account settings. LinkedIn refers to the following link to customize advertising preferences: HTTPS://WWW.LINKEDIN.COM/PSETTINGS/ADVERTISING/ACTIONS-THAT-SHOW-INTEREST.

We process this data to evaluate our advertising campaigns. The legal basis for the processing is your voluntary consent within the meaning of Art. 6 (1) a) GDPR. Without your consent via our Consent Tool, no processing of data for LinkedIn Conversion Tracking will take place. Once you have given your consent, you can revoke it at any time with future effect by changing your selection in the cookie settings (see above, section 5. Cookies).

In the context of LinkedIn conversion tracking, LinkedIn naturally has access to the listed data. In particular, it is possible that in addition to LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, 94085-2810 USA also has access to your data.

Insofar as data is processed outside the EU/EEA, we have concluded the standard data protection clauses adopted by the EU Commission in accordance with Art. 46 GDPR with the service provider in order to establish a secure level of data protection, which permit the transfer of personal data to a third country in individual cases.

For more information about the purpose and scope of data collection and the further processing and use of data by LinkedIn, as well as your settings options for protecting your privacy, you can also refer to the LINKEDIN PRIVACY POLICY.

For more information on LinkedIn Conversion Tracking, please visit: HTTPS://BUSINESS.LINKEDIN.COM/EN-EN/MARKETING-SOLUTIONS/CONVERSION-TRACKING#GET-STARTED.

For more information on data processing and storage duration, please visit HTTPS://WWW.LINKEDIN.COM/HELP/LINKEDIN/ANSWER/65521?LANG=EN.

YouTube (enhanced privacy mode)

We use services from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a Google Inc. company, Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. When you access a page in which a YouTube video is embedded, a connection is normally established to the YouTube servers and, in doing so, the content is displayed on the website by communicating it to your browser.  By using our consent management tool (Cookiebot), this is prevented if you have not consented to the data processing with regard to YouTube. Due to the integration of YouTube, therefore, no data is transmitted without your consent.

Here, we also use the option of extended data protection provided by YouTube to protect your personal data. According to YouTube's information, however, data is only transmitted to the YouTube server in "extended data protection mode" when you actively start the video. If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your member account with YouTube. You can prevent this by logging out of your member account before visiting our website.
Further information on YouTube's data protection is provided by Google under the following link: https://www.google.de/intl/en/policies/privacy/

By activating this in the tracking settings, you consent to YouTube receiving data through your use, which may also be used to analyze your usage behavior for market research and marketing purposes. The legal basis for the described data processing is therefore your consent, Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future by changing your selection in the tracking settings (see above, under Cookies). Alternatively, you can delete your cookies (all or only from this website). The banner with link to the selection options will then be displayed again. As far as you do not agree or revoke your consent, the use will be prevented for you.

Google Tag Manager

For reasons of transparency, we would like to point out that we use the Google Tag Manager of the provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager itself does not collect any personal data. The Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behavior, track the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites. We use the Tag Manager for the Google Analytics service. If you have made a deactivation, this deactivation will be taken into account by Google Tag Manager. For more information on Google Tag Manager see: HTTPS://WWW.GOOGLE.COM/INTL/EN/TAGMANAGER/USE-POLICY.HTML.

So-called social bookmarks (e.g. from Facebook, Twitter and Xing) are integrated on our website. Social bookmarks are Internet bookmarks with which the users of such a service can collect links and news messages. These are only integrated on our website as a link to the corresponding services. After clicking on the embedded graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transmitted to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective provider's privacy policy.

In order to achieve a high media presence, we also present ourselves in social networks and maintain publicly accessible profiles for this purpose on the following sites:

LinkedIn       

https://www.linkedin.com/company/nemetschekgroup/

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Twitter       

https://twitter.com/nemetschekgroup

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND

Facebook

https://www.facebook.com/nemetschekgroup/

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Instagram

https://www.instagram.com/nemetschekgroup/

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Youtube       

https://www.youtube.com/c/nemetschekgroup

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

XING

https://www.xing.com/companies/nemetschekag

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, Tel.: +49 40 419 131-0, Fax: +49 40 419 131-11, E-Mail: info@xing.com.

For details on how these platforms handle your personal data, please refer to the privacy statements of the respective social networks.

Your personal data will not be transferred to third parties for purposes other than those listed.

We will only share your personal information with third parties if:

• you have given your express consent to this,
• the disclosure is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that there is a legal obligation for the disclosure, and
• this is legally permissible and necessary for the processing of contractual relationships with you.

We make a point of processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is established at the recipient before transferring your personal data. This means that via EU standard contracts or an adequacy decision of the European Commission, a level of data protection is achieved that is comparable to the standards within the EU.

In the case of a data transfer outside the European Union, the high European level of data protection does not exist. In the case of a transfer, it may be that there is currently no adequacy decision by the EU Commission within the meaning of Article 45 (1), (3) of the GDPR. This means that the EU Commission has not yet positively determined that the country-specific level of data protection corresponds to the level of data protection in the European Union based on the GDPR, which is why we have created the aforementioned appropriate safeguards.

Possible risks that may not be completely excluded in connection with the transfer of data include, in particular:

• Your personal data could possibly be processed beyond the actual purpose.
• In addition, there is the possibility that you may not be able to assert and enforce your rights under data protection law, such as your right to information, correction, deletion or data portability, in the long term.
• There may also be a higher probability that incorrect data processing may occur and that the protection of personal data does not fully comply with the requirements of the GDPR in terms of quantity and quality

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply.

You also have the right to complain to the competent data protection supervisory authority about the processing of your personal data by us.

You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the applicability of the General Data Protection Regulation, i.e. before May 25, 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

Pursuant to Art. 21 (2) GDPR, you have the right to object at any time to the processing of personal data concerning you. In the event of your objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes. Please note that the objection will only take effect for the future. Processing that took place before the objection is not affected.

Pursuant to Article 21 (1) of the German Data Protection Regulation (GDPR), you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) (e) of the GDPR (data processing in the public interest) or on the basis of Article 6 (1) (f) of the GDPR (data processing for the protection of a legitimate interest); this also applies to profiling based on this provision. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as described by us. In the event of your justified objection, we will review the factual situation and either discontinue or adjust the data processing or explain to you our compelling reasons worthy of protection.

Our websites may contain links to websites of other providers. We would like to point out that this data protection declaration applies exclusively to the websites of www.nemetschek.com. We have no influence on and do not control that other providers comply with the applicable data protection provisions.

We reserve the right to change or adapt this data protection declaration at any time in compliance with the applicable data protection regulations.