The data controller is:
tepcon GmbH
Obere Wiesen 9
78166 Donaueschingen
Phone: +49 771 8983 260
Mail: info@tepcon.de
We have appointed a data protection officer for our company:
bbcom secure Deutschland Gmbh
Wolfgang Homann
Reichenaustraße 11
78467 Konstanz
Phone: 07531 584 799 0
E-mail: datenschutz.tepcon@bbcomsecure.de
When you browse the website, order or use tepcon products or contact us, we receive personal data from you. Basically, we process data:
If you give us your express consent (Art. 6 I lit. a DSGVO), e.g. you want us to contact you directly, subscribe to newsletters or receive promotional offers. Measures according to Art. 7 III UWG remain unaffected, see GTC.
To fulfill contractual obligations (Art. 6 I lit. b DSGVO), e.g. if you purchase and use our product.
If we are subject to the legal obligation (Art. 6 I lit. c DSGVO). For example, we are obliged to keep certain documents according to tax law and commercial law.
Based on a legitimate interest of us or third parties (Art. 6 I lit. f DSGVO). This includes, among other things, data processing for purposes of direct advertising, sales promotion, IT security and fraud prevention, as well as the creation of pseudonymous usage profiles for analysis and needs-based design of the website. You may object to this in accordance with Art. 21 I 1 DSGVO.
You can find more information here: Privacy on our website
For the proper fulfillment of the contractual objectives, it is necessary to collect and evaluate data of the users of the tepcon products. The use of tepcon products can only be realized via the link to the respective user access. The legal basis is Art.6 I lit. b DSGVO.
Data collection
The data obtained in the course of using tepcon products can be categorized as follows:
Data provided by you
This is the data that you enter yourself when you use our websites, products or services. This includes, among other things, your name, your e-mail address, your address, your telephone number.
Data collected via sensors (e.g. telematics data)
Some of our products are equipped with a sensor or use the sensors of the devices on which they run. Examples of sensors include GPS, Wi-Fi, or Bluetooth receivers. These sensors automatically collect data when enabled. Depending on the purpose of the data collection, the data may be sent to tepcon and third parties for further use in conjunction with other data that identifies you or your device.
Metadata
This is all data that is automatically generated when you use tepcon's products. Metadata is often collected or generated in the course of using a computer or transmitting data over computer networks, such as the Internet. This data includes user interface and device usage events, IP addresses, unique device identifiers, Wi-Fi and Bluetooth MAC addresses, cookies, and computer activity records.
This data is transmitted to our IoT portal in an encrypted and pseudonymized form. For the purpose of fulfilling the contractual objectives, this data is subsequently processed by tepcon. further processed. Personal data is only accessed with the consent of the user, for example in the context of service measures.
In the following, the data collected by tepcon products is listed with assignment to the respective apps and their intended use:
augmented instructor
Online communication
- for upload/download of digital instructions
- download of tools, shapes for creation of instructions
- upload of logs of performed instructions
- upload of user behavior / usage records
Camera
- For scanning QR codes / barcodes to identify the user, assets and linked instructions
- For overlaying work steps on 3D models in augmented reality
augmented presenter
Online communication
- For the download of 3D models
- Upload of user behavior / proof of use
Camera
- For scanning the QR codes / barcodes to identify the user and the 3D models
- For overlaying the 3D models in augmented reality
chat board
The determined data and used functions in the APP are strongly dependent on the workflows.
Online communication
- For downloading the workflows and uploading the data captured in the workflow
- These can include text, image/video data and location data depending on the workflow in question
Camera
- To scan the QR codes / barcodes to identify the user, the assets and the workflows linked to them
- To capture the image and video data associated with a workflow
NFC
- For scanning NFC transponders to identify assets and associated workflows.
Bluetooth
- For local location of assets equipped with Bluetooth Beacons.
Location-based data / Telematics / GPS
- For real-time location and disposition of assets such as vehicles.
- For lane recording to create trip logs
- As a trigger for location-based workflows.
Users have the option to disable/enable the above settings at any time via the settings on their smart device.
Hosting and data storage
Permanent storage of all data takes place within the framework of order processing on servers of Host Europe GmbH (Hansestrasse 111, 51149 Cologne, Germany). The exclusive server location is the datadock Strasbourg in France.
Use of tepcon products
For the purpose of analysis, optimization and to increase the user-friendliness of our software applications and mobile apps, we use various services. For example, we can analyze which functionalities are most in demand or how long users spend in certain areas of the apps.
In order for tepcon to process your data in accordance with the purposes described above, it may be necessary for other recipients besides tepcon to view and process your data.
External service providers (processors)
Your data will be shared with service partners if they act on our behalf and support tepcon in the provision of their services. Processing of your personal data by commissioned service providers takes place within the scope of commissioned processing pursuant to Art. 28 DSGVO.
Other service providers, partners and third parties
tepcon may also cooperate with third parties if it is necessary to fulfill our service offerings or if we are required by law to disclose data. This may involve the following:
We make a point of processing your data within the EU. However, it may happen that we use service providers that operate outside the EU. In these cases, we ensure that these service providers have a sufficient level of data protection before transferring the personal data. This means that a level of data protection comparable to the general principles of data transfer within the EU is achieved via EU standard contracts, an adequacy decision pursuant to Art. 45 GDPR, appropriate safeguards pursuant to Art. 46 GDPR or binding internal data protection rules pursuant to Art. 47 GDPR (Cf. Art. 44 et seq. GDPR).
You have the following rights with respect to us regarding personal data concerning you:
General rights
You have the right to information (Art. 15 GDPR), correction (Art. 16 GDPR) and deletion (Art. 17 GDPR). In addition, you have the right to data portability (Art. 20 GDPR) and restriction of processing (Art. 18 GDPR). If processing of the data is based on your consent, you can revoke it at any time with future effect (Art. 21 DSGVO).
As a rule, you can assert your rights informally and without giving reasons. In individual cases, a copy of a personal document may be required in order to clearly assign the data to your person and to prevent abusive requests for information. Information that is not necessary to establish your identity should be blacked out by you. You will be informed separately about this. The data on the copy of the ID card or passport is subject to strict purpose limitation. They are used exclusively for identity verification, but do not flow into our database. After the determination, the proof is deleted.
You can find more information here: BfDI - Data protection - My rights
Rights in data processing according to the legitimate interest
Pursuant to Article 21 I DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 I lit. e DSGVO (data processing in the public interest) or on the basis of Article 6 I lit. f DSGVO (data processing for the protection of a legitimate interest); this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. Please note that if you object, you may no longer be able to use our products, as the data processing is necessary for use.
Rights in the case of direct advertising
If we process your personal data for the purpose of direct marketing, you have the right pursuant to Article 21 II DSGVO to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.
In the event of your objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.
Right to complain to a supervisory authority
Pursuant to Art. 77 I DSGVO, you have the right to lodge a complaint about the processing of your data with a data protection supervisory authority (competent authority: Friedrichstr. 219, 10969 Berlin).
This data protection declaration is continuously adapted in the course of the further development of the Internet or our offer. Please check this statement regularly for any changes. We will inform you of any significant changes in good time.
Our websites and tepcon products or software applications and mobile apps may contain links to websites of other providers. We would like to point out that this privacy policy applies exclusively to the websites and products or software applications, mobile apps hosted by tepcon. We do not control compliance with applicable data protection regulations by other providers and have no influence on this.
