Data Protection

Introduction

We are very delighted that you have shown interest in our company. Data protection has particularly high priority for the management of Atir Software Development Ltd. The use of the internet pages of Atir Software Development Ltd is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

Processing of personal data

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always comply with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Atir Software Development Ltd. By means of this data protection declaration, our company would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

The personal data of the users processed within the framework of these online services include user-related data (e.g. names and addresses of customers), contract data (e.g. services used, names of responsible persons, payment information), usage data (e.g. visited websites of our online services, interest in our products) and content data (e.g. entries in the contact form).

As the responsible party, Atir Software Development Ltd has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by phone.

Responsible party

Responsible for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other provisions related to data protection is:

ATIR Engineering Software Development Ltd
13 Kehilat Saloniki
6951313 Tel Aviv
ISRAEL
E-mail: [email protected]
Web: www.atirsoft.com

Data protection officer

For questions regarding the processing of personal information, you may contact our data protection officer at any time.

E-mail: [email protected]

Phone: +972 (0) 3-648-0129

Collection of general data and information

The website of Atir Software Development Ltd collects a series of general data and information when a data subject or automated system enters the website. This general data and information are stored in the server log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites on our internet site which are visited by an accessing system, (5) the date and time of access to the internet site, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.

When using this general data and information, Atir Software Development Ltd does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term functionality of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, Atir Software Development Ltd analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

Routine erasure and blocking of personal data

The person responsible for processing shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

Product recommendations and practical tips by e-mail

As an ATIR customer or user of our services (such as use of our demo, trial or student versions), you will regularly receive product recommendations and practical tips by e-mail. You will receive these product recommendations irrespective of whether or not you have subscribed to a newsletter. We aim to inform you about our products that might be of interest for you based on your recent purchases. Furthermore, you will receive useful tips for using our software.

If you do not wish to receive any newsletters or advertising messages from us anymore, you may terminate the subscription at any time. Please write your termination notice in text (e-mail, fax, letter) to our contact address. You will also find a link to unsubscribe at the end of each e-mail.

Legal basis is Art. 6 (1) lit. f GDPR as well as Section 7 (3) UWG (Act Against Unfair Competition).

Data security

We have taken appropriate technical and organizational security measures to protect your data from loss, destruction, manipulation, and unauthorized access. All our employees and all those who are involved in data processing are bound by the General Data Protection Regulation and will treat your personal data confidentiality.

In the event of personal data being collected and processed, the information shall be transferred in encrypted form, to prevent misuse of the data by third parties. Our security measures are improved on an ongoing basis in accordance with the development of technical standards.

Contact via website

The website of Atir Software Development Ltd contains information due to legal requirements which allow a fast-electronic contact to our company as well as an immediate communication with us, which also contains a general address of the so-called electronic mail (e-mail address). If a concerned person contacts the responsible person for processing by e-mail or contact form, the personal data of the concerned person will be saved automatically. Such personal data voluntarily provided by a concerned person to the person responsible for processing will be saved to use it for processing or contact purposes with the concerned person.

In addition to information purposes of our website only, we offer different services which you can use. To do this, it is generally necessary to provide personal data which we will use to provide the service and for which the aforementioned principles of data processing apply.

There is no transfer of personal data to third parties for other purposes, except to our legally independent ATIR offices in the shared customer relationship management system (CRM). When filling in website forms for downloading trial versions, a transfer to our local resellers can take place depending on the country.

Data protection for applications and the application procedures

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements.

If it is not possible to offer the applicant a vacancy and we, however, believe due to the applicant profile that the application may be interesting for future job advertisements, we will save the personal application details twelve months, provided that the applicant does not contradict such storage and use. The data will never be passed on to third parties.

Legal basis for the processing

Art. 6 (1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as it is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Art. 6 (1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) lit. d GDPR. Finally, processing operations could be based on Art. 6 (1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).

Legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Art. 6 (1) lit. f GDPR, our legitimate interest is to carry out our business in favor of the well-being of all our employees and our associates.

Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

Provision of personal data as statutory or contractual requirement; requirement necessary to enter into a contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide such data

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her.

The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.

Changes in our data protection regulations

We reserve the right to change this privacy policy at any time if this may be necessary due to legal requirements, new technologies or changes in our services, e.g. introduction of new services.

If fundamental changes are made to this data protection regulation, we will announce these changes on our website. For your repeated visit on our website, the new data protection regulation will apply.

Data protection provisions about the application and use of Google Analytics (with anonymization function)

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.
For web analytics through Google Analytics, the controller uses the “_gat. _anonymizeIp” feature. By means of this feature, the IP address of the internet connection of the data subject is abridged by Google and anonymized when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports for us, which show the activities on our websites, and to provide other services concerning the use of our website.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is able to analyze the use of our website. With each visit to one of the individual pages of this website, which is operated by the controller and into which a Google Analytics component was integrated, the internet browser on the information technology system of the data subject will be automatically prompted by the Google Analytics component to submit data to Google for the purpose of online analysis. In the course of this technical procedure, Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks and subsequently create commission settlements.
The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits to our website by the data subject. With each visit to our websites, such personal data, including the IP address of the internet access used by the data subject, will be transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass this personal data, collected through this technical procedure, to third parties.
The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the utilized web browser and thus permanently deny the setting of cookies. Such an adjustment to the utilized internet browser would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.
In addition, the data subject has the possibility of objecting to a collection of data generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on at the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on informs Google Analytics via JavaScript that any data and information about the visits of web pages may not be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google.

If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person who is attributable to their sphere of competence, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable privacy policy of Google can be found at https://www.google.com/intl/en/policies/privacy/ and at https://www.google.de/analytics/terms/us.html.

Google Analytics is further explained at the following link https://www.google.com/analytics/.

Data protection provisions about the application and use of YouTube

On this website, the controller has integrated YouTube components. YouTube is an internet video portal that enables video publishers to upload video clips. It also allows other users to freely view, review, and comment on them. YouTube allows you to publish all kinds of videos; you can use it to access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users themselves.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.
Every time one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, is opened, the internet browser on the data subject’s information technology system is automatically prompted by the respective YouTube component to download a depiction of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/. In the course of this technical procedure, YouTube and Google gain knowledge of which specific sub-page of our website was visited by the data subject.
Every time a sub-page that contains a YouTube video is opened, YouTube recognizes the specific sub-page of our website that was visited by the data subject, if the data subject is logged in on YouTube. This information is collected by YouTube and Google and associated with the respective YouTube account of the data subject.
Whenever the data subject is logged in on YouTube while visiting our website, YouTube and Google will receive information that the data subject has visited our website via the YouTube component. This occurs regardless of whether the person clicks on a YouTube video or not. If a transmission of this information to YouTube and Google is undesired by the data subject, they may prevent it by logging off from their YouTube account before visiting our website.
YouTube’s privacy policy, available at https://www.google.com/intl/en/policies/privacy/, provides information about the collection, processing, and use of personal data by YouTube and Google.

Data protection provisions about the application and use of LinkedIn

The controller has integrated components of LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users to connect with existing business contacts and forge new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, United States. For privacy matters outside of the United States, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.
With each visit to one of the individual pages of this website, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) has been integrated, the internet browser on the information technology system of the data subject is automatically prompted by the respective LinkedIn component to download a depiction of the corresponding component from LinkedIn. Further information about the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. In the course of this technical procedure, LinkedIn gains knowledge of which specific sub-page of our website was visited by the data subject.
With every visit to our website by the data subject and for the entire duration of their stay on our website, LinkedIn detects which specific sub-page of our website was visited by the data subject, if the data subject is logged in on LinkedIn at the same time. This information is collected via the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, LinkedIn associates this information with the personal LinkedIn account of the data subject and stores the personal data.
Whenever the data subject is logged in on LinkedIn while visiting our website, LinkedIn receives information that the data subject has visited our website via the LinkedIn component. This occurs regardless of whether the person clicks on the LinkedIn button or not. If a transmission of this information to LinkedIn is undesired by the data subject, they may prevent it by logging off from their LinkedIn account before visiting our website.
At https://www.linkedin.com/psettings/guest-controls, LinkedIn provides the opportunity to unsubscribe from e-mail messages, SMS messages, and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied at https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available at https://www.linkedin.com/legal/privacy-policy. The LinkedIn cookie policy is available at https://www.linkedin.com/legal/cookie-policy.