In the following, we will inform you about how your personal data is processed when you use our websites and products and what rights you have in this regard.

Data protection notice

Maze Digital SRL, located at Str. Basarabia nr. 3, bl. F2, ap.3, Craiova, Romania (also known as Maze Digital), values your privacy highly. We follow the applicable laws on data protection and we want to explain how we manage your data in this data protection notice.

1. Visits our websites

We also gather personal data from you when you visit our websites. This includes data that we collect when you place an order with us, as well as data that is collected when you browse our websites or our social media profiles. We provide more details below.

2.1 Cookies and their use – my choice

We use cookies to improve our products for you, together with third-party providers.

You can choose and disable all cookies through our Cookie Plugin.

2.2 Use of social media

We have company pages on various social media platforms to present our company in an optimal way. We want to share our services with our audience and also interact with you through these channels. The links to social media platforms are embedded in a way that no data is automatically sent to the social media operator. The embedding on our websites is done through direct links. Data is only transmitted if you click on the link.

These channels are used for the following purposes:

• Provision of information about our company and our products
• Statistical evaluations for business analysis and further development of services and products, as well as for the improvement of business processes
• Communication with customers and interested parties.

Legal basis

We process your personal data based on our legitimate interest in communicating with our potential and existing customers, as well as evaluating and enhancing our services and products, and optimizing our business processes. We also contact our customers directly through our social media support, where the processing is based on our contractual relationship or the pre-contractual actions with interested parties.

Further information on the social media platforms:

Facebook and Instagram: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We are jointly responsible with Facebook for the processing of Insights data on the Facebook fan page. The corresponding agreement pursuant to Art. 26 GDPR can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum. For more information on Page Insights, please visit
https://www.facebook.com/legal/terms/information_about_page_insights_data.

The general use of Facebook, is your own responsibility. You can find Facebook's privacy policy directly on our Facebook fan page.

You can edit your wishes for personalized advertising by Facebook at any time in their settings on Facebook and contradict.

Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

For information on the data collected by Twitter, purposes and all other privacy information, please refer to the Twitter privacy policy (https://twitter.com/en/privacy).

You can find an opt-out option at: https://twitter.com/personalization

YouTube: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

For more information on data protection and personal data collected by Google/YouTube during integration, please see the following privacy policy: https://www.google.com/policies/privacy/

An opt-out is also possible: https://adssettings.google.com/authenticated

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
We also maintain a company profile on the LinkedIn networking platform.

If you are a member there, LinkedIn can assign the call of the content and functions on our profile to your user profile there. For more information, please refer to the privacy information of LinkedIn Ireland at:
https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

2.3 Video content

2.3.1 Youtube and Vimeo

If we embed videos on our website, the content of these videos is stored directly on the platforms and embedded on our site. If you call up such a video, the IP address, technical information such as browser, operating system and basic device information as well as the website you visited are communicated. In addition, all embedded Youtube or Vimeo videos will be made through a data protection-friendly manner in “extended data protection mode”.

Personal data is only transmitted when you call up a video. Only then is a server connection to Youtube and Vimeo established and a corresponding cookie set, which is used to save your settings. When you call up the videos, you leave our area and enter the external platforms of Youtube and Vimeo, which are beyond our control.

Before you call up a video, you will be informed about it again. If you have an account with the provider of the video service, they may be able to identify you. You can avoid this by logging out of your account before playing a video.

Legal basis

The legal basis for the activation of these videos is your consent.

Provider of the YouTube platform
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google/YouTube can be found here: https://www.google.com/policies/privacy/. A general advertising opt-out is possible here:
https://adssettings.google.com/authenticated.

Provider of the Vimeo platform
Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. Further information on data protection at Vimeo can be found here: https://livestream.com/legal/cookie-preferences.

3. Purpose and legal basis

We use the reCAPTCHA service from Google. With reCaptcha, a JavaScript element is integrated into the source code, whereby the software is loaded in the background and your user behavior is analyzed. The data is already used and analyzed before you clicked the “I am not a robot” checkbox. Google calculates a score based on the data, which is used on the one hand to be able to understand whether the visitor is a human or whether the input is abusive through automated, machine processing (e.g. bots). On the other hand, it also serves to prevent fraudulent mass orders, which can lead to risks in the company's infrastructure. ReCAPTCHA also provides protection for our customers from becoming potential victims of cyber crime.

Legal basis

The legal basis for this processing is therefore our legitimate interest and serves to prevent potentially fraudulent activities on our website.

Type of data

• Previous web pages (referrer URL)
• IP address
• Operating system
• Cookies
• Scrolling and mouse clicks on the page
• Date and language settings
• Screen resolution

The IP address transmitted to Google is shortened and not merged with other Google data.

Provider of the ReCAPTCHA service

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google can be found here:
https://www.google.com/policies/privacy/.

To have data deleted directly from Google, contact Google support at
. https://support.google.com/?hl=de&tid=331578294933.

If you want as little data as possible to be transmitted to Google about you and your behavior, you must log out of Google and delete any Google cookies before visiting our website or using the reCAPTCHA software.

3. Order and order processing

3.1 Contract data

When you order one of our products, we ask you to give us your personal data, which we require for the contract completion. We keep this contract data for as long as the contractual relationship lasts, as we need it for the contract fulfillment. If you end your contract, we keep your contract data for up to 10 years. We also keep your data longer if there are legal retention obligations. In this case, the data processing is limited to complying with the legal retention periods and the data is not used for any other purposes.

You can change this data yourself at any time through our secure customer login. You will receive information on how to create your personal access data after we have verified your order, usually by email and in rare cases by mail.

Type of data

• -Address
• -First and last name
• -E-mail address
• -telephone number
• -Company name (in case of trade)
• -address
• -Product contracts and usage
• -contract data
• -Payment data
• -Tax number

Legal basis

We need your data for contract initiation and execution.

Storage period

In the case of contractual data, processing is restricted after termination of the contract, and deleted after expiry of the 10-year retention period.

4. During the contractual relationship

4.1 Contract information and invoices

Your personal data is necessary for the contract performance.
We use it mainly to enable the required communication for a smooth process, information transfer through process communication and the invoicing of the services. Moreover, we also use this data for the company management and the product development. We have a legitimate interest to evaluate the data we collect to enhance our products and services. We safeguard your privacy through a variety of technical and organizational measures that are suitable in this context and respect your preferences about how we use your data

Data stored and used

• -Address
• -First and last name
• -Email address
• -Phone number
• -Company name (in case of trade)
• -address
• -Product contracts and usage
• -contract data
• -Payment data
• -Tax number
• -In case of authorization, the master data of the authorized representative

Legal basis

The legal basis for the processing is the contractual basis.

Storage period

We process your data until the end of your contract. We also keep your contract data if there are disputes and claims that are still unresolved. Moreover, we also keep your data for a longer period if there are legal retention obligations. In this case, the data processing is restricted to complying with the legal retention periods and the data is not used for any other purposes. The personal data is deleted within 10 years after the end of the calendar year following the contract termination.

4.2 Communication in the context of your customer concerns

The satisfaction of our customers is important to us, which is why you can contact our customer support at any time. For the clarification of your concerns we need your data.
For this purpose, we process the following of your personal data:

• -contact data
• -Identification and authentication data
• -contract data
• -contents of your inquiries
• -Payment data

We store communications with you until the end of the contract term and beyond that only until open inquiries to us have been finally concluded or insofar as statutory retention obligations provide for this.

Legal basis

The legal basis for this processing is the fulfillment of our contract with you.

Customer information

We send you information on the function and use of your products or added contract components. In particular, we inform you about tips and tricks and the functions of your products.

The legal basis for this processing is the contract.

4.3 Troubleshooting within the scope of our contractual relationship

Traffic data includes information about the type, scope and time of use of our websites. This data identifies you or your device directly and is partly stored in your device, e.g. as log files.

Some traffic data is collected during the use of our services and products. This data enables us to quickly identify and correct any errors that occur and to continuously develop our services for you.

Storage period

Your data will be deleted after 3 months at the latest.

Legal basis

The legal basis for this processing is the fulfillment of the contract regarding the use for troubleshooting.

5. Third country transfer

We sometimes use service providers in third countries. When you use the services offered as well as products and services on our website, data transfers to third countries, such as the USA, may happen in some cases. To protect your data within the legal framework, we provide – if the legal requirements for this exist – appropriate guarantees.

You can find more detailed information on the topic of third country transfers in the relevant data protection notices described above for our individual services and products.

6. Storage period

As far as possible, we have informed you about the exact storage period when using our respective services or products in the individual data protection notices mentioned above.

In principle, your personal data will be retained for the duration of the fulfillment of the aforementioned purposes and then deleted. For example, your data will be stored for the duration of a contract concluded with you regarding our services or products.

In addition, we may be required by law to continue to store your data. 

7. Your rights as a data subject

To assert your rights, please use the contact details listed in section 1.

Right of access

You have the right to obtain information from us about the categories of data stored, the purpose of processing, the recipients of the data, the planned storage period and your rights regarding data protection. For personal data not collected directly from you, you have the right to be informed about the source of the data.

Right to rectification

If the personal data we process is inaccurate or incomplete, you have the right to have your data rectified.

Right to erasure

You have the right to request that we delete your personal data. In certain cases, however, your data cannot be deleted. For example, if your data is required for an active contract or for our accounting and statutory responsibilities.

Right to restriction of processing

You can request that we restrict the processing of your data in the following cases:

-You have disputed the accuracy of data and you want us to stop using it pending final verification

-The processing is unlawful, but you would prefer to restrict processing rather than have the data erased

-We no longer need and would otherwise delete the data, but you still need it for the assertion, exercise or defence of legal claims

-You have lodged an objection to the data processing, which is still under review

In the event of a restriction, we will ensure that the personal data cannot be further processed or changed by us. If processing has been restricted in accordance with the above conditions, the controller will inform you before lifting the restriction.

Right to data portability

You have the right to receive the personal data that you provided to us in a structured, commonly used and machine-readable format and, if necessary, to have it transferred to third parties. The right to data portability shall not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object

You have the right to object at any time to the processing of personal data that we process on the basis of a “legitimate interest”; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. You can object to data processing for the purpose of direct advertising at any time without providing a reason. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. To exercise your right to object, you must submit an objection to us. In some cases you can do this directly online (e.g. in the case of cookies). You are also welcome to address your data protection concerns (e.g. your objection) directly to us.

Right to withdraw

You have the right to withdraw your consent to future processing (e.g. to be contacted for advertising purposes) at any time. Please send your notification of withdrawal to us.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the supervisory authority responsible for data protection at any time with the Romanian authority.

Personal data managed by you

Our customers use our services to host, transmit or process data on our hosting platforms, which may include personal data of their own customers. In this scenario, it is our customers who stipulate the process for collecting their customers' data. Most importantly, we do not have knowledge of or view, share or collect this specific customer data. In accordance with our Privacy Notice, it is our customers who are responsible for managing the security of their customers’ data which they upload to our platforms. Customers are responsible for encrypting data that is uploaded to our network and ensuring access to our platforms are secure. Our relationship is with our customers directly and there is no agreement in place between us and our customers’ customers.

Additionally:

We merely process such data on your behalf, subject to our Terms and Conditions and you are responsible for any applicable legal requirements in respect of your content. Therefore, any video, image, or other content posted, uploaded or otherwise made available by you on your website, whether published or not, is not subject to our Privacy Notice.

Last modified: July 2023