Privacy Policy

Last Update: September 11, 2024

Content

Preamble

BOC Products & Services AG and its subsidiaries (hereinafter: together “BOC Group” or “we”) take your privacy very seriously. As we are obliged to comply with regulations for the protection of personal data as well as data security, we strictly adhere to the rules of data protection law. Personal data will only be processed for the intent stated in the service descriptions and under this privacy policy. All service descriptions and processing activities are documented to the best of our knowledge.

The following declaration provides an overview of how BOC Group assures the protection of data, what kind of data we collect, and for which purposes the data in the context of BOC Group websites, services, and applications is processed.

This privacy statement is constantly updated to reflect our processing activities and changing legal requirements. We ask you to regularly inform yourself about the handling of your data on this page.

This information was originally provided in English. Any translations are made solely for your convenience and in the event of any divergence between the original English version and its translated versions, the original English version shall prevail.

Responsible Body (Controller) and Contact

BOC Products & Services AG 

1040 Vienna

Operngasse 20b | Austria

privacy@boc-group.com 

Cookie Policy

Find all the information about the cookies we use and how you can change your settings  here.

Processing Activities

ADOIT/ADONIS Community Edition

Short Description ADOIT/ADONIS Community Edition is a free, cloud-based, single-user version of BOC Group’s Business Process Management tool ADONIS or BOC Group’s Enterprise Architecture tool ADOIT with a restricted feature set.
Processed Data When using ADOIT/ADONIS Community Edition, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
  • System-generated data, e.g. subscription status/lifecycle state
  • Account content data
Purpose of Data Processing The processing of your data is necessary for the performance of a contract as well as for tax and company law obligations.
Legal Basis Article 6 para. 1 lit. b and c GDPR.
Storage Period Account content data will be retained for one year, all other data for up to 7 years after expiration or termination of the account.
Recipients or Categories of Recipients
  • CRM System (via Transfer Interface)
  • Hosting Service Provider
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

ADONIS Starter Edition

Short Description The ADONIS Starter Edition is a fully pre-configured professional multi-user edition of BOC Group’s Business Process Management tool ADONIS, available exclusively as Software-as-a-Service.
Processed Data When using ADONIS Starter Edition, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
  • System-generated data, e.g. payment status, subscription status/lifecycle state
  • Account content data
Purpose of Data Processing The processing of your data is necessary for the performance of a contract as well as for tax and company law obligations.
Legal Basis Article 6 para. 1 lit. b and c GDPR.
Storage Period Account content data will be retained for six months, all other data for up to 7 years after expiration or termination of the account.
Recipients or Categories of Recipients
  • CRM System (via Transfer Interface)
  • Mailing Service Provider
  • Hosting Service Provider
  • Subscription Service
  • Payment Service Provider
Related Services (see corresponding section for processed data)

ADONIS/ADOIT Academy Programme

Short Description The BOC Academy Programme is focused on educating students in Business Process Management or Enterprise Architecture. To lecturers the programme provides lecture content, access to the Business Process Management and Enterprise Architecture community, and free, cloud-based, multi-user accounts of BOC Group’s Business Process Management tool ADONIS or BOC Group’s Enterprise Architecture tool ADOIT for use in teaching at academic institutions worldwide.
Processed Data When using ADONIS/ADOIT Academy Programme, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
  • System-generated data, e.g.  subscription status/lifecycle state
  • Account content data
Purpose of Data Processing The processing of your data is necessary for the performance of a contract as well as for tax and company law obligations.
Legal Basis Article 6 para. 1 lit. b and c GDPR
Storage Period Account content data will be retained for 14 days, all other data for up to 7 years after expiration or termination of the account.
Recipients or Categories of Recipients
  • CRM System (via Transfer Interface)
  • Mailing Service Provider
  • Hosting Service Provider
Related Services (see corresponding section for processed data)

BOC Apps for Atlassian

Short Description BOC provides access to apps (ADONIS Process Manager for Confluence or ADOIT Enterprise Architect for Confluence) for connecting your Confluence installation with BOC Products. These apps allow the connected Confluence users to access the content of BOC Products.

If you want to give us feedback or new ideas for the app, you can do so via a link in the app’s footer.
Processed Data We process data that is communicated by Atlassian to us via the Sales and Evaluations Reports.

Such data, provided by Atlassian, may contain

  • Personal data, e.g. name, company name
  • Request data, e.g. details on your Confluence installation, time stamp etc.

When you provide feedback, the following data is being processed:

  • Personal data, e.g. name and email
Purpose of Data Processing The processing of user data is necessary to provide you with the requested service.

We use this data to evaluate our channel sales efficiency.
Legal Basis Article 6 para 1 lit. b and f GDPR
Storage Period BOC Group stores the data together with information of your connected BOC Product. For specific retention time, please see the according section of the BOC Product.
Recipients or Categories of Recipients Depending on the type of your Confluence installation (Server, Data Center, Cloud), Atlassian has access to the data stored in the App. For details on the processing of personal data by Atlassian, please refer to https://www.atlassian.com/legal/privacy-policy.

Further, your data will be processed by:

  • CRM System (via Transfer Interface)
  • Mailing Service Provider

In addition, when using Cloud Apps

  • Hosting Service Provider

When providing feedback via the app

  • Customer Feedback Service Provider
Related Services (see corresponding section for processed data)

BOC Apps for M365

Short Description BOC Group offers access to Apps to connect your M365 installation with BOC Products (e.g. ADONIS Process Manager for SharePoint, ADOIT Process Manager for SharePoint, ADONIS Report Creator for Word).

These apps allow the connected M365 users to access the content of BOC Products.

If you want to give us feedback or new ideas for the app, you can do so via a link in the app’s footer.
Processed Data We process the following data:

  • Personal data, e.g. name and email
  • Request data, e.g. details on your installation, time stamp etc.
  • The Apps utilize widgets (e.g., web parts) to display or process information from connected BOC Products
  • Information accessed via the App may be stored to improve search functionality by adding data to the search index
  • Widgets store only essential data needed to reference artifacts like models and objects in BOC Products for display or processing
  • Configuration data for connecting the App to respective BOC Products is stored during App usage

When you provide feedback, the following data is being processed:

  • Personal data, e.g. name and email
Purpose of Data Processing The processing of user data is necessary to provide you with the requested service.

We use this data to evaluate our sales made through Microsoft, to improve our visibility to certain user behavior and to increase IT and network security.
Legal Basis Article 6 para 1 lit. b and f GDPR
Storage Period BOC Group keeps the data together with information about your connected BOC Product. For specific retention time, please see the according section of such BOC Products.
Recipients or Categories of Recipients For details on the processing of personal data by Microsoft, please refer to  https://privacy.microsoft.com/en-us/privacystatement

  • Further, your data will be processed by:
  • CRM System (via Transfer Interface)
  • Mailing Service Provider

In addition, when using Cloud Apps:

  • Hosting Service Provider
  • When providing feedback via the app: Customer Feedback Service Provider
Related Services (see corresponding section for processed data)

Company Recognition

Short Description On this website, we are trying to learn more about our visitors by automatically identifying their company. We do so for market research, marketing, direct sales and optimization purposes.

You can object to Company Recognition at any time by clicking on this link: https://www.salesviewer.com/opt-out. By doing so, an opt-out cookie for this website will be stored on your device and your browsing activities will be recognized no further. If you delete your cookies in this browser, you will need to click this link again.
Processed Data A JavaScript-based code is used to capture company-related data and the according website usage.

The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and not used to personally identify the visitor to this website.
Purpose of Data Processing We use this data to understand website user behaviour, to analyse and optimize user paths, and to identify companies that show a significant interest in our products or services.
Legal Basis Art 6 para 1 lit. f GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients The data is processed through our Company Recognition Provider.
Related Services (see corresponding section for processed data)   –

Contact Request

Short Description Within the BOC Group Websites and Services, request forms to submit a Contact Request are provided.
Processed Data In the course of a contact request, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to handle your request.
Legal Basis Article 6 para. 1 lit. b GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

Content Request / Download

Short Description BOC Group offers a collection of free content pieces, like posters, whitepapers, cheat sheets, on-demand webinars revolving around business- and tool-related topics, featuring experts from BOC Group and its associates.
Processed Data In the course of a content request, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary for the performance of a contract and to improve our service.
Legal Basis Article 6 para. 1 lit. b and f GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

Demo Request

Short Description Within the BOC Group Websites and Services, request forms to submit a Demo Request are provided. Additionally, users might be requested to complete a survey, including company and use-case specific questions before the demo.
Processed Data In the course of a demo request, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
  • Optional: Company/use-case specific data submitted in the course of the Pre-Demo Survey
Purpose of Data Processing The processing of your data is necessary to deal with your request.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
  • Optional: Survey Tool
Related Services (see corresponding section for processed data)

Direct Sales Engagement

Short Description Our pre-sales, sales, and expert community may contact users of specific online services to promote, discuss, or transact products or services. These engagements are conducted through various channels, including phone conversations or email correspondence.
Processed Data During a direct sales engagement, the following data is being processed:

  • Data that is provided by the user during the sales engagement
Purpose of Data Processing The processing of your data is necessary to deal with your request.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
Related Services (see corresponding section for processed data)   –

E-Learning

Short Description BOC Group offers a variety of professional training via its B2B Marketplace.
Processed Data To provide you with access to the E-Learning, the following data is being processed:

  • Personal data, e.g. name and email
  • Form data, e.g. the request itself
  • Form metadata, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary for the performance of a contract as well as for tax and company law obligations.
Legal Basis Article 6 para. 1 lit. b and c GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
  • Learning Management System
Related Services (see corresponding section for processed data)

Fast File Exchange Service

Short Description The Fast File Exchange (FFE) service by BOC Group enables rapid and secure file transfer between users. It generates individual links for recipients and may employ two-factor authentication for login security.
Processed Data While transferring data with the fast file exchange service, the following data is being processed:

  • Personal data, e.g. email and/or mobile phone
  • Data transferred with the service
Purpose of Data Processing The processing of your data is necessary for the performance of a contract.
Legal Basis Article 6 para. 1 lit. b
Storage Period BOC Group retains the mentioned data until the expiration of the FFE account plus a grace period of 2 weeks.
Recipients or Categories of Recipients   –
Related Services (see corresponding section for processed data)   –

Informational Mailing

Short Description Our Informational Mailing service provides curated content directly to users’ inboxes, keeping them informed and engaged with the latest updates, trends, and insights about BOC Group and its field of business.
Processed Data For delivering Informational Mailings to you, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
  • System-generated data, e.g. Statistical data about email consumption and behavior
Purpose of Data Processing The processing is done to inform you about current topics and to improve our service.
Legal Basis
  • If the user subscribed to the Informational Mailing via a dedicated form, processing is based on: Article 6 para. 1 lit. a GDPR
  • When the Informational Mailing is integrated into a service the user has subscribed to, processing is based on: Article 6 para. 1 lit. f GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

Job Applications

Short Description BOC Group maintains a career portal on its website. On this portal, vacancies are published, so that interested people are provided with an opportunity to apply for these positions. Furthermore, the career portal offers a possibility to submit unsolicited applications.
Processed Data To manage your job application, the following data is being processed:

  • Personal data, e.g. name and email, which additional personal data you enter in the application documents is up to you.
  • Form data, e.g. the request itself
  • Form metadata, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing serves the purpose of checking your application.
Legal Basis Article 6 para. 1 lit. a and b GDPR.
Storage Period If you have given your consent to keep your application on record, BOC Group retains the data for up to five years after your application. You can revoke this consent at any time by email: privacy@boc-group.com

Without this consent, BOC Group retains the data for up to 7 months from the end of the application process.
Recipients or Categories of Recipients
  • Personnel Administration System
Related Services (see corresponding section for processed data)    –

Lead Referral to Partner

Short Description When contacting BOC Group online, users can select the option to be referred to a regional partner. Users agree to have their information shared with third-party partners. Users acknowledge that while efforts will be made to connect them with a regional partner, availability is not guaranteed.

You can find a list of potential partner companies per region here: https://www.boc-group.com/en/partners/#partner_list
Processed Data To share your information with a third party, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to handle your request.
Legal Basis Article 6 para. 1 lit. a GDPR and, if the requester and the regional partner are in a third country Art 49 para. 1 lit. b.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • BOC Partner with matching operating territory
Related Services (see corresponding section for processed data)

Notification Request

Short Description Users can trigger notifications online to receive updates or notifications on a specific subject matter, e.g. a new product launch.
Processed Data To deliver notifications to you, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to handle your request.
Legal Basis Article 6 para. 1 lit. b GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

Online Platform User Registration

Short Description BOC Group offers website visitors the opportunity to register for the Online Platform. Such registration allows users to view enhanced content, participate in events or use selected services. These include live and on-demand webinars and access to restricted articles. Content and services available to registered users may change from time to time. BOC Group may inform its users by email about new content or service
Processed Data When registering for the Online Platform the following data is being processed:

  • Personal data, e.g. name, and email
  • Form data, e.g. the request itself
  • Form metadata, e.g. time stamp, submission URL, traffic source)

Certain content or services may require you to provide additional data. To ensure an ideal user experience, such data may be linked to other associated user profiles (e.g. community account with the same e-mail address) and usage information of specific services.
Purpose of Data Processing The processing of your basic data is necessary for fulfilling the contract.

We process additional data to understand how our content and services are used by our users and to improve them according to user behaviour. Your data will also be used to prevent misuse, in particular copyright infringement.

Furthermore, this data may be used to provide you with personalized offers on our products according to your usage (direct marketing).
Legal Basis Article 6 para. 1 lit. b and f GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via Transfer Interface)
  • Mailing Service Provider
  • Hosting Service Provider
Related Services (see corresponding section for processed data)

Online Ticketing System

Short Description BOC Group handles incidents, service requests, and other client-related tickets through an Online Ticketing system.
Processed Data To provide you with access to the Online Ticketing System, the following data is being processed:

  • Personal data, e.g. name, and email
  • Request data, e.g. the request itself and its required metadata

When tickets are related to an account managed by an organization, we will link the ticket to that organization. This allows the account owner and/or the contact persons assigned to support cases from that organization to have access to all tickets within their organization.
Purpose of Data Processing We are required to process the related data to fulfill our contractual obligations.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period The data processed is retained for the duration of the support engagement and is stored for as long as necessary to meet legal and regulatory requirements.
Recipients or Categories of Recipients
  • Online Ticketing System
Related Services (see corresponding section for processed data)    –

Open Instructor-Led Training

Short Description The Open Instructor-Led Training Service encompasses the provision of educational sessions, workshops, or courses conducted either online or at BOC Group facilities, third-party locations, or other specified venues.
Processed Data To register you for an open instructor-led training session, the following data is being processed:

  • Personal data, e.g. name, and email
  • Request data, e.g. the request itself
  • Form metadata, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary for the performance of a contract.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

Partner Contact Request

Short Description Users are provided with the capability to contact a BOC Group partner directly through a contact form available on the BOC Group website, facilitating communication between users and BOC Group partners.
Processed Data To connect you with one of our BOC partners, the following data is being processed:

  • Personal data, e.g. name, and email
  • Request data, e.g. the request itself
  • Form metadata, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to deal with your request.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • BOC Partner
Related Services (see corresponding section for processed data)

Partnership Application

Short Description Companies can submit a partner application online to formally express their interest in establishing a partnership with BOC Group.
Processed Data To handle your partner application, the following data is being processed:

  • Personal data, e.g. name, and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing serves the purpose of checking your application.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
Related Services (see corresponding section for processed data)

Photo and Video Documentation at Events

Short Description As part of the event documentation, BOC Group produces photographs or videos during the physical or virtual event.
Processed Data By registering for (or participating in) the physical or virtual event, you acknowledge that photographs and video material depicting you may be used for press coverage and may be published in popular media, publications, and on BOC Group Websites.
Purpose of Data Processing The processing is carried out for BOC Group’s public relations work and documentation purposes.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period BOC Group retains the photos as long as the legal basis of the legitimate interest exists.

The legitimate interest shall cease when BOC Group no longer needs the photos or videos for its public relations work. Selected photos or videos may be stored indefinitely for archive purposes.
Recipients or Categories of Recipients Selected photos or videos can be passed on to various media for publication following the purpose of data processing.
Related Services (see corresponding section for processed data)   –

Quick Chat Request

Short Description Users are enabled to submit a contact request to engage with sales representatives regarding a particular domain, product, or scenario.
Processed Data During a quick chat request, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to deal with your request.
Legal Basis Article 6 para. 1 lit. b GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)

Quote Request 

Short Description Within the BOC Group websites and services, request forms to submit a Quote Request are provided. 
Processed Data During a quote request, the following data is being processed: 

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to deal with your request. 
Legal Basis Article 6 para. 1 lit. b GDPR. 
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
Related Services (see corresponding section for processed data)

Self-service Appointment Bookings 

Short Description Within BOC Group’s websites and services, you might have the possibility to book an appointment with our staff by selecting one of the time slots offered. 
Processed Data When you book appointments in self-service, the following data is being processed: 

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
Purpose of Data Processing The processing of your data is necessary to deal with your request. 
Legal Basis Article 6 para. 1 lit. b GDPR. 
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Microsoft Office 
Related Services (see corresponding section for processed data)

Service-related Mailing 

Short Description Service-related mailings are emails sent to users as part of their registration for a specific online service. These emails contain essential information to support the service, including updates, notifications and tips & tricks. 
Processed Data To deliver service-related mailings to you, the following data is being processed: 

  • Personal data, e.g. name and email (provided in the relevant service form) 
  • System-generated data, e.g. Statistical data about email consumption and behavior
Purpose of Data Processing The processing is done to inform you about current topics and to improve our service.  
Legal Basis Article 6 para. 1 lit. b and f GDPR. 
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • Mailing Service Provider 
Related Services (see corresponding section for processed data)    –

Service Request 

Short Description Users can submit service requests online to trigger predefined services, such as obtaining a BPMN DI Model in exchange for providing a sample model.
Processed Data In the course of a service request, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source

Depending on the type of service request:

  • Uploaded files
Purpose of Data Processing The processing of your data is necessary to deal with your request.
Legal Basis Article 6 para. 1 lit. b GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
  • Internal System relevant for providing the service
Related Services (see corresponding section for processed data)

Surveys 

Short Description BOC Group may include survey links to its offered Services to collect feedback on service quality and customer needs and expectations.
Processed Data Participation in these surveys requires active, manual interaction and is voluntary and non-binding for any participant.

In general, no personal data is collected in these surveys, as participation is completely anonymous.

In some cases, during the survey, we may ask if you’d like us to follow up on your responses. If you agree, we’ll connect your survey answers to your contact information and may get in touch with you.
Purpose of Data Processing The processing of your data is necessary to reach out to you to follow up on your response.
Legal Basis Article 6 para. 1 lit. a GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • Survey Tool
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
Related Services (see corresponding section for processed data)   –

Terms & Conditions Confirmation Log

Short Description Due to legal obligations to provide evidence of users accepting the terms & conditions, we store information on when which website user accepted our terms in a log file.
Processed Data We store the following data provided by you:

  • Personal data, e.g. name and email
  • Form data, e.g. the context in which the terms and conditions were accepted
  • Timestamp
Purpose of Data Processing The processing of your data is necessary for compliance with a legal obligation.
Legal Basis Article 6 para. 1 lit. c GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients This data is not passed on to third parties.
Related Services (see corresponding section for processed data)   –

Usage and log information in ADONIS/ADOIT Community Edition

Short Description BOC Group collects and stores certain information about your behavior when you use the ADONIS/ADOIT Community Edition.
Processed Data The following data is being processed:

  • Which service features are used and to what extent
  • How behavior evolves over time
Purpose of Data Processing We use this data to understand how our services are used by our users to adapt and improve our services to certain user behavior and to increase IT and network security.
Legal Basis Article 6 para. 1 lit. c GDPR.
Storage Period At the latest three years after deactivation of your Community Edition account, the collected activity data will be anonymized. (Deactivated accounts can be reactivated after up to three years upon request)
Recipients or Categories of Recipients
  • CRM System (via Transfer Interface)
  • Hosting Service Provider
Related Services (see corresponding section for processed data)   –

Virtual and Physical Events

Short Description BOC Group hosts events throughout the year, both virtual and physical. Virtual events include access to the live webinar and recording. The BOC Group website offers the possibility to register for such events online.
Processed Data In the course of an event sign-up, the following data is being processed:

  • Personal data, e.g. name and email
  • Form data, e.g. the request itself
  • Form metadata, e.g. time stamp, submission URL, traffic source

Additionally, for virtual events:

  • Engagement metrics, e.g. attendance/non-attendance, duration of attendance
  • Questions/comments (text, voice, video) from the conversation stream may be gathered

Further, we will document attendance or participation in events to gain insight into the level of engagement and interest. At selected events, participant lists may be shared with other participants to facilitate networking and collaboration. Please note any further processing of personal data at events under the heading “Photo and Video Documentation at Events”.
Purpose of Data Processing The processing of your data is necessary for the performance of a contract and to improve our service.
Legal Basis Article 6 para. 1 lit. b and f GDPR
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider

Additionally, for virtual events:

  • Online Event Service Platform/Provider
  • In certain cases, when the virtual event is hosted together with partners, your registration data might be shared with these specific partners.
Related Services (see corresponding section for processed data)

Virtual Live Demo

Short Description BOC offers interested parties the opportunity to get detailed insights into the capabilities of BOC’s applications by providing online demonstrations (“Virtual Live Demos”). The BOC Group website offers the possibility to register for such demo sessions.
Processed Data In the course of an open demo, the following data is being processed:

  • Personal data, e.g. name and email
  • Request data, e.g. time stamp, submission URL, traffic source
  • Engagement metrics, e.g. attendance/non-attendance, duration of attendance
  • Questions/comments (text, voice, video) from the conversation stream may be gathered
Purpose of Data Processing The processing of your data is necessary to provide you with the requested demo and to improve our service.
Legal Basis Article 6 para. 1 lit. b and f GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients
  • CRM System (via the Transfer Interface)
  • Mailing Service Provider
  • Virtual Live Demo Provider
Related Services (see corresponding section for processed data)

Website Activities and Server Logfiles

Short Description BOC Group automatically collects and saves information in its server log files to optimize user experience and improve the technical characteristics of our websites
Processed Data The following information is transferred by your browser:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Source IP address
  • Time of server query
  • Specific web resource that was visited
Purpose of Data Processing Storage in log files is required to ensure the functionality of the websites and to improve our websites.
Legal Basis Article 6 para. 1 lit. f GDPR.
Storage Period See section “Retention Periods“
Recipients or Categories of Recipients This data is not passed on to third parties.
Related Services (see corresponding section for processed data)   –

Retention Periods

Unless otherwise stated in a specific processing activity, the following retention periods apply, depending on the legal basis of the underlying processing activity. In addition, a grace period of 1 month applies. If several legal bases are mentioned in the relevant processing activity, the longer retention period applies:

  • Legal Basis 6 para 1 lit. a GDPR: Your personal data will be retained for an indefinite period unless explicitly revoked by you.
  • Legal Basis 6 para 1 lit. b GDPR: Your personal data will be retained until the termination of the contractual relationship, plus an additional three years thereafter.
  • Legal Basis 6 para 1 lit. c GDPR: Your personal data will be retained for seven years following legal requirements and obligations.
  • Legal Basis 6 para 1 lit. f GDPR: Your data will be stored until it is no longer required for the stated purpose.

Right to Object

Insofar as the legal basis for the processing is legitimate interests of BOC Group under Art. 6 (1) lit. f GDPR, you have the right to object to the processing by Art. 21 GDPR to the extent that grounds relating to its particular situation are raised. BOC Group will no longer process the personal data unless the BOC Group demonstrates compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise, or defense of legal claims. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Please direct an objection to: privacy@boc-group.com.

Your Rights

You have the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing. If the processing is based on your consent, you can withdraw it at any time.

For any privacy-related inquiry, please contact privacy@boc-group.com

Furthermore, you have the right to lodge a complaint with a supervisory authority.

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
Telefon: +43 1 52 152-0
email: dsb@dsb.gv.at
Website: dsb.gv.at

List of Recipients of Personal Data

Service Name Address Further Information about Privacy Contact Data Processing Adequate Level of Data Protection
Online Event Service Platform/Provider Microsoft Ireland Operations Ltd. One Microsoft Court, South County Business Park, Leopardstown, Dublin 18, D18 DH6k Microsoft Privacy Statement https://privacy.microsoft.com/en-us/privacystatement A Data Processing Agreement (DPA) is in place. EU
Online Event Service Platform/Provider Youtube LLC 901 Cherry Ave, San Bruno, CA Google Privacy Policy https://www.youtube.com/t/contact_us A Data Processing Agreement (DPA) is in place. Standard contractual clauses C(2010) 593
Online Event Service Platform/Provider StreamYard Inc. 2810 N. Church St., Wilmington, DE 19802 StreamYard Privacy Policy https://streamyard.com/contact A Data Processing Agreement (DPA) is in place. Standard contractual clauses C(2010) 593
Online Event Service Platform/Provider LinkedIn Corporation 1000 W Maude Ave, Sunnyvale, CA LinkedIn Privacy Policy https://www.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy A Data Processing Agreement (DPA) is in place. Standard contractual clauses C(2010) 593
Online Ticketing System Zendesk Inc. 989 Market Street, United States Zendesk Privacy Notice https://www.zendesk.com/company/agreements-and-terms/privacy-notice A Data Processing Agreement (DPA) is in place. EU
Payment Service Provider Stripe Payments Europe Ltd 510 Townsend Street, San Francisco, CA 94103 USA Stripe Privacy Policy dpo@stripe.com A Data Processing Agreement (DPA) is in place. Data Privacy Framework
Mailing Service Provider The Rocket Science Group LLC (Mailchimp) 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA Mailchimp Privacy Policy privacy@mailchimp.com A Data Processing Agreement (DPA) is in place. Data Privacy Framework
Transfer Interface Zapier Inc. 548 Market St #62411, San Francisco, CA 94104 Zapier Privacy Policy contact@zapier.com A Data Processing Agreement (DPA) is in place. Data Privacy Framework

The data transmission is based on the standard contractual clauses C(2010) 593
Subscription Service FastBill GmbH (Monsum) Bockenheimer Anlage 15, 60322 Frankfurt am Main FastBill Privacy Policy datenschutz@fastbill.com A Data Processing Agreement (DPA) is in place. EU
Hosting Service Provider CloudSigma AG Badenerstrasse 549, 8048 Zürich, Schweiz CloudSigma Privacy Policy legal@cloudsigma.com A Data Processing Agreement (DPA) is in place. Adequacy decision
Hosting Service Provider Amazon Web Services EMEA Sàrl 38 Avenue John F. KennedyL-1855 Luxembourg Amazon Web Services Privacy Policy N.A A Data Processing Agreement (DPA) is in place. Data Location: Frankfurt and Paris
Hosting Service Provider 1&1 IONOS Cloud GmbH Elgendorfer Str. 57, 56410 Montabaur 1&1 IONOS Cloud GmbH Privacy Policy info@cloud.ionos.com A Data Processing Agreement (DPA) is in place. EU
CRM System Sugar CRM 10050 N. Wolfe Rd., Cupertino, CA 95014 Sugar CRM Privacy Policy dataprivacy@sugarcrm.com A Data Processing Agreement (DPA) is in place. Data Privacy Framework

EU
Learning Management System Epignosis LLC (TalentLMS) 315 Montgomery Street, 9th Floor, San Francisco, CA 94104 USA TalentLMS Privacy Policy privacy@talentlms.com A Data Processing Agreement (DPA) is in place. Data Privacy Framework

EU
Survey Tool Typeform SL C/Bac de Roda 163, 08018 Barcelona, Spain Typeform Privacy Policy gdpr@typeform.com A Data Processing Agreement (DPA) is in place. EU
Appointment Bookings Microsoft Ireland Operations Ltd. One Microsoft Court,South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland Appointment Bookings Privacy Policy https://www.microsoft.com/en-ie/contact.aspx A Data Processing Agreement (DPA) is in place. EU
Personnel Administration System Personio GmbH Rundfunkplatz 4, 80335 München, Germany Personio Privacy Policy info@personio.de A Data Processing Agreement (DPA) is in place. EU
Customer Feedback Service Provider Aha! Labs Inc. 20 Gloria Circle, Menlo Park, CA 94025 USA Aha! Privacy Policy support@aha.io Independent Controller Data Privacy Framework 

Data Location: Amazon Web Services EU-West (primary; Ireland) and Amazon Web Services EU-Central (backup and disaster recovery; Frankfurt)
Company Recognition Salesviewer® Huestr. 30, 44787 Bochum, Germany Salesviewer® Privacy Policy  datenschutz@salesviewer.com A Data Processing Agreement (DPA) is in place. EU
Virtual Live Demo Provider EWEBINAR LABS INC. Suite 2800, 666 Burrard St Vancouver, BC, Canada V6C 2Z7 EWEBINAR LABS INC. privacy@ewebinar.com A Data Processing Agreement (DPA) is in place. Adequacy decision