Privacy Statement

This translation is provided for your convenience only. The German version is legally binding.

We appreciate your interest in our website and company. As a responsible IT provider, we place great importance on protecting your personal data. Using our site can generally be done without providing any personal information. If an individual wishes to use specific services offered through the homepage (for example, a personalized customer login), processing of personal data may become necessary. In any case where processing personal data is required without an explicit legal basis, we always obtain consent from the affected person.

Processing of personal data (e.g., name, address, email addresses or phone numbers) by Aces IT-Solutions oHG is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable state-specific privacy laws. This privacy statement informs affected persons about the nature, scope and purpose of the personal data we collect, use and process, and clarifies their rights.

Our company has implemented a range of technical and organizational measures to protect the data processed through this website as thoroughly as possible. However, it should be noted that internet-based data transfers can inherently contain security gaps. For this reason absolute protection cannot be guaranteed. We therefore allow each affected person to provide personal data via alternative channels (mail, phone).

1. Terminology

This privacy statement is based on the terms of the GDPR. To improve readability, the following section first explains various terms used in this privacy statement:

Personal Data
All information that can be used to identify a natural person. This includes, for example, name, identifiers, location data, online identities or descriptions of special physical, social or cultural characteristics.

Processing
The collection, recording, organization, sorting, storage, editing and alteration of personal data. This includes reading, querying and transmitting/distributing data in systems, as well as using the data, but also deleting/destroying such data.

Affected Person
Any natural person whose personal data is processed.

Pseudonymisation
The processing of personal data in a way that it can no longer be linked to a specific individual without additional information. The additional information required for identification must be stored separately and protected against unauthorized access by technical and organizational measures.

Contractual Processing
Processing of personal data on behalf of an entity, authority or organization in the name of the data controller.

Consent
A clear declaration that an affected person unequivocally agrees to the processing of their personal data.

2. Name and Address of the Data Controller

The data controller under the GDPR and other applicable privacy laws is:

Aces IT-Solutions oHG
Monreposstraße 57
71634 Ludwigsburg
Germany

Tel.: +49 (7141) 48874-3
E-Mail: info@aces-online.de
Website: www.aces-online.de

3. Collection and Processing of Data

Every access to our homepage and every retrieval of a file stored on the homepage is logged. The storage serves internal system-related and statistical purposes. Logged items include: name of the retrieved file, date and time of retrieval, amount of data transferred, confirmation of successful retrieval, web browser and requesting domain. Additionally, IP addresses of the requesting computers are logged. Further personal data are only collected if you voluntarily provide them, for example during an inquiry or registration. The collection of personal data in this manner is conducted over a secure, SSL-encrypted channel.

If you have provided us with personal data, we use it solely to respond to your inquiries, to fulfill contracts entered into with you and for technical administration.

Personal data are only forwarded to third parties or otherwise transmitted if necessary for contract execution, especially the transfer of order details to suppliers, for billing purposes or if you have previously consented. You have the right to revoke any granted consent at any time, effective for the future.

4. Cookies

The Aces website does not use any cookies when you visit it. No third-party cookies are set and no services such as Google Analytics, Facebook or embedded videos are loaded; the location map and the availability indicators of our contacts are also delivered by our own server. That is why we do not display a cookie notice.

If you close a notice banner on the site, your browser remembers this until the end of the session (session storage); nothing is transmitted to us.

For the Aces-Live portal, the cookies of the previous system (ASP.NET_SessionId, yourAuthCookie, XSFR-TOKEN, XSFR-V) continue to apply until it is replaced. They serve solely for login and protection against cross-site request attacks.

5. Newsletter Subscription

The Aces IT-Solutions oHG website allows users to subscribe to various company newsletters. Which personal data are transmitted when ordering a newsletter from the data controller is determined by the input form used. Generally, all personal data except the email address are voluntary for newsletter registration. The transmission of all data for newsletter registration occurs over SSL encryption. All first-time registrants receive a confirmation email via Double-Opt-In for legal reasons. This confirmation mail verifies whether the holder of the email address has authorized receipt of the newsletter.

During newsletter registration, the ISP-assigned IP address of the computer system used by the affected person at the time of registration as well as date and time of registration are stored. Collecting this data is necessary to trace any potential misuse of an affected person's email address at a later time and serves legal protection for the data controller.

The data collected during newsletter registration are solely used for sending and, if applicable, personalising the newsletter. No data for newsletter distribution are forwarded to third parties, nor are they used by Aces for any purpose other than sending the newsletter or related emails. Consent to store personal data for receiving the Aces Newsletter can be revoked at any time. Each sent newsletter contains a link for unsubscribing; unsubscribing is also possible directly via the newsletter form on our homepage.

6. Deletion and Blocking of Personal Data

Deletion of stored personal data occurs automatically when you revoke consent to storage, when knowledge of the data is no longer necessary for the purpose pursued by storage or if storage becomes unlawful for other legal reasons (statutory period).

7. Rights of the Affected Person

Affected persons are granted rights by law and the EU regulator regarding the processing of their personal data, including:

Right to Information (Confirmation and Disclosure)
Affected persons may contact an Aces IT-Solutions oHG representative at any time to confirm which personal data are processed. In providing information, Aces IT-Solutions oHG will supply the requesting affected person with both a summary of stored personal data and details about processing purpose, categories of processed data, recipients who may have been disclosed data, duration of processing (if possible), source of data and existence of any complaint rights at supervisory authorities. If data were transferred to a third country or international organisation, the affected person also has a right to information.

Right to Rectification
Affected persons may demand immediate correction of stored and processed personal data. The affected person can contact an Aces IT-Solutions oHG representative at any time for this purpose.

Right to Erasure (Right to be Forgotten)
Affected persons have the right to request immediate deletion of their personal data from Aces IT-Solutions oHG if processing is unnecessary and one of the following applies:

  • The personal data were collected or processed for purposes no longer needed.

  • The affected person revokes consent that underpins processing per Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis.

  • The affected person objects to processing per Art. 21(1) GDPR and no overriding legitimate interests exist, or the person objects per Art. 21(2) GDPR.

  • Personal data were unlawfully processed.

  • Deletion is required to fulfil a legal obligation under EU or member state law that the controller must comply with.

  • Data were collected in relation to offered information society services per Art. 8(1) GDPR.

If personal data have been made public by Aces IT-Solutions oHG and we are obliged under Art. 17(1) GDPR to delete them, we will take appropriate technical and organisational measures, considering available technology and costs, to inform other responsible processors of the deletion request for all links or copies of these data.

Right to Data Portability
Affected persons may contact an Aces IT-Solutions oHG representative at any time to obtain a copy of stored personal data in a structured, machine-readable format. They may also request transfer of their data to another responsible processor.

Right to Restriction of Processing
Affected persons may contact an Aces IT-Solutions oHG representative at any time to restrict processing if one of the following applies:

  • The accuracy of data is contested by the affected person for a period that allows the controller to verify correctness.

  • Processing is unlawful.

  • Data are no longer needed but should be retained at the request of the affected person for legal claims.

  • The affected person objects per Art. 21(1) GDPR and it is not yet clear whether legitimate interests outweigh objections.

Right to Object to Processing and to Consent
Affected persons may object at any time, for reasons arising from their special situation, to processing of personal data under Art. 6(1)(e) or (f) GDPR. If objection is raised, Aces IT-Solutions oHG will not process further unless compelling legitimate grounds can be demonstrated that outweigh the affected person's interests and rights, or the processing serves legal claims.

If Aces IT-Solutions oHG processes personal data for direct marketing, the affected person may object at any time to such processing. Upon objection, no further processing for these purposes will occur.

Additionally, the affected person may object to processing for scientific, historical or statistical research per Art. 89(1) GDPR unless such processing is necessary for a public interest task.

Affected persons also have the right to revoke previously granted consent at any time.

Every person affected by personal data processing has the right granted by EU regulators to revoke consent at any time.

Right to Non-Automated Decisions in Individual Cases
Affected persons are not subject to decisions based solely on automated processes or profiling that have legal effect or significantly impact them, unless necessary for contract conclusion or fulfilment between the affected person and Aces IT-Solutions oHG or permitted by EU/ German law.

If such a decision is required for contract conclusion or fulfilment or made with explicit consent, Aces IT-Solutions oHG will take appropriate measures to protect rights, freedoms and legitimate interests, including the right to intervene, present own position and challenge decisions.

8. Duration of Storage

The retention period follows applicable statutory periods. After expiry, data are routinely deleted unless required for contract fulfilment or initiation.

9. Automated Decision-Making

As a responsible company we do not employ automated decision-making or profiling.

10. Interactive map by Dr. DSGVO

This website uses an interactive map by Dr. DSGVO. The map is operated locally. This solution is privacy-friendly. No personal data is passed on to third parties when the map is accessed and operated. Furthermore, we do not collect any personal data for accessing and operating the map other than what is technically necessary. The map does not use cookies.