Others

The data subject of the processing of personal data has the right, granted by European directives and regulations, to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. If the data subject wishes to exercise their right to confirmation, they shall contact the controller's employee at any time.

The data subject of the processing of personal data has the right, granted by European directives and regulations, to obtain the stored personal data concerning them as well as a copy of this information from the controller free of charge and at any time. Furthermore, European directives and regulations grant the data subject access to the following information:

• The purposes of the processing
• The categories of personal data concerned
• The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
• Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
• The right to lodge a complaint with a supervisory authority
• Where the personal data are not collected from the data subject: any available information as to their source
• The existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) of GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, the data subject has the right to be informed as to whether the personal data are transferred to a third country or to an international organization. If this is the case, the data subject has the right to be informed of the appropriate safeguards relating to the transfer.

If the data subject wishes to exercise their right to access, they shall contact the controller's employee at any time.

The data subject of the processing of personal data has the right, granted by European directives and regulations, to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Furthermore, taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If the data subject wishes to exercise their right to rectification, they shall contact the controller's employee at any time.

The data subject of the processing of personal data has the right, granted by European directives and regulations, to obtain from the controller the erasure of personal data concerning them without undue delay and the controller shall have the obligation to erase personal data without undue delay, where one of the following grounds applies and unless the processing is not necessary:

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• The data subject withdraws consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) of GDPR, and where there is no other legal ground for the processing.
• The data subject objects to the processing pursuant to Article 21(1) of GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of GDPR.
• The personal data have been unlawfully processed.
• The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• the personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) of GDPR.

If one of the conditions mentioned above applies and the data subject wishes to request the erasure of the personal data stored at Dlubal Software, they may contact the controller's employee at any time. The employee of Dlubal Software will arrange for the erasure to be complied with immediately.

Where Dlubal Software as the controller has made the personal data public and is obliged pursuant to Art. 17(1) of GDPR to erase the personal data, Dlubal Software, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, these personal data, unless the processing is not necessary. The employee of Dlubal Software GmbH will arrange the necessary in individual cases.

The data subject of the processing of personal data has the right, granted by European directives and regulations, to obtain from the controller restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
• The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.
• The data subject has objected to processing pursuant to Art 21(1) of GDPR pending verification as to whether the legitimate grounds of the controller override those of the data subject.

If one of the conditions mentioned above is met and the data subject wishes to request the restriction of the personal data stored at Dlubal Software, they may contact the controller's employee at any time. The employee of Dlubal Software will arrange for the processing to be restricted.

The data subject of the processing of personal data has the right, granted by European directives and regulations, to receive the personal data concerning them that they have provided to a controller, in a structured, commonly used, and machine-readable format. Furthermore, the data subject has the right to transmit these data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to Point (a) of Art. 6(1) or Point (a) of Art. 9(2) of GDPR, or on a contract pursuant to Point (b) of Art. 6(1), and the processing is carried out by automated means, unless this processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising their right to data portability pursuant to Art. 20(1) of GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible, and unless it does not adversely affect the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact the Dlubal Software employee or any other employee.

The data subject of the processing of personal data has the right, granted by European directives and regulations, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on Art. 6(1), (e) or (f) of GDPR. This also applies to profiling based on those provisions.

In case of an objection, Dlubal Software will no longer process the personal data, unless we demonstrate compelling legitimate grounds for the processing that overrides the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

Where personal data are processed by Dlubal Software for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning them for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. Where the data subject objects to Dlubal Software's processing for direct marketing purposes, the personal data shall no longer be processed by Dlubal Software for such purposes.

Furthermore, where the personal data are processed by Dlubal Software for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) of GDPR, the data subject, on grounds relating to their particular situation, has the right to object to the processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, the data subject may contact the Dlubal Software employee or any other employee. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise their right to object by automated means using technical specifications.

The data subject of the processing of their personal data has the right, granted by European directives and regulations, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is not necessary for entering into, or the performance of, a contract between the data subject and a data controller; or (2) is not authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests; or (3) is not based on the data subject's explicit consent.

In case the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is based on the data subject's explicit consent, Dlubal Software as the data controller shall implement suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

If the data subject wishes to exercise their right concerning the automated individual decision-making, they shall contact the controller's employee at any time.

The data subject has the right, granted by European directives and regulations, to withdraw their consent to the processing of personal data concerning them at any time.

If the data subject wishes to exercise their right to withdraw consent, they shall contact the controller's employee at any time.

The Dlubal Software website provides users with the opportunity to subscribe to our company's newsletter. We use a newsletter to inform our customers, interested parties, and business partners at regular intervals about:

• New products
• Practical tips
• Product recommendations
• New services
• Exclusive promotions
• Vouchers
• Useful / free services
• Interesting projects designed with Dlubal Software
• Current trends

The input window used for this purpose indicates which personal data are transmitted to the controller when subscribing to the newsletter.In principle, the data subject can only receive the newsletter of our company if (1) the data subject has a valid email address, and (2) the data subject has subscribed to the newsletter. For legal reasons, a confirmation email is sent to the email address entered for the first time by the data subject, using the double opt-in procedure. This confirmation email is used to check whether the owner of the email address, as the data subject, has authorized the newsletter subscription.

When registering a new newsletter subscription, we save the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of subscription, as well as the subscription date and time. This data collection is necessary to be able to trace the (possible) misuse of the email address of the data subject at a later point in time, and thus it is used by the controller as a legal protection.

The personal data collected when subscribing to the newsletter are only used to send our newsletter. Furthermore, newsletter subscribers may be informed by email if necessary for the operation of the newsletter service or a corresponding registration (for example, if changes are made to the newsletter offer or to the technical conditions).

1. The personal data collected as part of the newsletter service are not transmitted to third parties, except to our legally independent Dlubal branches in the shared customer management system (CRM).

The data subject can cancel the subscription to our newsletter at any time. The consent to store the personal data given to us by the data subject for the purpose of sending the newsletter may be withdrawn at any time. To withdraw consent, every newsletter contains a corresponding unsubscribe link. It is also possible to unsubscribe from the newsletter at any time directly on the website of the controller, or to inform the controller in another way.

The Dlubal Software newsletter contains tracking pixels. A tracking pixel is a miniature graphic that is integrated in emails sent in HTML format to enable log file recording and analysis. This allows for a statistical evaluation of the success or failure of the online marketing campaigns. Using the integrated tracking pixel, Dlubal Software may recognize whether and when an email was opened by the data subject, and which links in the email were accessed by the data subject.

These personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the controller in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. These personal data will not be transmitted to third parties. The data subjects may withdraw the separate declaration of consent given via the double opt-in procedure at any time. After the withdrawal, the personal data will be deleted by the controller. Dlubal Software automatically interprets newsletter unsubscription as a withdrawal.

As a Dlubal customer or recipient of our services (that is, using a demo, trial, or student version), you will receive newsletters from us as product recommendations and practical tips. In this case, you will receive our newsletter regardless of whether you have subscribed to it. In this way, we want to inform you about products from our offer that may be of interest to you, based on your recent purchases from us. You will also find useful tips on using our software here.

If you no longer wish to receive any newsletters or any promotional messages from us, you may object at any time. Please address your objection in writing (for example, by email, fax, letter) to our contact address or unsubscribe on the Newsletter Subscription page. Of course, you will also find an unsubscribe link at the end of each newsletter.

The legal basis is Art. 6(1)(f) of GDPR and Art. 7(3) of the German Act Against Unfair Competition (UWG).

As part of the use of Dlubal programs, personal data may be processed which are required to process the application questions, to resolve possible problems in the current or future versions, or to implement desired functionalities in future versions.

The legal basis for the processing is Chap. II, Art. 6(1)(b) of GDPR (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).

The authorization file contains the company name or username as well as the address of the company or the user. The Author.ini file contains specific information about the product key and is necessary for the software licensing. The registered company name or username as well as the address are also preset in the printout report header.

A full Windows username is saved in the history of an RFEM/RSTAB file.

The following data are saved in an RFEM/RSTAB file and shown in the Project Manager:

• Full Windows username
• Used add-on module
• Date of creation and modification
• Processing time
• Customer number

By installing a plug-in for the Windows Explorer, the username as well as the date of creation and modification of a file are also visible there.

By using the "System Diagnoses" function, the MSInfo32 tool by Microsoft may carry out a computer analysis and generate system information. By clicking the "System Info" button, the Windows System Information us opened and saved as a file.

This file contains the information about hardware resources, components, and software environment related to the respective user.

Users of Dlubal Software may use different channels to send us their requests: by phone/fax, email, or by using a form on our website (Ask Individual Question / Submit Program Feature or Idea / Report Problem or Program Issue).

The data submitted with your request are first processed in our CRM system in order to handle the request.

The following data are processed in our development database (NetGenium), if required for processing the request:

• User-related data
  • Company name
  • Customer number
  • Contact person name
  • If necessary, email address
• Hardware
  • Operating system
• Software
  • Program
  • Version
  • Problem description
• Files
  • File Name
  • Models, screenshots

These personal data are transmitted to our legally independent Dlubal branches in the shared CRM system and development database (NetGenium). More information about the Dlubal locations is available at:

Furthermore, our software development provider can access these personal data in our shared development database (NetGenium).

Depending on the user's country, the request may also be transmitted to our local authorized resellers, who are responsible for request processing.

More information about the Dlubal resellers is available at:

The personal data are exclusively transferred via the HTTPS encryption or a VPN connection.

Your satisfaction with the Dlubal programs is our top priority. The new program generation RFEM 6 and RSTAB 9 allows you to send log files to our company via online registration. We use this to better analyze and improve our programs for your applications. By default, this setting is activated under the program options. However, you can rescind your consent in the programs at any time.

If a Dlubal program closes unexpectedly, users have the possibility to send us a report with files and a description.
The information about the program crash will be transmitted in order to support the user in solving this issue or in solving this issue in future versions.

The legal basis for the processing is Art. 6(1)(b) of GDPR, as the crash report is only sent upon the user's active request.

By sending a crash report, the following data are transmitted to us:

User-related data

• Customer number and address as shown in the standard report header
• Dongle number
• Email address, if entered by the user
• Description of the problem, if entered by the user
• Program run-time
• Number of previous crashes, if this can be determined
• Information as to whether the crash was likely caused by the graphics driver
• Number of previous crashes presumably caused by the graphics driver

Hardware

• Exact CPU type
• Graphics card, including the driver version and date
• Printer, including the driver version, path, and date

Software

• Operating system with the exact version number and country code
• Installed antivirus software, including the update status

Files

Configuration of graphics settings

All RFEM/RSTAB files open at the time of the crash, automatic backup file

• Name of the user logged in
• Version number the file was created in
• Version number the file was last edited in

• dlubal_parameters_file.txt: a list of attached files
• dlubal_journal_main.txt: a list of all commands executed since the start of RFEM/RSTAB
• dlubal_journal_protocol.txt: information about the printout report
• dlubal_journal_threads.txt: a list of all running threads
• Data.*: transfer files for the computational kernel
• RFEM*.dmp or RSTAB*.dmp: memory dump
• DLInstaller_*.log: information about the interfaces
• Migration_CurrentUser_*.log: a list of all installed Dlubal Software programs
• Migration_Init_*.log: a log file about customizing databases during the installation

MsiInstaller_*log: a log file about the installation process

dlubal_diagnostic.txt

• Hardware information
  • Motherboard
  • CPU
  • Storage
  • Graphics Card
• Software information
  • Drive letters
  • Operating System
  • User Rights
  • Installed printer drivers
• Content of the registry keys (HKEY_LOCAL_MACHINE\SOFTWARE\DLUBAL\ <program>\<version number>\64-bit)
• Content of the folder (C:\Program Files\Dlubal\<program> <version number>\)
• Content of the folder (C:\Program Files (x86)\Common Files\Dlubal\ImportExport\RX-Common.NET\)

dlubal_description.txt

• User-related data
  • Customer number and address as shown in the standard report header
  • Dongle number
  • Email address, if entered by the user
  • Description of the problem, if entered by the user
  • Program run-time
  • Number of previous crashes, if this can be determined
  • Information as to whether the crash was likely caused by the graphics driver
  • Number of previous crashes presumably caused by the graphics driver
• Hardware
  • Exact CPU type
  • Graphics card, including the driver version and date
  • Printer, including the driver version, path, and date
• Software
  • Operating system with the exact version number and country code
  • Installed antivirus software, including the update status

This personal data is transmitted to our legally independent Dlubal branches in the shared development database (NetGenium). More information about the Dlubal locations is available at:

Furthermore, our software development provider can access these personal data in our shared development database (NetGenium).

The personal data mentioned above are transferred exclusively via the HTTPS encryption.

On our website, we use Zendesk Chat, a live chat software by the US company Zendesk Inc. In this software, the messages and data received via live chat are processed and documented. Zendesk Chat is used for the purpose of direct communication in real time (live chat) with visitors to the website itself.

Each time our website featured with the Zendesk chat component is accessed, this component collects data with the purpose of operating the live chat system and analyzing the operation of the system.

The processing is carried out on the basis of Art. 6(1)(f) of GDPR in compliance with our legitimate interest in direct and customer-friendly communication.

By using the Zendesk chat, you consent to the processing of the data collected about you in the manner described and for the stated purpose. You can rescind your consent at any time.

Zendesk chat shows the user whether one of our employees is currently online so that they can provide an immediate answer to your questions. If you use our live chat system, the data you provide will be saved to answer your questions. The collected data include:

• Chat history
• Entered name
• IP address
• Country of origin
• Pages visited
• Duration of the visit to the pages
• Other personal information, depending on the information provided (for example, email address, phone number)

It is possible to enter contact details such as name, phone number, and email address in order to facilitate the contact. Such data are not passed on to third parties and are only used to process and document the requests.

Zendesk, Inc, 1019 Market Street San Francisco, CA 94103, has submitted to the EU-US Privacy Shield, which guarantees compliance with the EU data protection levels.

You can find more information about data processing by Zendesk in the Zendesk's trust center at https://www.zendesk.com/trust-center and on the page od Zendesk's privacy\ policy https://www.zendesk.com/company/agreements-and-terms/privacy-notice.

You will find further information here about your rights in this regard to protect your privacy: https://www.zendesk.com/company/agreements-and-terms/privacy-notice

If you have any questions, you can also contact Zendesk directly: privacy">zendesk.com.

As a provider of Zendesk chat, we are able to

• Restrict, suspend, or terminate your access to the services,
• Access and process your personal data provided to Zendesk,
• Access and export your personal data processed by Zendesk, and
• Modify your personal information, including your end-user profile.

The processing of the personal data entered in the Zendesk chat window is carried out for the direct processing of sales and support inquiries, as well as other questions via Zendesk chat. The chats you have conducted, including the email address (if provided), are passed on to our CRM system via our development database (NetGenium) in order to be able to process sales and support inquiries as well as other questions. Chats that have been carried out are recorded and saved there; if possible, they are assigned to the relevant contact person and the respective company using the specified email address.

As part of the online helpdesk, you communicate via an encrypted Internet connection. This prevents unauthorized third parties from accessing the contents of the online helpdesk.

Your personal data in chat, including the email address (if provided), are accessible to our legally independent Dlubal locations in our shared CRM system and the development database (NetGenium). More information about the Dlubal locations is available at:
https://www.dlubal.com/en-US/company/contact/dlubal-locations/usa https://www.dlubal.com/en-US/company/contact/dlubal-locations/usa

Furthermore, our software development provider can access these personal data in our shared development database (NetGenium).

This website uses the Hyvor Talk provider as a comment function. The comments and other exchanged data are securely stored within the Hyvor Talk system. Your personal data will be processed and transmitted in accordance with the General Data Protection Regulation (GDPR).

We use Hyvor Talk as a comment and feedback system on our website. This allows our visitors to post questions, comments, and remarks on almost all of our websites. We can start discussions on different topics. This way, we encourage an exchange with each other. Visitors also have the opportunity to give feedback, send us new ideas, and leave us interesting suggestions. We also support our community in sharing by providing this tool.

The company responsible for this platform is Hyvor, No 130, Green Mount State, Madawa, Pilessa, Kurunegala, Sri Lanka. More Information: https://hyvor.com/about.

Dlubal Software agrees that the following data will be transmitted to Hyvor using Hyvor Talk:

• Website URL: used in the console and in emails
• Website identifier: used to identify each website individually
• Length of the user's stay
• User's reading behavior: whether or not the user scrolled down to read the comments

Hyvor Talk only collects the information that is necessary for the operation of the comment platform. Hyvor Talk stores the length of the user's stay (not personally identifiable) for analysis purposes. In addition, the company only saves the user's IP address if they leave a comment. The IP address is one of the most important metrics for moderators to block the IP address of spammers. Hyvor does not use IP addresses for any other purpose. When someone (a guest, Hyvor, or SSO) posts a comment on the website, the user's current IP address is saved, which is visible to the website's moderators. This is commonly used to block IP addresses of spammers.

Hyvor provides more information about its privacy policy at https://talk.hyvor.com/docs/privacy.

The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via PayPal accounts, which represent virtual private or business accounts. PayPal is also able to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed using an email address, which is why there are no classic account numbers. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects "PayPal" as the payment method during the ordering process in our online shop, the data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of their personal data required for payment processing.

The personal data transmitted to PayPal are usually first name, last name, address, email address, IP address, phone number, mobile phone number, or other data that are necessary for payment processing. The personal data related to the respective order are also required to process the purchase contract.

The purpose of transmitting the data is to process payments and to prevent fraud. The controller will transmit personal data to PayPal in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit reporting agencies. The purpose of this transfer is to check your identity and credit history.

PayPal may pass on personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or the data are to be processed on behalf of the company.

The data subject has the option to withdraw their consent to the handling of personal data at any time. The withdrawal does not affect the personal data that need to be processed, used, or transmitted for (contractual) payment processing.

The applicable privacy policy of PayPal can be found at https://www.paypal.com/en/webapps/mpp/ua/privacy-full.