---

1. Controller and contact

The controller responsible for processing personal data in connection with this website is:

Accemic Technologies GmbH Franz-Huber-Str. 39 83088 Kiefersfelden Germany

Telephone: +49 8033 6039790 Email: info@accemic.com

Questions concerning data protection may be sent to privacy@accemic.com.

2. Scope of this notice

This Privacy Notice explains how Accemic Technologies GmbH processes personal data when you visit this website, use locally executed display or performance settings, use the local email-draft function, contact us, download material, follow an external link or - only after your consent - use a website version on which Google Analytics is configured.

Accemic offers its products and services exclusively to business customers. Data-protection law nevertheless applies to natural persons whose data we process, including sole traders and employees, representatives and contact persons of customers, partners and prospective customers.

Separate privacy information may apply to customer portals, licensed software, support systems, contractual relationships, events, job applications or other services that are not part of this public website.

3. Hosting and server logs

This website is delivered by an nginx web server administered by Accemic on hosting infrastructure located in Germany and provided by:

DomainFactory GmbH c/o WeWork Neuturmstrasse 5 80331 Munich Germany

DomainFactory processes hosting and connection data on our behalf. We have concluded a data-processing agreement with DomainFactory.

When the website is accessed, the web server and the hosting infrastructure process technical connection data. Depending on the request and the relevant log, this may include:

• the requested host or domain;
• the source IP address;
• the date and time of the request, including the applicable time zone;
• the request method, requested path and protocol version;
• the HTTP status code;
• the browser or user-agent information;
• the referring page, where supplied by the browser;
• the transferred data volume; and
• technical error information required to diagnose faults, misuse or attacks.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically correct delivery of the website, fault diagnosis, protection against misuse and the investigation of security incidents.

Regular access and error logs are deleted after seven days. If individual entries are required to investigate a specific security incident, prevent further misuse or establish, exercise or defend legal claims, those entries are separated from the regular logs, access is restricted and they are deleted when the relevant purpose no longer applies.

No separate third-party content-delivery network, web-application firewall, external font host or external script host is contacted as part of the initial delivery of this website. If Google Analytics is enabled, the Google tag is requested only after analytics consent as described below.

4. Contact inquiries

The contact area on this website does not submit a form to Accemic or to a form service provider. The topic selected by you and the text entered by you are processed in your browser solely to construct an email draft.

When you select Open email draft, the recipient address, subject and any message entered by you are passed to the email application or webmail service configured on your device. The website itself does not transmit or store these entries. Accemic receives the information only if you send the email. Your selected email application, webmail service and the email providers used by the sender and recipient may process the draft or the sent message under their own terms and privacy information.

If you send us an email or contact us by telephone, we process the information communicated by you in order to handle and answer the inquiry. This may include your name, organization, professional role, business contact details, telephone number, email address, the content of your inquiry and subsequent correspondence.

Article 6(1)(b) GDPR applies where the person making the inquiry is themselves a prospective or existing contracting party and the processing is required for steps requested before entering into a contract or for performing that contract. Where you act for a company or another organization, or where Article 6(1)(b) GDPR does not otherwise apply, processing is based on Article 6(1)(f) GDPR. Our legitimate interests are business communication, responding to inquiries and initiating or managing business relationships.

We retain correspondence until the inquiry has been completed and no further follow-up is reasonably expected. If the correspondence forms part of a business transaction, is subject to a statutory retention duty or is required to establish, exercise or defend legal claims, it is retained for the applicable period and deleted afterwards.

Please do not send passwords, access credentials, confidential source code, export-controlled information, special categories of personal data or third-party personal data by unencrypted email. We will arrange an appropriate protected transfer channel where confidential project material is required.

5. Consent management

After you accept or reject optional analytics, this website stores that choice in the first-party cookie accemic_consent for 12 months. The same storage period applies to acceptance and rejection. If you change or withdraw your choice, the cookie is updated accordingly. You may also delete it earlier through your browser settings.

The website’s client-side code reads the cookie to determine whether the Google tag may be loaded. Because accemic_consent is a first-party cookie, the browser may include it in requests to the Accemic domain as part of the ordinary Cookie header. The public website does not use it to create a server-side consent profile or consent history.

The cookie contains only the information needed to remember and apply your analytics choice. It is not used for advertising, cross-site tracking or behavioral analysis. Its storage and access are therefore based on Section 25(2) no. 2 TDDDG. To the extent that handling the choice constitutes processing of personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to respect your privacy choice and prevent the Google tag from being loaded contrary to it.

Analytics consent is voluntary. Rejecting analytics does not restrict access to the website. You can change or withdraw your choice at any time through Cookie settings in the website footer.

6. Google Analytics

We share a lot of our technical knowledge openly on this website. We would like to understand what our visitors find useful and how they use the site. With your consent, we therefore use Google Analytics 4, a web-analysis service provided by:

Google Ireland Limited Gordon House Barrow Street Dublin 4 Ireland

For the Google Analytics service described here, Google Ireland Limited processes Analytics customer data on our behalf under Google’s applicable data-processing terms.

After consent, your browser requests the Google tag from Google and sends measurement requests to Google Analytics. We use the service to understand, in aggregated form, which pages and technical articles are used, how visitors navigate through the website, which general browser and device categories are used, from which approximate region visits originate, which referring websites or campaigns lead to the website and whether defined interactions, outbound links or downloads are used.

Depending on the event, the transmitted information may include a pseudonymous client identifier, page path and page title, referrer information, date and time, session and navigation information, general browser, operating-system, device, language and screen information, approximate geographic information, interaction or download events and the analytics consent state.

The network request necessarily conveys the requesting IP address to Google. Google states that individual IP addresses of users in the European Union are not logged or stored in Google Analytics. According to Google, the IP address is used on servers in the European Union to derive approximate location metadata and is deleted before the measurement data is logged.

The website is configured not to include names, email addresses, contact-draft contents, account credentials, confidential source code or website-search terms in Google Analytics events. Search terms are processed locally and are not included in the page URL.

Consent and legal basis

Google Analytics is activated only if a measurement ID is configured for the released website and you have expressly consented to analytics.

We use Basic Consent Mode. Before consent, no Google tag is requested or loaded, no request is sent to Google Analytics, no analytics cookie is set and no consent-state or cookieless measurement signal is transmitted to Google. If you reject analytics, the Google tag remains blocked.

The storage of and access to analytics information on your device is based on your consent under Section 25(1) TDDDG. The associated processing of personal data is based on Article 6(1)(a) GDPR.

Consent is voluntary and refusing it does not restrict access to the website. You can withdraw it at any time with effect for the future as described below.

Analytics configuration

The released Google Analytics property and tag are configured as follows:

• Basic Consent Mode is used;
• no Google Ads account is linked;
• no remarketing or personalized advertising is used;
• Google Signals is disabled;
• User-ID is disabled;
• advertising data collection and ad-personalization consent states remain disabled;
• contact contents, directly identifying information and website-search terms are not transmitted;
• the Analytics cookie-expiry setting is 395 days;
• user-level and event-level data used in explorations is retained for 14 months; and
• Reset user data on new activity is disabled.

The 14-month setting does not govern Google Analytics standard aggregated reports. Those aggregated reports may remain available for longer.

Google’s applicable data-processing terms have been accepted for the property.

Analytics cookies

Following analytics consent, Google Analytics may set the following first-party cookies:

A return visit after consent may update the cookie and therefore start a new 395-day expiry period. Browser restrictions or deletion by the user may shorten the effective period.

7. Local preferences and browser storage

After an express user action, this website may store the following information in the browser:

• theme in local storage, which remembers the light or dark color theme selected by you;
• perf in local storage, which enables the optional local performance log; and
• accemic_consent in a first-party cookie, which records for 12 months whether optional analytics was accepted or rejected.

These values are used only to provide the setting or privacy choice selected by you. The theme and perf values remain on the device and are not transmitted to Accemic or a third party. The website’s client-side code reads accemic_consent to determine whether the Google tag may be loaded. As a first-party cookie, accemic_consent may also be included by the browser in requests to the Accemic domain; the public website does not use it to create a server-side consent profile or consent history.

The website search uses a static index and runs locally in the browser. Search terms are not transmitted to Accemic, an external search provider or Google Analytics and are not included in the page URL.

8. Downloads and external links

A request for a document, dataset or other file hosted on this website may be recorded in the server logs described above. If Google Analytics is configured and you have consented to analytics, a same-site download may additionally be recorded as an analytics event.

External links are ordinary links and are not embedded third-party content. No connection to the destination is made merely because you open an Accemic page. When you follow an external link, your browser establishes a connection to the destination. The operator responsible for that destination may then receive technical connection data such as your IP address, date and time, browser information, the requested resource and, depending on your browser configuration, the referring Accemic page.

Links to files.cedartools.com open a separate, access-controlled documentation portal. No connection to that portal is made until you follow the link. Processing on that portal is governed by the privacy information applicable there.

Accemic does not control the processing performed by independent third-party destinations. Please review the privacy information of the relevant destination before submitting personal or confidential information.

9. Recipients and international transfers

Within Accemic, personal data is available only to persons who require it for the relevant purpose.

Depending on the processing activity, categories of recipients may include:

• DomainFactory GmbH and its approved subprocessors for hosting and infrastructure services;
• the email and communications providers used by Accemic;
• Google Ireland Limited and its subprocessors, but only after analytics consent;
• professional advisers, auditors or legal representatives where this is necessary; and
• courts, supervisory authorities or other public bodies where disclosure is required or permitted by law.

We do not sell personal data.

The website server and regular website logs are hosted in Germany. When Google Analytics is activated, Google Ireland Limited may involve Google LLC and other affiliated companies or subprocessors in countries outside the European Economic Area.

For transfers to Google LLC in the United States, we currently rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework because Google LLC maintains an active certification covering non-HR data. For transfers not covered by an adequacy decision, Google’s applicable data-processing terms incorporate the European Commission’s Standard Contractual Clauses and supplementary safeguards.

You may request further information about the applicable safeguards or a copy of the relevant provisions by using the contact details stated in Section 1.

10. Retention

Data is deleted or anonymized when the applicable period or purpose ends, unless continued retention is required or permitted by law.

11. Legal bases

Depending on the processing activity, we rely on:

• Article 6(1)(a) GDPR for Google Analytics processing based on consent;
• Article 6(1)(b) GDPR for steps requested by a natural person before entering into a contract with that person and for performing such a contract;
• Article 6(1)(c) GDPR where processing is required to comply with a legal obligation;
• Article 6(1)(f) GDPR for secure website operation, server logging, general business communication, responding to inquiries made on behalf of organizations, fraud or misuse prevention and the establishment, exercise or defense of legal claims;
• Section 25(1) TDDDG for device storage or access requiring consent; and
• Section 25(2) no. 2 TDDDG for device storage or access strictly necessary to provide a function or privacy setting expressly requested by the user.

Technical connection data is required to deliver the website to your device. Contact data is provided voluntarily; without sufficient contact information we may be unable to answer an inquiry. Analytics consent is voluntary and refusing it has no adverse effect on access to the website.

We do not use personal data collected through this public website for solely automated decision-making, including profiling, that produces legal effects or similarly significant effects within the meaning of Article 22 GDPR.

12. Your rights

Subject to the conditions and limitations provided by law, you have the right to:

• obtain confirmation as to whether we process personal data concerning you and to obtain access to that data and the information required by Article 15 GDPR;
• request the rectification of inaccurate data and completion of incomplete data;
• request erasure of personal data;
• request restriction of processing;
• receive personal data provided by you in a structured, commonly used and machine-readable format and transmit it to another controller, where the requirements for data portability are met;
• withdraw consent at any time with effect for the future; and
• lodge a complaint with a competent data-protection supervisory authority.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation. We will then cease the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required to establish, exercise or defend legal claims.

To exercise your rights, contact privacy@accemic.com. We may request information reasonably required to verify your identity and prevent personal data from being disclosed to an unauthorized person.

You may lodge a complaint with a supervisory authority in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority generally responsible for private-sector organizations established in Bavaria is:

Bavarian State Office for Data Protection Supervision Bayerisches Landesamt für Datenschutzaufsicht - BayLDA Promenade 18 91522 Ansbach Germany

13. Withdrawal of analytics consent

You can withdraw analytics consent at any time through Cookie settings in the website footer.

Withdrawal takes effect immediately in the current browser. The accemic_consent cookie is updated to record rejection for 12 months, further Google Analytics events are blocked and Google Analytics cookies accessible to this website, including _ga and _ga_<measurement-id>, are deleted. On later page views, the Google tag is not loaded while the stored choice remains rejected.

You may additionally delete the accemic_consent cookie, other cookies and local storage through your browser settings. Deleting accemic_consent causes the website to request a new selection on a later visit.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal and does not automatically delete data already received by Google Analytics. You may exercise your applicable data-protection rights through the contact details stated in Section 1.

14. Security

We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure and unauthorized access.

Internet communication cannot be guaranteed to be completely secure. Use an appropriately protected communication channel for confidential or sensitive information.

15. Changes to this notice

We update this Privacy Notice when the website, processing purposes, service providers, analytics configuration, legal requirements or other relevant circumstances change.

If a change introduces a new purpose, a new recipient or device storage that requires consent, the relevant processing will not begin until the updated information has been published and a new valid consent has been obtained where required.

The current version is published on this page.