Data protection, obligations, AVV and templates

Data protection for your customers

With the Hypersoft system you can process and store customer data.

The responsible body is usually your company, which must inform the guest/customer about the collection and further processing of his personal data (Art. 12, 13, 14 DSGVO). In addition, there must also be a legal basis about which the guest/customer/affected person must be informed.

For example, if there is no legal requirement to collect and process a "signature", there is only one legal basis based on legitimate interest, contract or consent. Therefore, the question arises whether storage can be based on the simplest form of "legitimate interest" if no consent or contract exists and is not feasible in the future.

For security reasons, you should inform your guests/customers/affected persons accordingly and generally take all data protection requirements into account.

If you are looking for data protection declarations and the like for your own use, we hereby refer you to the section Legal texts and templates.

Notes on website design (webshop)...

Regarding hints on website design, we now only refer to freely available sources and our section Legal texts and templates.

Example of a model data protection declaration...

Regarding the model data protection declaration, we now only refer to freely available sources and our section Legal texts and templates.

retention obligation

When handling your employee data and customer data (which you can store in Hypersoft systems, among other things), you should consider data economy by only storing the necessary information. Please also note, however, that you also have storage obligations, for example according to GoBD. For example, employee data and customer data may have to be stored for at least 10 years in interface with your POS system. See also: Integrated data backup.

Agreement on order data processing (ADV) according to DSGVO

At www.myhypersoft.de you can conclude an agreement on the order processing contract AVV (formerly Auftragsdatenverarbeitung ADV) with Hypersoft under My Business / Contracts & Documents. You will then be able to download the digitally signed version.

Transmission of error messages to hoster

Transmission of error messages to hosters: What data is recorded here and what is forwarded and how. Are IP address, browser version etc. generally recorded when visiting the website?

The following data is collected every time you visit your shop:

  1. Information about the browser type and version used

  2. The operating system of the terminal

  3. Date and time of access

  4. Manufacturer of the terminal

  5. Terminal model

  6. Serial number of the terminal

  7. UUID of the terminal

  8. The set language of the terminal

The data is also stored in the log files of our system. This does not affect the IP addresses of the user or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

The temporary storage of data by the system is necessary to enable delivery of the website to the user's computer. The storage in log files is done to ensure the functionality of the website.

In addition, we use the data to optimise the website and to ensure the security of our information technology systems.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

 

In addition, the following data may be collected as part of a registration:

On our website, we offer users the opportunity to register by providing personal data.

The data is entered in an input mask and transmitted to us and stored.

The data will not be passed on to third parties.

The following data may be collected as part of the registration process:

  1. Name

  2. E-mail address

  3. Birthday

  4. Gender

  5. Address(es)

  6. Allergens and preferences

  7. Payment methods

The following data is also stored at the time of registration:

  • Date and time of registration

As part of the registration process, the user's consent to the processing of this data is obtained. If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

Purpose of data processing...

Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures. User registration is required for the provision of certain content and services on our website.

Duration of storage...

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

Data processingFurther documentation:

Hypersoft SuiteBack to the parent page: