BaseCase Management GmbH (hereinafter referred to as “BaseCase”) collects and processes data from visitors to its website and in the course of rendering its services. This is carried out solely in accordance with the data protection provisions of the Federal Republic of Germany and of the European Union.
We welcome your feedback and questions regarding privacy at BaseCase. If you wish to contact us, please send an email to firstname.lastname@example.org or you can write to us at BaseCase Management GmbH, Charlottenstr. 16, 10117 Berlin, Germany or call us on +49 30 2014 364 0.
Below we provide you with details about the way in which data is collected by BaseCase, the type of data collected and how it is used:
A. What personal data is collected and for what purpose?
1. Information about the users of BaseCase’s website
BaseCase, with the help of Google Analytics, collects personal information about the users of BaseCase’s website. Google Analytics is a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and which allow your and your employees’ use of BaseCase’s website to be analysed. The information produced by the cookie about the use of this website is transmitted to a Google server in the USA and stored there. Google will use this information to analyse the use of the website, to compile reports on the website activities for the website operators and to render other services associated with use of the website and use of the Internet. Google may, as the case may be, also transmit said information to third parties if this is statutorily prescribed or if third parties process said data on behalf of Google. To ensure anonymized collection of your IP address, we expanded Google Analytics with the Code “anonymizeIp” (so-called IP masking). Accordingly, Google will abbreviate your IP address in order to guarantee that your IP address will only be collected in this shortened way to prevent conclusions about your identity. Google furthermore undertakes that it will on no account combine your IP addresses with other data belonging to Google. The installation of the cookies can be prevented by an appropriate setting in your browser software; however, you should please note that, in that case, it may not be possible to use all of the functions of this website in full. Additionally, you may prevent the collection of your personal data by downloading and installing the following browser-plugin: https://tools.google.com/dlpage/gaoptout?hl
For more information about Google Analytics please visit: https://support.google.com/analytics/answer/6004245?hl
2. Customer Data
In addition, BaseCase collects and stores information, including personal information, provided to it in connection with the initial business contact or in connection with existing customer relations and which is necessary to establish or maintain a customer relationship, a business contact or for rendering the services offered by BaseCase. This includes the user’s full name, e-mail address, telephone and fax numbers, address, the name of the client company, the user’s position within the client company and the industry sector in which the client company operates. The information can be entered via the website – e.g. the contact form to become a BaseCase Partner – by e-mail or transmitted in some other way.
For providing its services BaseCase requires at least the first name, the last name and the e-mail address of everyone a client company has authorized to have access (users). The person designated by the client company as the administrator of the customer’s access shall compile a list of all authorized users for BaseCase. Additionally, the per-user tracking configuration for the client company’s users is decided by the client company.
The client company shall ensure, and BaseCase accepts no responsibility, that the client company is authorized by the users to provide BaseCase with their personal data.
3. Company Data
BaseCase is a SaaS (Software-as-a-Service) provider. When using the services offered by BaseCase (software and server capacity) additional company and business data is transferred to BaseCase (e.g. content within mobile applications or technical identifiers of mobile devices).
BaseCase warrants that the client company’s company data processed on the servers provided will be viewed by BaseCase employees only upon the client company’s express wish, e.g. in connection with support requests. BaseCase shall not analyse or use the company data transmitted for its own purposes provided this is not necessary for performing the contract with the respective client company.
B. Whereto is the collected data transmitted? Where is it processed?
BaseCase’s servers are currently in the USA and are operated by SoftLayer Technologies, Inc. 4849 Alpha Road, Dallas, TX 75244, USA (SoftLayer).
All of the data more particularly described under A – personal data and company-related data – is processed and stored solely, or at least inter alia, on SoftLayer Technologies’ servers. SoftLayer Technologies’ server centres hold the SOC 2 certification (for more information please see BaseCase Data Security).
BaseCase reserves the right to have said data processed by other third-party companies and computer centres. BaseCase undertakes to ensure that all third-party companies commissioned to process or store the data provided to BaseCase, whether currently or in future, use computer centres certified under SOC 2 (or equivalent) or ISO/IEC 27001 for this purpose.
The data is transmitted from BaseCase to the computer centres in the USA and data is entered through the user account using an encrypted connection certified by VeriSign and a 64-256 bit SSL encryption. If you or your employees contact us by e-mail, this is not encrypted by default and can therefore in theory be viewed by others because it is transmitted via the Internet. BaseCase assumes that you are in agreement with e-mail communication being non-encrypted. However, you have the possibility of objecting to non-encrypted e-mail correspondence in advance.
BaseCase shall, upon request, regularly inform its customers and their employees as well as other interested parties (the recipients) in its Newsletter of improvements, extensions or changes to the services offered. Subscription to the Newsletter requires that the recipient states his/her e-mail address and that consent to the sending of the Newsletter is given in advance. Every recipient can object to having the Newsletter sent at any time by e-mail to email@example.com. You will not incur any costs – beyond the cost of your Internet access – by subscribing to the Newsletter or by objecting to having it sent.
E. Rights to Information
Any person about whom BaseCase collects personal data has the right to demand information from BaseCase at any time about the data stored regarding their person and that incorrect data be deleted, corrected or blocked. If necessary, please contact BaseCase at the contact details given above.
F. Security Standard