Home | Privacy policy

Privacy policy

We would like to inform you of the circumstances under which we collect data from you and the purpose for which it is collected, processed or used.

We take your data protection very seriously and treat your personal data confidentially and in accordance with legal regulations.

Person responsible

The controller for data processing pursuant to Art. 4 No. 7 GDPR is, unless otherwise stated in this privacy policy

Kreutzpointner Business Software GmbH
Sigmund-Riefler-Bogen 2
81829 Munich
Phone: +49 (0) 8677 8703 3510
E-mail: info@kenexos.de

When you visit our website and each time you access a file, our web server collects log information about these processes (e.g. browser type, operating system, IP address). It is not possible for us to assign the collected data to a specific natural person. The data collected is only used for statistical analysis and to improve the website. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

We only store personal data that you have voluntarily provided to us (e.g. in the case of inquiries, online applications) for as long as it is required to fulfill the purposes for which this data was transmitted or as long as this is required by law. We will not pass on your personal data collected by us to third parties without your express consent. Group of companies We are part of the Kreutzpointner group of companies. This consists of legally independent companies with a uniform range of services and different regional and supra-regional focuses.

The protection of personal data is an important corporate principle, particularly within this group of companies. This is achieved through training, communication and a written commitment to data confidentiality and compliance with data protection regulations by all employees and external service providers.

Apply online

We use the Kreutzpointner Group’s applicant portal for applications. By submitting your application to the Kreutzpointner Group, you agree that the personal data you provide will be stored, processed and transmitted to the responsible HR department for internal use in relation to our application process and the necessary activities in the area of application processing, in compliance with all data protection regulations. This will also take place if no employment relationship is established.

Further information can be found in the data protection information for applicants (kreutzpointner.de).

However, we have no influence on the data transport route and security on the Internet. Please take this into account when deciding to transmit information to us via the Internet.

Contacting us When contacting us (e.g. by contact form, email, telephone or via social media) and as part of existing user and business relationships, the information of the inquiring persons is processed insofar as this is necessary to answer the contact requests and any requested measures. First and last name, your request and your e-mail address are recorded and used. Further information is optional and is used within the scope of our legitimate interest (Art. 6 GDPR para. 1 sentence 1 lit. f.). Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy. Data will not be passed on to third parties.

External hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.

We use the following hoster:

New Media Münnich
Hauptstrasse 68
02742 Friedersdorf

Cookies

When you visit one of our websites, information is stored on your computer in the form of a cookie. Cookies are small text files that are sent to your browser by a web server and stored on your computer’s hard disk.

Data transfer to third countries

If data is processed in a third country (i.e. outside the European Union or the European Economic Area) or the processing takes place in the context of the use of third-party services (e.g. Microsoft, Google, etc.) or a transfer of data to other persons or companies, this only takes place in accordance with the legal requirements.

With your express consent or a contractual or legal obligation to transfer, the data will only be processed in third countries that have a recognized level of data protection. This is either through standard contractual clauses of the EU Commission, through the submission of certifications or within the framework of the EU-US Data Privacy Framework (DPF).

Through the DPF, the level of data protection for certified companies from the USA has been recognized by the EU Commission. Below you can see which of the services we use fall under the DPF and are classified as secure.

Data processing in the KENEXOS® app

Description and scope of data processing in the KENEXOS® app

When using our mobile applications, the following personal data is processed:

  • Photos taken by users for documentation purposes and uploaded to the KENEXOS® system.
  • Names, if persons are assigned to projects, orders or objects.
  • GPS data, for location display and distance measurement.
  • Access data such as user name, password and, if applicable, e-mail address (e.g. when logging in via Microsoft/Google/Apple).
  • Technical device data (device type, operating system, version) for error analysis and system optimization.

Purpose of data processing in the KENEXOS® app

The data processing takes place for:

  • Contract fulfillment within the scope of project management, construction management, facility, building and plant management, documentation and order processing.
  • Technical provision of the app (synchronization, updates, security).
  • Improvement of app functionality and troubleshooting. There is no use for advertising purposes, no disclosure to third parties and no use of tracking or analysis tools by Kreutzpointner Business Software GmbH.

Storage duration in the KENEXOS® app

The data is only stored for as long as is necessary to fulfill the respective purpose. After a successful upload to the KENEXOS® system, the data is deleted from the end device.

Right to object to data processing in the KENEXOS® app

The collection of certain data is technically necessary for the operation of the app. An objection is therefore only possible with regard to voluntarily transmitted data.

Social networks (social media)

We use social networks for marketing purposes. LinkedIn is used for this purpose. Please refer to our separate privacy policy:

Privacy policy for the use of LinkedIn

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.

Integrated third-party providers:

Google Analytics /Google Analytics e-commerce measurement

This website uses Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics measures and analyzes the use of this website in the context of a pseudonymized user ID. The information generated about your use of this website is generally transmitted to a Google server in the USA and stored there. No clear data is transmitted to Google, but the time, duration and source of the use of the website. Also technical aspects of the device used. Pseudonymized user profiles may be created and cookies may be used. Metadata such as continent, country, region or city are derived from the IP addresses. However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by opting out at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Further information can be found in Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

Data transfer to the USA is based on the EU-US Dara Privacy Framework. The analysis of pseudonymous user data constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Google Ads

This website uses Google Ads as an online marketing measure to advertise our products and services. In this way, we want to make more people aware of our products and services on the Internet. As part of the advertising measures through Google Ads, the conversion tracking of Google Inc. is used on our website. In Europe, however, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. However, information generated may still be transferred to the USA. Further information can be found in Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

The EU-US Dara Privacy Framework forms the basis for any data transfer to the USA that cannot be ruled out. The analysis of pseudonymous user data constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

With the help of this free tracking tool, our advertising offer can be better adapted to your interests and needs.

It should be noted at this point that we have no influence on how Google uses the data collected. According to Google, the data is encrypted and stored on secure servers. In most cases, conversion cookies expire after 30 days and do not transmit any personal data. The cookies with the name “Conversion” and “_gac” have an expiration date of 3 months. You can also prevent these cookies by making the appropriate setting by “opting out” under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details on data processing can be found in the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement. If data is transferred to the USA as a third country, the basis for this is the EU-US Data Privacy Frame.

Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document these in compliance with data protection regulations. Provider of this

The technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).

When you enter our website, the following personal data is transmitted to Usercentrics:

  • Your consent(s) or the revocation of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your end device
  • Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

YouTube videos

This website uses videos from YouTube, which is operated by Google. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy. If data is transferred to the third country USA, the basis for this is the EU-US Data Privacy Framework. When you visit one of our websites featuring a YouTube video, a connection to the YouTube servers is established. If you are logged in to your YouTube account during access, you enable YouTube to assign your surfing behavior. You can prevent this by logging out of your account, for example. YouTube is used for the presentation of product videos and information videos relating to the Kenexos product. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Zoho CRM

We use Zoho CRM on this website. The provider is Zoho Corporation Pvt. Ltd, Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter “Zoho CRM”).

Among other things, Zoho CRM enables us to manage existing and potential customers and customer contacts and to organize sales and communication processes. Using the CRM system also enables us to analyze and optimize our customer-related processes. The customer data is stored on the Zoho CRM servers. Details on the functions of Zoho CRM can be found here: https://www.zoho.com/de/crm/help/getting-started/key-features.html.

Zoho CRM is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to third countries outside the European Union is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.zoho.com/privacy/dpa/DPA_zoho_com.pdf. If data is transferred to the USA, this is based on the EU-US Data Privacy Framework.

For details, please refer to Zoho CRM’s privacy policy: https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.

Zoho Campaigns

This website uses Zoho Campaigns to send newsletters. The provider is Zoho Corporation Pvt. Ltd, Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter “Zoho Campaigns”).

Zoho Campaigns is a service that can be used to organize and analyze the sending of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter is stored on Zoho Campaigns’ servers.

With the help of Zoho Campaigns, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked on. In this way, we can determine which links were clicked on particularly often.

We can also recognize whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can recognize whether you have made a purchase after clicking on the newsletter. If you do not wish to be analyzed by Zoho Campaigns, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Zoho Campaigns also allows us to divide newsletter recipients into different categories (“clustering”). The newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups. If you do not wish to be analyzed by Zoho Campaigns, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

Detailed information on the functions of Zoho Campaigns can be found at the following link: https://www.zoho.com/campaigns/features.html.

You can find Zoho Campaigns’ privacy policy at: https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time for the future.

Data transfer to the USA is based on the EU-US Data Privacy Framework.

Brevo

This website uses Brevo to send newsletters. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

Brevo is a service with which, among other things, the sending of newsletters can be organized and analyzed. The data you enter for the purpose of subscribing to the newsletter is stored on the servers of Sendinblue GmbH in Germany.

If you do not wish to be analyzed by Brevo, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

Data analysis by Brevo

With the help of Brevo, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and whether any links have been clicked on.

If you do not wish to be analyzed by Brevo, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. Detailed information on the functions of Brevo can be found at the following link: https://www.brevo.com/de/.

Order processing

Where necessary, we have concluded data processing agreements (DPAs) with the above-mentioned providers. This is a contract prescribed by data protection law, which guarantees that the contractual partner may only process the personal data of our website visitors and the like in accordance with our instructions and in compliance with the GDPR.

The current status of this declaration is 01.09.2023. In view of the ongoing technical development in the field of IT technology and IT law, we reserve the right to make additions or changes to this data protection declaration.

Rights of data subjects

You have the following rights under the EU General Data Protection Regulation:

If your personal data is processed, you have the right to obtain information about the personal data stored about you (Art. 15 GDPR). If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you can request the erasure or restriction of processing and object to processing (Art. 17, 18 and 21 GDPR). If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).

If you make use of your above-mentioned rights, we will check whether the legal requirements for this are met.

To exercise your rights, please contact the company data protection officer (datenschutz[at]kreutzpointner.de)

Data protection supervision

As a data subject, you have the right to lodge a complaint with the competent supervisory authority under the conditions of Article 57(1)(f) of the General Data Protection Regulation.

The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Postfach 1349
91504 Ansbach
Phone 0981/180093-0
Email poststelle[at]lda.bayern.de

Contact Data Protection Officer You can contact the Data Protection Officer at datenschutz[at]kreutzpointner.de at any time regarding all data protection issues relating to the Kreutzpointner Group.