Privacy Policy
Privacy Policy of Panomity GmbH
This Privacy Policy describes how we collect, use, disclose, and safeguard personal data when you use our services and this website. Please read it carefully.
Translated and adapted from the archived Panomity privacy policy dated December 4, 2022. This page replaces the embedded widget with a full, readable version integrated into our site.
Table of Contents
- Overview
- Provider and Data Controller
- Types of Data Collected
- Methods of Processing
- Legal Basis of Processing
- Place of Processing
- Retention Time
- Purposes of Processing
- Detailed Information on Processing
- User Rights
- How to Exercise These Rights
- Information for California Consumers
- Information for Virginia Consumers
- Information for Users in Brazil
- Additional Information
- Definitions and Legal References
Provider and Data Controller
Panomity GmbH
Seilergasse 34
85570 Markt Schwaben
Germany
Contact Email: hallo@panomity.de
Types of Data Collected
We may process the following categories of personal data, either provided directly by you or collected automatically when you use this website:
- Identifiers and contact details: name, email address, phone number, billing address, physical address, country, city.
- Demographic and profile data: date of birth, gender, marital status, occupation, workplace, social network accounts.
- Payment and transactional information: payment details as provided during purchases or paid services.
- Usage data and device data: IP address, browser and OS characteristics, pages visited, time and date of visits, time spent on pages, clicks, scroll position, mouse movements, keystrokes, touch events, motion sensor recordings.
- Service-related data: answers to questions, survey responses, and any data transmitted to use the services.
- Cookies and similar technologies (collectively “Trackers”).
Unless otherwise specified, providing all requested data is mandatory to enable us to deliver the requested services. If you do not provide the requested data, we may be unable to provide the service. Where data is explicitly marked as optional, you may choose not to provide it without affecting service availability.
Methods of Processing
We process personal data responsibly and implement appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction. Processing is carried out using computers and/or IT-enabled tools, following organizational procedures strictly related to the purposes indicated.
In addition to the Controller, in some cases, the data may be accessible to certain types of persons in charge, involved with the operation of this website (administration, sales, marketing, legal, system administration) or external parties (such as technical service providers, delivery companies, hosting providers, IT companies, communications agencies) appointed, when necessary, as processors by the Controller. An updated list of these parties may be requested from the Controller at any time.
Legal Basis of Processing
We process personal data only if one of the following applies:
- You have given your consent for one or more specific purposes.
- Processing is necessary for the performance of a contract with you and/or for any pre-contractual obligations thereof.
- Processing is necessary for compliance with a legal obligation to which we are subject.
- Processing is related to a task carried out in the public interest or in the exercise of official authority vested in us.
- Processing is necessary for the purposes of our legitimate interests or those of a third party.
We will clarify the specific legal basis applicable to each processing activity upon request and indicate whether providing personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Place of Processing
Data are processed at our operating offices and in any other places where the parties involved in the processing are located. Depending on your location, data transfers may involve transferring your data to a country other than your own. Users are entitled to learn about the legal basis of data transfers to a country outside the European Union or to any international organization and the security measures taken by us to safeguard their data.
Retention Time
Personal data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:
- Personal data collected for purposes related to the performance of a contract shall be retained until such contract has been fully performed.
- Personal data collected for our legitimate interests shall be retained as long as needed to fulfill such purposes.
We may be allowed to retain personal data for a longer period whenever you have given consent to such processing, as long as such consent is not withdrawn. We may also be obliged to retain personal data for a longer period whenever required to fulfill a legal obligation or upon order of an authority. Once the retention period expires, rights of access, erasure, rectification, and data portability can no longer be exercised.
Purposes of Processing
We collect personal data to provide the service, comply with our legal obligations, respond to enforcement requests, protect our rights and interests (or those of our Users or third parties), detect malicious or fraudulent activity, and for the following specific purposes:
- Management of data collection and online surveys
- Displaying content from external platforms
- SPAM protection
- Traffic optimization and distribution
- Web analytics
- Data processing and data transfer outside the EU (where applicable)
Detailed Information on Processing
Displaying Content from External Platforms
These services allow you to view and interact with content hosted on external platforms directly from the pages of this website. Such services might still collect web traffic data for the pages where they are installed, even when you do not use them.
SPAM Protection
We may use mechanisms to monitor and filter traffic to this website and prevent automated or malicious activity. Such services may process usage data and device information for the purpose of filtering unwanted traffic. Further details will be provided wherever such tools are used.
Traffic Optimization and Distribution
Services that allow this website to distribute traffic and optimize its performance. These services allow us to allocate resources more efficiently and improve availability and response times. Further details will be provided wherever such tools are used.
Web Analytics
We may use analytics services to understand how visitors use our website (e.g., which pages are visited and for how long) in order to improve performance and usability. Analytics is only activated where configured and may involve the use of cookies or similar identifiers depending on the service settings.
Matomo (where enabled)
Matomo is a web analytics platform that can be self-hosted. On our site, analytics functionality is only loaded if enabled in our configuration. Matomo may process usage data (such as IP address, device and browser information, pages visited, time and date of visits) and may use cookies or other identifiers, depending on configuration (e.g., cookie-less tracking, IP anonymization).
Personal Data processed: Usage data; device information; Trackers (where configured).
Place of processing: Depending on deployment; generally under our control. Contact us for details. See Matomo’s privacy information: https://matomo.org/privacy-policy/.
Data processing and transfer outside the EU
Where we transfer personal data outside the European Union (EU) or European Economic Area (EEA), we do so on the basis of an adequacy decision by the European Commission, appropriate safeguards such as Standard Contractual Clauses (SCCs), binding corporate rules, or another valid legal basis permitted by applicable law. You may contact us for more information about the specific transfer mechanisms applied to your data and, where applicable, obtain a copy of the relevant safeguards.
Advertising
This type of service allows user data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this website, possibly based on user interests. This does not mean that all personal data is used for this purpose. Information and conditions of use are shown below.
Google AdSense (Google LLC)
Google AdSense is an advertising service provided by Google LLC. This service uses "Cookies" and other identifiers to measure and personalize ads. Users can learn how to opt out of Google’s personalized advertising by visiting the Ads Settings page. Further information is available in Google’s Advertising Policy and Privacy Policy.
Personal Data processed: Usage data; Trackers; unique advertising identifiers.
Place of processing: United States and worldwide — see Google’s privacy documentation above.
Management of Data Collection and Online Surveys
We may process the data you provide via forms or surveys for the purposes indicated in those forms (e.g., support, feedback, or service improvements).
User Rights
Users may exercise certain rights regarding their data processed by us, particularly if the processing is subject to European data protection law (GDPR). In particular, Users have the right to:
- Withdraw consent at any time where they have previously given consent to the processing of their personal data.
- Object to processing of their data if it is carried out on a legal basis other than consent.
- Access their data and obtain a copy of the data being processed.
- Verify and seek rectification of inaccurate or incomplete data.
- Restrict the processing of their data, in which case we will not process their data for any purpose other than storing it.
- Have their personal data deleted or otherwise removed.
- Receive their data and have it transferred to another controller.
- Lodge a complaint before a data protection authority.
How to Exercise These Rights
Any requests to exercise User rights can be directed to us through the contact details provided above. Requests are free of charge and will be addressed as early as possible, always within the legal time limits.
Information for California Consumers
If you are a California resident, you are entitled to learn what categories of personal information we collect, the purposes for which we use it, and your rights under the California Consumer Privacy Act (CCPA) and, where applicable, the California Privacy Rights Act (CPRA).
- Right to know the categories and specific pieces of personal information collected and the sources of that information.
- Right to request deletion of personal information collected from you, subject to statutory exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information (we do not sell personal information).
- Right to limit the use and disclosure of sensitive personal information (if processed).
- Right not to be discriminated against for exercising any of your rights.
To exercise these rights, please contact us at the email address listed above.
Information for Virginia Consumers
If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to access, correct, delete, obtain a copy of your data in a portable format, and opt out of targeted advertising, sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Contact us to exercise your rights.
Information for Users in Brazil
If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) grants you certain rights, including confirmation of processing, access, correction of incomplete, inaccurate or outdated data, anonymization, blocking or deletion of unnecessary or excessive data, data portability, deletion of personal data processed with consent, information about public and private entities with which we share data, information about the possibility of denying consent and the consequences of such denial, and revocation of consent.
Your privacy rights under Brazilian law
- Confirmation of whether your personal information is being processed
- Access to your personal information
- Correction of incomplete, inaccurate, or outdated personal information
- Anonymization, blocking, or deletion of unnecessary or excessive personal information, or information processed in non-compliance with the LGPD
- Information about public and private entities with whom we share your personal information
- Portability of your personal information to another service or product provider, upon your express request and subject to our business and trade secrets
- Deletion of personal information processed with your consent, except in cases provided for in Art. 16 of the LGPD
- Information about the possibility of denying consent and the consequences of such denial
- Revocation of consent at any time
- The right to lodge a complaint regarding your personal information with the ANPD (Brazilian Data Protection Authority) or consumer protection bodies
- The right to object to processing if it is not carried out in compliance with the law
- Understandable and adequate information regarding the criteria and procedures used for automated decision-making
- The right to request a review of decisions made solely on the basis of automated processing that affect your legitimate interests, including decisions on your personal, professional, consumer, or credit profile, or aspects of your personality
How to submit your request
You can submit your request free of charge at any time using the contact details provided above. Please specify whether you would like information provided electronically or in paper form, and whether you need a simplified immediate response or a complete response.
How we respond
We strive to process your request promptly. If immediate processing is not possible, we will inform you of the factual or legal reasons preventing us from doing so. For complete responses, we will reply within 15 days, providing details about the source of the personal information, confirmation of whether records exist, and the processing criteria and purposes, subject to our business and trade secrets. If you request correction, deletion, anonymization, or blocking of personal information, we will endeavor to notify third parties with whom we have shared your information, unless such notification is impossible or involves a disproportionate effort.
Lawful transfer of personal information outside Brazil
We may transfer personal information outside Brazil in the circumstances permitted by law, including international cooperation between public security, investigative, or prosecutorial authorities; to protect your life or physical safety or that of a third party; as authorized by the ANPD; as required under international cooperation agreements; for performing a public policy or legal obligation; for the performance of a contract or pre-contractual measures; or for the regular exercise of rights in judicial, administrative, or arbitration procedures.
Additional Information
Further details about Personal Data
Personal data may be used for legal purposes by us in court or in the stages leading to possible legal action arising from improper use of this website or the related services. You declare to be aware that we may be required to reveal personal data upon request of public authorities.
System logs and maintenance
For operation and maintenance purposes, this website and any third-party services may collect files that record interaction with this website (system logs) and use other personal data (such as the IP address) for this purpose.
Information not contained in this policy
More details concerning the processing of personal data may be requested from us at any time using the contact information provided.
Cookies and Trackers
We use cookies and similar technologies ("Trackers") to operate and provide the website, analyze traffic, and improve the services. Where required by law, we will request your consent before setting non-essential cookies. You can control cookie usage via your browser settings. See the definitions section for more details about Cookies and Trackers.
Do Not Track and Global Privacy Control
This website does not support "Do Not Track" (DNT) requests. To determine whether any third-party services we use honor DNT signals, please read their privacy policies. Where required by applicable law, we will treat Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information. We do not sell personal information.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date below. We encourage you to review this page periodically.
Definitions and Legal References
- Personal Data: Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification of a natural person.
- Usage Data: Information collected automatically through this website (or third-party services employed in this website), which can include: the IP addresses or domain names of the computers utilized by the Users, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer, the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit and the details about the path followed within the website with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.
- Data Subject: The natural person to whom the Personal Data refers.
- Processor (or Data Processor): The natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller, as described in this Privacy Policy.
- Controller (or Owner): The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- This Website: The means by which the personal data of the User is collected and processed.
- Service: The service provided by this website as described in the relative terms (if available) and on this site/application.
- European Union (or EU): Unless otherwise specified, all references to the European Union include all current member states to the European Union and the European Economic Area.
- Cookies: Trackers that consist of small sets of data stored in the User's browser.
- Tracker: Any technology — e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, or fingerprinting — that enables the tracking of Users.
Last updated: 4 December 2022