This website is intended exclusively for businesses and legal entities under public law.

Data Privacy Policy

The protection of your personal data is important to us. In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), this privacy policy informs you about which personal data we process, for what purposes and on what legal basis, how long the data is stored and what rights you have.

Overview

  • We do not use any analytics, tracking or advertising services and only use technically necessary cookies and similar storage technologies; consent via a cookie banner is therefore not required.
  • Our website, our e-mail accounts and our license server are operated in Germany. We do not embed any third-party content.
  • We process personal data only to the extent necessary for operating the website, providing our software and conducting our business relationships. We do not sell personal data or pass it on for advertising purposes.
  • Information on your rights can be found in section 8, our contact details in section 1.

1. Controller and scope

The controller within the meaning of Art. 4(7) GDPR is:

info-key GmbH & Co. KG
Hermann-Ehlers-Straße 21
42109 Wuppertal, Germany
Phone: +49 202 7588-5178
E-mail:

This privacy policy applies to our website asom.eu, our kinematics software ASOM and the processing of personal data in the context of our business relationships.

2. Provision of the website

2.1 Accessing the website

Each time you access our website, the following data is transmitted to or recorded by our web server for technical reasons:

  • IP address
  • date and time of access
  • page requested
  • browser type and version as well as operating system

Purpose and legal basis: The processing serves to deliver the website and to ensure its security and functionality. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free provision of the website. Providing the data is technically necessary for using the website.

Storage period: This data is not stored in log files (server log files); we have disabled access logging at our hosting provider.

2.2 Hosting and technical support

Our website and our e-mail accounts are operated by a hosting provider with servers located in Germany. We have engaged a web agency to provide technical support for the website. Both service providers act as processors on our behalf pursuant to Art. 28 GDPR and process personal data exclusively in accordance with our instructions.

2.3 Cookies and similar technologies

We only use technically necessary cookies and similar storage technologies (such as your browser’s session storage). They are required to operate the website and to provide the functions you use, and they are deleted at the end of your browser session at the latest.

Legal basis: No consent is required for storing and accessing this information on your device pursuant to § 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The associated processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the functionality of the website.

We do not use cookies for analytics, marketing or advertising purposes. You can delete or block cookies in your browser settings at any time; this may limit the functionality of the website.

2.4 Third-party content and external links

We do not embed any content or services from third parties, such as videos, maps, fonts or analytics tools; all content is delivered by our web server. References to external websites, such as our profiles on LinkedIn and YouTube, are designed as simple links. Data is only transmitted to the respective provider when you follow the link.

2.5 Data security

The website is transmitted in encrypted form (TLS). In addition, we take appropriate technical and organizational measures to protect personal data against loss, alteration and unauthorized access (Art. 32 GDPR).

3. Contact and applications

3.1 Contacting us

If you contact us by e-mail or telephone, we process the data you provide (e.g., name, contact details, content of your inquiry) in order to handle your request.

Legal basis: Art. 6(1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries.

Storage period: until your request has been dealt with conclusively, unless statutory retention obligations apply.

3.2 Applications

We process application documents you send us by e-mail exclusively for the purpose of carrying out the application process. Only the persons involved in the selection decision have access to them.

Legal basis: Art. 6(1)(b) GDPR (initiation of an employment relationship). We process special categories of personal data provided voluntarily, such as information on a severe disability, only to the extent necessary for the process (Art. 9(2)(b) GDPR in conjunction with the applicable provisions of German employment and social law, e.g. §§ 164 et seq. of Book IX of the German Social Code – SGB IX).

Storage period: If an employment relationship is established, the documents are transferred to the personnel file. Otherwise, we retain them for six months after the process has been completed in order to be able to defend against any claims under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR) and then delete them. Longer storage, e.g. for future vacancies, only takes place with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Business relationships

4.1 Initiation and performance of contracts

In connection with offers, contracts, licenses, training courses, support and invoicing, we process the contact details of the contact persons of our customers, prospective customers, suppliers and service providers (e.g., name, company, position, e-mail address, telephone number) as well as contract, license and invoicing data. We receive this data from you or from your employer, for example when you are named as a contact person. Providing it is required for concluding and performing the contract; without it, we cannot conclude or perform a contract.

Legal basis: Art. 6(1)(b) GDPR; where the contact persons are not themselves contracting parties, Art. 6(1)(f) GDPR, based on our legitimate interest in conducting the business relationship.

Storage period: We store contract, license and invoicing data for the duration of the business relationship and thereafter until the limitation periods for contractual claims have expired (generally three years from the end of the year in which the claim arose) and until the statutory retention periods have expired (section 4.4). We delete data of prospective customers with whom no contract is concluded no later than three years after the last contact, unless statutory retention obligations apply.

4.2 Consulting, development, training and support services

When providing our services, we process the data required for this purpose, such as the names of participants in training courses (e.g., for certificates of attendance), information on our customers’ employees involved in a project and personal information contained in project or design documents provided to us.

Legal basis: Art. 6(1)(b) GDPR; where the data subjects are not themselves contracting parties, Art. 6(1)(f) GDPR, based on our legitimate interest in properly providing the agreed services.

Storage period: for the duration of the project or cooperation and beyond, insofar as this is necessary to defend against warranty and liability claims or due to statutory retention obligations.

Processing on behalf of customers: Where we process personal data exclusively on behalf of and on the instructions of a customer, for example in data analyses or in error analyses with access to customer data, we act as a processor within the meaning of Art. 28 GDPR. In this case, the customer is the controller; the customer’s privacy information and the data processing agreement concluded with the customer apply.

4.3 Recipients

We only pass on personal data where necessary. In addition to the processors mentioned in sections 2.2 and 5, recipients are:

  • our tax advisor, who acts independently as a professional bound by professional secrecy, and, in individual cases, other advisers bound to confidentiality,
  • credit institutions for processing payments,
  • subcontractors, where we engage them to provide agreed services,
  • public bodies such as tax authorities, where we are legally obliged to do so.

If a business partner is based outside the European Economic Area, we transmit the data required to perform the contract (e.g., offers and invoices) to that partner. Where an adequacy decision of the European Commission exists for the country concerned, for example for Switzerland, the transfer is based on that decision (Art. 45 GDPR); otherwise, it is based on Art. 49(1)(b) and (c) GDPR.

4.4 Retention

We retain documents relevant under commercial and tax law for the statutory periods of six, eight or ten years depending on the type of document (§ 147 of the German Fiscal Code – AO, § 257 of the German Commercial Code – HGB; Art. 6(1)(c) GDPR).

4.5 Product information and newsletter

Licensees and the contact persons they designate receive information by e-mail during the license term on new versions, bug fixes and security-relevant updates of the licensed software. Customers who have purchased a paid license or service from us and the contact persons they designate also receive information on our own similar products and services (newsletter). Other persons only receive the newsletter with their consent.

Legal basis: For information on the licensed software, Art. 6(1)(b) GDPR (performance of the license agreement) and, towards designated contact persons, Art. 6(1)(f) GDPR; where we are required to provide information about vulnerabilities or security incidents, Art. 6(1)(c) GDPR in conjunction with Art. 14(8) of Regulation (EU) 2024/2847 (Cyber Resilience Act). For the newsletter to customers, Art. 6(1)(f) GDPR in conjunction with § 7 (3) of the German Act Against Unfair Competition (UWG), based on our legitimate interest in informing customers about our own similar products and services; otherwise Art. 6(1)(a) GDPR.

Objection and withdrawal: You can object to the use of your e-mail address for the newsletter or withdraw your consent at any time, for example by replying to the respective e-mail, without incurring any costs other than the transmission costs according to the basic rates. Your address will then be removed from the mailing list.

Storage period: We use your e-mail address for the newsletter until you object or withdraw your consent and, in the case of customers, for no longer than two years after the end of the customer relationship.

5. ASOM kinematics software

5.1 Provision of the software

We provide licensees with software, updates and documentation for download via a password-protected area of our website; you receive the access data from us. When you log in, the access data is checked and a technically necessary cookie is set for the duration of the session (section 2.3). Where we set up personal access data, we store the user name and e-mail address; the password is stored only as a hash value. We only count downloads anonymously; they cannot be attributed to you, and we do not store IP addresses in the process.

Legal basis: Art. 6(1)(b) GDPR (performance of the license agreement); if you use the download area on behalf of a licensee without being a contracting party yourself, Art. 6(1)(f) GDPR, based on our legitimate interest in providing the software securely.

Storage period: We delete personal access data as soon as it is no longer required for providing the software, at the latest at the end of the license relationship.

5.2 License activation

For activating and managing a license, for example when transferring it to another computer, the software – or, for network licenses, the licensee’s license server – transmits the following data to our license server:

  • the license data provided by us (name or company name in which the license is issued, and product code) and information on the product and license type,
  • a technical identifier of the computer or license server and
  • for technical reasons, the IP address.

The license server checks the data and activates the license. If no internet connection is available, activation can take place in another way, for example by exchanging files by e-mail; in this case, the license data and the technical identifier are transmitted. If a license is provided as a license file, we process the technical identifier provided to us for this purpose. Providing this data is required for activation; without it, the software cannot be used. We operate the license server with a hosting provider in Germany that acts as our processor pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(b) GDPR (performance of the license agreement). If you use the software on behalf of a licensee without being a contracting party yourself, the processing is based on Art. 6(1)(f) GDPR and our legitimate interest in providing the license and preventing unauthorized use. Reading the technical identifier is strictly necessary for the use you have requested and is therefore permitted without consent (§ 25 (2) no. 2 TDDDG).

Storage period: We store the license data and the technical identifier for the duration of the license relationship; they are then deleted unless statutory retention obligations apply. We use the IP address only to establish the connection; where it is recorded in the license server’s log files for technical reasons, these are deleted after seven days at the latest.

5.3 Update check

If the update check is enabled or you search for updates manually, the software checks whether a newer version is available and, if so, points this out. Only the connection data technically required for the request is transmitted, in particular the IP address; as with the website, access logging is disabled. The update check can be disabled in the software. Beyond this, the software does not transmit any usage or project data.

Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in informing you about new versions and bug fixes.

6. Social media profiles

We maintain a company page on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) and a YouTube channel (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit these profiles, the operators process your data in accordance with their own privacy policies, including in the USA. For transfers to the USA, the providers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR); their U.S. parent companies LinkedIn Corporation and Google LLC are certified under it.

From the platforms, we receive only statistical evaluations that do not identify individuals. We see comments and other public interactions to the extent that you publish them on the platform; if you send us a message there or contact us in another way, we process your information in order to respond.

We are joint controllers with LinkedIn (Art. 26 GDPR) for the creation of page statistics (“Page Insights”). The agreement is available at https://www.linkedin.com/legal/l/page-joint-controller-addendum. In it, LinkedIn has assumed responsibility for complying with the GDPR obligations relating to Page Insights, in particular under Articles 12 to 22 and 32 to 34 GDPR; however, you can also contact us.

To the extent that we are joint controllers with Google for the channel statistics on YouTube, you can exercise your rights against Google as well as against us (Art. 26(3) GDPR); we will forward requests concerning Google.

Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in presenting our company and communicating with prospective and existing customers.

7. Storage period and further information

Unless a more specific storage period is stated in this privacy policy, we delete personal data as soon as it is no longer required for the respective purpose and no statutory retention obligations apply.

Providing personal data is voluntary unless stated otherwise above. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

8. Your rights

You have the following rights with regard to your personal data:

  • Access (Art. 15 GDPR): You can request information as to whether and which personal data we process about you.
  • Rectification (Art. 16 GDPR): You can request the rectification of inaccurate data and the completion of incomplete data.
  • Erasure (Art. 17 GDPR): You can request the erasure of your data unless statutory retention obligations or other grounds prevent this.
  • Restriction of processing (Art. 18 GDPR): You can request the restriction of processing under the statutory conditions.
  • Data portability (Art. 20 GDPR): You can request that we provide the data you have provided to us and that we process by automated means on the basis of your consent or a contract in a structured, commonly used and machine-readable format or, where technically feasible, transmit it directly to another controller.
  • Withdrawal of consent (Art. 7(3) GDPR): You can withdraw consent at any time with effect for the future; the lawfulness of processing carried out until then remains unaffected.

An informal message to the contact details given in section 1 is sufficient to exercise your rights.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, https://www.ldi.nrw.de.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where your data is processed for direct marketing purposes, such as our newsletter, you can object to this processing at any time without giving reasons; your data will then no longer be used for this purpose.

9. Changes to this privacy policy

We will update this privacy policy if our data processing or the legal requirements change. The version currently published on this website applies.

Last updated: 5th October 2026