DataArt Privacy and Cookie Policy

24^th of July, 2025

This data protection policy applies to the collection and processing of personal data

• during the central operation of this website:
• Controller for the operation of the website: DataArt Enterprises Inc., 475 Park Avenue South, New York, NY 10016, United States, info@dataart.com;
• in the context of a pre-contractual or contractual business relationship with you, your employer or the company you work for by a local member of the DataArt group [members: view more]
• in connection with registration forms and sign-ups, where a local member of the DataArt group [members: view more] collects personal data directly for the purpose of registering for a service or an event and is therefore indicated on this registration page or website as the Controller with reference to this data protection policy.

DataArt Enterprises Inc. and all relevant members of the DataArt Group are referred to as “DataArt” below, as appropriate.

This data protection policy does not apply to DataArt websites or web services that have their own data protection policy.

Purposes for which we process customer and user data

We collect and process personal data for various purposes, including:

• to provide our websites and social media pages;
• to display personalized advertising and content;
• to manage event registration and attendance;
• to send communications;
• to respond to contact and user support requests;
• to provide our Services and to improve and optimize their performance;
• to bill you for our services and manage our accounts;
• to ensure the security of DataArt and its services; and
• to comply with our legal obligations.

We collect and process your personal data only where it is necessary to fulfill these purposes and we have a legal basis to do so. Where required, we will ask for your consent prior to the processing.

Our website, services and events are not directed at children. We do not knowingly collect personal information from children under the age of 16.

Data sharing

We share your personal data with various parties, including:

• contracted service providers who process data on our behalf for IT and system administration, hosting, analytics, marketing and customer support;
• affiliated companies within our current or future Group of Companies that process personal data for customer support, marketing, event management, technical operations and account management;
• sponsors of events and webinars for which you register;
• third-party networks and websites so that we can display advertisements on their platforms;
• consultants providing consulting, banking, legal, insurance, tax and accounting services; and
• public and government authorities where we are required to disclose personal information to comply with our legal obligations.

What usage data do we process?

Every time you visit our website, our system automatically collects data and information from the computer system of the visiting computer.

This information may include identifiers, commercial information and information about Internet activities such as the IP address (or proxy server information), device and application information, identification numbers and characteristics, location, browser type, plug-ins, Internet Service Provider, mobile carrier, the pages and files viewed, searches conducted, referring website, operating system, system configuration information, language preferences, date and time stamps relating to your use and frequency of visits to the websites.

In addition, we collect certain information in connection with your use of our services (‘usage data’). This information may include: (i) identifiers such as user ID, company ID, user name, email address, and user type; (ii) commercial information; and (iii) Internet activity information such as IP address (or proxy server), mobile device number, device and application identification numbers, location, language, browser type, internet service provider or mobile carrier, user interactions such as the pages and files viewed, interactions with websites and webpages such as searches and other actions taken by you, operating system type and version, system configuration information, date and time stamps associated with your use and details of which of our products and product versions you are using.

In addition, we may use aggregated and anonymised usage data for other internal business purposes, such as identifying additional customer opportunities and ensuring that we meet the needs of our customers and their users.

You can read more in the table

Purposes for which we process personal data and the legal bases on which we rely

We collect and process your personal data for the following purposes and rely on the following legal bases: See attachment.

Cookie-Consent-Tool „Onetrust“, OneTrust LLC.

This website uses the cookie consent tool ‘Onetrust’ from OneTrust LLC, 1200 Abernathy Rd NE, Sandy Springs, GA 30328, USA (‘OneTrust’) to obtain effective user consent for cookies and cookie-based applications that require consent.

By integrating a corresponding JavaScript code, a banner is displayed to users when they visit the site, in which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate boxes. The tool blocks the setting of all cookies requiring consent until the respective user gives the appropriate consent by ticking the appropriate boxes. This ensures that such cookies are only set on the user's device if consent has been granted.

In order for the cookie consent tool to be able to clearly assign page views to individual users and to individually record, log and store the consent settings made by the user for a session, certain user information (including the IP address) is collected by the cookie consent tool when our website is accessed, transmitted to OneTrust servers and stored there.

This data processing is carried out on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in a legally compliant design of our website.

Furthermore, as controllers, we are subject, in particular on the basis of the GDPR, to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

OneTrust LLC. is certified for the US-European data protection agreement ‘Data Privacy Framework (DPF)’, which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.dataprivacyframework.gov/list

Further information on data use by OneTrust can be found in the OneTrust Trust Center https://www.onetrust.com/trust/

Google re CAPTCHA

We use the reCAPTCHA service. The provider of this service is Google LLC, 600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: Google). We use this service to ensure adequate data security when submitting forms. This service is used to recognise whether the input is being made by a person or by automated machine processing. The following data is used for this purpose: the IP address of the website visitor, the duration, date and time of the request, the identification data of the browser and operating system type you are using, the data about your Google account (if you are logged in), mouse movements on the reCAPTCHA surfaces and the tasks for which you have to identify images. This data is transmitted to a Google LLC. server and stored there.

The different data protection regulations of Google LLC. apply. You can find more information about this here: https://policies.google.com/privacy?hl=en-US

We store the data entry for five months.

Social media features

Our websites may use social media features, such as the ‘Tweet’ button and other sharing widgets (‘social media features’). Social media features can enable you to publish information about your activities on our website on external platforms and social networks. Through social media features, you may also be able to link or highlight information that we have published on our website or on our social media platforms. The social media functions and, if you access them via links from our websites, the platform may receive information that shows that you have visited our websites. If you are logged into your social media account, the social media network can link your visit to our websites to your social media profile.

Your interactions with social media functions are subject to the data protection policies of the companies that provide them.

We use:

Facebook

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data protection policy: https://www.facebook.com/about/privacy/

Cookie information: https://www.facebook.com/policies/cookies/

Specific information about Facebook fan pages: When you visit our Facebook fan page, Facebook processes your personal data (Facebook Insights). This data is transmitted to us by Facebook in anonymised form as part of Facebook Insights. This anonymised data is statistical data about our fan page subscribers. In addition, Facebook provides us with your profile data when you interact with us or our page, for example, when you like or comment on posts, write to us via Facebook or follow our page.

YouTube

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection policy: https://policies.google.com/privacy

Cookie information: https://policies.google.com/technologies/ads

Opt-out: https://adssettings.google.com/anonymous?hl=de&sig=ACi0TCiJxXvvKBloi2agYqXUJ4wynvlJklYAPsz_wOZwSUspvMZl4kBzJhFORHem0ERdQR1S2YqYpM9z1j8524iEylUKxtZ5IQ

Specific information about YouTube accounts or channels: When you visit our YouTube page, YouTube processes your personal data. This data is transmitted to us by YouTube in anonymised form as part of the use of YouTube STUDIO. This anonymised data is statistical data about our channel subscribers.

LinkedIn

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Data protection policy: https://www.linkedin.com/legal/privacy-policy

Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Specific information about LinkedIn company pages: When you visit our LinkedIn company page, LinkedIn processes your personal data. This data is transmitted to us by LinkedIn in anonymised form as part of LinkedIn Analytics. This anonymised data is statistical data about our subscribers. In addition, LinkedIn provides us with your profile name when you interact with us or our site, for example by liking or commenting on posts or following our pages.

GitHub Pages

Service provider: GitHub Inc., 88 Colin P Kelle Jr St, San Francisco, CA 94107, USA

Website: https://github.com

Data protection policy: https://docs.github.com/de/site-policy/privacy-policies/github-general-privacy-statement

We have concluded a GitHub Data Protection Agreement: https://github.com/customer-terms/github-data-protection-agreement

Contact form and e-mail contact

Description and scope of data processing

Our website includes a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:

• Reason for contacting us
• First and last name
• email address
• job title (optional)
• company
• telephone number (optional)
• contact details (optional) and Information for further contact (optional)
• user's IP address
• date and time of registration

During the sending process, your consent to the processing of the data is obtained and reference is made to this data protection policy.

Alternatively, it is possible to make contact via the email address provided. In this case, the user's personal data transmitted by email will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the request and for establishing contact.

The personal data from the input mask is processed solely for the purpose of establishing contact. If contact is made by email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended unless there is a business, compliance or legal needs to store the data longer. The conversation is ended when it can be inferred from the circumstances that the data subject has been conclusively clarified.

The additional personal data collected from the email header during the sending process will be stored in DataArt log server up to 90 days.

Right of objection and removal

The user has the right to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

The user can address a revocation of consent or an objection to the storage to the contact data.

In this case, all personal data stored in the course of establishing contact will be deleted

International Transfer of Personal Data

We may collect your personal data in the United States and it may be transferred to and stored by us in other countries, including countries in which we do not have a presence or in which we provide the services. Your personal data may therefore be processed outside your country or jurisdiction and in locations that may not provide the same standard of data protection.

We transfer your data internally to administration and human resources to fulfil our contractual or legal obligations. A data transfer or disclosure of your data will only take place to the extent necessary for this purpose and in compliance with the relevant data protection regulations.

Data transfer within the group

DataArt is a global company headquartered in New York, USA. The information you provide us is stored in our customer database and shared within the group for administrative purposes. Should a transfer of data within the group occur, it is for the fulfilment of a contract or as a condition of use for the websites. In addition, there may be an interest in sharing this data for internal administrative purposes.

Data retention

We retain your information for a period consistent with the original purpose of collection or as long as needed to satisfy any legal obligations. We determine the appropriate retention period for personal data based on the amount, nature, and sensitivity of the personal data processed, the potential risk of harm from unauthorised use or disclosure of the personal data, whether we can achieve the purposes of processing through other means, and the applicable legal requirements (such as applicable statutes of limitation).

After the applicable retention period has expired, your personal data will be deleted. If there is data that we cannot completely delete from our systems for technical reasons, this data will be anonymised.

For more information about the retention period, please contact us using the information in the Contact section.

To the extent DataArt is subject to data protection requirements in the EU, the European Economic Area (‘EEA’) or other countries whose national laws correspond to the GDPR:

Who is the Data Protection Officer of the Controller?

You may contact the DataArt’s data protection team at any time at the address privacy@dataart.com as well as the Data Protection Officer in Germany: datenschutz@dataart.com

Your personal data is primarily stored in the US or within the EEA, but your personal data may be processed globally.

You have certain rights in relation to your personal data, as provided by local data protection laws. Depending on the applicable laws, these rights may include the right to:

• You can request access to your personal data stored by us;
• You can find out more about how we process your personal data;
• You can request the correction of incorrect personal data, taking into account the purpose of the processing of the personal data, and ensure that it is complete;
• You can request the deletion of your personal data;
• You can request the restriction of the processing of your personal data;
• You may transmit your personal data to another Controller (data portability), where this is possible;
• You may object to the processing of your personal data;
• You may opt out of certain disclosures of your personal data to third parties;
• You have the right not to be discriminated against for exercising your rights as described above;
• You have the right not to be subject to a decision based solely on automated processing (including profiling) that has legal effect; and you may revoke your consent at any time for the future, insofar as the processing of your personal data is based on consent.

To the extent DataArt is subject to data protection requirements in the United States

To the extent DataArt is subject to the requirements of the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Acts of 2020 (CPRA), hereinafter referred to as ‘CCPA’, or if other US state laws include similar requirements, the following applies:

You have the following rights:

• Right to know what personal information the company has collected about the consumer, including information about the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or disclosing personal information, the categories of third parties to whom the company discloses personal information, and the specific pieces of personal information the company has collected about the consumer.
• Right to erasure of personal data the company has collected about the consumer, subject to certain exceptions.
• Right to correct inaccurate personal data the company stores about a consumer.
• Right to opt out of the company's sale or transfer of its personal data (where applicable).
• Right to restrict the use or disclosure of sensitive personal data by the company (subject to certain exceptions, if applicable).
• Right to equal treatment in the event of the exercise of these rights.

How can you exercise your data protection rights?

To exercise these rights or to restrict the sharing of your personal information, please contact us at:

Physical Address: DataArt Enterprises, Inc., 475 Park Avenue South, New York, NY 10016, United State.

Email Address: privacy@dataart.com

Data Protection Officer in Germany: datenschutz@dataart.com

In accordance with the verification process set forth in the relevant US state law, DataArt may require a more rigorous verification process for deletion requests (or for personal information deemed sensitive or valuable) in order to minimise the potential harm to you from unauthorised access to or disclosure of your personal information. If DataArt is required to collect information from you in addition to the information already held by DataArt, DataArt will use this information solely for the purposes of verifying your identity, enabling you to exercise your data protection rights, for security purposes or for fraud prevention. You may designate an authorised agent to exercise your data protection rights with respect to DataArt on your behalf. The representative must provide proof of authority to act on your behalf and, where required by law, be properly registered.

External links

Our website contains links to the websites of other providers. We hereby expressly state that we have no influence over the content of linked websites and the compliance with data protection regulations by their providers.

Amendments to our data protection policy

We ask you to regularly review the content of our data protection policy. We will amend the data protection policy as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or any other individual notification.

Please note that addresses and contact information for companies and organisations may change over time. Please check the information provided before contacting us.

Contact

To exercise your rights regarding your personal data or if you have questions about our privacy practices, please email us at privacy@dataart.com or per Post to DataArt Enterprises Inc., 475 Park Avenue South, New York, NY 10016, United States.

Data Protection Officer in Germany: datenschutz@dataart.com

When you contact us, please indicate the country and/or state of your residence.

Our DataArt Privacy Team in the United States will forward your request to the relevant DataArt affiliate privacy contact.

If you are located in the EEA or the United Kingdom and you believe that we have not been able to assist with your complaint or request, you have the right to file a complaint with the appropriate regulatory authority. If you work or live in a country that is a member of the European Union or in the EEA, you can find the contact details for your local data protection authority at the following https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

Appendix

Purposes for which we process personal data and the legal bases on which we rely

We rely on the following legal bases for the collection and processing of personal data: