Data protection declaration according to GDPR

How we deal with the data entrusted to us
With the following information we would like to offer you an overview of the processing of your personal data when you visit the website cad-laif.com and thereby use our services. We will inform you about what data we collect from you and how we use it. We will also clarify your rights under applicable data protection law and let you know who you can contact if you have any questions.

Last update: 05/30/2021

1. Who is responsible for data processing?
CAD-LAIF DOO is responsible for processing your personal data when you visit the cad-laif.com website or when you use our services. The contact details are:

CAD-LAIF DOO
Kozara 15
7000 Bitola
R. Macedonia
Tel .: +389 47 524-036
Email: info (at) cad-laif.com
Website: www.cad-laif.com

2. Who can you contact if you have any questions about data processing?
You can address questions about the processing of your data to the data protection officer at any time. The contact details of the data protection officer are:

Zoran Pejcinovski
Kozara 15
7000 Bitola
R. Macedonia
Tel .: +389 47 524-036
Email: www.cad-laif.com

3. What data do we process from you?
In principle, you can visit our website without us collecting personal data from you. Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page was viewed). This data is collected automatically as soon as you enter our website.
In detail, the options listed below are:

- Contact form
- Newsletter

What exactly is the data required for, what data is used

- Data that you transmit when using our contact form.
- Data that is generated when using our website cad-laif.com through the use of cookies, unique identifiers (pages accessed, links clicked, services used, time of use)
- Data about your location (if you have allowed the collection of location data in your device settings)

We only process the data mentioned if we actually have them!

We also process data from other sources. In detail, this can be the following data:

- Data that we collect from postal service providers in order to verify, correct or complete the billing and delivery address you have provided
- Data that has been published publicly on the Internet in order to be able to offer you current information on the subject of 3D, Augmented Reality, Virtual Reality, etc. (e.g. in our blog Digital World).

4. Is there an obligation to provide the data?
Our website collects a series of general data and information each time the website is accessed by a data subject or an automated system. These general data and information are stored in the server's log files. The following can be recorded: 1. the browser types and versions used, 2. the operating system used by the accessing system, 3. the website from which an accessing system reaches our website (so-called referrer), 4. the sub-websites that are accessed via an accessing system our website, 5. the date and time of access to the website, 6. an Internet protocol address (IP address), 7. the Internet service provider of the accessing system and 8. other similar data and Information that serves to avert danger in the event of attacks on our information technology systems.

When using this general data and information, we cannot draw any conclusions about data subjects. Rather, this information is required to 1. correctly display the content of our website, 2. to optimize our content (also for advertising), 3. to ensure the long-term functionality of our information technology systems and the technology of our website, and 4. law enforcement authorities to provide the information necessary for criminal prosecution in the event of a cyber attack.

This anonymously collected data and information is therefore evaluated statistically by the 3D agency CAD-LAIF DOO on the one hand and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data in the server log files are stored separately from all personal data provided by a data subject.

When entering data, we will inform you if the provision is necessary for the respective service or the respective function. These data are marked as mandatory fields. If data is required, failure to provide it means that the relevant service or function cannot be provided. In the case of optional data, failure to provide it may mean that we cannot provide our services in the same form and to the same extent as usual.

5. For what purposes do we process your data and what is the legal basis for this?
5.1 Email advertising

Registration for our e-mail newsletter: So that we have the opportunity to send you interesting news from the digital world and / or special offers from time to time, you can register for our e-mail newsletter. We assure you that it is absolutely far from us to get on your nerves with advertising emails! For this reason, you can rest assured that we will only contact you by email if we would like to inform you about really interesting and good offers.

The only mandatory information to register for our newsletter is the entry of your email address. All other information such as your name is voluntary. We use your name to address you personally.
We know it is a bit cumbersome, but to protect your data, we use the so-called “double opt-in” procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the sending of the newsletter.

To give your consent, you will receive a confirmation email in which we ask you to click on the link to confirm that you would like to receive newsletters from us in the future. By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR.

When registering for our newsletter, only the following data is saved:

- Your email address
- Your name (if given, no mandatory information)
- your IP address
- Date and time of your registration

We save this data in order to be able to trace a possible misuse of your e-mail address at a later point in time. We only use the data we collect when you register so that we can address you by name in our newsletter. You can unsubscribe from our newsletter at any time using the link provided in the newsletter. After you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

5.2 Website analysis

We use analysis tools to create pseudonymous usage profiles to tailor our website to your needs. The website analysis tools mentioned use cookies. These enable an analysis of the website usage by you. Your IP address is only processed anonymously. The website analysis tools evaluate your use of the website for us and compile reports on website activity. Your surfing behavior is usually analyzed anonymously; surfing behavior cannot be traced back to you. You can object to the creation of the pseudonymous user profile at any time. We will inform you about the possibilities of objection in this data protection declaration.

Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de

Use this link to prevent tracking. It should be noted that this website uses Google Analytics with the extension "_anonymizeIp ()" and therefore IP addresses are only processed in abbreviated form in order to exclude direct personal reference.

5.3 Google AdWords

This website uses the online advertising program "Google AdWords" and, as part of this, conversion tracking. Google Adwords will set a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers.

The information obtained with the help of the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
If you do not want to participate in the tracking process, you can easily deactivate the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. You can find out more about Google's data protection provisions at http://www.google.com/policies/privacy/

5.4 Google Maps

We use the map service from Google Maps. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. In order to be able to use the functions of Google Maps, your IP address must be saved. This IP address is sent to a Google server in the USA and saved. We have no influence on the transmission of this data. We use Google Maps to offer our visitors the best possible route description to our company. This gives us a legitimate interest in accordance with Art. 6 Paragraph 1 Letter f) GDPR. Further information can be found in Google's data protection declaration: https://www.google.com/intl/en/policies/privacy/

5.5. Google Web Fonts

This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's data protection declaration: https://www.google.com/policies/privacy [added April 13, 2018] The font Open Sans was installed directly on the server under the Apache license. Opt-Out: https://adssettings.google.com/authenticated

5.6 Data protection declaration for Google reCAPTCHA

In order to ensure sufficient data security when submitting forms, we use the reCAPTCHA service from Google Inc. in certain cases. This is primarily used to distinguish whether the input is made by a natural person or improperly by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. The different data protection provisions of Google Inc. apply for this. Further information on the data protection guidelines of Google Inc. can be found at http://www.google.com/intl/en/privacy or https://www.google.com/intl/de / policies / privacy

5.7 Social Media

On our website you will find links to the social media services of Facebook, Twitter, Google+, YouTube, Pinterest and Instagram. You can recognize links to the Internet pages of the social media services by the respective company logo. If you follow these links, you will reach the company website of CAD-LAIF on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This transmits to the server of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. For example:

- Address of the website on which the activated link is located
- Date and time the website was accessed or the link was activated
- Information about the browser used and the operating system used
- IP address

If you are already logged in to the relevant social media service at the time the link is activated, the provider of the social media service may be able to determine your user name and possibly even your real name and this information from the data transmitted Assign it to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services are located in the USA and other countries outside the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as is the case in the member states of the European Union. Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. You can find more information on the use of your data by the social media services integrated on our website in the data protection guidelines of the respective social media services.

5.8 Integration of YouTube and Vimeo videos

We include videos from YouTube and Vimeo in our online offer, which are stored on https://www.YouTube.com or on https://vimeo.com/ and can be played directly from our website .
YouTube or Vimeo receive information that you have accessed the relevant post on our website. Cookies are transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in Google's data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.com/intl/en/policies/privacy Google also processes your personal data in the USA and has joined the EU-US Subject to the Privacy Shield, https://www.privacyshield.gov/EU-US-Framework Vimeo also forwards at least some of your data to its headquarters in the USA (Vimeo Inc., 555 West 18th Street, New York, New York 10011) continue to process them there. You can find more information about the use of your data and your rights at Vimeo at: https://www.vimeo.com/en/about and https: //www.vimeo/privacy. We do not know whether Vimeo has joined the EU-US Privacy Shield. Further information can be found in the data protection declarations of YouTube and Vimeo.

5.9 Online presence in social media

We maintain an online presence within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection declaration, we process the data of the users as long as they communicate with us within the social networks and platforms, e.g. write articles on our online presence or send us messages.

5.10 Facebook

CAD-LAIF has created a company page on the Facebook social network. As with any company page, you can “like” it and subscribe to the page. Mark "I don't like" again at any time without notification and cancel the subscription automatically.

5.11 Other profiles in social networks

This data protection declaration applies to the presence of cad-laif.com, which includes Facebook (Twitter, Instagram, Google+, LinkedIn, XING do not currently exist, but can follow). The active profiles are listed in the imprint of this website.

5.12 Share content via plugins (Facebook, Google + 1, Twitter & Co.)

The content on our pages can be shared on social networks such as Facebook, Twitter or Google+ in compliance with data protection regulations. We use a tool for this that establishes direct contact between the networks and users only when the user actively clicks on one of these buttons. This tool does not automatically transfer user data to the operators of these platforms. If the user is logged in to one of the social networks, an information window appears when using the social buttons of Facebook, Google + 1, Twitter & Co. in which the user can confirm the text before sending it. Our users can share the content of this page in compliance with data protection regulations in social networks without the operator of the network having to create complete surf profiles.

We have installed the “addtoany” plug-in for this. https://www.addtoany.com/privacy

5.13 Hosting and sending of e-mails

The information made available with this website and the hosting services is based on infrastructure and platform services, storage space, email dispatch, database services, security services, technical maintenance services that we use for the purpose of operating this online offer. According to Article 6 Paragraph 1 lit.f GDPR i. In accordance with Art. 28 GDPR, the hosting provider processes contact data, content data, communication data, etc.

5.14 Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type / browser version
• the operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

5.15 Provision of chargeable services

We request additional data so that we can provide chargeable services. This applies, for example, to the information on payment. To ensure the security of your data during transmission, we work with encryption methods (such as SSL) over HTTPS, which reflect the current state of the art.

5.16 contact form

You can contact us using our contact form. We process your data in order to answer your request and, if necessary, to send you the information you require. Your data can be transmitted to the body responsible for your request. The legal basis for the data processing described is Article 6 Paragraph 1 Letters b, f of the General Data Protection Regulation (pre-contractual measures, contract fulfillment or balancing of interests, based on VE's interest in answering inquiries from customers and other people). We do not pass on this data without your consent.

5.17 Web server logs

When you visit our website, we process the connection data of the requesting computer including the IP address, the websites you visit on our site, the date and duration of the visit and the identification data of the browser used to ensure the security of our IT systems - and operating system type as well as the website from which you are visiting us. The legal basis for the data processing described is Article 6, Paragraph 1, Letter f of the General Data Protection Regulation (balancing of interests, based on VE's interest in ensuring the security of IT systems).

5.18 Cookies

We use cookies in some areas of our website, e.g. to recognize visitor preferences and to be able to design the website accordingly. This enables easier navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.

Cookies are small text files that are stored on the hard drive of your device. They make it possible to hold information for a certain period of time and to identify your device. We use permanent cookies for better user guidance and individual performance. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies. So the use of cookies becomes transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use individual functions of our website.

We use the following categories of cookies on our website:

• absolutely necessary cookies
• Performance cookies
• Functionality / Personalization cookies

Absolutely necessary cookies: These cookies are necessary so that you can move around the website and use its functions, for example when accessing password-protected areas. Without these cookies, we cannot provide you with certain services you have requested. We use absolutely necessary cookies to clearly identify registered users so that they can be recognized during their stay and when they visit the website again.

Performance cookies: These cookies collect information about how visitors use a website, for example which pages they visit most often and whether they receive error messages from websites. The data collected using these cookies are used to improve the functionality and service of the website. We use performance cookies to compile statistics on how our website is used and to see how effective our advertising campaigns are.

Functionality / personalization cookies: These cookies enable websites to remember previous information about a visitor (e.g. user name or language) in order to offer optimized functionalities tailored to the visitor. These cookies are also used to retain settings that you make on the website (e.g. font or size and other options that can be adjusted by the user). They also serve to provide requested services (e.g. playing a video). These cookies are not able to track your browser activities on other websites. They do not collect any information about you that could be used for advertising purposes and cannot understand where you have been on the Internet outside of our website. We use functionality / personalization cookies to recognize you when you visit our website, to personalize content and to save your settings.

5.19 SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as your entries in forms or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

6. Business Processing
We also process

- Contract data (e.g., subject of the contract, term, customer category).
- Payment data (e.g., bank details, payment history, VAT ID)

by our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

6.1 Contractual services

We process the data of our contractual partners and interested parties as well as other clients, customers, clients, clients or contractual partners (uniformly referred to as "contractual partners") in accordance with Article 6 Paragraph 1 lit. b. GDPR in order to provide you with our contractual or pre-contractual services. The data processed here, the type, scope and purpose and the necessity of their processing are determined by the underlying contractual relationship. The processed data includes the master data of our contractual partners (e.g., names and addresses), contact details (e.g. e-mail addresses and telephone numbers) as well as contract data (e.g., services used, contract content, contractual communication, names of contact persons) and payment data (e.g., Bank details, payment history).

As a matter of principle, we do not process special categories of personal data, unless these are part of a commissioned or contractual processing. We process data that are necessary for the establishment and fulfillment of the contractual services and point out the necessity of their disclosure, if this is not evident for the contractual partner. Disclosure to external persons or companies only takes place if it is required within the framework of a contract. When processing the data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements.

When using our online services, we can save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the interests of the users in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless it is necessary to pursue our claims in accordance with Art. 6 Paragraph 1 lit. f. GDPR or there is a legal obligation to do so in accordance with Art. 6 Paragraph 1 lit. c. GDPR.

The data will be deleted when the data is no longer required to fulfill contractual or statutory duties of care and to deal with any warranty or comparable obligations, whereby the need to store the data is checked every three years; Otherwise, the statutory retention requirements apply.

6.2 Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks as well as the organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The processing bases are Article 6 Paragraph 1 lit. DSGVO, Art. 6 Para. 1 lit.f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in processing lies in administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the information given for these processing activities.

We disclose or transmit data to the financial administration, consultants, such as tax consultants or auditors, as well as other fee offices and payment service providers.
Furthermore, on the basis of our business interests, we store information about suppliers, organizers and other business partners, e.g. for the purpose of later contact. We generally store this mostly company-related data permanently.

6.3 Cooperation with processors and third parties

If we disclose data to other persons and companies (contract processors or third parties) as part of our processing, transmit them to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, as is required for payment service providers in accordance with Art. 6 Para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

6.4 Are data processed outside of the European Union?

We also use service providers who are located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection.
We have therefore taken special measures to ensure that your data is processed just as securely in third countries as it is within the European Union. We conclude the data protection contract (standard data protection clauses) provided by the Commission of the European Union for the processing of personal data in third countries with service providers in third countries. This provides suitable guarantees for the protection of your data with service providers in third countries.

7. Who has access to your data and for what reason?
Within the VE, access to your data is only granted to people who need it to complete the tasks assigned to you. Outside the VE, service providers who support us in fulfilling our tasks can have access to your data. These are service providers in the following categories:

• Hosting service provider for the operation of our servers
• Development service provider for programming, development, maintenance and support of software applications
• Postal service provider for the verification, correction or completion of address data
• Credit bureaus for carrying out credit checks
• Payment service providers and banks for processing payments
• Debt collection agencies and law firms for the assertion of claims
• Service provider for the delivery and performance measurement of online advertising
• Analysis service provider for the evaluation of data and analysis of the use of electronic media
• Operator of social media for the provision of social plugins

Service providers used by us must meet special confidentiality requirements. You will only have access to your data to the extent and for the period of time that is necessary for the performance of the tasks. If a criminal offense is suspected, we can pass on your data to law enforcement authorities (police, public prosecutor's office). You can request a copy of this data protection agreement using the contact details given above.

8. How long will the data be stored?
In principle, we only store your data for as long as we need it for the respective processing purposes. If the data are no longer required for the processing purposes stated in this data protection notice, they will be deleted, unless their retention is still necessary for the fulfillment of commercial or tax retention obligations.

9. What are your rights?
9.1 information

You can request information about your personal data processed by us.

9.2 Correction

If your information is no longer correct, you can request that your data be corrected. If your data is incomplete, you can request it to be completed.

9.3 deletion

You have the right to request the deletion of your data. Please note that a right to deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to store your data.

9.4 restriction of processing

You have the right to request that the processing of your data be restricted. Please note that a right to restriction of processing depends on the existence of a legitimate reason.

9.5 objection

You have the right to object to the processing of your data for reasons that arise from your particular situation. In the event of a justified objection, we will no longer process your data.

9.6 Objection to the processing of your data for direct marketing purposes

You have the right to object to the processing of your data for direct marketing purposes at any time. This also applies to profiling associated with direct mail. You can address your objection to us informally, preferably to the contact details mentioned above, stating the keyword "Objection to the processing of my personal data for advertising purposes"

9.7 Right to lodge a complaint

You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree to the processing of your data.

9.8 Data portability

You have the right to receive personal data that you have provided to us in an electronic format.

9.9 Withdrawal of Your Consent

You have the right to revoke your consent to the processing of your data, which you have given us, at any time. This also applies to the revocation of declarations of consent that you submitted to us before the General Data Protection Regulation came into effect, i.e. before May 25, 2018. The easiest way to revoke the consent you have given is to send an email to the contact details given above. The revocation of the consent does not affect the legality of the processing of your data carried out up until the revocation.

9.10. Changes to our data protection declaration

In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, for example new services. The new data protection declaration will then apply on your next visit to our offer.

End of the data protection declaration - last update: 30.05.2021