Privacidade

1. Controller

The controller for the processing of personal data on this website and within the AGFEM software is the entity named in the imprint. For data protection enquiries, please use the address given there.

2. Visiting the website

When you visit the website, our hosting provider processes the connection data technically required to serve it: IP address, time, requested resource, status code, volume transferred, referrer and browser identification. This data is needed to deliver the pages and to keep them secure and stable.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure, uninterrupted operation of the service.

3. Cookies

We use strictly necessary cookies only: the session cookie that keeps you signed in, and cookies set by the payment provider during checkout.

We use no tracking, no advertising cookies and no third-party analytics, which is why this website has no consent banner. The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (b) and (f) GDPR.

4. User account and registration

To download the software and manage your licence you create an account. We process the data you provide: e-mail address, password (stored only as a cryptographic hash), and optionally first and last name, company or university, and country.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures). We keep this data for as long as the account exists and delete it afterwards, unless commercial or tax retention obligations apply.

5. Licence check performed by the software

The installed AGFEM software checks at start-up, and once a day thereafter, whether the licence is valid. The following is sent to our server: the licence key, a pseudonymous device identifier derived from hardware characteristics (a hash from which those characteristics cannot be recovered), the application version, optionally the computer name, and the IP address of the connection.

This processing is necessary to enable the agreed use and to enforce the permitted number of activated computers. The legal basis is Art. 6 (1) (b) GDPR, supplemented by Art. 6 (1) (f) GDPR (protection against unauthorised use).

Your design data, models, material data and computed results are expressly not transmitted. All computations run exclusively on your own machine.

6. Downloads

Each time the installer is downloaded we log your account, the version retrieved, the time, the IP address and the browser identification. This serves abuse detection and evidence of which version a customer received. The legal basis is Art. 6 (1) (f) GDPR. These logs are deleted after twelve months.

7. Payment processing

Paid licences are processed through Stripe. You enter payment details (such as card data) directly with Stripe; we neither receive nor store them. From Stripe we receive the customer identifier, the subscription status, the end of the current billing period and invoice data.

The legal basis is Art. 6 (1) (b) GDPR. Invoice-relevant data is retained for ten years under § 147 AO and § 257 HGB.

8. Processors and transfers to third countries

We use the service providers listed below and have concluded data processing agreements with them under Art. 28 GDPR. Where data is transferred to the USA, we rely on standard contractual clauses under Art. 46 (2) (c) GDPR or on certification under the EU-US Data Privacy Framework.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Any consent given may be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence or of the alleged infringement.

10. Changes to this policy

We update this privacy policy when the processing described here changes. The version published on this page applies.