Legal
Privacy
1. Controller
The controller responsible for the data processing within the meaning of Article 4(7) GDPR is:
AIXI Digital GmbH
Stoß im Himmel 1, 1010 Wien, Austria
FN 684884 h, Handelsgericht Wien
Telephone: +43 1 533 74 98-0
Email: office@aixi.com
No data protection officer is appointed by law.
2. Access to the website (server log data)
When you visit our website, the web server automatically processes data transmitted by your browser, in particular your IP address as well as the beginning and duration of the session, where applicable the date and time of access, the page accessed, the browser used and the operating system. The IP address already constitutes personal data. This processing is necessary for the technical provision, the stability and the security of the website and is based on the legitimate interest pursuant to Article 6(1)(f) GDPR. Save as otherwise provided below, these data are not further processed by us and are erased after a short time. The log data are kept for no longer than thirty days and are deleted thereafter, unless they are exceptionally required for longer in order to investigate an attack.
3. Cookies
Our website uses, where necessary, exclusively technically necessary cookies. These are small text files which are placed on your end device and cause no damage. The legal basis for technically necessary cookies is the legitimate interest pursuant to Article 6(1)(f) GDPR in a user-friendly web presence as well as § 165 para 3 TKG 2021. Cookies that are not necessary, and services for reach measurement, are used by us only with your consent pursuant to Article 6(1)(a) GDPR. You may delete cookies in your browser at any time or restrict their storage; the functionality of the website may be limited as a result. In the licence area a session cookie is additionally set which serves solely for the sign-in and ends when the browser is closed or the session is terminated. The fonts used on this website are delivered from our own server; no transmission of your IP address to an external font provider takes place.
4. Processing of the documents to be compared
The comparison of documents takes place entirely locally on the end device of the user. The documents to be compared are not transmitted to AIXI, are not stored on servers of AIXI and are not inspected by AIXI. The optical character recognition of scanned documents likewise takes place exclusively locally on the end device. No processing of the content of the documents by AIXI therefore takes place.
5. Registration and licence administration
For the acquisition and administration of a licence we process the data stated in that connection, in particular the name, email address and, where applicable, organisation, for the performance of the contract as well as for the issue and verification of the licence key. The legal basis is the performance of the contract pursuant to Article 6(1)(b) GDPR. The provision of these data is necessary for the conclusion and the performance of the licence contract; without these data we cannot perform the contract.
6. Payment processing and issue of the licence
Payment is processed through Paddle acting as a reseller in its own name. For purchases outside the United States of America and Canada the contractual partner is Paddle.com Market Limited, incorporated in England and Wales under company number 8172165, with its registered office at 30 Old Bailey, London EC4M 7AU, United Kingdom. The data necessary for the purchase, in particular the name, email address, invoicing data and payment information, are transmitted there. Paddle processes these data in that respect as a controller in its own right, namely for the fulfilment of its own tax and regulatory obligations as well as for the prevention of fraud. The legal basis is the performance of the contract pursuant to Article 6(1)(b) GDPR. The transfer to the United Kingdom is based on the adequacy decision of the European Commission concerning the United Kingdom and, in the alternative, on standard contractual clauses. Paddle notifies AIXI of the completed purchase. Transmitted in that connection are the email address of the purchaser, the tariff acquired, the number of workstations, the end of the period paid for and the identifiers of the customer, the subscription and the transaction at Paddle. AIXI thereupon issues the licence key, stores it for the administration of the licence and sends it. Payment information, in particular card data, is not transmitted to AIXI in that connection. The legal basis is the performance of the contract pursuant to Article 6(1)(b) GDPR.
6a. Automatic renewal of the licence key
If the licence key stored expires within thirty days, the Software enquires of us whether a renewed key is available. Only the email address to which the key is issued and the key already held, which serves as proof of entitlement, are transmitted in that connection. Documents, file names or contents are not transmitted. The connection is encrypted and the query is made at most once per day. The legal basis is the performance of the contract pursuant to Article 6(1)(b) GDPR. The query can be switched off within the program; the key must then be entered manually following a renewal.
6b. Registration of devices and confirmation of the licence key
The Software registers an end device upon activation and deregisters it when the activation is revoked. In addition it confirms the licence key every three months. Only the email address to which the key was issued, the licence key, a pseudonymous device identifier derived from device characteristics from which the device cannot be reconstructed, and the designation of the device, so that the user can recognise in the licence area which device is registered, are transmitted. Documents, file names or contents are not transmitted. The connection is encrypted; the confirmation is attempted at most once a day, and otherwise no connection exists between two confirmations. The purpose is compliance with the agreed number of end devices and the prevention of the unauthorised use of superseded licence keys. The legal basis is the performance of the contract pursuant to Article 6(1)(b) GDPR and the legitimate interest pursuant to Article 6(1)(f) GDPR in safeguarding the licence rights. The data on registered devices are stored until the device is released, at the latest until the end of the licence. Users may view their devices in the licence area and release them individually; access is granted by a link sent to the email address on file, valid for thirty minutes and usable once.
7. Updates to the software
In order to provide program updates, the Software retrieves a version file from our server at regular intervals. In that connection technically necessary connection data such as the IP address are processed, to the extent necessary for the delivery and the security. The legal basis is the legitimate interest pursuant to Article 6(1)(f) GDPR in the provision of secure and current software.
8. Web hosting
Our website is hosted with a service provider which makes the website available on its servers. The provider processes the log data referred to in point 2 on our behalf. A contract for processing pursuant to Article 28 GDPR has been concluded with the provider. The legal basis is the legitimate interest pursuant to Article 6(1)(f) GDPR in the secure and reliable operation of the website.
9. TLS encryption
For security reasons this website uses encryption of data transmission (TLS / HTTPS). The transmission of data between your browser and our server is thereby protected. You can recognise an encrypted connection by the padlock symbol of your browser and by the address beginning with https.
10. Recipients and disclosure
Your data are disclosed to third parties only to the extent necessary for the performance of the contract, in particular to the payment and licence service provider and to the hosting provider, or to the extent that we are required to do so by law. No disclosure going beyond this for advertising purposes takes place.
11. Storage period
We store personal data only for as long as this is necessary for the purposes stated or as long as statutory retention obligations, such as periods under tax and company law, exist. Thereafter the data are erased.
12. Your rights
In respect of the data processed by us you have the rights of access, rectification, erasure, restriction of processing, data portability and objection. Where the processing is based on consent, you may withdraw that consent at any time with effect for the future; the lawfulness of the processing carried out up to the withdrawal remains unaffected. You may object at any time to processing based on the legitimate interest (Article 21 GDPR). No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.
If you are of the view that the processing of your data infringes data protection law, you may complain to us at office@aixi.com or to the supervisory authority. The competent supervisory authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Wien, email: dsb@dsb.gv.at, website: www.dsb.gv.at.
13. Contact
For questions concerning data protection you can reach us at office@aixi.com.