Privacy Policy

BaseCase Management GmbH (hereinafter referred to as "BaseCase") collects and processes data from visitors to its website and in the course of rendering its services. This is carried out solely in accordance with the data protection provisions of the Federal Republic of Germany and of the European Union.

This Privacy Policy refers solely to the use of BaseCase's website and of the services offered by BaseCase. BaseCase is not responsible for the websites of third parties that are linked to BaseCase's website. It is possible that the operators of third-party websites collect and process data in accordance with their privacy policies. BaseCase shall under no circumstances be responsible for any data collection by third parties.

We welcome your feedback and questions regarding privacy at BaseCase. If you wish to contact us, please send an email to info@basecase.com or you can write to us at BaseCase Management GmbH, Charlottenstr. 16, 10117 Berlin, Germany or call us on +49 30 2014 364 0.

Below we provide you with details about the way in which data is collected by BaseCase, the type of data collected and how it is used:

 A. What personal data is collected and for what purpose?

1.     Information about the users of BaseCase's website

BaseCase, with the help of Google Analytics, collects personal information about the users of BaseCase's website. Google Analytics is a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and which allow your and your employees' use of BaseCase's website to be analysed. The information produced by the cookie about the use of this website  is transmitted to a Google server in the USA and stored there. Google will use this information to analyse the use of the website, to compile reports on the website activities for the website operators and to render other services associated with use of the website and use of the Internet. Google may, as the case may be, also transmit said information to third parties if this is statutorily prescribed or if third parties process said data on behalf of Google. To ensure anonymized collection of your IP address, we expanded Google Analytics with the Code "anonymizeIp" (so-called IP masking). Accordingly, Google will abbreviate your IP address in order to guarantee that your IP address will only be collected in this shortened way to prevent conclusions about your identity. Google furthermore undertakes that it will on no account combine your IP addresses with other data belonging to Google. The installation of the cookies can be prevented by an appropriate setting in your browser software; however, you should please note that, in that case, it may not be possible to use all of the functions of this website in full. Additionally, you may prevent the collection of your personal data by downloading and installing the following browser-plugin: https://tools.google.com/dlpage/gaoptout?hl

For more information about Google Analytics please visit: https://support.google.com/analytics/answer/6004245?hl

2.     Customer Data

In addition, BaseCase collects and stores information, including personal information, provided to it in connection with the initial business contact or in connection with existing customer relations and which is necessary to establish or maintain a customer relationship, a business contact or for rendering the services offered by BaseCase. This includes the user's full name, e-mail address, telephone and fax numbers, address, the name of the client company, the user's position within the client company and the industry sector in which the client company operates. The information can be entered via the website – e.g. the contact form to become a BaseCase Partner – by e-mail or transmitted in some other way.

For providing its services BaseCase requires at least the first name, the last name and the e-mail address of everyone a client company has authorized to have access (users). The person designated by the client company as the administrator of the customer's access shall compile a list of all authorized users for BaseCase.

The client company shall ensure, and BaseCase accepts no responsibility, that the client company is authorized by the users to provide BaseCase with their personal data.

BaseCase shall, for its own analysis purposes, create user profiles of individual users only in anonymous form or using a pseudonym and only provided the user has not expressly objected to this in advance. Users that wish to partially or fully opt-out of the collection, processing or use of their data pursuant to this Privacy Policy, can send an opt-out notice by letter or email to the postal or email address mentioned above. Upon request, the client company can be provided with the pseudonymised or anonymised user profiles created by BaseCase of the client company's employees.

3.     Company Data

BaseCase is a SaaS (Software-as-a-Service) provider. When using the services offered by BaseCase (software and server capacity) additional company and business data is transferred to BaseCase (e.g. content within mobile applications or technical identifiers of mobile devices).

BaseCase warrants that the client company's company data processed on the servers provided will be viewed by BaseCase employees only upon the client company's express wish, e.g. in connection with support requests. BaseCase shall not analyse or use the company data transmitted for its own purposes provided this is not necessary for performing the contract with the respective client company.

B. Whereto is the collected data transmitted? Where is it processed?

BaseCase's servers are currently in the USA and are operated by SoftLayer Technologies, Inc. 4849 Alpha Road, Dallas, TX 75244, USA (SoftLayer).

All of the data more particularly described under A – personal data and company-related data – is processed and stored solely, or at least inter alia, on SoftLayer Technologies' servers. SoftLayer Technologies' server centres hold the SOC 2 certification (for more information please see https://interactive.basecase.com/html/resources/security/BaseCase_Data_Security.pdf).

BaseCase reserves the right to have said data processed by other third-party companies and computer centres. BaseCase undertakes to ensure that all third-party companies commissioned to process or store the data provided to BaseCase, whether currently or in future, use computer centres certified under SOC 2 (or equivalent) or ISO/IEC 27001 for this purpose.

The data is transmitted from BaseCase to the computer centres in the USA and data is entered through the user account using an encrypted connection certified by VeriSign and a 64-256 bit SSL encryption. If you or your employees contact us by e-mail, this is not encrypted by default and can therefore in theory be viewed by others because it is transmitted via the Internet. BaseCase assumes that you are in agreement with e-mail communication being non-encrypted. However, you have the possibility of objecting to non-encrypted e-mail correspondence in advance.

BaseCase also has a branch office in New York (USA), which likewise has access to the data provided to BaseCase and likewise collects and processes said data solely in accordance with this Privacy Policy.

BaseCase shall pass on the information to third parties only if, and only to the extent that, it uses a partner company to render its services. In that case BaseCase undertakes to ensure that the information passed on will be processed solely for the purposes specified herein and in accordance with a data protection standard which is at least equivalent to this Privacy Policy. There will be no other forwarding of your data to third parties.

 

C. Newsletter

BaseCase shall, upon request, regularly inform its customers and their employees as well as other interested parties (the recipients) in its Newsletter of improvements, extensions or changes to the services offered. Subscription to the Newsletter requires that the recipient states his/her e-mail address and that consent to the sending of the Newsletter is given in advance. Every recipient can object to having the Newsletter sent at any time by e-mail to unsubscribe@basecase.com. You will not incur any costs – beyond the cost of your Internet access – by subscribing to the Newsletter or by objecting to having it sent.

E. Rights to Information

Any person about whom BaseCase collects personal data has the right to demand information from BaseCase at any time about the data stored regarding their person and that incorrect data be deleted, corrected or blocked. If necessary, please contact BaseCase at the contact details given above .

F. Security Standard

BaseCase is aware of the fact that the data, which customers process, or have processed, on BaseCase's servers when using BaseCase's services, are sensitive and are of considerable importance to the client company. The data is not only treated as strictly confidential in accordance with the above Privacy Policy, but BaseCase also renders its services at a high level of security both in terms of availability as well as with regard to the integrity and security of your data. For further information see https://interactive.basecase.com/html/resources/security/BaseCase_Data_Security.pdf.