Company Privacy Notice

Scope of Application

This data protection information applies to the processing of personal data on our websites and in the associated online services, such as web utilities (hereinafter together: "website"), wherever they refer to this data protection information.

Name and Contact Information of the Controller

The controller responsible for the data processing is:

Process Intelligence Solutions GmbH
Oppenhoffallee 143, 52066 Aachen, Germany

E-Mail: info@processintelligence.solutions

For all questions about data protection and to exercise your rights, you can contact us at the email address above.

Personal Data Processing and Purposes of Data Processing

You may access our website without having to disclose any details on your identity. The browser installed on your device merely transmits information automatically to the server of our website (e.g., browser type and version, date and time of access) to enable a connection with the website. This includes the IP address of your requesting device. This information is temporarily stored in a so-called log file and will be deleted after 30 days.

Our website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). The provider processes these data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Your IP address is processed for technical and administrative purposes regarding connection set-up and stability, to guarantee the security and functioning of our website and, if necessary, to be able to track any illegal attacks on the website.

The legal basis for processing the IP address is Art. 6 (1) lit. f GDPR. Our legitimate interest ensues from said security interest and the necessity of the unobstructed availability of our website.

We cannot draw any direct conclusions about your identity from processing the IP address and other information in the log file.

We do not use analytics or tracking services on our website, and we do not set cookies for these purposes. The few cases in which information is stored on your device, and the services we use for our contact form, newsletter and login, are described in the following sections.

Cookies and Local Storage

Our website does not use cookies for analytics, advertising or tracking. Information is only stored on your device if you log in to your user account (see User Account and PMTk Downloads): after login, our website stores your login session (access and refresh tokens) in your browser's local storage and sets a cookie that records that you are logged in. They are removed when you log out.

This storage is strictly necessary to provide the login you have explicitly requested. The legal basis is Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG); the subsequent processing is based on Art. 6 (1) lit. b GDPR. No consent is required for this, which is why our website does not show a cookie banner.

Contact Form and Contact by Email

You can contact us through the form on our contact page or by email. When you use the contact form, we process the following data:

• the topic of your request;
• your first and last name, email address and, if provided, your organization;
• depending on the topic: the license type you are interested in, the estimated number of users, and, for educational license requests, your role at your university or research organization;
• your message;
• the address and title of the page from which you sent the form, the time of submission, and the wording of the declarations you agreed to.

The fields marked as required are necessary to process your request; without them, we cannot answer it. All other information is voluntary.

We process these data to answer your request and, where you request a license or a demo, to prepare and perform a contract with you. For educational license requests, we use your institutional email address and organization to verify that you are a member of a university or research organization. The legal basis is Art. 6 (1) lit. b GDPR for requests aimed at concluding a contract, and Art. 6 (1) lit. f GDPR otherwise; our legitimate interest lies in answering the requests addressed to us. The same applies to emails you send us.

To manage requests, we use the customer relationship management (CRM) software HubSpot, provided by HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland, a subsidiary of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA. The form data are sent via our server to HubSpot and stored in HubSpot's data center in the European Union. HubSpot processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Access by HubSpot, Inc. from the USA cannot be ruled out; see Data Transfers to Third Countries. Further information is available in HubSpot's privacy policy at legal.hubspot.com/privacy-policy.

We delete the data from your request once it has been fully dealt with and no further contact on the matter is to be expected. If a contract is concluded, we store the data for as long as is necessary to perform the contract and for the statutory retention periods under commercial and tax law (generally six or ten years pursuant to Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO)).

Spam Protection with Cloudflare Turnstile

To protect our contact form against spam and automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is only loaded on our contact page. It checks in the background whether the form is being used by a person or by an automated program; usually, you do not need to do anything.

For this check, Cloudflare processes your IP address, information about your browser and device (such as browser type and version, operating system, language settings and screen size) and information about how the page is used. Turnstile does not set cookies. Our server only receives the result of the check and passes your form data on to HubSpot only if it was successful.

The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in protecting our website and our contact form against misuse. The access to information in your browser that is required for the check is strictly necessary to provide the contact form you have requested (Section 25 (2) no. 2 TDDDG). The data may be transferred to the USA; see Data Transfers to Third Countries. Further information is available in Cloudflare's privacy policy at cloudflare.com/privacypolicy and in the Turnstile privacy addendum at cloudflare.com/turnstile-privacy-policy.

Newsletter

When you send the contact form, you can also subscribe to our newsletter with news about PMTk and PM4Py by ticking a separate, optional checkbox. We then send you an email asking you to confirm your subscription (double opt-in); you will only receive the newsletter after you have confirmed it. We store the time of your subscription and confirmation and the wording of your consent in order to be able to prove it.

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future, using the unsubscribe link in every newsletter or by email to info@processintelligence.solutions.

We send the newsletter with HubSpot (see Contact Form and Contact by Email). With your consent, we also evaluate whether a newsletter was opened and which links in it were clicked, and assign this to your email address. We use this information to improve our newsletter. The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. You can prevent the evaluation of opens by not loading images in your email program; both evaluations end when you unsubscribe.

We use your data for the newsletter until you unsubscribe. After that, we keep your email address, the proof of your consent and the time of your unsubscription for up to three years in order to be able to demonstrate that your consent was given and to make sure that you no longer receive the newsletter (Art. 6 (1) lit. c and f GDPR).

User Account and PMTk Downloads

Customers and holders of an educational license can log in to our website to download PMTk. For the user accounts, we use Auth0, a service of Okta, Inc., 100 First Street, San Francisco, CA 94105, USA. Your account is stored in Auth0's data center in the European Union.

When you log in, Auth0 processes your email address, your name if provided, your password (stored only as a cryptographic hash; we cannot see it), the license assigned to your account, as well as the time of each login, your IP address and information about your browser. When you open the download area, our server checks with Auth0 that you are logged in and which downloads your license includes.

We process these data to provide you with the login and the downloads that your license includes. The legal basis is Art. 6 (1) lit. b GDPR. Auth0 processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Access from the USA cannot be ruled out; see Data Transfers to Third Countries. Further information is available in Okta's privacy policy at okta.com/privacy-policy.

We store your account as long as your license is valid and delete it after it has ended, unless statutory retention obligations apply. Auth0 deletes its login records after one year.

Transfer of Data

If we transfer personal data collected through websites to processors, we will notify you in this data protection information regarding the respective data processing operation, citing the specific recipient.

Aside from that, we will transfer your personal data only if

• you have given explicit consent pursuant to Art. 6 (1) lit. a GDPR;
• this is necessary pursuant to Article 6 (1) lit. b GDPR for the performance of a contract with you (for example, transmitting payment information to credit institutions or payment service providers in order to process a payment);
• there is a legal obligation for transfer pursuant to Art. 6 (1) lit. c GDPR.

The recipients must not use the transferred data for any purposes other than the above-mentioned ones.

Data Transfers to Third Countries

HubSpot, Cloudflare and Auth0 (Okta) are companies based in the USA or belong to groups based there, so a transfer of your personal data to the USA cannot be ruled out when you use the services described above. HubSpot, Inc., Cloudflare, Inc. and Okta, Inc. are certified under the EU-U.S. Data Privacy Framework. For transfers to certified companies, the European Commission has determined an adequate level of data protection (Art. 45 GDPR). In addition, we have concluded the EU Standard Contractual Clauses with these providers (Art. 46 (2) lit. c GDPR). You can request a copy of the Standard Contractual Clauses from us at info@processintelligence.solutions.

Rights of the Data Subject

You have the right:

• pursuant to Art. 7(3) GDPR, to withdraw your consent at any time. This means that we may not continue the data processing based on this consent in the future;
• pursuant to Art. 15 GDPR, to obtain access to your personal data processed by us. In particular, you may request information about the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, and the envisaged period for which the data will be stored. Moreover, you have the right to request rectification, erasure, or restriction of processing, to object to processing, the right to lodge a complaint, and to obtain information about the source of your data if they were not collected by us as well as about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the details involved;
• pursuant to Art. 16 GDPR, to obtain without undue delay the rectification of inaccurate data or the completion of your personal data stored by us;
• pursuant to Art. 17 GDPR, to obtain the erasure of personal data stored by us unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims;
• pursuant to Art. 18 GDPR, to obtain restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose the erasure of the personal data, or if we no longer need the personal data while you still require it for establishing, exercising or defending legal claims, or if you have filed an objection to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format or to demand the transfer of those data to another controller and
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority of your usual residence, place of work or the registered offices of our organization.

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, ldi.nrw.de.

We do not use automated decision-making, including profiling, pursuant to Art. 22 GDPR.

Data Security

All your personal data are transmitted in encrypted format, using the widely used and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used, for instance, in online banking. You will recognize a secure TLS connection by the additional s after http (i.e., https://...) and by the lock icon in the address bar of your browser.

In all other regards, we use suitable technical and organizational security measures to protect your data against accidental or intentional manipulations, partial or complete loss, destruction, or the unauthorized access of third parties. We continuously improve our security measures in accordance with the state of the art.

Timeliness and Amendments to this Data Protection Information

The further development of our website and the products and services offered or changed due to statutory or regulatory requirements, respectively, may make it necessary to amend this data protection information. You may access and print out the latest data protection information at any time from our website.

Last updated: November 2026