Privacy Policy

Below is a summary of our privacy policy related to this website. During the use of the Movilitas.Cloud application, linked on this website but only accessible after registration and login, please refer to the privacy policy available in the application. 

Company contact details:
Movilitas.Cloud BV
Kasteelhoekstraat 1, 1820 Perk (Steenokkerzeel), Belgium
Telephone number: (+32) 2-25402-51
E-mail: info@indx.com

Contact details for the data protection officer:
DPO Engineering Group, c/o Engineering Ingegneria Informatica S.p.A.
Piazzale dell’Agricoltura, 24 – 00144 Rome, Italy
Elsa Catalano
E-mail: dpo.privacy@eng.it

Welcome to our website. The privacy of your data is very important to us. Therefore, we will explain below how we process your personal data.

Categories of data and data sources
Basically, we process the personal data that you provide to us in the context of a request, a pre-contractual relationship or a contractual relationship. In individual cases and insofar as this is necessary within the framework of the fulfilment of the contract, we also process personal data that has been taken from publicly available sources (e.g., trade register, debt directories, Internet) in a permissible manner or is permitted by third parties (e.g., credit reference agencies). were transmitted. This may be personal data (name, birthday, legally authorized representative), address data (address, e-mail address, contact person), financial data (name of the account holder, IBAN, BIC), contract data (contract duration, services purchased, cancellations), Communication data (correspondence, e-mail traffic), advertising data (advertising letters) and other comparable categories of personal data.

General processing of visitor data
The use of our website is possible without providing any personal data. If personal data are collected on our websites, this is always done on a voluntary basis by entering the respective data or by registration with individual access data created before. However, please note that in this case as well access data is collected and stored in the server log files. This concerns the following data:

  • Browser type / your browser version,
  • the operating system,
  • The Website from which you come to us,
  • Date and time of your visit / request,
  • your IP address.

In principle, we evaluate this information in anonymous form to ward off attacks and to improve our offer (processing of personal data as part of a balance of interests in accordance with Art. Art. 6 para. 1 p. 1 f) GDPR) and then delete them. The data is usually not traceable to you personally and will not be merged with other data. However, in the case of concrete indications of unlawful use, we reserve the right to evaluate the data retrospectively.

Processing of personal data in the context of a balance of interests (Art. 6 para. 1 clause 1 f) GDPR
We process personal data according to balance of interests, as far as this is necessary for the protection of our legitimate interests or the interests of third parties.

Examples of such purposes are:

  • Ensuring the IT security and integrity of our systems,
  • Prevention and investigation of criminal offences,
  • Assertion or defense of legal claims.

Processing of personal data for the execution of contracts (Art. 6 para. 1 p.1 (b) GDPR)
If a contract is concluded with us, we use personal data as far as this is necessary for the execution of the contract or for the execution of pre-contractual measures. The purposes of the data processing are based on the concrete contract contents, which you can refer to the contract documents.

Processing of personal data after consent (Art. 6 para. 1 p. 1 a GDPR)
In individual cases, we will obtain consent from you for specific purposes expressly identified in connection with data collection (e.g., request via a contact form, opening a customer account, ordering a newsletter). A data processing takes place only if you give us the consent. It is possible that the processing of your request without your consent is not possible and therefore must be made dependent on it. The processing of the data takes place exclusively for the purpose (s) expressly stated. You can revoke your consent with effect for the future at any time. The revocation has no influence on the legality of the processing until the time of revocation.

Consents explicitly obtained
Within the context of our internet presence you provided us with the following consent within the framework of the general contact form:
“I agree to the storage of my data for the electronic processing of my inquiry and accept the terms of the Data Privacy Statement. I may withdraw this consent at any time with effect for the future”.

Cross-border data transmission (point (a) of Article 49 para. 1 GDPR)
Where personal data are transmitted to a third country, we comply with the relevant data protection guidelines for this by transmitting your data generally on the basis of standard contractual clauses and by obtaining your consent to this in accordance with point (a) of Article 49 para. 1 GDPR. Where you avail yourself of our services on external websites, your consent will be obtained via the provider concerned.

Data are transmitted in particular in connection with the use of Google services. As far as you use further offers from us (e.g., Facebook, LinkedIn) which involve cross-border data processing, please also refer to the explanations below.

The use of these services results in the transmission of data to the United States of America.

The data will only be transmitted if you have given us your consent.

The specific details of the recipient, the personal data transmitted and the purpose of the forwarding of the data can be found in the remarks on the respective processing below.

The forwarding of your data poses a risk to your personal data. The United States of America do not provide for a level of data protection comparable to that under EU law (GDPR) and / or national guidelines (e.g., BDSG) or adequate guarantees to ensure a sufficient level of data protection.

Moreover, due to the U.S. legal situation, possible deficits cannot be compensated by other specific guarantees. Nevertheless, depending on the service concerned, standard contract clauses are used in some cases to achieve the maximum possible protection for your data. To find out whether standard contractual clauses are used, please refer to the explanations provided for each service.

You may withdraw your given consent at any time with effect for the future. The withdrawal has no effect on the lawfulness of the processing up to the time of the withdrawal.

Creation of pseudonymised usage profiles for web analytics
This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies.

In the context of using cookies, we rely on your consent to the data collection. If you do not give your consent to the data usage when you first visit our website, we will refrain from recording your usage behavior and other personal data which could arise during your website visit and thus also desist from using them for subsequent usage analytics or for remarketing campaigns. This also applies to third-party cookies such as the Google Analytics plugin.

If you agree to the processing of your data in the context of the opt-in procedure (confirmation of the cookie banner), the lawfulness of the processing of your data is based on a consent in accordance with Article 6 para. 1 p. 1 a) GDPR and we will use your data for the purposes of marketing and evaluating your usage behavior within the scope of your given consent.

The information the cookie generates concerning your usage of this website is generally transmitted to a server of Google LLC in the U.S. where it is then stored. Information regarding the usage of this website and your IP address may possibly be transmitted to a Google server in the U.S. and also stored on this server. The data transmission is lawful by virtue of your consent in accordance with point (a) of Article 49 para. 1 GDPR. If IP anonymization is enabled on this website, however, Google will truncate your IP address beforehand within a Member State of the European Union or in another state that is party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the U.S. and truncated there.

Google will use this information on behalf of this website’s operator to evaluate your website usage, to compile reports about the website activities, and to provide further services to the website operator in connection with website usage and Internet usage. The IP address which your browser transmits in the context of Google Analytics will not be combined with any other data held by Google provided that, in the settings of a Google account, you have not configured the web and app activity settings to permit such combination by Google.

Joint responsibility
Movilitas.Cloud BV operates its web presence together with other group companies. These are: IT-Soft USA Inc. d/b/a Eng USA d/b/a Industries eXcellence, 55 W. Monroe Street, Suite 2575, Chicago, IL 60603, USA, Industries eXcellence GmbH, Hermsheimer Straße 5, 68163 Mannheim, Germany, Industries eXcellence, BV, Kasteelhoekstraat 1, 1820 Steenokkerzeel, Belgium, Industries eXcellence SASU, 9 rue Juliette Récamier, 69006 Lyon, France, Movilitas India LLP, Cowrks Aerocity, Worldmark 1, Asset Area 11, Aerocity, NH-8, 110 037 New Delhi, India.

Within the meaning of Article 26 GDPR, Movilitas.Cloud BV and the aforementioned companies (jointly: “Parties”) have co-responsibility (i.e. joint controllership) for the processing of data collected via this website. The Parties have entered into a corresponding agreement on joint processing. Within the context of said agreement, the Parties have undertaken to ensure compliance with the provisions of data protection law, in particular the lawfulness of the data processing which they jointly perform. Where cross-border data processing is involved, special safeguards have been guaranteed in the form of standard contractual clauses in accordance with point (c) of Article 46 para. 2 GDPR. Furthermore, the data transmission is also permissible by virtue of your consent in accordance with point (a) of Article 49 para. 1 GDPR.

The data subjects’ rights under Articles 15 to 22 GDPR may be asserted vis-à-vis any Party to the agreement. Movilitas.Cloud BV will handle and respond to any such inquiries from data subjects.

Links to other websites
Our website may contain links to other external websites (Facebook, Twitter, YouTube, Vimeo, LinkedIn, GoToWebinar, etc.). These are pure links and not plugins. If you click on a link, you will call up the corresponding website and be forwarded to it.

Insofar as we process your data on these external websites (e.g., when you contact us via these websites), our Privacy policy applies.

In addition, the providers of the aforementioned websites process your personal data for their own purposes. We can make no claims about the nature of the processing, the purposes or the storage period of your personal data by these providers. Please refer to the privacy policies of the respective provider for further details about how they process your personal data.

Data transfer
We pass on data to other third parties if and to the extent that we have delegated the fulfillment of tasks to them. Furthermore, a data transfer based on our legitimate interest, cf. Art. 6 para. 1 p. 1 f) GDPR; Such a legitimate interest may exist in relation to a data transfer within the Parties (“Joint responsibility”).

In addition, we entrust your data to our service providers. We use service providers especially in the following areas:

  • IT-service-provider.

The transfer of data always takes place on the basis of a legal standard or a suitable contract according to Art. 26 or 28 GDPR, which ensures observance of all data protection requirements. Insofar as a data transfer to a third country takes place, this only happens if and to the extent that the security of the personal data is secured in accordance with the legally stipulated permissions of Art. 44 et seq. GDPR.

If data are transmitted on the basis of consent to a third country, without an adequacy decision or other suitable guarantees being available at the same time, you will be informed on the associated increased risk of data processing during transmission pursuant to Art. 49 para. 1 p. 1 a) GDPR. However, we would like to assure you that, by careful selection and constant review of the standards of our contractors, potential risks are successfully minimized.

Incidentally, a data transfer takes place exclusively in the context of the statutory cases, for example, in a statutory duty to provide information to law enforcement agencies.

Your rights as a data subject
As a person concerned with the processing of personal data, you have the following rights:

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right to information about the personal data and to the information listed in Article 15 GDPR in detail.

You have the right to demand that the responsible person immediately correct any incorrect personal data concerning you and, if necessary, complete any incomplete personal data (Art. 16 GDPR).

You have the right to demand that the person responsible delete personal data concerning you immediately if one of the reasons specified in Art. 17 GDPR applies, e.g., if the data is no longer required for the purposes pursued (right to deletion).

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g., if you have lodged an objection against the processing pursuant to Art. 21 GDPR, for the duration of any inquiry as to whether our legitimate interests outweigh yours.

You have the right to receive in a structured, common and machine-readable format the personal data concerning yourself which you have supplied us, as well as the right to transmit these data to another controller without hindrance by us, provided that the processing of these data is based on your consent or on a contract and that the processing is carried out with the aid of automated procedures (Article 20 GDPR). When exercising the right to data portability, you have the right to have the personal data transferred directly from us to another controller, as far as this is technically feasible (right to data portability).

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning your person, which may be processed on the basis of Art. The responsible party will no longer process the personal data unless it can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the affected party, or the processing is for the purpose of establishing, exercising or defending legal claims (Art. 21 GDPR).

With regard to the exercise of your rights, you can always contact us via the contact options offered on our website.

Right to complain
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR (Article 77 GDPR). You may exercise this right before a supervisory authority in the member state in which you reside, work or where the suspected infringement takes place.

Of course, you can also contact us directly if you are dissatisfied or have questions about privacy. The quickest way to reach both our internal and external contact person on the subject of data protection under the following contact data:
info@indx.com or dpo.privacy@eng.it.

Requirement to provide personal data
There is basically no obligation to provide data. However, providing data may be required to use certain features or to enter into a contract. If you do not provide the necessary data, you will not be able to use certain features or services, or a contract may not be finalized.