Privacy Policy

1. Controller

Sven Schulte, Weitmarer Straße 80, 44795 Bochum, Germany; email: info@focusrevit.com

2. General information

This privacy policy provides information about the processing of personal data when using the focus:Revit website, the customer account, the focus:Revit software including the license server, the trial, subscription management, payment processing and support.

Where this privacy policy refers to “software”, this means in particular the Revit add-ins, installers, license verification, account features and other related online services.

3. Categories of data subjects

We process in particular data of website visitors, prospects, trial users, customers, contact persons at business customers, as well as individual users to whom a license or seat is assigned within a company.

4. Website log files

When the website is accessed, the hosting provider processes technical access data, in particular the IP address, date and time, the URL accessed, referrer, user agent and status codes.

Purposes: provision of the website, IT security, stability, abuse prevention and error analysis.

Legal basis: Art. 6(1)(f) GDPR.

5. Contacting us

If you contact us by email, form or any other means of communication, we process the data you provide, in particular your name, email address, company, request and the content of the communication.

Purposes: handling your enquiry, initiating and performing a contract, and support.

Legal basis: Art. 6(1)(b) GDPR and, where additionally required, Art. 6(1)(f) GDPR.

6. Customer account, trial, license server and software login

In connection with registration, the trial, license management and software use, we process in particular the following categories of data:

• Account and master data, e.g. name, email address, company, role, billing and company details.
• License and contract data, e.g. trial status, subscription status, number of seats, term, cancellation status and booked products.
• Login and usage data, e.g. login times, device/installation identifier, Revit version, add-in version and technical session information.
• Technical diagnostic and error data, where these arise during use, support or via activated error reports.

Purposes: performance of the contract, provision of the trial, license verification, seat management, abuse prevention, IT security, support and error analysis.

Legal basis: Art. 6(1)(b) GDPR and, additionally, Art. 6(1)(f) GDPR.

7. Product analytics and usage statistics

To improve the software, for internal business analysis and for needs-based further development, we process usage and product analytics data, in particular:

• which tools/features are used and how often,
• which Revit and add-in versions are used,
• which accounts, companies or users are assigned to a license,
• whether, when and to what extent the trial, activation and subscription features are used,
• where applicable, coarse location-related information, insofar as it can be derived from IP or billing data.

Where possible, such data is evaluated in pseudonymized or aggregated form. We do not pass it on to third parties for their own advertising or analytics purposes.

Legal basis: Art. 6(1)(f) GDPR. Where, in individual cases, cookies that are not technically necessary or comparable access to your device are used, this is done only on the basis of consent pursuant to § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(a) GDPR.

8. Payments and billing

For paid subscriptions we process payment and billing data. Payment processing may take place via Stripe or another payment service provider. The data required for payment processing and billing is transmitted to the respective payment service provider.

Legal basis: Art. 6(1)(b) GDPR.

9. Data of business users / seat assignments

Where business customers manage licenses or seats for employees or other users, we process the personal data required for this on the basis of Art. 6(1)(b) and (f) GDPR.

Where personal data was not collected directly from the data subject, the information legally required under the GDPR is provided additionally via this privacy policy and — where necessary — via further notices in the individual case.

10. Recipients and processors

The recipients or service providers used are:

• Hosting provider: Hetzner Online GmbH, Germany
• Payment service provider: Stripe Payments Europe, Ltd., Ireland (for processing payments)
• Email/transactional-email service provider: Resend, Inc., USA (for sending system-relevant emails; the transfer of data to the USA is safeguarded by the EU Standard Contractual Clauses)

Where legally required (in particular within the scope of data processing under Art. 28 GDPR), corresponding agreements have been concluded with the service providers named above.

11. Transfers to third countries

Insofar as service providers process personal data outside the EU or the EEA, or access from a third country cannot be ruled out, this takes place only on the basis of appropriate safeguards, in particular EU standard contractual clauses or other legally recognized safeguards.

12. Storage period

In principle, we store personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations exist.

• Account, contract and billing data: for the duration of the contractual relationship and thereafter in accordance with statutory retention periods.
• Trial and license data: for the duration of the trial or contractual relationship and beyond, insofar as this is necessary for abuse prevention, legal defense or evidentiary purposes.

13. Cookies, local storage and device access

Insofar as cookies, local storage or comparable technologies are used on the website or in the customer account, we distinguish between technically necessary and non-necessary operations.

Technically necessary cookies or device access take place on the basis of § 25(2) TDDDG and — where personal data is processed — Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.

Non-necessary cookies or other non-necessary device access are used only with consent.

14. Obligation to provide data

Providing certain data is necessary for entering into a contract, the trial, licensing, payment processing, account management and support. Without this data, the software may not be available at all or not in full.

15. Your rights

Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on Art. 6(1)(f) GDPR.

Where processing is based on consent, you can withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.

16. Security

We take appropriate technical and organizational measures to protect personal data, in particular transport encryption, access restrictions, role and authorization concepts, logging and measures to safeguard availability.