Privacy Policy

This Privacy Notice explains how personal data is processed when you use the AspenTech Inmation and AspenTech Inmation OT Data Fabric documentation websites (the “Website”).

This notice applies only to this Website. It does not apply to AspenTech products installed in your environment, customer-support systems, customer portals, or third-party websites that may be linked from this Website.

1. Controller and privacy contact

The controller responsible for processing personal data through this Website is:

AspenTech GmbH
Hohenzollernring 72
50672 Cologne
Germany

Telephone: +49 (0) 221 168 144 16
Email: inm-info@emerson.com

AspenTech’s privacy contact is:

AT-Privacy.Information@emerson.com

You may also contact AspenTech’s Data Protection Officer by post at:

Attn: Data Protection Officer
Aspen Technology, Inc.
20 Crosby Drive
Bedford, Massachusetts 01730
United States

2. Categories of personal data

When you access the Website, our technical infrastructure may process the following personal data:

• IP address;
• date and time of access;
• requested page, file or resource;
• HTTP status code and volume of data transferred;
• referring website or URL, where transmitted by your browser;
• browser type and version;
• operating system, device type and technical browser settings; and
• information required to maintain the security and functionality of the Website.

The public documentation content is generally available without registration or the provision of personal information.

3. Server log files and Website operation

When you visit the Website, the hosting infrastructure automatically creates server log files. This processing is necessary to deliver the Website, maintain its security and stability, investigate faults, and prevent misuse, fraud or attacks.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of the Website.

Server log files are retained for a limited period, generally up to 30 days, and subsequently deleted or overwritten, unless longer retention is necessary to investigate a security incident, establish, exercise or defend legal claims, or comply with a legal obligation.

4. Hosting and technical service providers

The Website is hosted by SiteGround and technically maintained by AspenTech GmbH.

We use carefully selected service providers to host, secure and maintain the Website. Where such providers process personal data on our behalf, they act as processors and are contractually required to process personal data only in accordance with our instructions and applicable data-protection law.

5. Cookies and similar technologies

5.1 Technically necessary technologies

The Website may use technically necessary cookies or similar technologies where required to provide essential Website functions, maintain security, remember privacy settings, or enable functions expressly requested by you.

The legal basis for the associated processing is Article 6(1)(f) GDPR. Where access to or storage of information on your device is necessary to provide the Website or a service expressly requested by you, this is carried out in accordance with Section 25(2) TDDDG.

5.2 Analytics, marketing and external tracking

The Website does not use analytics, marketing, heatmap, session-recording, advertising or social-media tracking technologies unless these services are actually deployed and you have given prior consent where consent is required.

Where non-essential technologies are used, the legal basis for access to or storage of information on your device is Section 25(1) TDDDG. Any associated personal-data processing is based on your consent under Article 6(1)(a) GDPR.

You may withdraw consent at any time with future effect.

6. Contacting us

If you contact us by email or use a contact option linked from this Website, we process the information you provide in order to handle and respond to your request.

Depending on the nature of your request, the legal basis is Article 6(1)(b) GDPR where processing is necessary in connection with a contract or pre-contractual measures, or Article 6(1)(f) GDPR based on our legitimate interest in responding to business and technical enquiries.

We retain correspondence for as long as necessary to handle the request and for any subsequent statutory retention period or limitation period that may apply.

7. Links to external websites and services

The Website may contain links to external websites, including the AspenTech Support Center, product pages, downloads, customer portals or third-party resources.

When you follow an external link, you leave this Website. The relevant third party is responsible for processing your personal data on its website or service. Please review that provider’s privacy notice before providing personal data.

8. Recipients of personal data

We may disclose personal data only where necessary for the purposes described in this notice, including to:

• hosting, infrastructure, security and technical-maintenance providers;
• AspenTech group companies where required for Website operation, support, security or administration;
• professional advisers, such as legal advisers or auditors, where necessary; and
• public authorities, courts or other recipients where disclosure is required by law or necessary to establish, exercise or defend legal claims.

9. International data transfers

AspenTech operates internationally. Where personal data is transferred to recipients outside the European Economic Area, including to group companies or service providers in the United States or other jurisdictions, we ensure that an appropriate transfer mechanism is in place.

Such safeguards may include an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses, or another valid transfer mechanism under applicable data-protection law.

You may request further information about the applicable safeguards by contacting us using the details in Section 1.

10. Retention

We retain personal data only for as long as necessary for the relevant purpose, including to operate and secure the Website, respond to enquiries, comply with legal obligations, and establish, exercise or defend legal claims.

The applicable retention periods are determined by the nature of the data, the purpose of processing, statutory retention obligations and applicable limitation periods.

11. Your rights

Subject to the requirements and limitations of applicable law, you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• receive your personal data in a portable format, where applicable;
• object to processing based on legitimate interests;
• withdraw consent at any time, where processing is based on consent; and
• lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights, contact us at AT-Privacy.Information@emerson.com. AspenTech also publishes the following contact for data-subject access requests by non-job applicants: csar@aspentech.com.

You may lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

For AspenTech GmbH, the competent supervisory authority is generally:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Telephone: +49 (0) 211 38424-0

12. Automated decision-making

We do not use personal data collected through this Website to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

13. Changes to this Privacy Notice

We may update this Privacy Notice where necessary to reflect changes to the Website, the technologies used, applicable law or our processing practices.