Privacy Policy
General Information
This section provides a brief overview of how your personal data is handled when you visit our website. Personal data refers to any information that can be used to identify you directly. For detailed information on our data protection practices, please refer to our full privacy policy available below.
Data Collection on Our Website
Who is responsible for data collection?
The website operator is responsible for processing data collected on this website. You can find their contact information in the section “Responsible Party” in this privacy policy.
How do we collect your data?
We collect data in two ways:
- Directly from you: When you share information with us, such as through a contact form.
- Automatically: Through our IT systems, when you visit the site. This includes technical data like your internet browser, operating system, or the time you accessed the page. This data is collected as soon as you enter the website.
Why do we use your data?
Some data is necessary to ensure the website functions correctly, while other data is used to analyze your user behavior.
Your Rights Regarding Your Data
You have the right to request information about your personal data, including its origin, recipients, and purpose of processing. You can also request corrections or deletions of your data, and withdraw your consent to data processing at any time. Additionally, you may request a restriction on the processing of your personal data under certain circumstances. If you believe your rights have been violated, you have the right to file a complaint with the relevant supervisory authority.
For any questions regarding data protection, feel free to contact us.
Analysis Tools & Third-Party Tools
When visiting our website, your browsing behavior may be analyzed for statistical purposes. This is primarily done through analytics tools, detailed information about which can be found in the following sections of our privacy policy.
Hosting
External Hosting
Our website is hosted by a third-party provider. Personal data collected on the site, including IP addresses, contact requests, communication data, contract details, and other data, is stored on the servers of this hosting provider.
This external hosting is necessary to fulfill the contract with our potential and existing customers (Article 6(1)(b) GDPR) and ensures the secure, fast, and efficient operation of our online services through a professional provider (Article 6(1)(f) GDPR). If you have provided consent, the processing will occur based on Article 6(1)(a) GDPR and Section 25(1) TDDG, which covers the storage of cookies or access to information on your device (e.g., device fingerprinting). Consent can be withdrawn at any time.
The hosting provider processes your data only as required to fulfill their service obligations and according to our instructions.
Legal Basis for Data Processing
If you have given consent for data processing, we will process your data based on Article 6(1)(a) GDPR. In cases where sensitive data is processed, such as health-related information, we will process this data in accordance with Article 9(2)(a) GDPR. If you consent to the transfer of personal data to countries outside the European Economic Area (EEA), processing will also be done according to Article 49(1)(a) GDPR. For consent regarding cookies or device access, processing is based on Section 25(1) TDDDG.
If your data is necessary for fulfilling a contract or pre-contractual steps, processing will take place under Article 6(1)(b) GDPR. We may also process your data to comply with legal obligations as outlined in Article 6(1)(c) GDPR. Additionally, we may process your data based on our legitimate interests under Article 6(1)(f) GDPR. Each section of our privacy policy provides the legal basis for data processing in specific situations.
Recipients of Personal Data
As part of our business operations, we collaborate with various external entities, and in some instances, this requires the sharing of personal data. We only disclose personal data to third parties when it is necessary to fulfill a contract, when we are legally obligated to do so (e.g., disclosing data to tax authorities), or when we have a legitimate interest in sharing the data under Article 6(1)(f) of the GDPR. Additionally, if we use third-party service providers, we only share personal data based on a valid contract for data processing. In cases of joint data processing, a joint processing agreement will be established.
Revoking Your Consent to Data Processing
Many data processing operations require your explicit consent. You can withdraw your consent at any time. The legality of data processing carried out prior to the revocation remains unaffected by your decision.
Right to Object to Data Processing in Specific Cases and Direct Marketing (Article 21 GDPR)
If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right to object to the processing of your personal data for reasons related to your particular situation, including profiling based on these provisions. The legal basis for any processing is provided in this privacy policy. If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing is necessary for asserting, exercising, or defending legal claims (objection under Article 21(1) GDPR).
If your personal data is being processed for direct marketing purposes, you can object at any time to the use of your data for such marketing, including profiling related to marketing. If you object, your data will no longer be used for direct marketing (objection under Article 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority, particularly in the country of your residence, place of work, or the location of the alleged violation. This right to lodge a complaint does not affect any other administrative or legal remedies available.
Right to Data Portability
You have the right to request that data we process automatically based on your consent or to fulfill a contract be provided to you or transferred to a third party in a common, machine-readable format. If you request that the data be transferred directly to another responsible party, this will be done only if technically feasible.
Right to Information, Correction, and Deletion
Under applicable legal provisions, you have the right to obtain free information at any time about your stored personal data, its source, recipient, and the purpose of its processing, as well as the right to correct or delete this data. You can contact us at any time with any questions related to this or regarding personal data.
Right to Restriction of Processing
You have the right to request a restriction on the processing of your personal data. You can contact us to do so. The right to restrict processing applies in the following cases:
- If you dispute the accuracy of your personal data, we typically need time to verify it. During this period, you can request a restriction on the processing of your data.
- If the processing of your personal data is unlawful, you can request a restriction instead of deletion.
- If we no longer need your personal data but you require it to exercise, defend, or assert legal claims, you can request that processing be restricted instead of deleted.
- If you have objected to the processing based on Article 21(1) GDPR, we need to balance your interests with ours. During this process, you can request a restriction on the processing of your personal data.
If the processing of your data is restricted, it may only be processed with your consent or for legal claims, protection of another person’s rights, or important public interests.
SSL or TLS Encryption
To ensure the security of your data and protect the transmission of confidential information, such as orders or inquiries you send to us, our website uses SSL or TLS encryption. You can identify an encrypted connection by the “https://” prefix in the address bar and the lock symbol in your browser.
If SSL or TLS encryption is enabled, the data you send cannot be accessed by third parties.
Objection to Unsolicited Advertising Emails
The use of contact information published as part of our legal obligation for sending unsolicited advertising materials is strictly prohibited. We reserve the right to take legal action against any unsolicited advertisements, such as spam emails.
Cookie Policy
Our website uses “cookies”—small data files that are stored on your device. Cookies do not harm your device. They can be temporary (session cookies) or permanent (persistent cookies). Session cookies are automatically deleted at the end of your session, while persistent cookies remain until manually deleted or automatically removed by your browser.
Cookies may come from us (first-party cookies) or third parties (third-party cookies). Third-party cookies enable us to integrate certain services, like payment processing.
Cookies serve various purposes:
- Necessary Cookies: These are required for basic website functions, like enabling the shopping cart or displaying videos.
- Analysis and Advertising Cookies: These help evaluate user behavior and serve marketing purposes.
Cookies essential for communication, providing requested functions (like the shopping cart), or optimizing the site are stored based on Article 6(1)(f) GDPR. If we’ve asked for consent to store cookies or use similar technologies, processing will occur based on your consent (Article 6(1)(a) GDPR, Section 25(1) TDDG).
You can configure your browser to be notified when cookies are being set, accept cookies for specific cases, reject certain cookies, or automatically delete them after your session. Note that deactivating cookies may affect the functionality of the website.
Borlabs Cookie Consent
Our website uses Borlabs Cookie technology to obtain and document your consent for storing certain cookies in your browser in compliance with data protection regulations.
A Borlabs cookie is stored in your browser when you visit our website, saving the consent or withdrawal of your consent. This data is not shared with Borlabs. The data will be stored until you ask us to delete it or until the purpose for storage no longer applies. Legal retention periods are unaffected. For more information, visit Borlabs’ privacy policy at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
The legal basis for this process is Article 6(1)(c) GDPR, as it ensures compliance with the law regarding cookie consent.