Data protection

[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Einstellungen anpassen”/]

Information on the collection of personal data and contact details of the controller
Data collection when visiting our website
Making contact
Cookies
Data processing for order processing
Data processing when opening a customer account and for contract processing
Comments function
Use of your data for direct advertising
Use of social media: Video
Online marketing
Web analysis services
Tools and other
Cookies and reports on access figures
Cookie consent with Borlabs Cookie
Rights of the data subject
Duration of storage of personal data

1. Information on the collection of personal data and contact details of the controller

1.1 Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data is basically all data with which you can be personally identified.

1.2 The controller responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is

Stephan Goldmann
Agricolastr. 53a
80686 Munich
Munich, Germany
Phone: 49 177/608 50 17
E-mail: stephan@goldmann.de.

1.3 To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data collection when visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called “server log files”). The following data, which is technically necessary for us, is collected:

The website we visited
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Operating system used
Browser used
IP address used (if applicable: in anonymised form)

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

3. Making contact

If you contact us using the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us.

The data is used exclusively for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected and provided there are no statutory retention obligations to the contrary. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

4. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user’s end device. When a user accesses a website, a cookie may be stored on the user’s operating system. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR also lies in the above-mentioned purposes.

In addition, our website may use cookies that enable an analysis of the surfing behaviour of users (so-called third party cookies). Further information on the scope, purpose, legal basis and objection options can be found in the relevant sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, you may no longer be able to use all the functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings.

You can find help on the settings in the respective help menu of your browser or under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https: //support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http: //support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https: //support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https: //help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted again after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

You can also individually regulate or completely reject cookies here:

[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Einstellungen anpassen”/]

5. Data processing for order processing

5.1 If you wish to place an order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to fulfil your order.

In some cases, we work together with external service providers to process your order. For this purpose, we must pass on the personal data required for this.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of payments, we pass on your data to the commissioned credit institution as required. If we use payment service providers, you will also be informed of this below.
The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR.

5.2 Use of payment service providers

– PayPal
If you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, payment is processed via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
We pass on your personal data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR to the extent necessary. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR due to PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
Which other data is collected by PayPal can be found in PayPal’s privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.

6. Data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 para. 1 lit. b GDPR. The scope of the data can be seen from the input form. The data you enter will be stored and used by us to process the contract.
You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to retention periods under tax and commercial law and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

7. Comment function

If you use the comment function on our website, information about the time the comment was created and the commentator name you have chosen will be saved and published on the website in addition to the content of your comment. Your IP address is also logged and stored.
The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or publishes illegal content by posting a comment. Your email address is required in order to contact you if a third party should object to your published content as unlawful. We reserve the right to delete comments if they are objected to by third parties as unlawful.

8. Use of your data for direct advertising

8.1 Newsletter

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us. Only your email address is mandatory. If you make further voluntary entries, these will only be used to address you personally.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 para. 1 lit. a GDPR if the user has given consent. We obtain this consent by sending you a confirmation email containing a confirmation link after you have registered for the newsletter. If you click on this link, you also give your consent to receive the newsletter.
When you register for the newsletter, we store your IP address and the date and time of registration. The purpose of this storage is to be able to trace any possible misuse of your e-mail address.

We use the data collected by us when you register for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose. This also enables you to withdraw your consent to the storage of the personal data collected during the registration process.

8.2 Newsletter dispatch via MailChimp

We send our newsletter via The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/; hereinafter referred to as “Mailchimp”).
We pass on the data you enter when registering for the newsletter to Mailchimp in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in using an effective, secure and user-friendly newsletter system.
MailChimp uses this data to send the newsletter to you on our behalf and to statistically analyse the newsletter on our behalf. For this purpose, the emails contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. In this way, it is possible to track whether a newsletter message has been opened and which links have been clicked on. MailChimp thus automatically generates general, non-personal statistics on the response behaviour to newsletters.
We also have a legitimate interest in the statistical evaluation of newsletters in order to optimise our advertising communication. For this purpose, the web beacons are used in accordance with Art. 6 para. 1 lit f. GDPR (e.g. email address, time of access, IP address, browser type and operating system) and processed. This data can be used to identify the individual newsletter recipient. This data is processed by Mailchimp for the automated creation of statistics, which can be used to recognise whether a particular recipient has opened a newsletter message.
To deactivate this data analysis, you must unsubscribe from the newsletter.

It is also possible for MailChimp to use the data itself in accordance with Art. 6 para. 1 lit. f GDPR in order to determine the countries from which the recipients of the newsletter come for its own legitimate interest in the needs-based design and optimisation of the service or for market research purposes.
However, Mailchimp does not use your data itself for the purpose of contacting you or pass it on to third parties.
As a rule, your data is transferred to a MailChimp server in the USA and stored there. To protect your data in the USA, an order processing contract has been concluded with MailChimp on the basis of the standard contractual clauses of the European Commission. This data processing contract can be viewed at the following Internet address:
http://mailchimp.com/legal/forms/data-processing-agreement/.

MailChimp’s privacy policy can be viewed here:
https://mailchimp.com/legal/privacy/

9. Use of social media: Video

9.1 Use of Vimeo videos

On our website, we integrate plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
If a page of our website with such a plugin is accessed, the browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. At the same time, Vimeo receives the information that your browser has accessed the corresponding page (including your IP address). This happens even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information is transmitted directly to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. As soon as you interact with one of the plugins (e.g. by clicking on the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.

This data processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR, namely your express consent.

To prevent the direct assignment of data to your Vimeo account, you must log out of Vimeo before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights in this regard and setting options to protect your privacy can be found in Vimeo’s data protection information: http://vimeo.com/privacy

The Google Analytics tracking tool is automatically integrated into videos from Vimeo that are embedded on this website. This is Vimeo’s own tracking tool, which we have no access to and which cannot be influenced by our website. Google Analytics uses “cookies” for tracking. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

This processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your express consent.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. details can be found here: https://vimeo.com/privacy

9.2 Use of YouTube videos

On this website, we use the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the extended data protection mode, which, according to the provider, only starts storing user information when the video(s) is/are played. When you start playing embedded YouTube videos, the provider “YouTube” uses cookies to collect information about your user behaviour. according to “Youtube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f GDPR on the basis of Google’s legitimate interests in the display of personalised advertising, market research and/or the needs-based design of a website, as well as our legitimate interest in the integration of videos in accordance with Art. 6 para. 1 lit. f GDPR in the evaluation of user behaviour, the design of our website in accordance with user interests and the exploitation of the financial potential of our website.

You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Regardless of whether the embedded videos are played, a connection to the Google “DoubleClick” network is established each time this website is accessed, which may trigger further data processing operations without our influence.

Data may also be transmitted to the servers of Google LLC
of Google LLC. in the USA. Further information on data protection at
“YouTube” can be found in the provider’s privacy policy at
https://policies.google.com/privacy?hl=de
Settings for personalised advertising are possible at
https://adssettings.google.com/authenticated
As a subsidiary of Google, data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

10. Online marketing

10.1 Google AdSense

We use Google AdSense on our website, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called “DoubleClick DART cookies” (“cookies”), text files that are stored on your computer and enable your use of the website to be analysed. In addition, so-called “web beacons” (small invisible graphics) are also used, which, for example, record visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transferred to a Google server and stored there, whereby a transfer to the USA is also possible.

The information obtained in this way is used by Google to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

The legal basis is Art. 6 para. 1 lit. a GDPR, namely your express consent.

You can permanently deactivate cookies by setting your browser accordingly or download and install the browser plug-in available at the following link
http://www.google.com/settings/ads/plugin?hl=de

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ andhttps://privacy.google.com/businesses/gdprcontrollerterms/sccs/. You can find Google’s privacy policy here: http: //www.google.de/policies/privacy/
Certain functions of this website may then not be usable or may only be usable to a limited extent.

10.2 Use of affiliate programmes

– Amazon affiliate programme (AmazonPartnerNet)

We participate in the affiliate programme “AmazonPartnerNet” (Amazon EU S.a.r.l., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter referred to as “Amazon”)).
We have placed adverts on our website as links that lead to offers on various Amazon websites.
For its part, Amazon uses cookies in order to be able to trace the origin of orders generated via our links. By using cookies, Amazon can recognise, among other things, that you have clicked on the partner link on our website and thus reached Amazon. We need this information to process payments between us and Amazon. If this information also contains personal data, this data is processed to protect our legitimate financial interest in receiving commission payments from Amazon. The legal basis for this is Art. 6 para. 1 lit. a GDPR, namely your express consent.
Details on the use of data by Amazon can be found in the Amazon.de privacy policy at
http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

You can block cookies by changing your browser settings.
You can also deactivate interest-based ads on Amazon via the link http://www.amazon.de/gp/dra/info

11. Web analysis services

Google Analytics 4

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as “GA4”).

Google Analytics uses “cookies”. These are small text files that are stored on your end device and enable your use of the website to be analysed. The information generated in this way about your use of this website (including the shortened IP address) is transferred to a Google server, where it is stored and processed, whereby a transfer to the USA is possible. The IP addresses are anonymised by default. For IPv4 addresses, the last octet and for IPv6 addresses the last 80 bits in the memory are set to zero and thus “anonymised”. A personal reference is excluded. A transfer to servers of Google LLC based in the USA is not excluded.

During your visit to the website, GA4 records your user behaviour in the form of “events”, such as Page views, first visit to the website, start of session, your “click path”, interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, adverts viewed/clicked on, language setting. GA4 also records your approximate location (region), your IP address (in anonymised form), technical information about your browser and the end devices you use (e.g. language setting, screen resolution), your internet provider, the referrer URL (via which website/advertising medium you came to this website).

Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Your anonymised IP address collected in this context will not be merged with other Google data.

The data collected in this context is stored for fourteen months.

The legal basis for the data processing described here and the setting of cookies is your express consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time with effect for the future, for example by deactivating this Google service via the cookie consent tool in which you have already given your consent.

Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of cancellation, please deactivate this service using the “cookie consent tool” provided on the website.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
We have also concluded an order processing contract with Google.
Further information on data protection by Google Analytics 4 can be found on the following websites
https://policies.google.com/technologies/partner-sites
and
https:// policies.google.com/privacy?hl=de&gl=de

Demographic characteristics
The “demographic characteristics” function of GA4 can generate statistics that can be used to make statements about the age, gender and interests of site visitors. For this purpose, advertising and information from third-party providers are analysed and target groups for certain marketing activities are identified. However, this does not involve any personal allocation of data. The data is deleted after two months.

UserIDs

If we use the extended “UserIDs” function, your activities (including conversions) can be analysed across devices. In this case, the analysis is not pseudonymised.
This is possible if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, you have set up an account on this website and log in with this account on different devices.

Google Signals

If we use the “Google Signals” extension, we can generate cross-device reports on your usage behaviour. However, we only receive statistics and no personal data. This analysis is only possible if you have activated personalised ads in your Google account and linked your end devices to a Google account. You must also have given your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR. Cross-device analysis can be prevented by deactivating the “personalised advertising” function in your Google account. Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de

12. Tools and miscellaneous

Google Maps
We use “Google Maps” (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is used to display interactive maps and create directions. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google. When you access a web page on our website that contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data
– Date and time of the visit to the website in question,
– Internet address or URL of the website accessed,
– IP address, (start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this. If you are logged in to Google, your data will be assigned directly to your Google account. If you do not want this allocation, you must log out of Google. Google stores your data (including that of users who are not logged in) as usage profiles and analyses them. Such an evaluation is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your express consent.

If you do not want Google to collect, process or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information(https://policies.google.com/privacy?hl=de).

Google’s terms of use can be accessed here:
https://policies.google.com/terms?hl=de&gl=de
the terms of use for Google Maps can be accessed here:
https://www.google.com/intl/de_US/help/terms_maps.html
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ as well as in Google’s privacy policy: https://www.google.com/policies/privacy/
Further information on data protection can be found here
http://www.google.de/intl/de/policies/privacy/

13. Cookies and reports on access figures

We use “session cookies” from VG Wort, Munich, to measure access to texts in order to record the probability of copying. Session cookies are small units of information that a provider stores in the working memory of the visitor’s computer. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. Session cookies cannot store any other data. These measurements are carried out by Kantar Germany GmbH using the Scalable Central Measurement Method (SZM). They help to determine the likelihood of individual texts being copied for the purpose of compensating authors and publishers for their legal claims. We do not collect any personal data via cookies.

Many of our pages are equipped with JavaScript calls, which we use to report access to the collecting society Verwertungsgesellschaft Wort (VG Wort).

It is also possible to use our website without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

13.1. privacy policy for the use of the Scalable Centralised Measurement System

Our website and our mobile website use the “Scalable Central Measurement Method” (SZM) of Kantar Germany GmbH to determine statistical parameters for determining the copy probability of texts.

Anonymous measurement values are collected. To recognise computer systems, the access number measurement alternatively uses a session cookie or a signature that is created from various automatically transmitted information from your browser. IP addresses are only processed in anonymised form.

The procedure was developed with data protection in mind. The sole aim of the procedure is to determine the copy probability of individual texts.

At no time are individual users identified. Your identity is always protected. You will not receive any advertising via the system.

14. Cookie consent with Borlabs Cookie

Our website uses Borlabs Cookie’s cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection-compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

14. Rights of the data subject

14.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

– Right to information in accordance with Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved. meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;

– Right to rectification pursuant to Art. 16 GDPR:
You have the right to obtain without undue delay the rectification of inaccurate data concerning you and/or the completion of your incomplete data stored by us; the rectification or completion must be carried out without undue delay.

– Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you dispute, is being verified, if you refuse to have your data erased due to unauthorised data processing and instead request the restriction of the processing of your data, if you require your data for the establishment, exercise or defence of legal claims after we no longer require this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

– Right to erasure pursuant to Art. 17 GDPR:
You have the right to obtain the erasure of your personal data without undue delay if the requirements of Art. 17 para. 1 GDPR are met. However, this right to erasure does not exist in particular – not conclusively – if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims

– Right to information in accordance with Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

– Right to data portability in accordance with Art. 20 GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, where technically feasible;

– Right to cancellation pursuant to Art. 7 para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.
You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

– Right to lodge a complaint pursuant to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

14.2 Right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up your interests.
If you make use of this right to object, we will stop processing your data unless there are demonstrably overriding compelling legitimate grounds for termination or if further processing serves the exercise or defence of legal claims.

15. Duration of storage of personal data

The duration of the storage of personal data depends on the statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required for the fulfilment or initiation of a contract and/or if we no longer have a legitimate interest in continuing to store it.