Privacy Policy

1. Introduction and Controller

This Privacy Policy clarifies the nature, scope, and purpose of the processing of personal data (hereinafter briefly "data") within our online offering and the associated websites, functions, and content (hereinafter collectively referred to as "online offering"). The controller in terms of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person (e.g., name, email address, IP address).

Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means (e.g., collection, recording, storage, alteration, transmission).

Data Subject: Any identified or identifiable natural person whose personal data is processed by the controller.

3. Types of Data Processed

In principle, we process the following types of data within our online offering:

• Contact data (e.g., email addresses, phone numbers), provided you voluntarily make them available to us (e.g., by email).
• Usage data (e.g., visited websites, access times, device-related information), which are automatically collected when you use our online offering.
• Meta/communication data (e.g., IP addresses), which are technically generated with every access to websites.

4. Purposes of Processing

We process your data for the following purposes:

• To provide the online offering and its content.
• To respond to contact inquiries and communicate with users.
• To ensure the security and stability of our online offering.

5. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

• Art. 6 para. 1 lit. b GDPR: For answering your inquiries or for carrying out pre-contractual measures, for example, if you contact us by email.
• Art. 6 para. 1 lit. f GDPR: For safeguarding our legitimate interests, which lie in the operation, analysis, and optimization of our online offering and ensuring system security.

6. Data Deletion and Storage Period

The data processed by us will be deleted or their processing restricted as soon as the purposes for which they were collected cease to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject.

7. Your Rights as a Data Subject

You have the right at any time to:

• Right of Access (Art. 15 GDPR): You can request information about your personal data processed by us.
• Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate or completion of your personal data stored by us.
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
• Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of the processing of your personal data.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
• Right to Object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR.
• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

8. Hosting via Hetzner

We host our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter "Hetzner").

When you visit our website, Hetzner collects various log files including your IP addresses. For details, please refer to the Hetzner privacy policy: Hetzner Privacy Policy.

The use of Hetzner is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable representation of our website. Insofar as a corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with Hetzner. This is a contract required by data protection law, which ensures that Hetzner processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

9. Web Analysis via Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can revoke your consent at any time via our Cookie Settings (CCM19 banner) with effect for the future.

Data transfer to the USA is based on the EU-U.S. Data Privacy Framework (DPF). Google LLC is certified under the DPF.

10. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements. The new Privacy Policy will then apply for your next visit.

11. Contact and Early Access via Google Forms

We use Google Forms, a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, to process contact requests and registrations for our Early Access Program.

When you click on the link to our registration or contact form, you will be redirected to a page hosted by Google. The data you enter in the form (e.g., your name, email address, and message) as well as technical data (such as your IP address and device information) will be processed and stored by Google on their servers.

The processing of this data is based on our legitimate interest in communicating with you and processing your request efficiently (Art. 6 para. 1 lit. f GDPR). If your request aims at concluding a contract or business relationship, the processing is based on Art. 6 para. 1 lit. b GDPR.

Data transfer to the USA is based on the EU-U.S. Data Privacy Framework (DPF). Google LLC is certified under the DPF. For more information on how Google handles your data, please refer to Google's privacy policy: Google Privacy Policy.

12. Consent Management with CCM19

To manage your cookie consents and to fulfill our legal obligations regarding data protection, we use the consent management tool "CCM19". This service is provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany.

CCM19 collects log file data and the consent status (given or withdrawn) of website visitors to document your choices and ensure that no cookies or tracking scripts are loaded before you have explicitly given your consent.

The legal basis for processing this data is the fulfillment of a legal obligation (Art. 6 para. 1 lit. c GDPR) and § 25 para. 2 No. 2 TDDDG, as we are legally required to obtain and document valid consent for the use of certain technologies. Your consent choices are stored in a technically necessary cookie in your browser so that you are not asked again on every page visit.