Thank you for visiting our website. In the following, we would like to inform you about the handling of your data according to Art. 13 of the General Data Protection Regulation (GDPR).
Responsible for the data processing presented below is the body named in the legal notice.
When you visit our website, so-called usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our website. This data record consists of
- the name and address of the requested content,
- the data and time of the request,
- the amount of data transferred,
- the access status (content transferred, content not found),
- the description of the web browser and operating system used,
- the referral link, which indicates the page from which you came to ours.
The legal basis of the processing of usage data is Art. 6 (1), sentence 1 (f) GDPR. The processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimized display.
Storage of IP address for security purposes
In addition, we store the full IP address transmitted by your web browser for a strictly specific purpose for a period of seven days, in the legitimate interest of being able to detect, limit and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. The legal basis for the processing is Art. 6 (1), sentence 1 (f) GDPR.
In order to protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encrypted procedure on our websites. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the fact that the lock symbol is closed in the status bar of your browser and the address line begins with https://.
Cookies are small text files that are stored on your terminal device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.
We do not use these necessary cookies for analytics, tracking or advertising purposes.
In some cases, these cookies only contain information about certain settings and cannot be connected to a person. They may also be necessary to enable user guidance, security and implementation of the site.
We use these cookies on the basis of Art. 6 (1), sentence 1 (f) GDPR.
You can set your browser to inform you about the placement of cookies. In addition, you can delete them at any time via the appropriate browser setting and prevent the setting of new cookies. Please note that our websites may then not be fully displayed and some functions may no longer be technically available.
|Designation cookie/purpose||Storage period||Adequate level of data privacy protection|
|Borlabs Cookie||1 year||Saves the settings of the visitors selected in the cookie box of Borlabs Cookie.|
On our websites, we use a consent-management-platform (consent or cookie banner). The processing in connection with the use of the consent-management-platform and the logging of the settings you have made is based on Art. 6 (1), sentence 1 (f) GDPR, in our legitimate interest to play out our content according to your preferences and to be able to prove your given consent(s). The settings you have made, the consent you have given and parts of your usage data are stored in a cookie. This is retained for subsequent page requests and your consents can still be traced. You can find more information on this in the section “required cookies”.
The provider of the consent-management-platform acts for us as a strictly instruction-bound service provider (data processor). A data processing agreement according to Art. 28 GDPR was agreed.
CRAZY EGG – ANALYSIS OF THE MOUSE POINTER MOVEMENT
- IP address,
- Screen resolution, device type, operating system, browser version,
- Geographic location (country only),
- Set language,
- Mouse movements, keystrokes,
- Referral URL and domain, Web pages visited and the date and time the Web pages were visited.
Crazy Egg supports us as a processor according to Art. 28 DSGVO. The data processing may also take place outside the EU or the EEA (in particular in the USA).
The data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.
|Provider||Storage period||Adequate level of data privacy protection||Possibility to object|
|Crazy Egg||Transfers to third countries (in particular the USA) are made on the basis of the agreed standard contractual clauses.||If you wish to withdraw your consent, please click here and make the appropriate setting via our banner.|
For demand-oriented design of our websites, we use the web analysis tool “Google Analytics”. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your terminal device and read by us. Additionally, it is possible that we retrieve recognition features for your browser or terminal device (e.g. a so-called browser fingerprint). In this way, we are able to recognize returning visitors and count them as such.
In addition, we use the following functions as part of visitor measurement:
- We enrich the pseudonymous data with additional data provided to us by third-party providers. In this way, we are able to record demographic characteristics of our visitors, e.g. statement about age, gender and place of residence.
- We use a recognition method that allows us to capture and subsequently evaluate the mouse cursor movement of our visitors.
- We create exploratory click paths and browsing behaviour analysis using contextual data, including usage history on other sites with cookies also enabled.
As part of the service of Google Analytics, Google Ireland Limited supports us as a data processor according to Art. 28 GDPR. The data processing may also take place by Google outside the EU or the EEA (in particular in the USA). With regard to Google, no adequate level of data protection can be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to file an appeal. Please keep this in mind if you decide to give your consent to our use of Google Analytics.
The data processing is based on your consent, provided that you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 (1) (a) GDPR.
You can revoke your consent at any time. For this purpose, please follow this link and make the appropriate settings via our banner.
|Provider||Maximum storage time||Adequate level of data protection||Revocation of consent|
|2 months||Processing also possible outside the EU/EEA. No adequate level of data protection. The transfer takes place on the basis of Art. 49 (1) (a) GDPR.||If you like to revoke your consent, please click here and make the appropriate setting via our banner.|
On our websites, we embed videos that are not stored on our servers. However, for data protection reasons – when you call up our websites – no content from the third-party provider is yet loaded and the third-party provider does not receive any information.
Content of the third-party provider will only be loaded when you give your consent via our banner. This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. Your consent includes that content of the third-party provider is loaded.
The embedding is based on your consent, provided that you have given your consent via our banner. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA (in particular the USA). There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having any legal recourse. If we use providers in insecure third countries and you consent, the transfer to an insecure third country is based on Art. 49 (1) (a) GDPR.
|Provider||Maximum storage time||Adequate level of data protection||Revocation of consent|
|Google (YouTube)||6 months||Processing also possible outside the EU/EEA. No adequate level of data protection. The transfer takes place on the basis of Art. 49 (1) (a) GDPR.||If you like to revoke your consent, please click here and make the appropriate setting via our banner.|
You have the possibility to contact us via our contact form. To use our contact form, we first need the data marked as mandatory fields from you.
We use this data on the basis of Art. 6 (1), sentence 1 (f) GDPR in order to answer your request.
In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not mandatory for contacting us. We process your voluntary information based on your consent.
Your data will only be processed to respond to your inquiry. We will delete your data if it is no longer required and there are no legal retention obligations to the contrary. As a rule, this is the case xx days after processing the request.
Insofar as your data transmitted via the contact form is processed on the basis of Art. 6 (1), sentence 1 (f) GDPR, you can object to the processing at any time. Moreover, you can revoke your consent to the processing of voluntary data at any time. To do so, please contact the e-mail address stated in the legal notice.
Input forms for the provision of documents (white papers, studies, etc.)
You can download documents, whitepapers, and similar content at various points on our websites, if you provide us with your contact details in return. The processed data results from the information you provide via the respective input form.
We will then use the stored data to contact you by e-mail or phone (if a phone number is provided).
We will only contact you for advertising purposes if you have given us your express consent to do so. After placing your order, you will receive a confirmation e-mail to the e-mail address you provided (so-called double opt-in). You can revoke your consent at any time. An uncomplicated way to revoke your consent is, for example, via the link to unsubscribe. Alternatively, please contact the authority mentioned in the legal notice.
In context of the order, we store additional data beyond the data already mentioned, insofar as this is necessary for us to prove that you have given your consent. This may include the storage of the full IP address at the time of the order or confirmation, as well as a copy of the confirmation e-mail sent by us. The corresponding data processing takes place on the basis of Art. 6 (1), sentence 1 (f) GDPR and in the legitimate interest of being able to account for the lawfulness of the advertising approach.
If we receive your e-mail address in connection with the sale of a good or service, we will use the address for direct advertising for our own similar goods or services, unless you have objected to the processing. When collecting the address and each time it is used, we clearly indicate that you can object to the use at any time without incurring any costs other than the transmission costs according to the basic rates.
The use is based on Art. 6 (1), sentence 1 (f) GDPR and in the interest of promoting the sale of our goods or services. An uncomplicated way to object is provided, for example, via the unsubscribe link in every e-mail.
Integration of other technical third-party content and functions
We use the technical functions and content of third-party providers mentioned below to present our websites.
A call to our websites leads to the content of the third-party provider being loaded, which provides these functions and content. Through this, the third-party provider receives the information that you have called up our site as well as the usage data technically required in this context.
We have no influence on the further data processing by the third-party provider.
The data processing is based on you consent, provided that you have previously given your consent via our banner solution.
Please note that the use of third-party content and features may result in your data being processed outside the EU or EEA (in particular in the USA). There is a risk that authorities may access the data for security and monitoring purposes without you being informed of having legal recourse. If we use providers in unsafe third countries and you consent, the transfer to an unsafe third country takes place on the basis of Art. 49 (1) (a) GDPR.
|Provider||Technical function or content||Transfer to third countries as specified by the provider and assurance of an adequate level of data protection||Revocation of consent|
|Google Tag Manager||Processing also possible outside the EU/EEA. No adequate level of data protection. The transfer takes place on the basis of Art. 49 (1) (a) GDPR.||If you like to revoke your consent, please click here and make the appropriate setting via our banner.|
Unless we have not already informed you in detail about the storage time, we delete personal data when they are no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) retention reasons prevent deletion.
Other data processors
We share your data with data providers who support us in the operation of our websites and related processes as part of order processing pursuant to Art. 28 GDPR. These are, for instance, hosting service providers. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.
|Data processor||Purpose||Adequate level of data protection|
|Example provider (Germany)||Webhosting and support||Processing only within EU/EWR|
Your rights as a data subject
When processing your personal data, the GDPR grants you certain rights as a data subject:
Right of access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 of the GDPR.
Right to rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete data without delay.
Right to erasure (Art. 17 GDPR)
You have the right to request that personal data concerning you be deleted without undue delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e. g. if you have objected to the processing, for the duration of the review by the controller.
Right to data portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
Right to revocation (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
Right to object (Art. 21 GDPR)
If data is collected on the basis of Art. 6 (1), sentence 1 (f) GDPR (data processing for the protection of legitimate interests) or on the basis of Art. 6 (1), sentence 1 (e) GDPR (data processing for the protection of public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to lodge complaint with a supervisory authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
Assertion of your rights
Unless otherwise described above, please contact the authority mentioned in the imprint to assert your data subject rights.
Contact details of the data protection officer
Please contact our external data protection officer to get more information on the subject of data protection under the following contact details:
If you contact our data protection officer, please also indicate the responsible authority named in the legal notice.