Privacy Policy
Introduction and Overview
We have written this privacy policy to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (hereinafter referred to as "data") we, as the controller – and the processors (e.g., providers) commissioned by us – process, will process in the future, and what legal options you have. The terms used are to be understood as gender-neutral.
In short: We provide you with comprehensive information about the data we process about you.
Privacy policies usually sound very technical and use legal jargon. This privacy policy, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. As far as it promotes transparency, technical terms are explained in a reader-friendly manner, links to further information are provided, and graphics are used. We inform you in clear and simple language that we only process personal data in the context of our business activities if there is a corresponding legal basis. This is certainly not possible if we provide explanations that are as concise, unclear and legally-technical as possible, as is often the standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one or two pieces of information that you did not already know.
If you still have any questions, please contact the responsible office mentioned below or in the imprint, follow the existing links and view further information on third-party websites. You will of course also find our contact details in the imprint.
Scope
This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information as defined in Art. 4 No. 1 GDPR, such as a person's name, email address and postal address. The processing of personal data ensures that we can offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:
- all online presences (websites, online stores) that we operate
- Social media presences and email communication
- mobile apps for smartphones and other devices
In short: The privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the channels mentioned. If we enter into legal relationships with you outside these channels, we will inform you separately if necessary.
Legal basis
In the following privacy policy, we will provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which allow us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.
We only process your data if at least one of the following conditions applies:
- Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data from a contact form.
- Contract (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase agreement with you, we need personal information in advance.
- Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
- Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.
Other conditions such as the performance of tasks carried out in the public interest and in the exercise of official authority and to protect vital interests do not usually occur with us. If such a legal basis should be relevant, it will be identified at the appropriate point.
In addition to the EU regulation, national laws also apply:
- In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), in short DSG.
- In Germany, the Federal Data Protection Act, in short BDSG, applies.
If further regional or national laws apply, we will inform you about this in the following sections.
Contact Details of the Owner
If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or office below:
Daniel Neu
Sperlingstraße 1, 86179 Augsburg, Germany
E-mail: info@positioneer.io
Imprint: https://www.Positioneer.ai/imprint/
Storage period
That we only store personal data for as long as is absolutely necessary to provide our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.
If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and to the extent that there is no obligation to store it.
We will inform you about the specific duration of the respective data processing further below, if we have further information on this.
Rights under the General Data Protection Regulation
In accordance with Articles 13, 14 GDPR, we inform you about the following rights to which you are entitled in order to ensure fair and transparent data processing:
- According to Article 15 GDPR, you have the right to information about whether we process data from you. If this is the case, you have the right to receive a copy of the data and to know the following information:
- for what purpose we carry out the processing;
- the categories, i.e. the types of data that are processed;
- who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
- how long the data will be stored;
- the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
- that you can complain to a supervisory authority (links to these authorities can be found below);
- the origin of the data if we have not collected it from you;
- whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.
- According to Article 16 GDPR, you have the right to rectification of the data, which means that we must correct data if you find errors.
- According to Article 17 GDPR, you have the right to erasure ("right to be forgotten"), which specifically means that you may request the erasure of your data.
- According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.
- According to Article 20 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
- According to Article 21 GDPR, you have the right to object, which, after enforcement, results in a change in processing.
- If the processing of your data is based on Article 6 para. 1 lit. e (public interest, exercise of official authority) or Article 6 para. 1 lit. f (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection.
- If data is used to carry out direct advertising, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.
- If data is used to carry out profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.
- According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (for example, profiling).
- According to Article 77 GDPR, you have the right to complain. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.
In short: You have rights – do not hesitate to contact the responsible office listed above!
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:
Bavaria Data Protection Authority
State Commissioner for Data Protection: Prof. Dr. Thomas Petri
Address: Wagmüllerstr. 18, 80538 Munich
Phone no.: 089/21 26 72-0
Email address: poststelle@datenschutz-bayern.de
Website: https://www.datenschutz-bayern.de/
Security of Data Processing
In order to protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In doing so, we make it as difficult as possible for third parties to infer personal information from our data.
Art. 25 GDPR speaks here of "data protection by design and by default" and means that you should always think about security both in software (e.g. forms) and hardware (e.g. access to the server room) and take appropriate measures. In the following, we will go into concrete measures, if necessary.
TLS Encryption with https
TLS, encryption and https sound very technical and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transmit data securely on the Internet.
This means that the complete transmission of all data from your browser to our web server is secure - no one can "eavesdrop".
We have therefore introduced an additional security layer and fulfill data protection through technical design (Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can recognize the use of this security of data transmission by the small lock symbol at the top left of the browser, to the left of the Internet address (e.g. examplepage.de) and the use of the https scheme (instead of http) as part of our Internet address.
If you would like to know more about encryption, we recommend the Google search for "Hypertext Transfer Protocol Secure wiki" to get good links to further information.
Communication
| Communication Summary Data subjects: All those who communicate with us by phone, email or online form Processed data: e.g. telephone number, name, email address, entered form data. You can find more details on this in the contact type used 欄 Purpose: Processing communication with customers, business partners, etc. Storage period: Duration of the business case and legal regulations ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
If you contact us and communicate by phone, email or online form, personal data may be processed.
The data is processed for the handling and processing of your question and the associated business transaction. The data will be stored for as long as necessary or as long as required by law.
Affected persons
All those who seek contact with us via the communication channels provided by us are affected by the processes mentioned.
Phone
If you call us, the call data is stored pseudonymized on the respective end device and at the telecommunications provider used. In addition, data such as name and telephone number can then be sent by email and stored to answer the request. The data will be deleted as soon as the business case has ended and legal requirements allow it.
If you communicate with us by email, data may be stored on the respective end device (computer, laptop, smartphone, ...) and data is stored on the email server. The data will be deleted as soon as the business case has ended and legal requirements allow it.
Online Forms
If you communicate with us using an online form, data is stored on our web server and may be forwarded to an email address of ours. The data will be deleted as soon as the business case has ended and legal requirements allow it.
Legal basis
The processing of the data is based on the following legal bases:
- Art. 6 para. 1 lit. a GDPR (consent): You give us your consent to store your data and continue to use it for purposes related to the business case;
- Art. 6 para. 1 lit. b GDPR (contract): It is necessary for the performance of a contract with you or a processor such as the telephone provider, or we need to process the data for pre-contractual activities, such as the preparation of an offer;
- Art. 6 para. 1 lit. f GDPR (legitimate interests): We want to conduct customer inquiries and business communication in a professional setting. This requires certain technical facilities such as email programs, exchange servers and mobile phone operators in order to operate communication efficiently.
Data Processing Agreement (DPA)
In this section, we would like to explain what a data processing agreement is and why it is needed. Because the word "data processing agreement" is quite a mouthful, we will often use the acronym DPA here in the text. Like most companies, we do not work alone, but also use the services of other companies or individuals. By involving various companies or service providers, it may be that we pass on personal data for processing. These partners then act as processors, with whom we conclude a contract, the so-called data processing agreement (DPA). The most important thing for you to know is that the processing of your personal data takes place exclusively according to our instructions and must be regulated by the DPA.
Who are data processors?
As a company and website owner, we are responsible for all data that we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or individual who processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, public authority, agency or other body which processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers or large companies such as Google or Microsoft.
To better understand the terminology, here is an overview of the three roles in the GDPR:
Data subject (you as a customer or interested party) → Controller (we as a company and client) → Processor (service provider such as web hoster or cloud provider)
Content of a data processing agreement
As already mentioned above, we have concluded a DPA with our partners who act as processors. This states, first and foremost, that the processor processes the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, but in this context the electronic conclusion of the contract is also considered "in writing". The processing of personal data only takes place on the basis of the contract. The contract must contain the following:
- Binding to us as the controller
- Obligations and rights of the controller
- Categories of data subjects
- Type of personal data
- Type and purpose of data processing
- Subject matter and duration of data processing
- Place of data processing
Furthermore, the contract contains all the obligations of the processor. The most important obligations are:
- to guarantee data security measures
- to take possible technical and organizational measures to protect the rights of the data subject
- to maintain a data processing register
- to cooperate with the data protection supervisory authority at its request
- to carry out a risk analysis with regard to the personal data received
- Sub-processors may only be commissioned with the written consent of the controller
You can see what such a DPA looks like in concrete terms, for example at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html. Here, a sample contract is presented.
Cookies
| Cookies Summary Data subjects: Visitors to the website 欄 Purpose: depending on the respective cookie. You can find more details on this further below or from the manufacturer of the software that sets the cookie. Processed data: Depending on the cookie used. You can find more details on this further below or from the manufacturer of the software that sets the cookie. Storage period: depending on the cookie, can vary from hours to years ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit.f GDPR (legitimate interests) |
What are cookies?
Our website uses HTTP cookies to store user-specific data.
In the following, we will explain what cookies are and why they are used so that you can better understand the following privacy policy.
Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing cannot be denied: cookies are really useful helpers. Almost all websites use cookies. More specifically, they are HTTP cookies, as there are also other cookies for other application areas. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data from you, such as language or personal page settings. When you visit our site again, your browser transmits the "user-related&qout; information back to our site. Thanks to the cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also cannot access information from your PC.
For example, cookie data can look like this:
Name: _ga
Value: GA1.2.1326744211.152312695935-9
Purpose: Differentiation of website visitors
Expiration date: after 2 years
These minimum sizes should be supported by a browser:
- At least 4096 bytes per cookie
- At least 50 cookies per domain
- At least 3000 cookies in total
What types of cookies are there?
The question of which cookies we use in particular depends on the services used and will be clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.
You can distinguish between 4 types of cookies:
Essential Cookies
These cookies are necessary to ensure the basic functions of the website. For example, these cookies are needed if a user puts a product in the shopping cart, then surfs on other pages and only goes to the checkout later. These cookies ensure that the shopping cart is not deleted, even if the user closes their browser window.
Functional Cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website in different browsers.
Targeted Cookies
These cookies ensure better user-friendliness. For example, entered locations, font sizes or form data are saved.
Advertising Cookies
These cookies are also called targeting cookies. They are used to deliver individually tailored advertising to the user. This can be very practical, but also very annoying.
Usually, when you first visit a website, you will be asked which of these cookie types you would like to allow. And of course, this decision is also stored in a cookie.
If you would like to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".
Purpose of processing via cookies
The purpose ultimately depends on the respective cookie. You can find more details on this further below or from the manufacturer of the software that sets the cookie.
What data is processed?
Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.
Storage period of cookies
The storage period depends on the respective cookie and will be specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.
You also have an influence on the storage period yourself. You can manually delete all cookies at any time via your browser (see also "Right to object" below). Furthermore, cookies that are based on consent will be deleted at the latest after you revoke your consent, whereby the lawfulness of the storage up to that point remains unaffected.
Right to object - how can I delete cookies?
You decide how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option of deleting, deactivating or only partially allowing cookies. For example, you can block cookies from third-party providers, but allow all other cookies.
If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, activate and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: Delete cookies to remove data that websites have stored on your computer
Internet Explorer: Delete and manage cookies
Microsoft Edge: Delete and manage cookies
If you generally do not want to have any cookies, you can set up your browser so that it always informs you when a cookie is to be set. This allows you to decide whether to allow the cookie or not for each individual cookie. The procedure varies depending on the browser. It is best to search for the instructions in Google with the search term "delete cookies Chrome" or "deactivate cookies Chrome" in the case of a Chrome browser.
Legal basis
The so-called "cookie guidelines" have been in place since 2009. These state that the storage of cookies requires your consent (Article 6 para. 1 lit. a GDPR). Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this guideline was implemented in § 96 para. 3 of the Telecommunications Act (TKG). In Germany, the cookie guidelines were not implemented as national law. Instead, this guideline was largely implemented in § 15 para. 3 of the Telemedia Act (TMG).
For absolutely necessary cookies, even if there is no consent, there are legitimate interests (Article 6 para. 1 lit. f GDPR), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience and certain cookies are often absolutely necessary for this.
Insofar as cookies that are not absolutely necessary are used, this only happens with your consent. The legal basis is Art. 6 para. 1 lit. a GDPR.
In the following sections, you will be informed in more detail about the use of cookies, provided that the software used uses cookies.
Registration
| Registration Summary Data subjects: All persons who register, create an account, log in and use the account. Processed data: Email address, name, password and other data that is collected during registration, login and account usage. 欄 Purpose: Provision of our services. Communication with customers in connection with the services. Storage period: As long as the company account associated with the texts exists and then usually 3 years. ⚖️ Legal basis: Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
If you register with us, personal data may be processed, provided that you enter data with personal reference or data such as the IP address is recorded during processing. You can read below what we mean by the rather unwieldy term "personal data".
Please only enter data that we need for registration and for which you have the approval of a third party if you carry out the registration on behalf of a third party. If possible, use a secure password that you do not use anywhere else and an email address that you check regularly.
In the following, we will inform you about the exact type of data processing, because you should feel comfortable with us!
What is registration?
During registration, we accept certain data from you and enable you to easily log in online with us later and use your account with us. An account with us has the advantage that you do not have to enter everything again each time. Saves time, effort and ultimately prevents errors in the provision of our services.
Why do we process personal data?
In short, we process personal data to enable the creation and use of an account with us.
If we didn't do that, you would have to enter all the data every time, wait for approval from us and enter everything again. We and many, many customers would not like that so much. How would you find that?
What data is processed?
All data that you have provided during registration, enter during login or enter as part of the management of your data in the account.
During registration, we may process the following types of data:
- First name
- Last name
- Email address
- Company name
- Street + house number
- Place of residence
- Postal code
- Country
During login, we process the data that you enter during login, such as username and password, and data recorded in the background, such as device information and IP addresses.
When using the account, we process data that you enter during the use of the account and which are created as part of the use of our services.
Storage period
We store the entered data at least for the time as long as the account linked to the data exists with us and is used, as long as contractual obligations exist between us and, when the contract ends, until the respective claims arising from it are time-barred. In addition, we store your data as long as and to the extent that we are subject to legal obligations to store it. After that, we keep booking documents belonging to the contract (invoices, contractual documents, account statements, etc.) and other relevant business documents for the legally prescribed period (usually a few years).
Right to object
You have registered, entered data and would like to revoke the processing? No problem. As you can read above, the rights under the General Data Protection Regulation also exist during and after registration, login or the account with us. Contact the person responsible for data protection above to exercise your rights. If you already have an account with us, you can easily view or manage your data and texts in the account.
Legal basis
By carrying out the registration process, you approach us pre-contractually in order to conclude a usage agreement for our platform (even if a payment obligation does not automatically arise). You invest time to enter data and register and we offer you our services after logging into our system and viewing your customer account. We also fulfill our contractual obligations. Finally, we must keep registered users up to date by email about important changes. This means that Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures, fulfillment of a contract) applies.
If necessary, we will also obtain your consent, e.g. if you voluntarily provide more than the absolutely necessary data or we are allowed to send you advertising. Art. 6 para. 1 lit. a GDPR (consent) therefore applies.
We also have a legitimate interest in knowing who we are dealing with in order to contact them in certain cases. We also need to know who is using our services and whether they are being used as our terms of use dictate, so Art. 6 para. 1 lit. f GDPR (legitimate interests) applies.
Note: the following sections are to be ticked by users (as required):
Registration with real names
Since we need to know who we are dealing with in business operations, registration is only possible with your real name and not with pseudonyms.
Registration with pseudonyms
Pseudonyms can be used during registration, which means that you do not have to register with us using your real name. This ensures that your name cannot be processed by us.
Storage of the IP address
During registration, login and account usage, we store the IP address in the background for security reasons in order to be able to determine lawful use.
Public profile
The user profiles are publicly visible, i.e. parts of the profile can be seen on the Internet even without entering a username and password.
2-factor authentication (2FA)
Two-factor authentication (2FA) offers additional security when logging in, as it prevents you from logging in without a smartphone, for example. This technical measure to secure your account protects you from the loss of data or unauthorized access even if the username and password were known. You can find out which 2FA is used during registration, login and in the account itself.
Web Hosting Introduction
| Web Hosting Summary Data subjects: Visitors to the website 欄 Purpose: professional hosting of the website and securing the operation Processed data: IP address, time of website visit, browser used and other data. You can find more details on this further below or from the respective web hosting provider. Storage period: depending on the respective provider, but usually 2 weeks ⚖️ Legal basis: Art. 6 para. 1 lit.f GDPR (legitimate interests) |
What is web hosting?
When you visit websites these days, certain information - including personal data - is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all web pages on a domain, i.e. everything from the start page (homepage) to the very last subpage (like this one). By domain we mean, for example, beispiel.de or musterbeispiel.com.
If you want to view a website on a computer, tablet or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We call it browser or web browser for short.
To display the website, the browser must connect to another computer where the code of the website is stored: the web server. Operating a web server is a complicated and time-consuming task, which is why this is usually taken over by professional providers, the providers. These offer web hosting and thus ensure reliable and error-free storage of website data. A whole lot of technical terms, but please stay tuned, it gets even better!
When the browser on your computer (desktop, laptop, tablet or smartphone) makes contact and during the data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data, on the other hand, the web server must also store data for a while to ensure proper operation.
Why do we process personal data?
The purposes of data processing are:
- Professional hosting of the website and securing the operation
- to maintain operational and IT security
- Anonymous evaluation of access behavior to improve our offer and, if necessary, for criminal prosecution or prosecution of claims
What data is processed?
Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, usually automatically stores data such as
- the complete Internet address (URL) of the accessed website
- Browser and browser version (e.g. Chrome 87)
- the operating system used (e.g. Windows 10)
- the address (URL) of the previously visited page (referrer URL)
- the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
- Date and time
- in files, the so-called web server log files
How long is data stored?
As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude that this data will be viewed by authorities in the event of illegal behavior.
In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not pass on your data without consent!
Legal basis
The lawfulness of the processing of personal data in the context of web hosting results from Art. 6 para. 1 lit. f GDPR (protection of legitimate interests), because the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the Internet and to be able to prosecute attacks and claims arising from this, if necessary.
As a rule, there is a contract between us and the hosting provider on order processing in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.
Render Web Hosting Privacy Policy
To host our website, we use the web hosting services of the company Render. Render is based at 525 Brannan Street, Suite 300, San Francisco, CA 94107, USA.
What is Render Web Hosting?
Render offers a comprehensive platform for web hosting and cloud services including static sites, web services, databases, and background workers. As a modern Platform as a Service (PaaS) provider, Render simplifies the deployment and management of web applications.
We already mentioned it in our introductory words on the subject of web hosting: through hosting, data from you or your end device is also stored on the Render servers. First and foremost, your IP address, which is known to be one of the personal data, is stored. In addition, technical data such as the URL of our website, the name of the Internet browser or which operating system you are using are also stored.
Why do we use Render Web Hosting?
Render was founded in 2018 and has quickly established itself as a reliable and innovative cloud platform. We chose Render for its excellent performance, security features, and developer-friendly environment. The platform offers automatic SSL certificates, global CDN, and continuous deployment from Git, ensuring our website remains secure, fast, and up-to-date. Render's infrastructure is designed to scale automatically with traffic, providing consistent performance even during peak usage times. We appreciate the simplicity of deployment and the robust infrastructure that allows us to focus on developing our services rather than managing servers.
You can find much more information about data protection at Render in their privacy policy at https://render.com/privacy. If you have any further questions about data protection, you can also contact the Render team by email at privacy@render.com.
Data Processing Agreement (DPA) Render
In accordance with Article 28 of the General Data Protection Regulation (GDPR), we have concluded a data processing agreement (DPA) with Render. You can read what a DPA is exactly and, above all, what must be included in a DPA in our general section "Data Processing Agreement (DPA)".