Where the term “user” is used in the following data protection declaration, it refers to female users and male users, as well as those of a third gender.
Where the term “user” is used in the following data protection declaration, it refers to female users and male users, as well as those of a third gender.
The data controller for the purposes of the General Data Protection Regulation and other national data protection laws of Member States as well as other data privacy regulations is:
Phone: +49 (0)152-08443357
In principle, we collect and use personal data of our users only as far as this is necessary for the provision of a functional website as well as for our content and services. The collection and use of personal data of our users takes place only after the user has agreed thereto, or if the processing of that data is permitted by legal regulations.
Where we obtain the consent of the affected person for the processing of personal information, article 6 (1) letter (a) of EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing of that personal data. Article 6 (1) letter (b) GDPR is the legal basis for processing personal data which is necessary to fulfil a contract to which the person concerned is a party. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
Where such processing of personal data is necessary to the fulfilment of a legal obligation to which our company is subject, article 6 (1) letter (c) GDPR is the legal basis. In cases where the vital interests of the person concerned or of another natural person require the processing of personal data, article 6 (1) letter (d) GDPR is the legal basis. Where processing is necessary to safeguard the legitimate interests of our company or a third party, and this is not outweighed by the interests, fundamental rights and fundamental freedoms of the person concerned, article 6 (1) letter (f) GDPR is the legal basis for processing.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of such storage no longer applies. Storage may also take place if it is provided for by European or national legislation in Union regulations, laws or other provisions to which the data controller is subject. The data will also be blocked or deleted when the storage period prescribed by the aforementioned regulations expires, unless there is a requirement for further storage of the data for the finalisation of a contract, or performance of the contract.
Our system automatically collects data and information at very visit to the website in respect of the computer system making the visit.
The following data are collected:
– Information on browser type and the version used
– The user’s operating system
– The user’s internet service provider
– The user’s IP address
– Date and time of access
– Websites from which the user’s system gained access to our website
– Websites that are accessed by the user’s system through our website
The data collected about the user’s visit to the website will be stored anonymously for analysis purposes and deleted on the following day.
The data is collected and processed by our respective server host, which works for us as part of processing an order.
The legal basis for the collection and storage of the data during the user’s visit to the website is Article 6 para 1 letter (f) GDPR.
The temporary storage of the IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. To do this, the user’s IP address must be kept for the duration of the session. For these purposes, we also have a legitimate interest in the processing of data in accordance with article 6 (1) letter (f) GDPR.
The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. Where the data is collected in order to enable the provision of the site, deletion takes place at the point when the relevant session is terminated. If data are stored in log files, they are deleted on the day following the visit.
Collection of the data for the provision of the website is absolutely necessary to the operation of the internet site. Consequently, there is no possibility of objection from the user. Further storage in log files takes place after anonymization, and so not personally identifiable. There is no right of objection in the absence of personal data, and as a result of anonymization we would not be able to identify the log file relevant to the respective user in order to process the objection.
Screen resolution Information as to whether cookies are permitted.
For other cookies that are used while using analysis tools and playing videos, please read clauses IX and X.
The legal basis for processing personal data using cookies is Article 6 (1) letter (f) GDPR.
We need cookies for the following applications:
Correct graphical representation of the website on the user’s device.
The user data collected by these cookies is not used to create user profiles.
For these purposes, we also have a legitimate interest in the processing of personal data in accordance with article 6 (1) letter (f) GDPR.
On our website there is a contact form which can be used to contact us electronically. If a user takes up this option, the data entered in the input form will be transmitted to us and stored. These data are:
Name, email address, subject of the message and the message text, as well as – if specified – the website and telephone number.
In addition, the IP address and time of the request are stored in the server log files. The IP address is anonymised before it is saved.
Alternatively, you can contact us using the email address already provided. In this case, the personal data of the user transmitted with the email are stored.
The data is collected and processed by the relevant server host which is working for us in processing instructions. Also, in doing this, there is no disclosure of data to third parties. The data is used exclusively for the processing of our conversation.
The legal basis for this data processing is Article 6 (1) letter (f) GDPR. If the objective of the contact is to conclude a contract, an additional legal basis for processing is Article 6 (1) letter (b) GDPR.
The processing of personal data from the input screen is used by us solely for the purposes of processing the contact. Cases of email contact also include the necessary legitimate interest in the processing of the data.
Other personal data processed during submission are used for web analysis, and to prevent misuse of the contact form, as well as to ensure the security of our information technology systems.
Data is deleted as soon as it is no longer necessary to achieve the purposes for which it was collected. This is the case for the personal data from the input screen of the contact form, and those sent by email, if the relevant conversation with the user is finished. The conversation ends when it is clear from the circumstances that the facts concerned have been clarified.
Personal data collected during submission is anonymised prior to storage and deleted on the day following.
The user may object at any time to the storage of his personal data. If this is the case, the conversation may not continue. All personal data which was stored during such contact will be deleted.
This website uses functions of the web analysis service Google Analytics Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics allows us to capture and analyse the usage of our website by the user. Google Analytics uses so-called “cookies”. These are text files, which are stored on the user’s computer and which allow an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transferred to a server of Google in the USA and stored there.
We have enabled the IP anonymisation feature on this website. Through this, within Member States of the European Union or in other States which are parties to the Agreement on the European Economic Area the IP address is shortened prior to transmission to the United States. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate the use of the website by the user, in order to compile reports on the website activities and to provide us with further services related to the use of the website and the internet. The IP address submitted by Google Analytics from the user’s browser is not merged with other Google data.
This website uses the “demographic features” function of Google Analytics. This allows for the creation of reports that contain statements about the age, gender, and interests of the page visitors. This data comes from Google’s interest-based advertising and third party visitor data. This data cannot be assigned to any specific person.
The legal basis for the storage is Article 6 (1) letter (f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimize both our web site and our advertising. We have signed a contract with Google for data processing and are fully implementing the strict specifications of the German data protection authorities when using Google Analytics.
The user can prevent the storage of cookies by using the corresponding setting of the browser software; however, we would point out that if this setting is used case you may not be able to use all functions of this website in full. You may also prevent the collection of the data generated by the cookie, and the website use (including the IP address) by Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Google Browser Plugin
The user can prevent Google Analytics from capturing his data by clicking on the following link. An opt-out cookie is used to prevent the user’s data from being collected during future visits to this site:
The user can disable the “demographic features” function at any time through the advertisement settings in his Google account, or prohibit the collection of his data by Google Analytics as shown above.
More information on how user data is handled in Google Analytics is provided in Google’s data protection policy: Support Google
Google, as a third party, can only send the content offered to your browser by using your IP address. For the purposes of communication, Google sets cookies on your browser and uses your IP address.
We have included the videos in the Extended Data Protection mode. This means that the IP address will not be transferred to Google and YouTube cookies will not be set until you have clicked the frame (the playback area) of the video once.
The legal basis for the processing of the data is Article 6 (1) letter (f) GDPR.
The purpose of the data processing is to provide video content from a third party without using space on our website server, in order to extend the offering on our website. This is our legitimate interest.
By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies which have already been stored may be deleted at any time. This can also be done automatically. If cookies are disabled for our website, certain functions of the website may no longer be used in full. If you do not disable the transfer of cookies, or do not actively delete the cookies, the cookies stored by Google will be deleted by the end of eight months at the latest.
You can prevent cookie setting, and the transmission of the IP address to Google by not clicking on the video frames.
Regarding the transfer of data to the United States for the use of YouTube, the European Commission’s made a decision regarding adequacy of the regulations of the Privacy Shield Agreement on 12.07.2016 (C(2016) 4176). Google has submitted itself to the regulations of the Privacy Shield; you can find the certificate here: Zertifikat Shields
If your personal data is processed, you are an affected person within the meaning of GDPR and you have the following rights in respect of the data controller:
You may require the data controller to confirm whether personal data pertaining to you is processed by us. If such processing is taking place, you can require information from the data controller as follows:
(1) The purposes for which the personal data are processed;
(2) The categories of personal data that are being processed;
(3) The recipients or categories of recipients to which the personal data relating to them has been or will be disclosed;
(4) The planned duration of the storage of personal data relating to you, or, where specific information is not possible, criteria for determining the storage duration;
(5) The existence of a right to rectification or deletion of personal data relating to you, a right to limitation of such processing by the data controller or a right of objection against such processing;
(6) The existence of a right of appeal to an oversight authority;
(7) All available information on the source of the data, if the personal data were not collected from the person affected;
(8) The existence of any automated decision-making, including profiling, pursuant to article 22 (1) and (4) of the GDPR and, at any rate in such cases, meaningful information on the logic involved and the scope and impact of such a processing for the person concerned.
You have the right to demand information on whether the personal data relating to you is transmitted to a third country, or to an international organisation. Related to this, you may demand to be informed of suitable guarantees pursuant to article 46 GDPR in connection with such transmission.
You have the right to rectification and/or completion in respect of the data controller, where the personal data processed relating to you are incorrect or incomplete. The data controller shall make the correction without delay.
Under the following conditions, you may require the restriction of the processing of personal data concerning you:
(1) If you dispute the accuracy of the personal data relating to you, for a period of time which allows the data controller to verify accuracy;
(2) If the processing is unlawful, and you reject the deletion of the personal data, and instead demand the restriction of the use of personal data;
(3) The data controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims; or
(4) If you have appealed against the processing in accordance with article 21 (1) of the GDPR, and have not yet established whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of the personal data relating to you has been restricted, this data may be processed only – apart from its storage, – subject to your consent, or to the assertion, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or of a Member State.
If the limitation of processing has been restricted according to these conditions, the data controller will inform you before the restriction is lifted.
a) Obligation to delete
You may require the data controller to delete the personal data relating to you immediately, and the data controller is obliged to remove this data immediately, provided that one of the following reasons applies:
(1) The personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent to the processing given under Article 6 para 1 letter (a) or Article 9 (2) letter (a) GDPR, and there is no other legal basis for processing.
(3) You lodge an objection to the processing under Article 21 (1) GDPR, and there are no overriding reasons for the processing; or, you lodge an objection to the processing under Article 21 (2), GDPR.
(4) The personal data relating to you have been processed unlawfully.
(5) The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation under Union law, or the law of a Member State, to which the data controller is subject.
(6) The personal data relating to you were collected in relation to services offered by the information society according to Article 8 (1) GDPR.
b) Information to third parties
If the data controller has made public the personal data relating to you, and is obliged to delete them pursuant to article 17 (1) of the GDPR, he shall take reasonable measures, taking into account the available technology and implementation costs, including technical considerations, that the data controller shall inform all those who process the personal data that you as an affected person has demanded the deletion of all links to this personal data and of any copies or replicas of that personal data Exceptions
The right to deletion does not apply where the processing is required;
(1) To exercise the right to freedom of expression and information;
(2) To fulfil a legal obligation which requires the processing under Union law or law of Member States to which the data controller is subject; or to carry out a task which is in the public interest or in the exercise of public authority which has been transferred to the data controller;
(3) For reasons of public interest in the field of public health in accordance with article 9 (2) letters (h) and (i) and article 9 (3) GDPR;
(4) For archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to article 89 (1) GDPR, to the extent that the law referred to in section a) is likely to make the fulfilment of the objectives of this processing impossible or seriously impaired; or
(5) For the assertion, exercise or defence of legal claims.
If you have exercised the right to rectify, delete or restrict the processing with respect to the data controller, the latter is obliged to inform all those to whom the personal information of the affected person has been disclosed of that correction or deletion or limitation of the processing, unless this proves to be impossible, or involves a disproportionate effort.
You have the right to be informed by the data controller of those recipients.
You have the right to receive the personal data relating to you, which you have provided to the data controller, in a structured, current and machine-readable format. You also have the right to transmit this data to another data controller without hindrance by the current data controller of the personal data, provided that
(1) The processing is based on a consent according to article 6 para 1 letter (a) GDPR or article 9 (2) letter (a) GDPR or on a contract pursuant to article 6
(1). (b) GDPR is based; and
(2) The processing is carried out using automated procedures.
In exercising this right, you also have the right to require that the personal data relating to you be transmitted directly by one data controller to another data controller, to the extent that this is technically feasible. Freedoms and rights of other persons may not be adversely affected by this.
The right to transfer data does not apply to the processing of personal data where necessary for the performance of a task which is in the public interest or is carried out in the exercise of public authority which has been transferred to the data controller.
You have the right to object at any time against the processing of personal data relating to you which is based on article 6 (1) letters (e) or (f) GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions.
The data controller shall no longer process the personal data relating to you, unless he can prove compelling and legitimate reasons for the processing that outweigh your interests, rights and freedoms, or that the processing serves the enforcement, exercise or defence of legal claims.
If the personal data relating to you is processed in order to provide direct advertising, you have the right to object at any time to the processing of the personal data relating to you for the purposes of such advertising; This also applies to profiling to the extent that it is related to such direct advertising.
If you object to such processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.
Irrespective of Directive 2002/58/EC, in connection with the use of information society services you they have the possibility of exercising your right of objection by means of automated procedures which use technical specifications.
You have the right to revoke your data protection declaration of consent at any time. The revocation of the consent does not affect the legality of the processing by virtue of that consent, up to the point of the revocation.
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which will have a legal effect on you or may have a significant adverse effect on you in a similar way. This does not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and data controller;
(2) is permissible under provisions of the law of the Union or of Member States to which the data controller is subject, and these legal provisions contain appropriate provisions to safeguard your rights and freedoms as well as your legitimate interests; or
(3) takes place with your express consent.
In any event under article 9 (1) GDPR these decisions may not be based on specific categories or personal data, unless Article 9 (2) letters (a) or (g) apply, and reasonable measures have been taken for the protection of rights and freedoms and your legitimate interests.
As regards the cases referred to in (1) and (3), the data controller shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, to include as a minimum the right to a personal intervention on the part of the data controller, the right to present your own point of view, and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, specifically in the Member State of your place of residence, your workplace, or the location of the alleged infringement, if you consider that the processing of the personal data relating to you is in breach of the GDPR.
The supervisory authority with which the complaint was lodged shall inform the complainant of the status and results of the appeal, including the possibility of a judicial remedy under article 78 GDPR.
The competent supervisory authority in matters of data protection law for our company is the State Commissioner for Data Protection of the Federal State in which our company is headquartered. A list of the State Commissioners and their contact details can be found at the following link: BFDI Bund
Essential cookies enable basic functions and are necessary for the proper function of the website.
Owner of this website
Saves the visitors preferences selected in the Cookie Box of Borlabs Cookie
Statistics cookies collect information anonymously. This information helps us to understand how our visitors use our website.
Cookie by Google used for website analytics. Generates statistical data on how the visitor uses the website
Essenziell: Borlabs Cookie
Statistics: Google Analytics
Essenziell: Borlabs Cookie
Statistics: Google Analytics