Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

2. Hosting and Content Delivery Networks (CDN)

We are hosting the content of our website at the following provider:

Webflow

The provider is the Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as “Webflow”). When you visit our website, Webflow records various logfiles, including your IP address.

Webflow is a tool for the creation and hosting of websites.  Webflow stores cookies or other recognition technologies that are required for the depiction of the site, for the provision of certain website functions and to guarantee its security (necessary cookies).

For details, please consult the data privacy policy of Webflow: https://webflow.com/legal/eu-privacy-policy.

We use Webflow on the basis of Art.6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is depicted as reliable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

The transfer of data to the United States is based on the standard contract clauses of the EU Commission. For details, please go to: https://webflow.com/legal/eu-privacy-policy.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Amazon CloudFront CDN

We use the Content Delivery Network Amazon CloudFront CDN. The provider is Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg (hereinafter referred to as “Amazon”).

Amazon CloudFront CDN is a globally distributed Content Delivery Network. During these transactions, the information transfer between your browser and our website is technically routed via the Content Delivery Network. This enables us to boost the global availability and performance capabilities of our website.

The use of Amazon CloudFront CDN is based on our legitimate interest in keeping the presentation of our web services as error free and secure as possible (Art. 6(1)(f) GDPR).

The data transfer to the United States is based on the Standard Contract Clauses of the EU Commission.  You can find the details here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

For more information on Amazon CloudFront CDN please follow this link: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Computer Institut Bamberg
Schützenstraße 73
96047 Bamberg

Phone: +49 (951) 9 32 34 - 0
E-mail: info@cibamberg.de

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Designation of a data protection officer

We have appointed a data protection officer.

Julian Hoffbauer
Schützenstraße 73
96047 Bamberg

Phone: 0 (951) 9 32 34 - 0
E-mail: info@cibamberg.de

Information on data transfer to the USA and other non-EU countries

Among other things, we use tools of companies domiciled in the United States or other from a data protection perspective non-secure non-EU countries. If these tools are active, your personal data may potentially be transferred to these non-EU countries and may be processed there. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

  • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for promotional purposes.

Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, the processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Cookiebot

Our website uses consent technology from Cookiebot to obtain your consent to the storage of certain cookies on your end device or for the use of certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

When you enter our website, a connection is established with the Cookiebot servers to obtain your consent and provide you with other explanations regarding the use of cookies. Cookiebot will then store a cookie in your browser to identify the consent you have given or its revocation. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie itself or the purpose for which the data is stored no longer applies. Mandatory legal storage obligations remain unaffected.

Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Request by e-mail, telephone, fax, or Live-Chat

If you contact us by e-mail, telephone, fax, or the Live-Chat, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Please note that the Live Chat service by SocialIntens is provided by an external provider. Therefore, your data may also be subject to the privacy policies of SocialIntens. We recommend consulting the privacy policy of SocialIntens for further information on the processing of your data by this service.

Calendly

You can make appointments with us on our website. We use the “Calendly” tool for booking appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter “Calendly”).

To book an appointment, enter the requested data and the desired date in the screen provided. The data entered will be used for planning, executing and, if necessary, for the follow-up of the appointment. The appointment data is stored for us on the servers of Calendly, whose privacy policy can be viewed here: https://calendly.com/de/pages/privacy.

The data you have entered will remain with us until you ask us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply. Mandatory legal provisions, in particular retention periods, remain unaffected.

The legal basis for data processing is Art. 6(1)(f) GDPR. The website operator has a justified interest in making appointments with interested parties and customers in as uncomplicated a manner as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://calendly.com/pages/dpa.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

6. Plug-ins and Tools

Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Social Intents

To process user requests through our support channels or live chat systems, we use Social Intents, LLC Address: 4880 Lower Roswell Rd, Suite 165-112, Marietta, GA 30068, USA (hereinafter “Social Intents”).

Messages you send to us can be stored in the Social Intents ticket system or answered by our personnel in a live chat. In addition, Social Intents helps us to determine, in particular, from which region the inquirer comes, how long he has been communicating with us and how satisfied he is with the course of communication.

The messages addressed to us will remain with us until you ask us to delete them or until the purpose for which the data were stored ceases to apply (e.g., after processing your enquiry). Mandatory legal provisions, in particular retention periods, remain unaffected.

The use of Social Intents is based on Art. 6(1)(f) GDPR. We have a legitimate interest to a fast, reliable, and efficient processing of your inquiries. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Details can be found here: https://www.socialintents.com/privacy.html and https://help.socialintents.com/article/83-whats-social-intents-eu-gdpr-compliance.

For further information please read the privacy policy of Social Intents: https://www.socialintents.com/privacy.html.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

7. Online-based Audio and Video Conferences (Conference tools)

Data processing

We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).

Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.

Purpose and legal bases

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Duration of storage

Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.

We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.

Conference tools used

We employ the following conference tools:

TeamViewer

We use TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen. Details about data processing can be found in the TeamViewer privacy policy: https://www.teamviewer.com/en/privacy-policy/.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

8. CIBPILOT Tracking App Privacy Policy

This Privacy Policy describes our policies and procedures for collecting, using, and disclosing your information when you use the Service, and informs you of your privacy rights and how the law protects you.

We use your personal information to provide and improve the Service. By using the Service, you consent to the collection and use of information in accordance with this Privacy Policy.

Interpretation and definitions

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for you to access our Service or portions of our Service.
  • Application means the software program provided by the Company and downloaded by You on an electronic device called Tracker.
  • Company (in the context of this Agreement referred to either as "the Company", "We", "Us" or "Our") refers to CIB Hoffbauer GmbH und Co.KG, Schützenstr. 73, 96047 Bamberg, Germany. For the purposes of the GDPR, the Company is the data controller.
  • Consumer/You means the person accessing or using the Service or the company or other legal entity accessing or using the Service on behalf of that person, as applicable.
  • Under the GDPR (General Data Protection Regulation), you may be referred to as a data subject or a user, as you are the person using the Service.
  • Country refers to: the whole world.
  • Data controller means, within the meaning of the GDPR (General Data Protection Regulation), the company as a legal entity which alone or jointly with others determines the purposes and means of the processing of personal data.
  • Device means any device that can access the Service, such as a computer, cell phone or digital tablet.
  • Personal data is any information relating to an identified or identifiable individual.
  • For the purposes of the GDPR, personal data means any information relating to you, such as name, identification number, location data, online identifier or related to one or more specific characteristics that constitute physical, physiological, genetic, mental, economic, cultural or social identity.
  • Service refers to the application.
  • Under the GDPR (General Data Protection Regulation), you may be referred to as a data subject or a user, as you are the person using the Service.
  • Country refers to: the whole world.
  • Data controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the company as a legal entity that alone or jointly with others determines the purposes and means of the processing of personal data.
  • Device means any device that can access the Service, such as a computer, cell phone, or digital tablet.
  • Personal data is any information relating to an identified or identifiable natural person.
  • For the purposes of the GDPR, personal data means any information relating to you, such as name, identification number, location data, online identifier or to one or more characteristics of specific identity, such as physical, physiological, genetic, mental, economic, cultural or social identity.
  • Service refers to the application.
  • Service Provider refers to any individual or entity that processes data on behalf of the Company. They are third-party companies or individuals engaged by the Company to facilitate the Service, provide the Service on behalf of the Company, provide services related to the Service, or help the Company analyze how the Service is used. For purposes of the GDPR, service providers are considered data processors.
  • Usage data refers to automatically collected data that is either generated by the use of the service or originates from the service infrastructure itself.

Data collection and use of your personal data

Personal data

When using our Service, we may ask you to provide us with certain personal information that may be used to contact or identify you. Personal information may include, but is not limited to:

  • E-mail address
  • Account name
  • Usage data

Usage data

Usage data is collected automatically when you use the service.

Usage Data may include information such as your device's Internet Protocol address (e.g., IP address), browser type, browser version, the pages you visit on our Service, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service through a mobile device, we may automatically collect certain information, including, but not limited to, the type of mobile device you are using, your unique device identifier, your mobile device IP address, your mobile operating system, the type of mobile internet browser you are using, unique device identifiers, and other diagnostic data.

We may also collect information that your browser sends each time you visit our Service or access the Service through a mobile device.

Information collected during the use of the application

When you use our Application, in order to provide features of our Application, we may collect the following information with your prior consent:

Information about your location

We use this information to provide features of our service, improve and customize our service. The information may be uploaded to the Company's and/or a service provider's servers or it may simply be stored on your device.

The application will continuously collect information about your location while you are using our application and while the application is running in the background of your device. You can enable or disable access to this information at any time through your device's settings.

Use of your personal data

We are committed to protecting your privacy. We will only lawfully use the information we collect about you in accordance with the EU General Data Protection Regulation (GDPR).

All data we collect is used solely to provide a service to you. In particular:

  • We do not sell, share or otherwise disclose your information;
  • We do not search your data for samples;
  • We do not use your data for advertising purposes;
  • We do not access your location data without your permission.

The Company may use personal data for the following purposes:

  • To provide and maintain our service, including monitoring the use of our service.
  • To manage your account: To manage your registration as a user of the Service. The personal information you provide gives you access to various features of the Service that are available to you as a registered user.
  • To perform a contract: to develop, comply with and perform the contract for the purchase of the products, items or services you have purchased or any other contract with us through the Service.
  • To contact you: To contact you via email, phone calls, text messages, or other electronic forms of communication such as push notifications from a mobile application about updates or informational communications regarding functionality, products, or contracted services, including security updates, when necessary or reasonable.
  • To provide news, special offers and general information about other goods, services and events we offer that are similar to those you have already purchased or requested, unless you have opted out of receiving such information.
  • To manage your requests: To process and manage your requests to us.

Retention of your personal data

The Company will keep your personal data for as long as you use the Application. Once your account is deleted, the personal data will be deleted. We will retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. As a rule, Usage Data will be retained for 6 months, unless such data is used to strengthen security or improve the functionality of our Service or we are required by law to retain such data for a longer period of time.

Disclosure of your personal data

Business transactions

If the Company is involved in a merger, acquisition or asset sale, your personal data may be transferred. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

Law enforcement

In certain circumstances, the Company may be required to disclose your personal information if required to do so by law or in response to valid requests from public authorities (e.g., court or government agency).

Other legal requirements

Company may disclose your personal information in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • Protect and defend the rights or property of the company
  • Prevent or investigate possible misconduct in connection with the service
  • Protect the personal safety of users of the service or the public
  • Protect yourself against legal liability

Personal data security

We take our users' personal information very seriously and will continue to do everything we can to keep it safe and secure. However, we cannot guarantee that our users' information will be fully protected in unforeseen events, including but not limited to cyber-attacks, theft, loss of information, acts of God, or breach of our security system.

By using the application, users agree to waive any claims, lawsuits, financial demands, or other types of claims for loss of your personal information.

GDPR data protection

Legal basis for the processing of personal data according to DSGVO

We may process personal data under the following conditions:

  • Consent: You have given your consent to the processing of personal data for one or more specific purposes.
  • Contract performance: The provision of personal data is necessary for the performance of a contract with you and/or for related pre-contractual obligations.
  • Legal obligations: The processing of personal data is necessary to comply with a legal obligation to which the Company is subject.
  • Protection of vital interests: The processing of personal data is necessary to protect your vital interests or those of another natural person.
  • Public interest: The processing of personal data is related to a task carried out in the public interest or in the exercise of official authority vested in the Company.
  • Legitimate interests: The processing of personal data is necessary for purposes of legitimate interests pursued by the Company.

In any case, the Company will be happy to help clarify the specific legal basis that applies to the processing, in particular whether the provision of personal data is a legal or contractual obligation or a necessary condition for the conclusion of a contract.

Your rights according to DSGVO

The Company is committed to respecting the confidentiality of your personal data and ensuring that you can exercise your rights.

You have the following rights under this Privacy Policy and by law if you are located within the EU:

  • Request access to your personal information. You have the right to access, update or delete the information we have about you. To the extent possible, you can access, update or delete your personal information directly from your account settings area. If you are unable to perform these actions yourself, please contact us to assist you. This will also allow you to obtain a copy of the personal information we hold about you.
  • Request correction of the personal data we hold about you. You have the right to have incomplete or inaccurate information we hold about you corrected.
  • object to the processing of your personal data. This right exists where we rely on legitimate interests as the legal basis for the processing and there is something about your particular situation that causes you to object to our processing of your personal data on that basis. You also have the right to object if we process your personal data for direct marketing purposes.
  • Request deletion of your personal data. You have the right to ask us to delete or remove your personal data if there is no good reason why we should continue to process it.
  • Request the transfer of your personal data. We will provide you or a third party of your choosing with your personal information in a structured, commonly used and machine-readable format. Please note that this right only applies to automated information for which you have initially given your consent to use or for which we have used the information to perform a contract with you.
  • Withdraw your consent. You have the right to withdraw your consent to the use of your personal information. If you withdraw your consent, we may not be able to provide you with access to certain specific features of the Service.

Exercising your GDPR data protection rights

You may exercise your rights of access, rectification, cancellation and opposition by contacting us. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will endeavor to respond to you as soon as possible.

You have the right to complain to a data protection authority about the collection and use of your personal data. If you are located in the European Economic Area (EEA), please contact your local data protection authority in the EEA for more information.

Sources of personal information

We obtain the categories of personal information listed above from the following categories of sources:

  • Directly from you. For example, from the forms you fill out on our Service, preferences you indicate or provide on our Service.
  • Indirectly from you. For example, by monitoring your activity on our service.
  • Automatically by you. For example, through cookies that we or our service providers place on your device as you click through on our service.

Use of personal information for business or commercial purposes

We may use or disclose personal information we collect for "business purposes" or "commercial purposes," which may include the following examples:

  • To operate and provide our service to you.
  • To provide support and respond to your inquiries, including investigating and resolving your concerns and monitoring and improving our service.
  • To fulfill or perform the reason you provided the information. For example, if you share your contact information to ask a question about our service, we will use that personal information to respond to your inquiry.
  • To respond to law enforcement requests and act in accordance with applicable law, court order or government regulation.
  • For internal management and review purposes.
  • To detect security incidents and protect against malicious, fraudulent, or illegal activity, including, when necessary, prosecuting those responsible for such activity.

Please note that the above examples are illustrative and not intended to be exhaustive. For more details on how we use this information, please refer to the section "Use of Your Personal Information".

If we decide to collect additional categories of personal information or use the personal information we collect for substantially different, unrelated or incompatible purposes, we will update this Privacy Policy.

Links to other websites

Our Service may contain links to other websites that are not operated by us. When you click on a third-party link, you will be directed to that third party's website. We strongly encourage you to review the privacy policies of each website you visit.

We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third party web sites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

We will notify you by email and/or by posting a prominent notice on our Service before the change becomes effective, and will update the "Last Updated" date at the top of this Privacy Policy.

It is recommended that you review this Privacy Policy periodically for changes. Changes to this Privacy Policy will be effective when posted on this page.

Contact us

If you have any questions about this privacy policy, you can contact us:

*By Email: info@cibamberg.de

Cookies