Privacy

I. General Information

This privacy notice provides you (also referred to below as the "user" or "data subject") with general information about data processing within our company and, in particular, about data processing in connection with visits to our website www.digitale-gruendung.de and the products we offer there.

II. Controller

The controller within the meaning of the General Data Protection Regulation and other data protection provisions is:

nonprismatic digital solutions GmbH
Beethovenstraße 13, 66111 Saarbrücken
Telephone: 030/515659142
Email: info@digitale-gruendung.de

III. General Information on Data Processing

1. Categories of Personal Data

We process the following categories of personal data:

• Master data (e.g. names, addresses, roles, organisational affiliations);
• Contact data (e.g. email addresses, telephone/fax numbers);
• Content data (e.g. text entries, image files, videos);
• Usage data (e.g. access data);
• Metadata/communication data (e.g. IP addresses).

2. Recipients or Categories of Recipients of Personal Data

If, in the course of our processing, we disclose data to other persons and companies such as web hosting providers, processors or third parties, transmit data to them or otherwise grant them access to the data, this is done on the basis of a statutory permission (e.g. where the transmission of data to third parties pursuant to Art. 6(1)(b) GDPR is necessary for the performance of a contract), where the data subjects have given their consent or where a legal obligation requires it.

3. Duration of Storage of Personal Data

The criterion determining the duration of storage of personal data is the applicable statutory retention period. Once this period expires, the relevant data is erased unless it is still necessary to fulfil the purpose, perform a contract or take steps prior to entering into a contract.

4. Transfers to Third Countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if such processing takes place in connection with the use of third-party services or the disclosure or transmission of data to third parties, this occurs only where necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to statutory or contractual permissions, we process data, or have data processed, in a third country only where the specific requirements of Art. 44 et seq. GDPR are met.

IV. Provision of the Website and Creation of Log Files

1. Log Files

Whenever a data subject accesses our website, general data and information are stored in our system's log files:

• Date and time of access (timestamp);
• Request details and destination address (protocol version, HTTP method, Referer, UserAgent string);
• Name of the file accessed and volume of data transferred (requested URL including query string, size in bytes);
• Information indicating whether access was successful (HTTP status code).

When using this general data and information, we do not draw any conclusions about the data subject. No analysis relating to individual persons, analysis for marketing purposes or profiling is carried out. The IP address is not stored in this context. The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR.

2. Malware Detection and Log Data Analysis

We collect log data generated during the operation of our company's communications technology and analyse it automatically insofar as this is necessary to detect, isolate or resolve disruptions or faults in communications technology or to prevent attacks on our information technology or to detect and prevent malware. The legal basis is Art. 6(1)(f) GDPR.

3. Cookies

Our website uses cookies. Cookies are small text files exchanged between the web browser and the hosting server. In the web browser you use, you can restrict or completely prevent the use of cookies by adjusting the relevant settings. Cookies already stored can be deleted at any time. The legal basis for processing personal data using cookies is Art. 6(1)(f) GDPR. You can change your cookie settings at any time via the cookie banner.

4. Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use to operate our website. In this context, we or our processor process users' master data, contact data, content data, contract data, usage data, metadata and communication data on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR.

5. Google Analytics and Google Tag Manager

Where the relevant consent has been given, this website uses Google Analytics and Google Tag Manager provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable analysis of website usage. IP anonymisation is enabled ("_anonymizeIp()"), so that IP addresses within the EU or EEA are truncated. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

6. Google Fonts

Our website uses Google Fonts to ensure the consistent display of text and fonts. This use serves our legitimate interest in a consistent and appealing presentation of our online services (Art. 6(1)(f) GDPR).

7. Conversion Measurement Using the Facebook Pixel

Where the relevant consent has been given, we use the visitor action pixel provided by Meta Platforms Ireland Ltd. to statistically evaluate the effectiveness of advertisements. You can withdraw your consent at https://www.facebook.com/ads/preferences/ at any time.

8. Google Analytics Remarketing

Google Analytics Remarketing links advertising audiences to the cross-device functions of Google Ads and Google Campaign Manager. This requires your consent to Google. You can object via your Google account settings (https://www.google.com/settings/ads/onweb/).

9. Google Ads

We use conversion tracking as part of Google Ads. When you click on an advertisement served by Google, a conversion tracking cookie is set. These cookies expire after 30 days and are not used to identify you personally.

10. Facebook Custom Audiences and Facebook Pixel

Where the relevant consent has been given, we use "Facebook Custom Audiences" provided by Meta Platforms Ireland Ltd. to target users with interest-based advertising and optimise our website. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

11. Instagram Ads

Where the relevant consent has been given, we use Instagram Ads provided by Meta Platforms Ireland Ltd. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

12. Cloudflare

We use the Content Delivery Network (CDN) provided by Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 München, to improve the security and delivery speed of our website (Art. 6(1)(f) GDPR). For this purpose, personal data may be processed in Cloudflare's server log files. Cloudflare has implemented compliance measures for international data transfers based on the EU Standard Contractual Clauses.

V. Contacting Us

1. Contact by Email

You can contact our company by email using the email addresses published on our website. If you use this method of contact, the data you transmit will be stored for the purpose of contacting you and handling your enquiry. In addition, the IP address and the date and time of the email are collected. The legal basis is Art. 6(1)(b) or (f) GDPR.

2. Contact Form and Requests for an Initial Consultation

If you use the contact form provided to communicate with us or request an initial consultation, you must provide your name, telephone number, email address and details of your enquiry. Your enquiry cannot be handled without this data. Providing your company name is optional. In addition, the IP address and the date and time are collected. The legal basis is Art. 6(1)(b) or (f) GDPR.

3. Contact by Letter

If you send us a letter, the data transmitted (e.g. surname, first name, address) and the information contained in the letter will be stored for the purpose of contacting you and handling your enquiry (Art. 6(1)(b) or (f) GDPR).

VI. Orders and Payment Processing

If you place an order with us, we process your personal data to process and fulfil the order and issue the corresponding invoice (Art. 6(1), first sentence, point (b) GDPR). We retain orders containing personal data and the associated documents (e.g. invoices) in accordance with statutory requirements for six years (§ 257(4) HGB) or ten years (§ 147(3) AO).

Use of Stripe

We offer the option of processing payments through the payment service provider Stripe (℅ Legal Process, 510 Townsend St., San Francisco, CA 94103) (Art. 6(1)(f) GDPR). Among other things, we transmit your name, email address, order/customer number, bank account or credit card details, transaction data and amount. Stripe acts both as a controller (for regulatory obligations) and as a processor. For international data transfers, Stripe has implemented compliance measures based on the EU Standard Contractual Clauses. Further information: https://stripe.com/privacy-center/legal. Retention period: 10 years pursuant to § 147 AO / § 257 HGB.

VII. Video Conferences (Zoom)

We use the "Zoom" tool provided by Zoom Video Communications, Inc. (USA) to conduct video conferences, telephone conferences, online meetings and/or webinars. The data processed includes user details (name, email address, profile picture where applicable), conference metadata (topic, IP addresses, device information), audio/video/chat data where recordings are made, and telephone numbers where participants dial in by telephone. Recordings are transparently announced in advance. We have entered into a data processing agreement with Zoom pursuant to Art. 28 GDPR; an adequate level of data protection is ensured through the EU Standard Contractual Clauses. The legal basis is Art. 6(1)(b) or (f) GDPR.

VIII. Rights of the Data Subject

1. Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. Where this is the case, you have the right of access to that data and to further information (purposes of processing, categories of data, recipients, storage period, your rights as a data subject, right to lodge a complaint, source of the data and, where applicable, automated decision-making). In the case of transfers to third countries, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR.

2. Right to Rectification (Art. 16 GDPR)

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you and the completion of incomplete data.

3. Right to Erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds set out in Art. 17(1) GDPR applies (including where the purpose no longer applies, consent is withdrawn, an objection is raised, processing is unlawful or erasure is required by law). Exceptions apply, in particular, where processing is necessary for freedom of expression and information, compliance with legal obligations, public interests or the defence of legal claims.

4. Right to Restriction of Processing (Art. 18 GDPR)

Subject to the conditions of Art. 18 GDPR, you have the right to obtain restriction of the processing of your data.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, insofar as the processing is based on consent or a contract and is carried out by automated means.

6. Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.

7. Right to Withdraw Consent

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Right to Lodge a Complaint with a Supervisory Authority

Every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their residence, place of work or the place of the alleged infringement, if they consider that the processing of their personal data infringes the GDPR.

IX. Changes to This Privacy Policy

We reserve the right to amend this privacy policy at any time with effect for the future. The current version is available on the website. Please visit the website regularly to familiarise yourself with the applicable privacy policy.

Last updated: August 2024