1. Scope of Processing Personal Data
We process personal data of our users only to the extent necessary for providing and improving our services. Where possible, the processing of personal data is pseudonymized or even anonymized.
-
The analogous or partially automated processing as well as the control of any automated processing is carried out exclusively by appropriately qualified personnel who are obligated to comply with all legal data protection regulations and are trained accordingly.
-
For security reasons and to protect the transmission of personal data and other confidential content, our websites use SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.
2. Data Protection Controller
The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
The controller for data processing on our websites within the meaning of the General Data Protection Regulation (GDPR) is:
-
Raise Labs GmbH
Kolonnenstraße 8
10827 Berlin, Germany
Email: info@raiselabs.de
3. Data Collection When Visiting Our Websites
If you use our websites for informational purposes only, i.e., without registering or otherwise transmitting information to us, we only collect the data that your browser transmits to our server (so-called "server log files").
When you access our websites, we collect the following data, which is technically necessary for us to display the websites to you:
-
- The website accessed
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
-
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our websites.
No transfer or other use of the data takes place. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
4. Use of Cookies and Local Storage
4.1. Cookies
We only use technically necessary cookies for the use of our websites. Cookies are small text files that are stored on your device. The cookies we use are deleted after the end of the browser session, i.e., after you close your browser. If cookies are set, they collect and process certain usage information such as browser and location data and IP address values.
-
Please note that you can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
-
Please note that if you do not accept cookies, the functionality of our websites may be limited.
4.2. Local Storage
To give you the opportunity to adapt our applications to your personal needs and usage habits, we use so-called Local Storage technology. Data is stored locally in your browser's cache, which remains even after closing the browser window or terminating the program - as long as you do not clear the cache - and can be read out again. Local Storage allows your preferences when using our online services to be stored on your computer and retrieved by you.
-
Third parties have no access to the data stored in Local Storage. It is not passed on to third parties and is not used for advertising purposes.
-
We use this technology in our legitimate interest pursuant to Art. 6 (1) (f) GDPR to provide you with the best possible functionality of our application.
5. Contacting Us
When you contact us, only the personal data that you provide to us is collected. This data is stored and used solely for the purpose of responding to your request or contacting you and the associated technical administration.
-
The legal basis for the processing of the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
-
Your data will be deleted after your request has been finally processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent deletion.
6. Registration
You can register on our websites by providing personal data.
Which personal data is processed for registration can be seen from the input mask used for this purpose.
-
For registration, we use the so-called double opt-in procedure, i.e., your registration is only completed once you have confirmed your registration by clicking on the link contained in a confirmation email sent for this purpose.
If you do not confirm, your registration will be automatically deleted from our database.
Providing the aforementioned data is mandatory; you can provide all other information voluntarily using our form.
-
To send the confirmation emails, we use the software SendGrid from Twilio Inc., 375 Beale Street, Suite 300, San Francisco, CA 94105, USA.
-
Twilio's privacy policy can be found at: https://www.twilio.com/legal/privacy
-
Your data will not be passed on to unauthorized third parties.
-
If you use our portal, we store the data required for the fulfillment of the contract until you finally delete your access.
In addition, we store the voluntary data provided by you for the duration of your use of the portal, unless you delete it beforehand.
You can manage and change all information in the protected customer area.
The legal basis for this is Art. 6 (1) (f) GDPR.
Furthermore, we store all content published by you for the operation of the websites.
Providing the websites with complete user-generated content is in our legitimate interest; the legal basis for this is Art. 6 (1) (f) GDPR.
7. Tools
Google Maps
-
On our websites, we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Maps is a web service for displaying interactive (land) maps to visually represent geographic information. By using this service, our location is shown to you and finding your way is facilitated.
-
As soon as you call up the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there.
This happens regardless of whether Google provides a user account via which you are logged in or whether no user account exists.
If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your Google profile, you must log out before activating the button.
Google stores your data (even for non-logged-in users) as usage profiles and evaluates them.
Such an evaluation is carried out in particular in accordance with Art. 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet needs.
You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
-
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
-
If you do not agree to the transmission of your data in the context of using Google Maps, it is also possible to completely disable the Google Maps web service by turning off the JavaScript application in your browser.
Google Maps and thus the map display on this website cannot then be used.
-
- Google's terms of use can be found at: http://www.google.de/intl/de/policies/terms/regional.html
-
- The additional terms of use for Google Maps can be found at: https://www.google.com/intl/de_US/help/terms_maps.html
-
- Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/
8. Use of Social Media
YouTube
-
Our websites use the embedding function of YouTube to display and play videos from the provider YouTube, which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
-
The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video is played back.
When the playback of embedded YouTube videos is started, the provider YouTube uses cookies to collect information about user behavior.
-
According to YouTube, these serve, among other things, to collect video statistics, improve user-friendliness, and prevent abusive actions.
If you are logged in to Google, your data will be directly associated with your account when you click on a video.
If you do not wish to be associated with your YouTube profile, you must log out before activating the button.
Google stores your data (even for non-logged-in users) as usage profiles and evaluates them.
Such an evaluation is carried out in particular in accordance with Art. 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet needs.
-
You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
-
In the context of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
-
Regardless of whether the embedded videos are played back, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations without our influence.
-
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
-
Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/
9. Your Rights as a Data Subject
The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:
-
- Right of access pursuant to Art. 15 GDPR:
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, the right to access such data and further information and a copy of the data in accordance with the legal requirements.
-
- Right to rectification pursuant to Art. 16 GDPR:
You have the right to obtain the completion of the data concerning you or the rectification of inaccurate data concerning you.
-
- Right to erasure pursuant to Art. 17 GDPR:
You have the right to demand that personal data concerning you be deleted immediately, provided that statutory retention obligations or other legal processing reasons do not prevent this.
-
- Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR.
-
- Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller.
-
- Right to withdraw consent pursuant to Art. 7 (3) GDPR:
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent.
-
- Right to lodge a complaint pursuant to Art. 77 GDPR:
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
10. Storage Duration of Personal Data
The storage period of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods).
After the expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of the contract and/or we have no legitimate interest in further storage.