Privacy Policy

We are pleased that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this privacy policy, we would like to inform you about the extent to which data is collected when using our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.
Controller:
bracketlab GmbH
Richard-Wagner-Str. 12
50674 Cologne
Germany
Register court: Cologne
Register number: HRB 111868
Data Protection Officer:
Johann Böhmer
Salierrring 32
50677 Cologne
Email: dsb@bracketlab.ai
Data Processing
Google Analytics:
  1. Nature and Purpose of the Processing
    2. This website uses Google Analytics, a web analysis service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses "cookies," which are text files stored on your computer and allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be truncated by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet use. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. The purposes of data processing are the evaluation of the use of the website and the compilation of reports on website activities. Further related services will be provided based on the use of the website and the internet.
  2. Legal Basis of the Processing
    3. The processing of the entered data is based on the consent of the user (Art. 6 para. 1 lit. a GDPR).
  3. Data Categories
    1. IP address (shortened/anonymized)
  4. Recipients
    1. Employees of the IT and marketing department of bracketlab GmbH
    2. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  5. Storage Periods
    6. Data will only be processed as long as the corresponding consent is in place. After that, they will be deleted unless there are legal retention obligations. For contact in this regard, please use the contact details provided at the beginning of this privacy policy.
  6. Legal/Contractual Requirement
    7. The provision of your personal data is voluntary, solely based on your consent. If you block access, it may lead to functional limitations on the website.
  7. Third-Party Transfer
    8. The processing does not occur outside the European Union (EU) or the European Economic Area (EEA).
  8. Revocation of Consent
    9. You can withdraw your consent to the storage of your personal data at any time with effect for the future. You can inform us of your withdrawal via the contact method provided at the beginning of this privacy policy.
    You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in such a case, you may not be able to use all features of this website.
  9. Automated Decision Making and Profiling
    10. Using the Google Analytics tracking tool, the behavior of website visitors can be evaluated and their interests analyzed. For this purpose, we create a pseudonymous user profile.
Google Tag Manager:
  1. Nature and Purpose of the Processing
    2. The use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation is performed on a domain or cookie level, this remains effective for all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.
  2. Legal Basis of the Processing
    3. The processing of the entered data is based on the consent of the user (Art. 6 para. 1 lit. a GDPR).
  3. Data Categories
    4. The Google Tag Manager does not send or store any data.
  4. Recipients
    5. Recipients of the data are our internal employees and Google as the processor. For this, we have concluded the corresponding data processing agreement with Google.
  5. Storage Periods
    6. Data will only be processed as long as the corresponding consent is in place. After that, they will be deleted unless there are legal retention obligations. For contact in this regard, please use the contact details provided at the beginning of this privacy policy.
  6. Legal/Contractual Requirement
    7. The provision of your personal data is voluntary, solely based on your consent. If you block access, it may lead to functional limitations on the website.
  7. Third-Party Transfer
    8. The processing does not occur outside the European Union (EU) or the European Economic Area (EEA).
  8. Revocation of Consent
    9. You can withdraw your consent to the storage of your personal data at any time with effect for the future. You can inform us of your withdrawal via the contact method provided at the beginning of this privacy policy.
    You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in such a case, you may not be able to use all features of this website.
  9. Profiling
    10. Using Google Tag Manager, the behavior of website visitors can be evaluated and their interests analyzed.
OpenAI API: For the chatbot on the website:
  1. Nature and Purpose of the Processing
    2. When you use the live chat tool to contact us, the data you voluntarily provide (name, email address, message) is processed for the purpose of answering your inquiry within the framework of contractual fulfillment. Additionally, this tool is used to maintain our overriding legitimate interests in effective and improved customer communication. In the context of processing on our behalf, the third-party provider OpenAI provides us with the live chat tool. All data collected through the use of the chat tool is processed on their servers.
  2. Legal Basis of the Processing
    3. The processing takes place in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website and in accordance with a consent under Art. 6 para. 1 S. 1 lit. b GDPR.
  3. Data Categories
    4. Chat contents
  4. Recipients
    5. Recipients of the data are internal employees and OpenAI as the processor.
  5. Storage Periods
    6. After the purpose is fulfilled and the use of OpenAI by us ends, the data collected in this context will be deleted.
  6. Legal/Contractual Requirement
    7. The provision of your personal data is voluntary, solely based on your consent. Without providing your personal data, we cannot grant you access to our offered content and services.
  7. Third-Party Transfer
    8. The processing does not occur outside the European Union (EU) or the European Economic Area (EEA).
  8. Revocation of Consent
    9. You can withdraw your consent to the storage of your personal data at any time with effect for the future. You can inform us of your withdrawal via the contact method provided at the beginning of this privacy policy.
  9. Automated Decision Making and Profiling
    10. As a responsible company, we do not use automated decision-making or profiling in this data processing.
Cookies:
  1. Nature and Purpose of the Processing
    2. Like many other websites, we also use so-called "cookies."
    Cookies are simple files that store information about our online offering and your use of it. These small files are optionally created by your browser when using our website and are locally stored on your respective device. This does not mean that we directly gain knowledge of your identity.
    Therefore, we generally distinguish between technically necessary and non-necessary cookies:
    Technically Necessary Cookies ('First Party Cookies')
    These cookies are required for the operation of a website and are essential for navigating and using its functions. These cookies are not permanently stored on your computer or device and are deleted when you close your browser. They are called session cookies.
    The following technically necessary cookies are used on our site:
    1. Cookie Consent
      2. Stores the user's consent status for cookies on the current domain.
      Expiration: 1 year / Type: HTTP
    Non-Necessary Cookies
    Non-necessary cookies are usually functional cookies, performance cookies, and marketing & third-party cookies that enable us to track the number of visitors and traffic sources to measure and improve the website’s performance. They also help identify if there are issues or errors on certain pages, which pages are most popular, and how visitors navigate the website.
    1. Functional Cookies
      2. Functional cookies are used to store input, such as the username or language preference, to offer improved and personalized functions to website visitors.
    2. Performance Cookies
      3. Performance cookies are used to track visits and individual activities on websites. They serve to statistically capture and evaluate website usage.
    3. Marketing & Third-Party Cookies
      4. Marketing & third-party cookies come from external advertising companies and are used to collect information about the websites visited by the user to create targeted advertising for the user.
    The following non-necessary cookies are used by us:
    Google ( Learn more about the provider )
    1. _ga
      2. Used to send data to Google Analytics about the device and behavior of the visitor. Tracks the visitor across devices and marketing channels.
      Expiration: 2 years / Type: HTTP
    2. _ga_#
      3. Used to send data to Google Analytics about the device and behavior of the visitor. Tracks the visitor across devices and marketing channels.
      Expiration: 2 years / Type: HTTP
    3. _gat
      4. Used to send data to Google Analytics about the device and behavior of the visitor. Tracks the visitor across devices and marketing channels.
      Expiration: 1 day / Type: HTTP
    4. _gid
      5. Used to send data to Google Analytics about the device and behavior of the visitor. Tracks the visitor across devices and marketing channels.
      Expiration: 1 day / Type: HTTP
  2. Legal Basis of the Processing
    3. The use of technically necessary cookies ('First Party Cookies') is possible without the consent of the website visitor and is based on a legitimate interest in the economic operation and optimization of our website and services according to Art. 6 para. 1 S. 1 lit. f GDPR.
    The use of non-necessary cookies, such as functional cookies, performance cookies, and marketing & third-party cookies, is subject to the consent of the website visitor in accordance with Art. 6 para. 1 S. 1 lit. a GDPR.
  3. Data Categories
    1. IP address
    2. Used browser
    3. Used operating system
    4. Internet connection
    5. Session ID of the cookie
  4. Recipients
    5. Recipients of the data are internal employees and Google as the processor.
  5. Storage Periods
    6. The user can configure their web browser to prevent cookies from being saved on their device or to be asked each time whether they agree to the setting of cookies. Cookies that have already been set can be deleted at any time by the user. The functionality can be found in the help function of the respective web browser.
    General deactivation of cookies may lead to functional limitations of this website.
  6. Legal / Contractual Requirement
    7. The provision of your personal data in cookies is voluntary for non-necessary cookies, solely based on your consent (so-called opt-in cookies). Even the use of preset, technically necessary cookies (so-called opt-out cookies) can be prevented via the settings of your browser. However, without consent, the service and functionality of our website cannot be guaranteed. Additionally, certain services may not be available or may be restricted.
  7. Third-Party Transfer
    8. The processing does not occur outside the European Union (EU) or the European Economic Area (EEA).
  8. Revocation of Consent
    9. You can withdraw your consent to the storage of all cookies at any time with effect for the future in your browser settings.
  9. Automated Decision Making and Profiling
    10. As a responsible company, we do not use automated decision-making or profiling in the collection of cookies.
Data Security
The personal data of each individual who is in a contractual, pre-contractual, or other relationship with our company deserves special protection. We aim to maintain our data protection standards at a high level. Therefore, we focus on the continuous development of our data protection and data security concepts. We are committed to protecting your privacy and treating your personal data confidentially. To prevent manipulation, loss, or misuse of the data stored by us, we take extensive technical and organizational security measures that are regularly checked and adapted to technological advancements. This includes the use of recognized encryption procedures (SSL or TLS). However, we would like to point out that due to the structure of the internet, it is possible that privacy regulations and the aforementioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, data disclosed in an unencrypted manner – for example, when done by email – can be read by third parties. We do not have technical influence here. It is the user's responsibility to protect the data they provide against misuse through encryption or other means.
Rights of the Data Subject
If your personal data is processed, you are considered a data subject according to the GDPR. Data subjects have the following rights against the controller:
  1. Right to access (Art. 15 GDPR)
  2. Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
  3. Right to restriction of processing (Art. 18 GDPR)
  4. Right to notification in connection with rectification or erasure of your personal data or restriction of processing (Art. 19 GDPR)
  5. Right to data portability (Art. 20 GDPR)
  6. Right to object (Art. 21 GDPR)
  7. Right to withdraw consent given. The lawfulness of processing based on consent before the withdrawal remains unaffected (Art. 7 para. 3 GDPR)
  8. Right to complain to a supervisory authority (Art. 77 GDPR)
Our Right to Change the Policy
As changes to the law or internal processes may require an adjustment of this privacy policy, we ask you to read this privacy policy regularly. The privacy policy can be accessed at any time under www.bracketlab.de/datenschutz. We therefore reserve the right to change this policy at any time in compliance with data protection regulations.