Privacy Policy
We are pleased that you are visiting our website. We respect your privacy.
Data protection and data security when using our website are very important to us.
With this Privacy Policy, we inform you about the extent to which data is collected
when you use our website and for which purposes we use this data. We also inform you
about your rights in this regard.
Controller:
bracketlab GmbH
Richard-Wagner-Straße 129
50674 Cologne
Germany
Register court: Cologne
Registration number: HRB 111868
Data Protection Officer:
Johann Böhmer
Salierrring 32
50677 Cologne
Email: dsb@bracketlab.de
Data processing
Google Analytics:
- Nature and purpose of the processing
- Legal basis for the processing
- Categories of data
- IP address (truncated/anonymised)
- Recipients
- Employees of the IT and marketing department of bracketlab GmbH
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Retention periods
- Statutory/contractual requirement
- Third-country transfer
- Withdrawal of consent
- Automated decision-making and profiling
This website uses Google Analytics, a web analytics service of Google Building Gordon House,
4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies”, text files that are stored on your
computer and enable an analysis of your use of the website. The information generated by the cookie about your use
of this website is generally transmitted to a Google server in the USA and stored there. Due to IP anonymisation
being activated on these web pages, your IP address will, however, be truncated by Google within member states of the
European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only
in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf
of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports
on website activities and to provide further services related to website and Internet use to the website operator. The IP
address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. The purposes
of processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the
website and the Internet, further related services shall then be provided.
The processing of the entered data is carried out on the basis of user consent (Art. 6(1)(a) GDPR).
Data in this context will only be processed as long as the corresponding consent exists. It will then be deleted unless
statutory retention obligations prevent deletion. For contact in this context, please use the contact details provided at the
beginning of this Privacy Policy.
The provision of your personal data is voluntary and solely based on your consent. If you block access, this may lead to functional
restrictions on the website.
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
You may withdraw your consent to the storage of your personal data at any time with effect for the future. You may notify us of your withdrawal at any time via the contact option specified at the beginning of these data protection notices.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser add-on available at the following link: “Browser add-on to disable Google Analytics”.
With the help of the Google Analytics tracking tool, the behaviour of website visitors can be evaluated and interests analysed. For this purpose, we create a pseudonymous user profile.
Google Tag Manager:
- Nature and purpose of the processing
- Legal basis for the processing
- Categories of data
- Recipients
- Retention periods
- Statutory/contractual requirements
- Third-country transfer
- Withdrawal of consent
- Profiling
Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which deploys the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access these data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.
The processing of the entered data is carried out on the basis of user consent (Art. 6(1)(a) GDPR).
Google Tag Manager does not send or store data.
Recipients of the data are internal employees and Google as Processor. For this purpose, we have concluded the corresponding Data Processing Agreement (DPA) with Google.
Data in this context will only be processed as long as the corresponding consent exists. It will then be deleted unless statutory retention obligations prevent deletion. For contact in this context, please use the contact details provided at the beginning of this Privacy Policy.
The provision of your personal data is voluntary and solely based on your consent. If you block access, this may lead to functional restrictions on the website.
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
You may withdraw your consent to the storage of your personal data at any time with effect for the future. You may notify us of your withdrawal at any time via the contact option specified at the beginning of these data protection notices. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent.
With the help of the Google Tag Manager tool, the behaviour of website visitors can be evaluated and interests analysed.
Hotjar:
- Nature and purpose of the processing
- Legal basis for the processing
- Categories of data
- Recipients
- Employees of the IT department
- Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe
- Retention periods
- Statutory/contractual requirement
- Third-country transfer
- Withdrawal of consent
- Automated decision-making and profiling
We use Hotjar to better understand the needs of our users and to optimise the offering on this website. With the help of Hotjar’s technology, we gain a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click, what they like and dislike, etc.) and this helps us align our offering to user feedback. Hotjar uses cookies and other technologies to collect information about our users’ behaviour and their end devices (in particular the IP address of the device (collected and stored only in anonymised form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor we will use this information to identify individual users or merge it with further data about individual users. Further information can be found in Hotjar’s Privacy Policy (https://www.hotjar.com/legal/policies/privacy).
The processing of the entered data is carried out on the basis of user consent (Art. 6(1)(a) GDPR).
Pseudonymised user profile
Data in this context will only be processed as long as the corresponding consent exists. It will then be deleted unless statutory retention obligations prevent deletion. For contact in this context, please use the contact details provided at the beginning of this Privacy Policy.
The provision of your personal data is voluntary and solely based on your consent. If you block access, this may lead to functional restrictions on the website.
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA), as Hotjar Ltd is based in Malta.
You may withdraw your consent to the storage of your personal data at any time with effect for the future. You may notify us of your withdrawal at any time via the contact option specified at the beginning of these data protection notices. You can object to the storage by Hotjar of a user profile and information about your visit to our website as well as to the setting of Hotjar tracking cookies on other websites by clicking this opt-out link (https://www.hotjar.com/legal/compliance/opt-out).
With the help of the Hotjar tracking tool, the behaviour of website visitors can be evaluated and interests analysed. For this purpose, we create a pseudonymous user profile.
VWO (Visual Website Optimizer):
- Nature and purpose of the processing
- Legal basis for the processing
- Categories of data
- Recipients
- Retention periods
- Statutory/contractual requirement
- Third-country transfer
- Withdrawal of consent
- Automated decision-making and profiling
VWO (Visual Website Optimizer) is a tool for conducting A/B tests and conversion optimisation. It enables us to test different variants of a website or an element in order to find out which version performs better – e.g. in terms of clicks, form submissions or dwell time. Anonymised user data are collected to generate statistically significant results.
For the purpose of website analysis on this website, technologies of VWO | Digital Experience Optimisation automatically collect and store data from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymised usage profiles are not merged with personal data about the bearer of the pseudonym without separate, explicit consent being granted.
The processing of the entered data is carried out on the basis of user consent (Art. 6(1)(a) GDPR).
Website data
Recipients of the data are internal employees and VWO as Processor.
Once the purpose ceases to apply and our use of VWO ends, the data collected in this context will be deleted.
The provision of your personal data is voluntary and solely based on your consent. Without the provision of your personal data, we cannot grant you access to our content and services.
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
You can withdraw your consent at any time with effect for the future.
As a responsible company, we do not use automated decision-making or profiling for this data processing.
OpenAI API: For the chatbot on the website:
- Nature and purpose of the processing
- Legal basis for the processing
- Categories of data
- Recipients
- Retention periods
- Statutory/contractual requirement
- Third-country transfer
- Withdrawal of consent
- Automated decision-making and profiling
If you use the live chat tool to contact us, the data you voluntarily enter there (name, email address, message) will be processed by us for the purpose of responding to your enquiry in the course of contract processing. In addition, the use of this tool serves to safeguard our overriding legitimate interests, within the framework of a balancing of interests, in effective and improved customer communication. As part of processing on our behalf, the third-party provider OpenAI provides the services for the provision of the live chat tool for us. All data collected in the context of using the chat tool are processed on its servers.
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and on the basis of consent pursuant to Art. 6(1)(b) GDPR.
Chat content
Recipients of the data are internal employees and OpenAI as Processor.
Once the purpose ceases to apply and our use of OpenAI ends, the data collected in this context will be deleted.
The provision of your personal data is voluntary and solely based on your consent. Without the provision of your personal data, we cannot grant you access to our content and services.
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
You may withdraw your consent to the storage of your personal data at any time with effect for the future. You may notify us of your withdrawal at any time via the contact option specified at the beginning of these data protection notices.
As a responsible company, we do not use automated decision-making or profiling for this data processing.
Cookies:
- Nature and purpose of the processing
- Cookie Consent
- Functional cookies
- Performance cookies
- Marketing & third-party cookies
- _ga
- ga#
- _gat
- _gid
- Legal basis for the processing
- Categories of data
- IP address
- Browser used
- Operating system used
- Internet connection
- Session ID of the cookie
- Recipients
- Retention periods
- Statutory/contractual requirement
- Third-country transfer
- Withdrawal of consent
- Automated decision-making and profiling
Like many other websites, we also use so-called “cookies”.
Cookies are simple files that store information about our web offering and your usage. These small files are optionally created by your browser through your use of our website and stored locally on your end device. This does not mean that we directly obtain knowledge of your identity. The use of cookies serves to make the use of our offering more pleasant for you.
We therefore fundamentally distinguish between technically necessary and non-necessary cookies:
Technically necessary cookies (“first-party cookies”)
are required for the operation of a website and are essential to navigate it and use its functions. These cookies are not permanently stored on your computer or device and are deleted when you close the browser. These are so-called session cookies.
The following technically necessary cookies are used by us:
Stores the user’s consent status for cookies on the current domain.
Expiry: 1 year / Type: HTTP
Non-necessary cookies
Non-necessary cookies, on the other hand, are mostly functional cookies, performance cookies and marketing & third-party cookies that make it possible, for example, to record and count the number of visitors and traffic sources in order to measure and improve the performance of the website. They also help to identify whether there are problems or errors on certain pages, which pages are most popular and how visitors navigate the website.
Functional cookies are used to store entries already made, such as the user name or language selection, and thus offer the website visitor improved and personalised functions based on this.
Performance cookies are used to track visits and individual activities on websites. They serve to statistically record and evaluate the use of websites.
Marketing & third-party cookies originate, among others, from external advertising companies and are used to collect information about the websites visited by the user in order, for example, to create targeted advertising for the user.
The following non-necessary cookies are used by us:
Google (Learn more about the provider)
Used to send data to Google Analytics about the device and the visitor’s behaviour. Tracks the visitor across devices and marketing channels.
Expiry: 2 years / Type: HTTP
Used to send data to Google Analytics about the device and the visitor’s behaviour. Tracks the visitor across devices and marketing channels.
Expiry: 2 years / Type: HTTP
Used to send data to Google Analytics about the device and the visitor’s behaviour. Tracks the visitor across devices and marketing channels.
Expiry: 1 day / Type: HTTP
Used to send data to Google Analytics about the device and the visitor’s behaviour. Tracks the visitor across devices and marketing channels.
Expiry: 1 day / Type: HTTP
The use of technically necessary cookies (“first-party cookies”) is possible without the website visitor’s consent and is subject to a legitimate interest in the economic operation and optimisation of our website and services within the meaning of Art. 6(1)(f) GDPR.
The use of non-necessary cookies, such as functional cookies, performance cookies and marketing & third-party cookies, is subject to the website visitor’s consent pursuant to Art. 6(1)(a) GDPR.
Recipients of the data are internal employees and Google as Processor.
Users can set their web browser to generally prevent the storage of cookies on their end device or to prompt them each time whether they agree to cookies being set. Cookies that have already been set can be deleted by the user at any time. How this works is described in the help function of the respective web browser.
General deactivation of cookies may lead to functional restrictions of this website.
The provision of your personal data in cookies for non-necessary cookies is voluntary and solely based on your consent (so-called opt-in cookies). You can also block the use of preset, technically necessary cookies (so-called opt-out cookies) via your browser settings. Without consent, however, the service and the functionality of our website are not guaranteed. In addition, individual services may be unavailable or restricted.
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
You may withdraw consent for all cookies at any time with effect for the future in your browser settings.
As a responsible company, we refrain from using automated decision-making or profiling when collecting cookies.
Data security
The personal data of every individual who is in a contractual, pre-contractual or other relationship with our company deserves special protection. Our aim is to maintain our level of data protection at a high standard. We therefore rely on the continual development of our data protection and data security concepts. We are committed to protecting your privacy and treating your personal data confidentially. In order to avoid manipulation, loss or misuse of your data stored with us, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technological progress. This includes, among other things, the use of recognised encryption procedures (SSL or TLS). However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the aforementioned security measures are not observed by other persons or institutions outside our area of responsibility. In particular, data disclosed without encryption – e.g. if this is done by email – can be read by third parties. We have no technical influence on this. It is the user’s responsibility to protect the data they provide against misuse by means of encryption or in another way.
Data subject rights
If personal data concerning you as a user are processed, you are a data subject within the meaning of the GDPR. Data subjects have the following rights vis-à-vis the Controller:
- Right of access (Art. 15 GDPR)
- Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to notification in connection with the rectification or erasure of your personal data or restriction of processing (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent given. The lawfulness of data processing carried out until the withdrawal remains unaffected due to the consent valid up to that point. (Art. 7(3) GDPR)
- Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)
Our right to amend this Policy
As statutory changes or changes to our internal company processes may make it necessary to adapt this Privacy Policy, we ask you to read this Privacy Policy regularly. The Privacy Policy can be accessed at any time at www.bracketlab.de/datenschutz. We therefore reserve the right to amend these policies at any time in compliance with data protection regulations.