Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on this Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the "Note on the Responsible Entity" section of this privacy policy.

How do we collect your data?

Your data is collected by you providing it to us. This can be, for example, data that you enter into a contact form. Other data is automatically collected or with your consent when you visit the website through our IT systems. These are mainly technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have a right of appeal to the competent supervisory authority. For this and other questions regarding data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools

When visiting this website, your surfing behavior can be statistically evaluated. This is mainly done with so-called analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

Variomedia AG
August-Bebel-Straße 68
14482 Potsdam
Germany

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host or hosts. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via a website.
External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

If consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Our host(s) will process your data only to the extent necessary to fulfill its contractual obligations and will follow our instructions regarding this data.

We use the following host(s):

Variomedia AG
August-Bebel-Straße 68
14482 Potsdam
Germany

Contract Data Processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a legally required contract that ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

When you use this website, various personal data is collected.
Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g., communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Note on the Responsible Entity

The responsible entity for data processing on this website is:

REBASE3 GmbH
Kemnitzer Dorfstraße 12b
14542 Werder (Havel)
Contact: datenschutz@s4lab.de

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Storage Period

Unless a specific storage period is mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General Notes on Legal Bases for Data Processing on this Website

If you have given your consent to data processing, we process your personal data based on Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In case of an explicit consent to the transfer of personal data to third countries, the data processing is also based on Art.
49 para. 1 lit. a GDPR. If you have given consent to the storage of cookies or access to information on your device (e.g., via device fingerprinting), the processing is based on § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data is processed to fulfill a contract or to carry out pre-contractual measures, the processing is based on Art. 6 para. 1 lit. b GDPR. Furthermore, your data may be processed if it is necessary to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR.
The data processing can also be carried out based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Information on the specific legal bases for data processing in each individual case can be found in the following paragraphs of this privacy policy.

Recipient of Personal Data

In the course of our business activities, we work with various external entities. It may be necessary to transfer personal data to these external entities.

We only disclose personal data to external entities if this is necessary as part of fulfilling a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure based on Art. 6 para. 1 lit. f GDPR, or if another legal basis allows the data transfer. When using data processors, we only disclose personal data of our customers based on a valid contract for data processing. In the case of joint processing, a contract for joint processing is concluded.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of data processing carried out before the revocation remains unaffected by the revocation.
Right to Object to the Collection of Data in Special Cases and to Direct Advertising (Art. 21 GDPR)

Please send your cancellation to: datenschutz@s4lab.de.

Right to object to data collection in specific cases as well as against direct marketing (Art. 21 GDPR)

If the data processing is carried out based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms or the processing serves to assert, exercise, or defend legal claims (objection according to Art. 21 para. 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection according to Art. 21 para. 2 GDPR).

Right of Appeal to the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have a right of appeal to a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation. The right of appeal is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

The use of contact information published within the framework of the imprint obligation for sending unsolicited advertising and informational materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as through spam emails.

4. Data Collection on this Websitee

Cookies

Our websites use "cookies." Cookies are small data packets that do not harm your device. They are either temporary for the duration of a session (session cookies) or permanent (persistent cookies) on your device. Session cookies are automatically deleted after your visit, while persistent cookies remain until you delete them or your web browser automatically removes them. Cookies can be first-party (from us) or third-party (from external companies).
Various cookies serve different functions. Necessary cookies, essential for specific website functions, are stored based on Art. 6 para. 1 lit. f GDPR. If consent is required for storing cookies and similar recognition technologies, processing is based on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be revoked at any time.
You can configure your browser settings to be informed about cookies, allow cookies on a case-by-case basis, exclude the acceptance of cookies for specific cases or in general, and enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Details about cookies and services used on this website can be found in the privacy policy.

Friendly Captcha

We use the Friendly Captcha service. This involves integrating a JavaScript element into the source code that loads the software in the background. Your end device calculates the solution to a crypto puzzle for the service, which is used to determine whether the visitor is a human or whether the use is abusive due to automated, machine processing (e.g. bots).
To prevent fraudulent activities, the service is typically used in the following context: Forms (enquiries, contact, password reset), orders, login pages. The service helps REBASE3 to prevent automated attacks that can lead to risks in the company's infrastructure. It also protects our customers from becoming potential victims of cybercrime.

Google Analytics 4

If you have given your consent, Google Analytics 4 is used on this website, a web analysis service by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited. Google Analytics uses cookies for analyzing your website usage, and information collected is typically transmitted to and stored on Google servers in the USA.

During your website visit, user behavior in the form of "events" is recorded. Events may include page views, initial website visits, session starts, visited web pages, your click path, interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, viewed/clicked ads, language settings, referrer URL, approximate location, visit date and time, IP address (in truncated form), technical information about your browser and devices used, and your internet service provider.

The purpose of processing this information, performed on behalf of the website operator, is to evaluate your website usage and compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data may include Google Ireland Limited, Google LLC, and Alphabet Inc.

Third-Country Transfer

For the USA, the European Commission adopted an adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Despite the global distribution of Google servers and the possibility of transmission to third countries (such as Singapore), EU standard contractual clauses have been concluded with the provider.

Storage Duration

Data sent by us and associated with cookies are automatically deleted after 2 [OR: 14] months. The maximum lifespan of Google Analytics cookies is 2 years. Data with expired retention periods is automatically deleted once a month.

Legal Basis

The legal basis for this data processing is your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 S. 1 TTDSG.

Revocation

You can revoke your consent at any time by accessing the cookie settings through the main menu and changing your selection. The legality of processing until revocation remains unaffected.

You can also prevent the storage of cookies by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, it may lead to restricted functionality on this and other websites. Additionally, you can prevent the collection of data generated by the cookie related to your website usage (including your IP address) and the processing of this data by Google by either:

a. Not giving your consent to set the cookie, or
b. Downloading and installing the browser add-on to disable Google Analytics HERE.
For more information on the terms of use for Google Analytics and data protection at Google, please visit Google Analytics Terms of Service (https://marketingplatform.google.com/about/analytics/terms/de/) and Google Privacy Policy (https://policies.google.com).