The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
ev-pay GmbH
Münchner Straße 7
85354 Freising
Germany
+49 8161 4944453
info@ev-pay.eu
www.ev-pay.eu
The data protection officer of the controller is:
DataCo GmbH
Sandstr. 33
80335 Munich
Germany
+49 89 740045840
www.dataguard.de
On this page, we inform you about the processing of your personal data on the website. How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use or share your personal data if we have a legitimate purpose and legal basis for doing so.
Consent (Art. 6(1)(a) GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how to withdraw your consent, please refer to the subsections entitled ‘Exercising your rights’ in the following sections of this privacy policy.
Contract (Art. 6(1)(b) GDPR) – We need to use your data to fulfil a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps yourself before entering into this contract.
Legal obligation (Art. 6(1)(c) GDPR) – We need to use your data to comply with the law.
Vital interests (Art. 6(1)(d) GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.
Public task (Art. 6(1)(e) GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a statutory task, e.g. for a statutory function.
Legitimate interests (Art. 6(1)(f) GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not outweigh this.
Please note that we may not be able to provide you with our website services if your data is processed to fulfil a contract or legal obligation and you do not provide the requested data.
As explained in this privacy policy, we use various service providers to help us provide our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.
We have entered into agreements with all service providers to whom we share your data, obliging them to protect your data.
If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an ‘adequate’ data protection standard according to the European Commission, or by applying another protective measure, such as an extended contractual agreement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.
For example, when we use US service providers, we rely on either the SCC or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. The right to information (Art. 15 GDPR)
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and to the following information:
- Processing purposes
- Categories of personal data
- Recipients or categories of recipients
Planned storage period or criteria for determining this period - The existence of rights to rectification, erasure or
- restriction or objection
- Right to lodge a complaint with the competent supervisory authority
- Where applicable, the origin of the data (if collected from a third party)
- Where applicable, the existence of automated decision-making, including profiling, with meaningful
information about the logic involved, the scope and the expected effects - Where applicable, the transfer of personal data to a third country or international organisation
2. Right to rectification (Art. 16 GDPR)
If your personal data is incorrect or incomplete, you have the right to request that it be corrected or supplemented without delay.
3. Right to restriction of processing (Art. 18 GDPR)
If one of the following conditions is met, you have the right to request a restriction on the processing of your personal data:
- You dispute the accuracy of your personal data, for a period that allows us to verify the accuracy of the personal data.
- In the context of unlawful processing, you refuse to have the personal data deleted and instead request that the use of the personal data be restricted.
- We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims or, after you have objected to the processing, for the duration of the review of whether our legitimate reasons outweigh your reasons.
4. Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
You have the right to request the immediate deletion of your personal data if one of the following reasons applies:
- Your data is no longer necessary for the processing purposes for which it was originally collected.
- You withdraw your consent and there is no other legal basis for processing.
- You object to the processing and there are no overriding legitimate grounds for processing, or you object in accordance with Article 21(2) GDPR.
- Your personal data is being processed unlawfully.
- The erasure is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
- The personal data was collected in relation to information society services offered in accordance with Article 8(1) GDPR.
Please note that the above reasons do not apply if processing is necessary:
- To exercise the right to freedom of expression and information.
- To comply with a legal obligation or to perform a task carried out in the public interest and to which we are subject.
- For reasons of public interest in the area of public health.
- For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
- To assert, exercise or defend legal claims.
5. Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller.
6. Right to object to certain data processing (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
7. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
A list of the locally competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
1. Description and scope of data processing
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- The user’s operating system
- The user’s internet service provider
- Date and time of access
- Websites from which the user’s system accesses our website
This data is stored in our system’s log files. This data is not stored together with other personal data relating to the user.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
3. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In the case of data storage in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
5. Exercising your rights
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. The user may object to this. Whether the objection is successful must be determined by weighing up the interests involved.
1. Description and scope of data processing
When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you visit our website and at any time thereafter, you have the choice of whether to generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager.
Cookies are text files or pieces of information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can be sent to the entity that sets the cookie. Below, we describe the types of cookies we use:
We use technically necessary cookies that are required for the technical structure of the website.
Without these cookies, our website cannot be displayed (completely correctly) or the
support functions are not possible.
The following data is stored and transmitted by the technically necessary cookies:
- Language settings
- Use of website functions
We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not solely used to ensure the functionality of the website, but also collect other data. By setting cookies that are not technically necessary, the following data is processed:
- IP address
- Location of internet users
- Date and time of website visit
- Tracking of surfing behaviour
- Linking of website visits to other social media platforms
2. Purpose of data processing
The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. We require technically necessary cookies for the following applications:
- Application of language settings
- Functionality of the website
Cookies that are not technically necessary are used to improve the quality of our website, its content and thus our reach and profitability. By setting these cookies, we learn how the website is used and can thus continuously optimise our offering. In particular, these cookies serve the following purposes:
Statistics cookies collect usage data that provides us with information about how our visitors interact with our website. Content from video platforms and social media platforms is blocked by default. If external services are accepted, manual consent is no longer required to access this content.
3. Legal basis for data processing
The provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) apply to the storage of information on the end user’s terminal equipment and/or access to information already stored on the end user’s terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored on and accessed from your terminal equipment on the basis of Section 25 (2) No. 2 TDDDG. This storage and access to the information on your terminal equipment serves to facilitate your use of our website and to offer you our services as you wish. Some functions of our website do not work without the use of these cookies and therefore cannot be offered. Cookies are generally deleted after the end of the session (e.g. logging out or closing the browser) or after a specified period of time. Information on different storage periods for cookies can be found in the following sections of this privacy policy.
If cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. In this case, the basis for storing and accessing information is Section 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or grant it again retrospectively by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by adjusting the settings of your browser software accordingly. Please note that the browser settings you make will only apply to the browser you are using. If personal data is processed on your terminal device following the storage of and access to the information, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.
4. Exercising your rights
You may withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: available on all ev-pay pages (menu).
1. Description and scope of data processing
You can contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored. The data will be used exclusively for processing the conversation.
2. Purpose of data processing
In the event of contact being made by email, this also constitutes the necessary legitimate interest in the processing of the data.
3. Legal basis for data processing
The legal basis for processing the data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. Our legitimate interest is to respond to your enquiry sent by email in the best possible way. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Exercising your rights
If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. Please create the qualified text. All personal data stored in the course of establishing contact will be deleted in this case.
1. Description and scope of data processing
Our website features a contact form that can be used to contact us electronically. If a user chooses to do so, the data entered in the input mask will be transmitted to us and stored. The following data is stored when the message is sent:
- Email address
- Surname
- First name
- Telephone/mobile number
- Title, company, enquiry.
- Date and time
- The data entered and requested in 1.1.1.
2. Purpose of data processing
The processing of personal data from the input mask of the contact form or via the email address provided serves solely to process the contact request. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
3. Legal basis for data processing
The legal basis for processing the data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. Our legitimate interest is to respond to your enquiry, which you send to us via the contact form, in the best possible way. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the input mask of the contact form and that sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Exercising your rights
If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time in the following manner:
Please request the creation of the qualified text. In this case, all personal data stored in the course of contacting us will be deleted.
1. Description and scope of data processing
An application form is available on our website, which can be used for electronic applications. If an applicant chooses this option, the data entered in the input mask will be transmitted to us and stored. This data includes:
- Salutation
- Surname
- First name
- Address
- Telephone/mobile number
- Email address
- Salary expectations
- Details of training and education
- Language skills
- Curriculum vitae
- References
- Photo
- How did you find out about the vacancy?
Alternatively, you can also send us your application by email. In this case, we will record your email address and the data you provide in the email. After sending your application, you will receive confirmation of receipt of your application documents by email from us.
We also offer an applicant/talent pool. Your data will not be passed on to third parties. The data will be used exclusively for processing your application.
2. Purpose of data processing
The processing of personal data from the application form serves solely to process your application. In the event of contact by email, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the application form and to ensure the security of our information technology systems.
3. Legal basis for data processing
The legal basis for processing your data is the initiation of a contract at the request of the data subject, Art. 6(1)(b)(1) GDPR and Section 26(1)(1) BDSG. The legal basis for the processing of data within the framework of the applicant pool is the applicant’s express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future.
4. Duration of storage
After completion of the application process, the data will be stored for up to 6 months. Your data will be deleted after 6 months at the latest. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions. The additional personal data collected during the submission process will be deleted after a period of seven days at the latest.
Instagram
Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Irland
On our company page, we provide information and offer Instagram users the opportunity to communicate. If you perform an action on our Instagram company page (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public. However, as we generally have little or no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.
We use our company profile on social networks to communicate and exchange information with (potential) customers. In particular, we use the company profile for: We operate a company page on the LinkedIn platform to present our company, provide information about our products, services and news, and to get in touch with interested parties, business partners and applicants. The publications on the company profile may contain the following content:
- Information about products
- Customer contact
Every user is free to publish personal data through activities. Insofar as we process your personal data to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information.
If If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. The data generated by the company website is not stored in our own systems. We have put in place appropriate safeguards in the form of standard data protection clauses in accordance with Art. 46(2)(c) GDPR for the processing of your personal data in third countries. A copy of the standard data protection clauses can be requested from us. You can object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the ‘Your rights’ section of this privacy policy. To do so, please send us an informal email to When you visit our LinkedIn page, personal data is processed by the platform operator, LinkedIn Ireland Unlimited Company. We have no complete control over the data processing by LinkedIn. For more information about the processing of your personal data by Instagram and the corresponding options for objection, please click here:
Instagram: https://help.instagram.com/519522125107875
1. Scope of data processing
The company profile is used for job applications, information/PR and active sourcing. We have no information about the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in LinkedIn’s privacy policy.
On our site, we provide information and offer users the opportunity to communicate. The company profile is used for applications, information/PR and active sourcing. We have no information about the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy
If you engage in any activity on our company website (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public.
2. Legal basis for data processing
The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6(1)(f) GDPR. Our legitimate interest in this regard is to respond to your enquiry in the best possible way and to provide you with the requested information.
If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
3. Purpose of data processing
Our corporate website serves to inform users about our services. Users are free to publish personal data through their activities.
4. Duration of storage
The data generated by the company’s website is not stored in our own systems.
5. Exercising your rights
You may object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the ‘Your rights’ section of this privacy policy. To do so, please send us an informal email to the email address provided in this privacy policy. Further information on exercising your rights can be found here:
https://www.linkedin.com/legal/privacy-policy
The website is hosted on servers by a service provider commissioned by us. Our service provider is:
LEONEX Internet GmbH
Technologiepark 6, 33100 Paderborn.
Further information can be found in the provider’s privacy policy: on the Leonex website: www.leonex.de
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:
- Information about the browser type and version used
- The user’s operating system
- The user’s internet service provider
- Date and time of access
- Websites from which the user’s system accesses our website
This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimise its functions. The website server is located in Germany.
We use various service providers to provide the services offered on our website. In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for providing the basic service offered on the website in order to provide the relevant website service. If such services are required for additional services, extended functions or additional purposes, your personal data will only be passed on to service providers if you give your consent. You can revoke your consent to the use of integrated third-party services and manage your consent settings at any time here: available on all ev-pay pages (pop-up).
Use of Google Analytics 4 (GA 4)
1. Scope of processing personal data
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Analytics examines, among other things, how website visitors use our site. Google places cookies on your device for this purpose. During your visit, your user behaviour is recorded in the form of ‘events’. This allows personal data to be stored and evaluated, including:
First visit to the website
Interaction with the website, usage path
Clicks on external linksVideo usage
File downloads
Advertising impressions and clicks
Scroll behaviour (if scrolled to the bottom of the page)
Searches on the website
Language selection
Page visits
Location (region)
Your IP address (in abbreviated form)
Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
Your internet service provider
Referrer URL
IP address anonymisation is enabled by default in GA 4. This means that your IP address will be truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Further information on the processing of data by Google can be found here: https://policies.google.com/privacy
2. Purpose of data processing
We use GA 4 to evaluate the use of our online presence and to generate reports on the activities on our website. The reports are used to analyse the performance of our website and to target advertising at people who have already expressed an initial interest by visiting our site.
3. Legal basis for the processing of personal data
The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Art. 6 (1) (a) GDPR.
4. Duration of storage
Your personal data will be deleted after 2 months. This deletion takes place automatically once a month.
5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent prior to revocation. You can revoke your consent via our cookie consent tool. You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the ‘Do Not Track’ function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https:// noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/technologies/partner-sites
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google via the following link: https://adssettings.google.de
Use of WPML
1. Scope of processing personal data
We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our online presence in different languages. When you visit our online presence, WPML stores a cookie on your device to save your selected language setting. This allows personal data to be stored and evaluated, in particular the user’s activity (especially which pages have been visited and which elements have been clicked on) as well as device and browser information (especially the IP address and operating system).
Further information on the processing of data by WPML can be found here: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/
2. Purpose of personal data processing
WPML is used to enable us to present our online presence in multiple languages.
3. Legal basis for the processing of personal data
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in addressing visitors to our website in their native language.
4. Duration of storage
WPML stores cookies on your device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance
5. Exercising your rights
You can prevent WPML from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the ‘Do Not Track’ function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https:// noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on how to object to and remove WPML, please visit: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/
Use of Polylang
1. Description and scope of data processing
We use Polylang from WP SYNTEX, located at 28 Allée Jean Sébastien Bach (38090) Villefontaine, France. Polylang is a multilingual plugin for WordPress. We use Polylang to present our online presence in different languages. When you visit our website, Polylang stores a cookie on your device to save your chosen language setting. Further information about the collection and storage of data by Polylang can be found here: https://polylang.pro/privacy-policy/
2. Purpose of data processing
Polylang is used to enable us to present our online presence in multiple languages.
3. Legal basis for data processing
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in addressing visitors to our online presence in their native language.
4. Duration of storage
Polylang stores cookies on your device that save the language code of the last page you visited. This information is stored for a period of one year by default.
5. Exercising your rights
You can prevent Polylang from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the ‘Do Not Track’ function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https:// noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on how to object to and remove Polylang, please visit: https://polylang.pro/privacy-policy/
Use of Borlabs Cookie
1. Scope of personal data processing
We use Borlabs Cookie, a tool for managing cookie consent provided by Borlabs GmbH, 22305 Hamburg, Germany. Borlabs Cookie helps us manage and document the consent of website visitors for cookies and similar technologies.
When visitors interact with the consent banner, Borlabs Cookie processes data, including their cookie preferences, device and browser information, IP address, and consent history. This data is necessary for us to comply with data protection regulations. When visitors interact with the consent banner, Borlabs Cookie processes data, including their cookie preferences, device and browser information, IP address and consent history. This data is essential for us to comply with legal requirements and to respect the privacy preferences of our visitors.
2. Purpose of data processing
The main purpose of using Borlabs Cookie is to enable our website to comply with legal obligations under the GDPR and the TDDDG. By effectively managing cookie consent, we ensure that our website respects our visitors’ decisions regarding data protection and the use of cookies and related technologies.
3. Legal basis for the processing of personal data
The processing of personal data by Borlabs Cookie is based on the legal requirement to obtain and document the consent of website visitors for the use of cookies and similar technologies in accordance with Art. 6 (1) (c) GDPR and § 25 TDDDG.
4. Duration of storage
The personal data collected by Borlabs Cookie is stored for as long as necessary to document consent and comply with legal obligations. The storage period is determined by legal requirements for the documentation of consent. The data is securely deleted as soon as it is no longer needed for its intended purpose or when the legal retention periods expire.
5. Exercising your rights
For more information about how Borlabs Cookie processes personal data and about visitors’ rights, please refer to Borlabs Cookie’s privacy policy at: Borlabs Privacy Policy.
This privacy policy was created with the support of DataGuard.
