Privacy Policy
Controller
The controller within the meaning of the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
AndRobin GmbH
Linienstraße 147
D-10115 Berlin
Germany
Email: hello@and-robin.de
Your rights as a data subject
You may exercise the following rights at any time using the contact details provided above:
- Access to the personal data we store about you and information about how it is processed (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Erasure of personal data we store about you (Art. 17 GDPR),
- Restriction of processing where legal obligations prevent us from erasing your data (Art. 18 GDPR),
- Objection to our processing of your data (Art. 21 GDPR), and
- Data portability where you have consented to the processing or entered into a contract with us (Art. 20 GDPR).
Where you have given us consent, you may withdraw it at any time with effect for the future.
You may lodge a complaint with a supervisory authority at any time, for example with the supervisory authority in your place of residence or the authority responsible for us as the controller.
A list of supervisory authorities for the non-public sector, including their addresses, is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing activities
Collection of general information when visiting our website
Nature and purpose of the processing
When you access our website without registering or otherwise submitting information, general information is collected automatically. This information, recorded in server log files, may include your browser type, operating system, internet service provider's domain name, IP address, and similar technical data.
It is processed in particular for the following purpose:
- Ensuring technically reliable delivery and optimisation of the website.
We do not use this data to draw conclusions about you personally. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.
Legal basis and legitimate interest
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of the website and ensuring system security and abuse detection.
Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.
Storage period
Data in server log files that could identify a data subject is stored for no longer than 14 days unless a security-related incident occurs, such as a DDoS attack.
In the event of such an incident, server log files are retained until the incident has been resolved and fully investigated.
Whether provision is required
Providing the personal data described above is neither legally nor contractually required. However, the website cannot function without the IP address, and individual services may be unavailable or limited.
Objection
Please refer to the information on your right to object under Art. 21 GDPR below.
Contacting us
Nature and purpose of the processing
You can contact us using the email addresses provided. In this case, we store the personal data transmitted with the email. This may include the date and time of sending, the email address, IP addresses, and information about the servers involved in the communication.
Regardless of the communication method, we collect the content of your enquiry. Your data is stored so that we can communicate with you individually.
Legal basis
Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in enabling straightforward communication.
If you contact us to request an offer, processing is carried out to take steps prior to entering into a contract pursuant to Art. 6(1)(b) GDPR.
Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.
Storage period
The data is deleted after your enquiry has been processed and the communication has ended.
If a contractual relationship is established, statutory retention periods apply. For accounting and tax purposes, these are generally six or ten years.
Whether provision is required
Providing your personal data is voluntary. However, we can only process your enquiry if you provide the necessary information and the reason for contacting us.
Objection
Please refer to the information on your right to object under Art. 21 GDPR below.
Information on your right to object under Art. 21 GDPR
Right to object on grounds relating to your particular situation
You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you based on Art. 6(1)(f) GDPR. This also applies to profiling based on that provision within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
Recipient of an objection
AndRobin GmbH
hello@and-robin.de
Changes to this privacy policy
We reserve the right to amend this privacy policy so that it continues to meet current legal requirements or reflects changes to our services, for example when introducing new services. The updated privacy policy will apply to your next visit.
Questions about data protection
If you have any questions about data protection, please email the controller named above.
Copyright notice
This privacy policy was created with the assistance of activeMind AG – experts in external data protection officers (version #2024-10-25).