Privacy Policy

Updated 02/07/2020

Privacy policy

We are pleased that you have visited our website (hereinafter referred to as "website"). This privacy policy also applies to our other services and online presences, such as our social media appearances and in particular to the use of the Generato App (hereinafter "App"). In the following, we will inform you in detail about the type, scope and purpose of the personal data collected, used and processed by us and inform you about your rights as a data subject.

We reserve the right to change the privacy policy at any time with effect for the future. If you visit our website or our app again, the updated and published data protection statement will apply. The current version of the Privacy Policy can be accessed, saved and printed out at any time on our website and app.

With regard to the terms used (e.g. personal data, person responsible), we refer to the definitions of the General Data Protection Regulation (GDPR).

 I. Name and address of the person responsible

Responsible in the sense of the EU Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

PBC Ventures UG

Managing Director: Paul Coch

Address: Denickestraße 4, 21073 Harburg

eMail: management@generato.com

 I. General information on data processing

1. Scope of processing

As a matter of principle, we collect and use personal data only to the extent that this is necessary to provide a functional website and our content and services within the framework of the app, you have given your consent or the processing of the data is permitted by a legal regulation.

2. Legal basis for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data.

When processing personal data which is necessary for the performance of a contract to which you are a party, Art. 6 Paragraph 1 lit. b GDPR serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if your interests, fundamental rights and freedoms do not outweigh the former interest,Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. Legitimate interests in the processing

If the processing of your personal data is based on Art. 6 para. 1 lit.f GDPR, our legitimate interest, unless otherwise stated, is the performance of our business activities. In all other respects, we have stated our purposes and interests within the framework of the above list of processing in each case.

4. Data erasure and storage duration

Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply or you revoke your consent. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. If the purpose of storage ceases to apply, if you revoke your consent or if a storage period prescribed by the European Directives and Regulations or any other competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

5. Recipient of the collected data / data transmission

Recipients of the data collected via our website are primarily us as a responsible company.In addition, at most, contract processors (web hosters, IT service providers, etc.) have access to the data collected. Compliance with the legal regulations is, however, guaranteed in this respect by means of processing contracts which we conclude with our processors based in the EU.  Data will only be transferred to so-called third countries outside the EU if and insofar as this is pointed out below.  

6. Need to disclose personal data

You can visit our website without personal data being collected. However, if you wish to make use of our services and benefits and in particular our app, the provision of personal data is mandatory for the execution of the contract.

7. Existence of automated decision making

We do not carry out automatic decision making or profiling in the sense of Art. 22 GDPR.

8. Data protection

We secure our website, app and other systems through comprehensive technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. These measures are subject to constant review and improvement in order to ensure the current state of the art.

  II. Data processing when using our website and our app

1. Access data in server log files

Our hosting provider automatically stores access data in so-called server log files every time our website and app is accessed.

In the case of our website this includes the date and time of access and your IP address.

In the case of our app, this includes the date and time of access, browser used and its version, operating system used, IP address and referrerURL (URL that you visited immediately before).

The temporary storage of the IP address by the system is necessary to enable the website and app to be delivered to your end device. For this purpose, your IP address must remain stored for the duration of the session.

The legal basis for the temporary storage of your data and log files isArt. 6 para. 1 lit. f GDPR.

This data is evaluated exclusively to ensure the permanent and trouble-free operation of the website and to improve the content of our website and app, as well as for transmission to law enforcement authorities in the event of a cyber attack and to ensure the security of our information technology systems. For this purpose, the above-mentioned data is stored for a maximum of 1 day. Data whose further storage is required for evidence purpose swill be stored until the final clarification of the respective incident.

The collection of data for the provision of the website and app and the storage of data in log files is mandatory for the operation of our website and app. There is therefore no possibility of objection.

2. Use of Cookies

In order to make visiting our website and our app attractive and to enable the use of certain functions, we use so-called "cookies" on our website. These are small text files which are stored and saved on your terminal device via a browser.

Many cookies contain a so-called cookie ID. It consists of a character string by which websites and servers can be assigned to a specific browser in which the respective cookie was stored.

We set the following cookies when you use both our website and our app:

Name of the cookie

Cookie function

Collected data

Storage duration

Google Analytics

Analysis of website visitors

Session-ID

Visit

Time spent

Device Type

26 month

Intercom Chat on website

Chat history

IP address

country of origin

9 months

The purpose of using technically necessary cookies is to simplify the use of our website and our app for you. Some functions of our website and app cannot be offered without the use of cookies. For these it is necessary that your browser is recognized even after a page change. If you do not accept or disable cookies, the functionality of our website and app may be limited.

The legal basis for the processing of personal data using necessary cookies is Art. 6 para. 1 lit. f GDPR.

We also use cookies on our website and our app, which enable us to analyse your surfing behaviour. We inform you about these in the corresponding section of this privacy policy.

Some third-party services that we integrate may also use cookies. Please refer to the websites of the respective providers for information on how they work and how they process data. The services used by us can be found in this data protection declaration.

When you visit our website and our app, you will be informed about the use of cookies. You can declare your consent to the processing of the personal data used in this context by using the so-called cookie banner. In this context, a reference to this privacy policy is also made. You can revoke your consent at any time with effect for the future.

The legal basis for the processing of personal data using cookies, which are not necessary for the operation of our website and our app, is Art. 6 para.1 lit. a GDPR with your consent.

C Cookies a restored on your end device and transmitted to us. You therefore have control over the use of cookies. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally or set it so that the setting of cookies is prevented and thus permanently contradict the setting of cookies. In addition, you can delete already set cookies at any time via your browser. This also applies to all third-party cookies listed below.

3. Data collection and use during registration and use of our services within the framework of our service

You have the possibility to register for the use of our app. When you create or register a user account, you must provide certain mandatory information to access and manage your user account ("Mandatory Information"). Mandatory data within the scope of registration are marked with an asterisk and are required for the conclusion of the user contract. Which data is collected can be seen from the respective input forms. Within the scope of the registration these are: Your name and your e-mail address. You must also create a password. If you do not provide this data, you will not be able to create a user account.

The legal basis for the processing of your data is the fulfilment of our contract with you according to Art. 6 para. 1lit. b GDPR.We use the information you provide us to authenticate you when you log in and to respond to requests to reset your password, to verify your authorization to manage the user account, to enforce the terms and conditions of use of the App and all related rights and obligations, and to contact you to send you technical or legal notices, updates, security messages or other communications regarding, for example, the management of the user account. We therefore use the data you provide us with only for the purpose of processing the contract and providing our services to be rendered within the scope of the contract. We may also pass on your data to one or more processors who will also use your data exclusively for internal use on our behalf.

We also store your IP address and the date and time of registration to prevent misuse of our app and to clarify any criminal offences committed. The storage of this data is therefore necessary for our own security. The legal basis for this processing of personal data is Art. 6 para. 1 lit. f GDPR. The aforementioned purposes also constitute our legitimate interest in data processing in accordance withArt. 6 Para. 1 lit. f GDPR.

Within the framework of the use of our services, we also use the data provided by you during registration.

The legal basis for the processing of your data is the fulfilment of our contract with you according to Art. 6 para. 1 lit. b GDPR.

As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

After complete processing of the contract or deletion of your account, your data will initially be blocked for further use and deleted after expiry of the statutory retention periods, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are legally permitted and about which we inform you below.

You have the possibility to object to the processing at any time and to delete your account.In such a case the contractual relationship with you cannot be continued.

4. Alternative registration via social log-in

Alternatively, you can also log in via so-called social log-ins with just a few clicks. An additional registration is not necessary in this case.

We will redirect you to the Social Log-in service after you have clicked the respective login button. There you can log in with your existing login data.By logging in, your profile of the Social Log-in service and our service are linked. Through the link we automatically receive your name and e-mail address from the Social Log-in service.

This information is mandatory for the conclusion of the contract in order to register and identify you. The legal basis for the processing of your data is accordingly the fulfilment of our contract with you Art. 6 para. 1 lit. b GDPR.

We use Google Sign-in. Google Sign-in is a service of Google LLC (www.google.de), 1600 Amphitheatre Parkway, Mountain View, CA 9403, USA("Google"). Google LLC has voluntarily certified itself under the US-EU Privacy Shield Agreement, thereby committing itself to comply with EU data protection requirements. The entity responsible for Germany is GoogleIreland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For more information about Google Sign-In, please see the Google Privacy Policy at: https://policies.google.com/privacy

5. Use of Facebook Custom Audience

We use on our website "Custom Audience" a remarketing feature of Facebook Ireland Limited, 4 Grand CanalSquare, Dublin 2, Ireland ("Facebook").

To perform the functions of "Costum Audience" we have implemented the remarketing pixel of Facebook on our website. Via this pixel a direct connection to the Facebook servers is established when visiting our website. This tells the Facebook server which subpage of our website you have visited. Facebook assigns this information to your personal Facebook user account.

This feature allows us to target you with targeted advertising by displaying personalized, interest-based Facebook ads when you visit the Facebook social network (available at www.facebook.com). The purpose of remarketing is to provide you with targeted advertising that shows you products that are of interest to you.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR if you have given your consent.

You can give your consent via our cookie banner and revoke it in the settings at any time with effect for the future.

You can find more information on the collection and use of data byFacebook, on your rights in this regard and on ways to protect your privacy in the Facebook data protection information at https://www.facebook.com/about/privacy/. If you do not want Facebook to associate the collected information directly with your Facebook user account, you can disable the "Custom Audience" remarketing feature here https://www.facebook.com/settings/?tab=ads#_=_.

You must be logged in toFacebook to do this.

6. Google AdSense

We use Google AdSense on our website, an online service that enables the placement of advertising on third party sites operated by Alphabet Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA ("GoogleAdSense"). The entity responsible for Germany is Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland. Through Google AdSense, personal data and information such as your IP address is transferred to AlphabetInc. in the USA for the purpose of recording and billing the advertisements displayed. The USA is an unsafe third country. However, Alphabet Inc. has voluntarily certified itself under the US-EU Privacy Shield Agreement, thereby committing itself to comply with EU data protection regulations. Alphabet Inc.may, under certain circumstances, pass on your personal data to third parties.

Google AdSense is based on an algorithm which selects the ads displayed on our website according to our content. Google AdSense allows an interest-based targeting of all visitors, which is done by creating individual user profiles. Google AdSense uses cookies for this purpose. By each individual call of a page of our website, on which a component of Google AdSense was integrated, your browser on your end device is automatically prompted to transmit data toGoogle AdSense for the purpose of online advertising and the billing of commissions. Thus Google AdSense gets knowledge about personal data which serveGoogle AdSense to determine the kind of the advertising to be played and to be able to trace the clicks on these advertising. Among other things GoogleAdSense can recognize that you have clicked on the advertisement on this website.

Google AdSense also uses counting pixels, a thumbnail graphic embedded in websites to enable log file recording and log file analysis, which allows statistical analysis. By means of the embedded pixel-code, Google AdSense can detect whether and when a website was opened by you and which links you clicked on.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR if you have given your consent.

You can give your consent via our cookie banner and revoke it in the settings at any time with effect for the future.

7. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (www.google.de), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google Analytics") on our website and our App. The entity responsible for Germany is Google Ireland Limited, Gordon House, Barrow Street,Dublin 4, Ireland.

GoogleAnalytics uses methods that enable an analysis of your use of the website and app, in particular from which website you came to our website or app (so-called referrers), which subpage you access or how often and for how long you view a subpage. Google Analytics uses cookies for this purpose. Each time you call up a page of our website and our app, on which Google Analytics has been integrated, your browser on your end device is automatically prompted to transmit data to Google Analytics for the purpose of analysis.

The generated information about your use of our website and our app can also be transferred to a Google LLC server in the USA and stored there. The USA is an unsafe third country. However, Google LLC has voluntarily certified itself under the US-EU Privacy Shield Agreement and has thus committed itself to comply with EU data protection regulations.

By activating IP anonymization on our website and our app, the IP address is shortened before transmission within the member states of theEuropean Union or in other states that are parties to the Agreement on theEuropean Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

Google will use this information on our behalf to evaluate the use of our website and our app by you and our other users, to compile reports on the activities within our website and our app and to provide us with further services related to the use of our website and app as well as internet use.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR if you have given your consent.

You can give your consent via our cookie banner and revoke it in the settings at any time with effect for the future.

The terms of use and privacy policy of Google and Google Analytics can be found here https://policies.google.com/privacy or here http://www.google.com/analytics/terms/de.html.

8. Firebase

We use the Google Firebase developer platform for our app, a service of Google LLC (www.google.de), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Firebase"). The entity responsible for Germany is Google Ireland Limited, Gordon House, BarrowStreet, Dublin 4, Ireland. Firebase partly transfers data to the USA. The USA is an unsafe third country. However, Google LLC has voluntarily certified itself under the US-EU Privacy Shield Agreement, thereby committing itself to comply with EU data protection requirements.

GoogleFirebase is a platform for developers of apps for mobile devices and websites.Google Firebase offers a variety of features, which are presented on the following overview page: https://firebase.google.com/products/

We use several functions of Firebase in our apps:

Firebase Analytics uses methods that enable an analysis of your use of the respective app, in particular which functions of the app you access, when you first open the app, uninstall or update the app.

We also use Firebase Crashlytics to stabilize and improve our apps. This involves collecting data about the terminal device you are using and the use of our apps(e.g. the time stamp, when the respective app was started and when the malfunction occurred), which enables us to diagnose and solve problems. When using Firebase Crash Report, your data is only collected in an anonymous form, so that neither Google LLC nor we can draw any conclusions about your person.

We use the Firebase Cloud Massaging service to send push messages or so-called in-app messages to your end device. If you use our apps via a push-capable end device, you can agree to receive "push notifications". In doing so, your terminal device will be assigned a pseudonymized Device Token ID, a unique connection number generated from the Device ID, which we can use to address the push messages or in-app messages to you. You can change your consent to be notified by push messages at any time in the settings in the apps.

Firebase and the personal data of the users processed by Firebase can be used together with further services of Google, such as Google Analytics and the Google marketing services. In this case, device-related information is also processed to identify mobile devices and the user.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR if you have given your consent.

You can give your consent via our cookie banner and revoke it in the settings at any time with effect for the future.

You can opt-out of the use of interest-based advertising by Google marketing services by adjusting the marketing settings provided by Google: https://adssettings.google.com/

Further information on data protection can be found in the data protection conditions https://policies.google.com/privacy of Google.

9. Social Media

In addition to this website, we also maintain presences in various social networks. If you visit such a presence, personal data may be transmitted to the provider of the social network. It is possible that, in addition to the storage of the data you specifically entered in this social network, further information may also be processed by the social network provider. Thus, your data is usually processed for market research and advertising purposes, among other things, to create corresponding user profiles and to display personalized advertising to you. For this purpose, the social network provider usually stores cookies on your end device, in which your usage behaviour and interests are stored. In addition, the social network provider may process the most important data of the computer system from which you visit it - for example your IP address, the type of processor used and browser version including plug-ins.

If you are logged in with your personal user account of the respective network while visiting such a network, this network can assign the visit to your account. If you do not wish to have such an assignment, you must log out of your account and delete the cookies before visiting our social media presence.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR. If you have given your consent to the processing to the respective provider of the social network, the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR.

We maintain a presence in the respective social networks in order to be able to communicate with you and inform you about our services. These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

For further information on the purpose and scope of data collection as well as on the further processing and use of your data and the possibility of opting out, please refer to the data protection regulations of the respective network:

Facebook

Facebook is operated by Facebook Ireland Ltd, 4 Grand Canal Square,Grand Canal Harbour, Dublin 2, Ireland. We have entered into a data sharing agreement with Facebook pursuant to Art. 26 GDPR. For more information on shared data processing, please see the Facebook terms and conditions.

Privacy policy: https://www.facebook.com/about/privacy/

Opt-Out: https://www.facebook.com/settings?tab=ads

Instagram

Instagram is operated by Instagram Inc, 1601 Willow Road, Menlo Park,CA, 94025, USA.

Privacy policy and opt-out: http://instagram.com/about/legal/privacy/

Twitter

Twitter is operated by Twitter Inc, 1355 Market Street, Suite 900, SanFrancisco, CA 94103, USA.

Privacy policy: https://twitter.com/de/privacy

Opt-out: https://twitter.com/personalization

Google/ YouTube

Google and Youtube are operated by Google LLC, 1600 AmphitheatreParkway, Mountain View, CA 94043, USA. The USA is an unsafe third country.However, Google LLC has voluntarily certified itself under the US-EU PrivacyShield Agreement, thereby committing itself to comply with EU privacy standards. The entity responsible for Germany is Google Ireland Limited, GordonHouse, Barrow Street, Dublin 4, Ireland.

Privacy policy: https://policies.google.com/privacy

Opt-out: https://adssettings.google.com/authenticated

LinkedIn

LinkedIn is operated by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2,Irland.

Privacy policy:https://www.linkedin.com/legal/privacy-policy

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing

Xing is operated by XING AG, Dammtorstraße 29-32, 20354 Hamburg,Germany.

Privacy policy and opt-out: https://privacy.xing.com/de/datenschutzerklaerung

Medium

Medium is operated by the A Medium Corporation, USA.

Privacy policy: https://policy.medium.com/medium-privacy-policy-f03bf92035c9

10. Integration of Youtube

We include videos from the youtube.com social network operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA94066, USA ("YouTube") on our website and app. YouTube LLC is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA94043-1351, USA. The entity responsible for Germany is Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website or app, your browser establishes a direct connection with the YouTube servers. Your browser is automatically prompted by the respective video embedded on our website or app to download a display of the corresponding component from YouTube. As part of this technical process, YouTube is informed which specific subpage you are visiting.

If you use the videos, the corresponding information - e.g. the activation of the play button - is transmitted from your browser to YouTube, possibly linked to your user account and stored.

The legal basis for the use of your data is Art. 6 para. 1 lit. f GDPR.

Our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR lies in the optimisation and economic operation of our website and our app.

If you are logged in with your personalGoogle account while visiting our website or our App, YouTube can assign the visit and the sub-pages you actually visit to your account.

If you don't have a Google Account, there is still the possibility that YouTube may store your IP address.

If you do not want this processing to take place, you must log out of your Google Account and delete your cookies before visiting our website and app.

You can object to the use of your data by Google at any time by clicking on the following link: https://adssettings.google.com/authenticated

For further information on data protection, please see the YouTube privacy policy https://policies.google.com/privacy.

11. Integration of GoogleMaps

We integrate theGoogle Maps API on our website, a map service for displaying maps and creating directions to help you find our location. Google Maps is operated by Google LLC (www.google.de), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The responsible entity for Germany is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google reserves the right to transfer data to Google LLC in the USA. However, Google LLC has voluntarily certified itself under theUS-EU Privacy Shield Agreement, thereby committing itself to comply with EU data protection requirements.

By visiting our website, Google receives information about the visit to our website and, if applicable, other log files. Google stores and uses the data for the purpose of advertising, market research and/or the design of its own services to meet the needs of the market. This cookie is usually not deleted by closing the browser, but expires after a certain time (up to 24 months), unless you delete it first.

The legal basis for the use of Google Maps is Art. 6 para. 1 lit. f GDPR.  

The purpose of the data processing is to make it possible to find our location.

You have the possibility to deactivate the service of Google Maps in a simple way and thus prevent the data transfer to Google:

To do this, deactivateJavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display. By using this website and not deactivating the JavaScript function, you expressly declare, in full knowledge of the data protection problems, that you agree to the processing of the data collected about you by Google in the manner described above and for the aforementioned purpose.

You can object to the use of your data by Google at any time by clicking on the following link: https://adssettings.google.com/authenticated

Further information on data protection can be found in the Google data protection regulations: https://policies.google.com/privacy

12. Newsletter and Newsletter Analysis with Mailchimp

You can register to receive our newsletter. To send our newsletter we use the newsletter mailing serviceMailChimp, which is operated by Rocket Science Group, LLC, 675 Ponce De LeonAve NE #5000, Atlanta, GA 30308, USA ("Mailchimp"). We transmit data to MailChimp in the USA as described below. The USA is an unsafe third country.However, MailChimp has voluntarily certified itself under the US-EU PrivacyShield Agreement and is committed to comply with EU data protection regulations.

Our newsletter appears regularly and contains information about new offers on our website and news about us.

To register, you must provide us with your e-mail address. You can voluntarily provide us with additional information, such as your name. The registration takes place in a so-called double opt-in procedure. After registering on our website, you will receive a confirmation e-mail from us in which you must confirm your registration once again. This entire process is documented and saved. This includes the storage of the time of registration and confirmation as well as your IP address. The collection of this data is necessary so that we can trace the processes in the event of misuse of the e-mail address and therefore serves as a legal safeguard. By subscribing to our newsletter, you agree to receive it.

The legal basis for the processing of your data after you have registered for the newsletter is Art. 6 para. 1 lit. a GDPR, if you have given your consent.

Your data will be stored on the servers ofMailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter. The evaluation takes place on our behalf, but MailChimp can also use the data for quality assurance and quality improvement of its own services.

So the "web-beacon" contained int he newsletter is retrieved from the server of MailChimp when opening the newsletter. In the course of this retrieval, information about the browser, your system, your IP address and the time of retrieval is collected.Additionally, information is collected if the newsletter is opened, when it is opened and which links are clicked. For technical reasons, this information can be assigned to you as recipient. However, it is not our intention to observe you as an individual user. The evaluations serve us much more to recognize the reading habits of our users in principle and to adapt our content to all users or to send different content according to the interests of our users.

You can revoke your consent to the storage and use of your personal data to receive the newsletter and the statistical survey described above at any time with effect for the future. To revoke your consent, you can use the link provided for this purpose in the newsletter, send us your revocation by e-mail to the following address: unsubscribe@generato.com

Your data will be deleted as soon as they are no longer required for the purpose of their collection. Your e-mail address will therefore be stored as long as the subscription to the newsletter is active.  

Further information on data protection can be found in the privacy policy https://mailchimp.com/legal/privacy/of MailChimp.  

13. E-Mail

On our website and our app we provide information due to legal regulations, which enables a fast electronic contact to us as well as a direct communication with us. This includes above all our e-mail address. As far as you contact us by e-mail, the personal data transmitted by you will be stored automatically.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Para. 1 lit. f GDPR. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

However, we will use the personal data transmitted by you exclusively for the processing of your specific inquiry. The data provided will always be treated confidentially.

Your details may be stored in a customer relationship management system (so-called CRM system) or another organisation tool for customer data.

The data will be deleted as soon as they are no longer required for the purpose of their collection. For personal data sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified.

If you contact us, you can object to the storage of your personal data at any time. In such a case the conversation cannot be continued.

14. Intercom

We use the Chat SystemIntercom, a service provided by Intercom Inc, 55 2nd Street, 4th Floor, SanFrancisco, CA 94105, USA ("Intercom"), to handle customer inquiries.We transmit the personal data described below to Intercom in the USA. The USA is a so-called unsafe third country. However, Intercom has voluntarily certified itself under the US-EU Privacy Shield Agreement and is committed to comply with EU data protection regulations.

Via Intercom we offer a live chat system to answer live support requests. For our app we also use theIntercom contact form.

If you contact us via the App's contact form, necessary data such as e-mail address, telephone number, the content of your messages, your website and your company will be collected in order to answer your request.

If you contact us via our chat, the free text you enter will be recorded in order to answer your request.

We also collect your location to segment you as a user for our support.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer service.

For further information on data protection, please refer to the declaration on the implementation of the basic data protection regulation https://www.intercom.com/terms-and-policies - privacy of Intercom.

15. Webflow

We use the contact form of Webflow, Webflow Inc. 39811th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow") to process customer inquiries via our website. We transmit the personal data described below to Webflow in the USA. The USA is a so-called unsafe third country. However, Webflow has voluntarily certified itself under the US-EU data protection agreement "Privacy Shield" and has thus committed itself to comply with the EU data protection regulations.

If you contact us via the contact form on the website, necessary data such as e-mail address, telephone number, the content of your messages, your website and your company will be collected in order to be able to answer your request.

The legal basis for the processing of your data isArt. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer service.

For further information on data protection, please refer to the data protection declaration https://webflow.com/legal/privacy of Webflow.

 III. Rights of data subjects

If your personal data is processed, you as a data subject within the meaning of the GDPRare entitled to the following rights:

1. Right to information (Art.15 GDPR)

In addition, you have the right to receive from us at any time and free of charge information about the personal data stored about you and a copy of this information. You also have a right to information regarding the following information:

Furthermore, you have the right of information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transfer.

2. Right of rectification (Art. 16 GDPR)

You have the right to request the immediate correction and/or completion of incorrect or incomplete personal data concerning you. We must make the correction without delay.

3. Right to restrict processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the following conditions is met:

Where the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

4.  Right of deletion (Art. 17 GDPR)

You have the right to request us to delete the personal data concerning you without delay if one of the following reasons applies and if the processing is not necessary:

If the personal data have been made public by us and if we, as data controller, are obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to these personal data or copies or replications of these personal data, unless the processing is necessary.

The right to deletion does not exist insofar as the processing is necessary:

5. Right to information

If you have asserted the right of rectification, erasure or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients.

6. Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you which you have provided us with in a structured, common and machine-readable format. You also have the right to have this data communicated to another responsible party without hindrance from us, provided that the processing is based on the consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been entrusted to us.

Furthermore, when exercising your right to data transfer in accordance with Art. 20 para. 1 GDPR, you have the right to request that personal data be transferred directly from us to another responsible party, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

The right to data transferability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest orin the exercise of official authority vested in the controller.

7. Right of objection (Art. 21 GDPR)

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Article 6, paragraph 1, letters e or f of theDPA. This also applies to profiling based on these provisions.

We no longer process personal data in the event of an objection, unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

To exercise your right of objection, you can contact us at any time. Right of revocation of a data protection.

You have the right to revoke your consent to the processing of personal data at any time.Revocation of your consent does not affect the lawfulness of the processing that has taken place on the basis of your consent until revocation.

8. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data concerning you is in breach of the DPA.

The supervisory authority to which the complaint has been lodged will inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Ready to code?
Start your free account.

Build better code with Generato.