Privacy Policy

This Privacy Policy informs you of the extent to which we process your personal data (hereinafter referred to as “data”).

1. Party responsible for data processing

In accordance with the provisions of the General Data Protection Regulation (“GDPR”), the controller responsible for data processing is:
branchbob GmbH
Legal representative: Marc Köhler
Böckstraße 21
68159 Mannheim, Germany
Email: support@branchbob.com

2. Contact details for our data protection officer

Dr. Sebastian Kraska
Marienplatz 2
80331 Munich, Germany
Email: email@iitr.de

3. General information about data processing

We process data in connection with our business operations and the operation of our website.
This also includes disclosure by means of transmission to third parties and, if applicable, so-called third countries outside of the European Union (“EU”) and the European Economic Area (“EEA”). In cases where we transfer data outside of the EU or EEA, we have noted this accordingly below.

4. Data processing

Details regarding specific data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

a)          Log file when you visit our website

We log your visit to our website. In doing so, we process:

·              Name(s) of our website(s) accessed;
·              Date and time of access;
·              The quantity of data transferred;
·              Browser type and version;
·              Your operating system;
·              Referrer URL (previously visited website);
·              Your IP address;
·              The calling provider.
Pursuant to Art. 6(1)(f) GDPR, the legal basis for processing this data is our overriding legitimate interest in the uninterrupted availability and security of our website.
The log file is deleted after seven days unless it is required in order to investigate or verify specific violations of the law of which we have become aware within the retention period.

b)  Hosting

We use the services of web hosting providers who process the data referred to above along with all other data associated with the operation of this website (log file associated with website visits) on our behalf.
Pursuant to Art. 6(1)(f) GDPR, the legal basis for processing this data is our overriding legitimate interest in providing access to our website.

c) Contacting us

If you contact us, we process the following data you provide for the purpose of handling and responding to your inquiry: email address, name – if provided by you – and your message.
The legal basis for processing this data is our obligation to perform a contract and/or to perform our pre-contractual obligations in accordance with Art. 6(1)(b) GDPR and/or our overriding legitimate interest in the processing of your inquiry in accordance with Art. 6(1)(f) GDPR.

d) Contacting us in connection with applying for employment

If you contact us in order to send us an application for employment, e.g. by email or using our contact form, data you have provided (e.g. name, email address, desired location, etc.), your message as well as application documents you have provided, will be processed exclusively for purposes of evaluating and responding to your application for employment.
The legal basis for processing this data is primarily section 26 of the Federal Data Protection Act. This provision allows the processing of data required in connection with the decision to establish an employment relationship.
Should this data be required after completion of the application process, e.g. in connection with legal action, data may be processed in pursuit of our legitimate interests under Art. 6(1)(f) GDPR, namely in order to establish and/or defend legal claims.

e) Contract performance and data management in connection with the provision of services

We process a variety of data in connection with the provision of our services and in connection with the initiation or performance of any contracts between us and you.
If you have engaged us to provide a service, we will process your data (if provided: name, contact details, address) and all information required to fulfill the contract, exclusively for purposes of performing and completing the contractual relationship.
Without limitation, this includes appropriate advice and support, correspondence with you, issuing an invoice and complying with our accounting and tax-related obligations.
Processing this data is performed on the basis of Art. 6(1)(b) GDPR and in order to comply with our legal obligations pursuant to Art. 6(1)(c) GDPR.
Your data will be shared with third parties if necessary to perform the contract.
In particular, this includes disclosure to supervisory authorities for correspondence purposes and to establish and defend your rights.
In such cases, we undertake all suitable measures to limit the disclosure of personal data to the minimum needed to accomplish the intended purpose.

f) Customer account

We process your master data (name, address, email address, bank details) as well as your user data (user name, password) in connection with opening and using a customer account. This allows you to manage your orders and contracts and we are able to identify you as a customer. The legal basis for processing this data is your consent pursuant to Art. 6(1)(a) GDPR. 

g) Cookies

We use so-called cookies on our website. Cookies are small text files that are placed on your respective device (PC, smartphone, tablet, etc.) and stored in your browser.
Purposes
We use technical cookies to ensure the proper functioning of our website. For example, these cookies make it possible to navigate the website or allow us to offer other basic functions on the website.
Furthermore, we use optional cookies that provide us additional information, for example for purposes of analyzing data traffic or for advertising and marketing purposes.
Duration
Cookies placed on your device remain for varying periods:
Session cookies: These cookies are automatically deleted from your device upon closing your web browser.
Persistent cookies: These cookies remain on your device even after you have closed your web browser and, for example, permit us to recognize you the next time you visit our website.

Cookie providers

Cookies that we place directly are referred to as first-party cookies. By contrast, third-party cookies are placed by external websites, for example when displaying content (advertisements, images, tracking pixels, etc.).
Legal basis for data processing
As a general rule, the legal basis for processing data by means of cookies is your consent pursuant to Art. 6(1)(a) GDPR or our overriding legitimate interest in the optimization and assurance of functionality of our website pursuant to Art. 6(1)(f) GDPR.

Withdrawal and objection

When data processing is performed on the basis of your consent, you may withdraw your consent at any time with prospective effect (so-called “opt-out”). In the case of data processing on the basis of our legitimate interests, you may object to further data processing with prospective effect.
You may withdraw your consent using the opt-out link in the section of the Privacy Policy discussing the relevant service.
Information about objecting to data processing can be found in Section 9.d. of this Privacy Policy.
Browser settings for cookies
In addition, you can prevent or limit future data processing by cookies by selecting the appropriate settings in your browser, for example by choosing to disable cookies. Cookies that have already been saved may be deleted using your browser settings. Additional information about the relevant browser settings can be found at the following links:
Mozilla Firefox: support.mozilla.org/en/kb
Internet Explorer: https://support.microsoft.com/en-us/help/17442/
Google Chrome: https://support.google.com/accounts/
Opera: http://www.opera.com/help
Safari: https://support.apple.com/kb/PH17191?

Our cookies

Please find additional information about specific cookies in use, their respective purpose and duration in our section on cookies.

h) Analysis/marketing

 

aa) Google services

We use a variety of services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) on our website. It is possible that this may result in the transfer of data to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, in the United States. For such cases, Google LLC has submitted to the EU-US-Privacy Shield.
 

The certification may be accessed at:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data protection can be found at:
https://policies.google.com/privacy?hl=en&gl=de
 

Google Analytics

We use the Google Analytics tracking tool on our website. We use Google Analytics in order to evaluate your use of the website, to compile reports on website activities within the website and in order to provide other services associated with website use and thus improve overall user-friendliness.
When using Google Analytics, interactions by website visitors are primarily logged with the aid of cookies and subject to systematic analysis.
Details about cookies in use may be found in our cookie settings.
We use Google Analytics with the “anonymizeIP()” extension. This shortens IP addresses within the member states of the European Union and the European Economic Area. In cases where data is sent to a Google server in the United States, the complete IP address will be sent in exceptional cases and shortened there. Accordingly, it is generally not possible to associate this data with an identifiable person. In particular, it is no longer possible to associate the data with the website visitor’s computer or device.
The following data is processed in connection with the use of Google Analytics:
 
· 3 bytes of the IP address for the website visitor’s calling system (anonymized IP address);
· The website accessed;
· The website from which the user called up the website accessed (referrer);
· The sub-pages called up on the website accessed;
· Dwell time on the website or subpage;
· The frequency with which the website is accessed.
 
According to information provided by the company, Google will not associate your IP address with any other data held by Google.
 
The legal basis for processing this data is our overriding legitimate interest in the optimum marketing of our online offerings pursuant to Art. 6(1)(f) GDPR.
You can object to the data collection at any time with future effect by using the Google Analytics deactivation add-on for browsers athttps://tools.google.com/dlpage/gaoptout?hl=en or use the following opt-out link: Link.
Please note the supplemental comments on the use of Google data within the Google partner network at: http://www.google.com/intl/de/policies/privacy/partners/

Google Ads

We use Google Ads, an online advertising program by Google Inc., on our website. This involves the use of so-called conversion tracking. A cookie is placed when you click on an advertisement displayed by Google. This cookie expires after 30 days and is not used to personally identify users. If you visit certain pages of this website and the cookie has not yet expired, Google and we are able to tell that you clicked on the advertisement and were redirected to that page.
The information obtained using conversion cookies is used to create statistics for Ads customers who have opted to use conversion tracking.
 
The legal basis for processing this data is your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with prospective effect by disabling the Google conversion tracking cookie using your web browser settings or by using the disabling add-on for browsers provided by Google at: https://support.google.com/ads/answer/7395996.
 

bb) Hotjar

We use Hotjar on our website, an analytical service provided by Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians, Malta (“Hotjar”). Hotjar uses cookies and other technologies to collect information about the behavior of our users and their devices, in particular the IP address of the device (recorded and stored in anonymous form only during your website use), screen size, device type (unique device identifiers), information about the browser in use, location (country only), preferred language for displaying our website. Hotjar stores this information in a pseudonymous user profile on our behalf.
The legal basis for processing this data is our overriding legitimate interest in the optimum marketing of our online offerings pursuant to Art. 6(1)(f) GDPR.
 
You can prevent the collection of data by enabling the do-not-track option in your browser or object to it via mouse click as described below. An opt-out cookie will be placed on your computer to prevent data collection if you uncheck the box below. Please note, however, that you must place the cookie again if you delete cookies from your browser.
Opt Out:hotjar.com/privacy/do-not-track
 

i) Third-party content

 
We use dynamic content (“Content”) from third parties in order to optimize the display and offerings on our website. When visiting the website, a request is automatically sent to the respective content provider’s server via an interface. Certain log data (e.g. the user’s IP address) is transferred as part of this process. Dynamic content is then transmitted to, and displayed on, our website.
We use third-party content in connection with the following functionalities:

aa) Intercom Live Chat

On our website, we have provided you the opportunity to contact us directly using the Live Chat function. For this option, we use a service provided by Intercom, Inc., 55 Second Street, Suite 400 San Francisco, CA 94105 United States (“Intercom”). When you use the chat function, messages you enter are transmitted to Intercom’s servers and processed by us for the purpose of responding and communicating with you.
 
The legal basis for processing this data is our obligation to perform a contract and/or to perform our pre-contractual obligations in accordance with Art. 6(1)(b) GDPR and/or our overriding legitimate interest in the processing of your inquiry in accordance with Art. 6(1)(f) GDPR.
Intercom is certified under:
https://www.privacyshield.gov/participant?id=a2zt0000000TNQvAAO&status=Active
Further information is available at: https://www.intercom.com/legal/privacy

bb) Fontawesome

We use external fonts provided by Fontawesome in order to make your visit to our website more user-friendly. When you visit a web page, they are loaded from servers operated by Fonticons, Inc (“Fontawesome”). Fontawesome places cookies on your browser. However, according to information provided to us, the IP address of the user’s device is transmitted to Fontawesome and stored there.
The legal basis for processing this data is our overriding legitimate interest in the optimum marketing of our online offerings pursuant to Art. 6(1)(f) GDPR.
 

7. Data storage period

We only retain personal data for as long as it is necessary for the purposes for which it is processed or until you withdraw your consent. The retention period for certain data can be up to 10 years irrespective of the processing purposes in the event we must comply with statutory retention obligations.

8. Your rights as a data subject

a) Access

Upon request, you may receive information about all personal data that we have stored about you at any time and free of charge.

b) Rectification, erasure, restriction of processing (blocking), objection

Should you no longer agree to the retention of your personal data or should such data have since become incorrect, we will arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law) upon instruction from you. The same applies if we only intend to process data to a limited extent in future. You have the right to object in particular in those cases in which your data is required for the performance of a task that is in the public interest or in our legitimate interest, as well as profiling based on this data. You also have such a right to object in the case of data processing for the purpose of direct marketing.

c) Data portability

Upon request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can, if you wish, transmit your data to another controller.

d) Right to withdraw consent with prospective effect

You can withdraw your consent at any time with prospective effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

e) Right to lodge a complaint

In addition, you have the right to lodge a complaint with a supervisory authority:
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

f)  Limitations

The rights described above do not apply to data for which we are not able to identify the data subject, e.g. if anonymized for analysis purposes. Information, erasure, blocking, rectification or transfer to another company may be possible with regard to this data if you provide us additional information that enables us to make such an identification.

9.  Exercising your rights as a data subject

For questions regarding the processing of your personal data, for information, rectification, blocking, objection or erasure of data, or a request to transfer your data to another company, please contact support@branchbob.com.

Status: 14.05.2020