Privacy policy

The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Dr. Friedrich Betzer
Boardinghouse Luise5
Luisenstraße 5
69115 Heidelberg

 

Your data protection rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16GDPR),
  • deletion of your data stored by us (Art. 17GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18GDPR),
  • objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you can revoke this at any time with effect for the future.

You can submit a complaint to a supervisory authority at any time, e.g. to the competent supervisory authority in the federal state of your residence or to the authority responsible for us as the responsible body.

A list of the supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

 

Collection of general information when visiting our website

Nature and purpose of the processing:

When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

  • Ensuring a smooth connection of the website,
  • Ensuring the smooth use of our website,
  • evaluating system security and stability, and
  • for the optimisation of our website.

We do not use your data to draw conclusions about your person. Information of this kind will be statistically analysed anonymously, if necessary, in order to optimise our website and the technology behind it.

Legal basis and legitimate interest:

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Storage period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymised so that it is no longer possible to assign the calling client.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

 

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Storage period and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

 

Technically necessary cookies

Nature and purpose of the processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

We require cookies for the following applications:

Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents. Borlabs cookie does not process any personal data.

The cookie borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

You can also obtain information on all cookies used, their storage duration and the possibility of changing your cookie settings for our website via the following link:

Your cookie settings

Your user ID

Your personal user ID (UID) is:

This ID allows you to receive information from us about your cookie settings if required.

Your cookie selection history

DateVersionConsents

Legal basis and legitimate interest:

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Recipient:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.

Opposition

Please read the information about your right to object according to Art. 21 GDPR below.

 

Provision of chargeable services

Nature and purpose of the processing:

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to execute your order.

Legal basis:

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipient:

Recipients of the data are, if applicable, order processors.

Storage period:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered contents and services.

 

Contact form

Nature and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.

Legal basis:

The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipient:

Recipients of the data are, if applicable, order processors.

Storage period:

Data will be deleted no later than 6 months after the request has been processed.

If a contractual relationship is established, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

 

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

 

Information about your right to object according to Art. 21 GDPR

Right to object on a case-by-case basis

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

Change to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

 

Questions to the Data Protection Officer

If you have any questions about data protection, please send us an e-mail.

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).