Legal Documents

PRIVACY POLICY

1

Introduction and Contact Information of the Data Controller

(1)
We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to personally identify you.
(2)
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Michael Pacharzyna, Just-Lab.de, Freeheit 11A, 24257 Schwartbuck, Germany, Phone: +49 15780319562, Email: [email protected]. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2

Data Collection When Visiting Our Website

(1)
When you use our website purely for informational purposes, i.e., if you do not register with us or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data that are technically necessary for us to display the website to you:
  • Website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (where applicable, in anonymized form)

Processing is carried out on the basis of our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. The data are not disclosed or otherwise used. However, we reserve the right to review server log files retrospectively should there be concrete evidence of unlawful use.
(2)
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock icon in your browser address bar.
3

Hosting & Content Delivery Network

(1)
For hosting our website and displaying the page content, we use a provider that provides its services, either itself or through selected subcontractors, exclusively on servers within the European Union. All data collected on our website are processed on these servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties.
(2)
Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
4

Cookies

(1)
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in your web browser's cookie settings overview.
(2)
To the extent that cookies used by us process personal data, processing is carried out either for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR, where consent has been given pursuant to Art. 6 para. 1 lit. a GDPR, or to safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in ensuring the best possible functionality of the website and a customer-friendly and effective design of your visit to the website.
(3)
You can configure your browser so that you are informed when cookies are set and can decide whether to accept them on a case-by-case basis, or block cookies in specific cases or in general.
(4)
Please note that if you do not accept cookies, the functionality of our website may be limited.
5

Contact

(1)
WhatsApp Business
You have the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Art. 6 para. 1 lit. b GDPR in order to process and respond to your inquiry. On the basis of the same legal ground, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) so that we can assign your inquiry to a specific matter.
If you use our WhatsApp contact for general inquiries (for example, about our range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Art. 6 para. 1 lit. f GDPR, on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data is always used solely to respond to your inquiry via WhatsApp. It is not disclosed to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in that address book to a server of its parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains exclusively the WhatsApp contact details of users who have themselves contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, upon first using the app on their device by accepting WhatsApp's terms of use, to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR. A transfer of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thereby excluded.
The purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your related rights and options for protecting your privacy, can be found in WhatsApp's privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.
In connection with the processing described above, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
(2)
When you contact us (e.g., via contact form or email), personal data are collected. The data collected when a contact form is used are indicated on the relevant contact form. These data are stored and used exclusively for the purpose of responding to your inquiry or contacting you and for the associated technical administration.
The legal basis for processing these data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, Art. 6 para. 1 lit. b GDPR provides an additional legal basis for the processing. Your data will be deleted once your inquiry has been fully processed. This is the case when the circumstances indicate that the matter concerned has been conclusively resolved, provided that no statutory retention obligations prevent deletion.
6

Use of Customer Data for Direct Marketing

(1)
Advertising by Mail
On the basis of our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your postal address and – to the extent we have received this additional information from you within the context of the contractual relationship – your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6 para. 1 lit. f GDPR, and to use this data to send you interesting offers and information about our products by mail.You may object to the storage and use of your data for this purpose at any time.
7

Web Analytics Services

(1)
Trackboxx
This website uses the web analytics service provided by the following provider: Christian Pust, Dorfstr. 12, 22956 Grönwohld, Germany
To evaluate your user behavior, the service does not use cookie-based tracking. Instead, it uses website data from web servers and information that your web browser transmits to the web server when retrieving websites. This information is combined into a numerical key (so-called hashing), which makes it possible to track usage of this website on an access-related basis over a 24-hour period and record it statistically. However, no information is read from your device's storage, nor is any information stored on your device.
If personal data is also processed during the described operations, this processing is carried out on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes pursuant to Art. 6 para. 1 lit. f GDPR.
You can permanently object to the future collection and storage of your visitor data using the opt-out function provided on our website for this purpose.

Trackboxx web analytics

The tracking preference is currently unavailable.
8

Website Functionalities

(1)
Google Customer Reviews (formerly the Google Certified Merchant Program)
We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to obtain customer reviews from users of our website. After using our services, you will be asked on our website whether you would like to participate in an email survey conducted by Google.
If you give your consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. Your review will then be combined with our other reviews and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. In addition, your review will be used for Google Seller Ratings. The use of Google Customer Reviews may also involve the transfer of personal data to Google LLC servers in the USA.
You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google's privacy policy can be found here:https://business.safety.google/intl/de/privacy/
9

Tools and Other Services

(1)
sevDesk
To handle accounting, we use the service of the cloud-based accounting software from the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany
The provider processes incoming and outgoing invoices as well as, if applicable, bank transactions of our company to automatically capture invoices, match them to transactions, and create financial accounting in a semi-automated process.
We have concluded a data processing agreement with the provider that ensures the protection of our customers' data and prohibits any unauthorized disclosure to third parties.
To the extent that personal data is processed in this process, processing is carried out on the basis of our legal obligation to maintain proper accounting records pursuant to Art. 6 para. 1 lit. c GDPR.
(2)
Cloudflare
For security purposes, this website uses the service provided by the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA.
The provider protects the website and the associated IT infrastructure against unauthorized third-party access, cyberattacks, viruses, and malware. We collect users' IP addresses and, where applicable, other data relating to your behavior on our website (in particular URLs accessed and header information) in order to detect and prevent illegitimate website access and threats. The collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, the provider may automatically block it from accessing the website. The information collected in this way is transferred to and stored on a server operated by the provider.
The data processing described is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in protecting the website against harmful cyberattacks and maintaining the structural and data integrity and security of the website.
We have concluded a data processing agreement with the provider which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
(3)
Adobe Acrobat Sign
For digital document signing, we use the services of the following provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland
The service enables you to sign documents with a legally valid electronic signature from any device.
For this purpose, the service collects, stores, and transmits your electronic signature for verification and proof of signing as well as usage data of the device used (in particular the IP address) and certain transaction data.
Processing is carried out on the basis of our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management pursuant to Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.
10

Rights of the Data Subject

(1)
Applicable data protection law grants you the following data-subject rights against us as the controller with regard to the processing of your personal data (rights of access and intervention); the legal basis cited for each right governs the conditions under which it may be exercised:
  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to be informed pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.
(2)
RIGHT TO OBJECT
WHERE WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
WHERE WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
11

Duration of Storage of Personal Data

(1)
The duration of storage of personal data is determined on the basis of the respective legal basis, the processing purpose, and – if applicable – additionally on the basis of the respective statutory retention period (e.g., commercial and tax retention periods).
(2)
When personal data are processed on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned are stored until you withdraw your consent.
(3)
If statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, those data are routinely deleted once the retention periods have expired, provided that they are no longer required for contract performance or the initiation of a contract and/or we no longer have a legitimate interest in continued storage.
(4)
When personal data are processed on the basis of Art. 6 para. 1 lit. f GDPR, those data are stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
(5)
When personal data are processed for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, those data are stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.
(6)
Unless the other information in this policy concerning specific processing situations indicates otherwise, stored personal data are deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
We provide voluntary translations of our legal texts for our international customers. These translations are for informational purposes only; we assume no responsibility for the accuracy and completeness of the translations. Only the German version is legally binding. In case of discrepancies between language versions, the German version shall prevail.