Imprint & Data Protection
sitebrunch GmbH
Eifflerstraße 43
22769 Hamburg
Authorized representatives
Johannes Zimmer, Managing Director
Andreas Siegel, Managing Director
Commercial register: Hamburg District Court
Register number: HRB 185517
VAT ID: DE366675561
Contact:
johannes.zimmer at sitebrunch.com
Privacy Policy
To obtain information about personal data, the purpose, and the parties to whom this data is disclosed, please contact the owner.
Types of collected dataThe owner does not provide a list of the collected personal data. Full details on each type of processed personal data will be provided in the designated sections of this privacy policy or specifically through explanatory texts displayed prior to data collection.
Personal data may be provided voluntarily by the user or, in the case of usage data, automatically collected when this application is used.
Unless otherwise specified, providing all data requested by this application is mandatory. Refusal to provide such data may make it impossible for this application to provide its services to the user. In cases where this application explicitly states that data provision is voluntary, users may choose not to provide such data without any consequences for the availability or functionality of the service.
Users who are unclear about which personal data are mandatory can contact the provider.
Any use of cookies – or other tracking tools – by this application or by providers of third-party services used by this application is for the purpose of providing the service requested by the user, as well as for all other purposes described in this document. Users are responsible for any personal data of third parties that are collected, published, or shared through this application.
The data processing is carried out using computers or IT-based systems following organizational procedures and methods strictly related to the specified purposes. In addition to the controller, other persons may have access to the data (staff in charge of administration, sales, marketing, legal department, system administrators) either internally or externally, and in this case, if necessary, designated by the controller as data processors (such as technical service providers, delivery companies, hosting providers, IT companies, or communication agencies) may operate this application and have access to the data. An up-to-date list of these parties can be requested from the provider at any time.LocationThe data are processed at the provider's headquarters and at any other locations where the parties involved in the data processing are situated.
Depending on the location of the users, transfers of data may involve transferring the user's data to a country other than their own. To learn more about the location of the processing of the transmitted data, users can consult the section with detailed information on the processing of personal data.Retention periodUnless otherwise specified in this document, personal data will be processed and stored for as long as necessary for the purpose for which it was collected, and may be retained for a longer period, if required for a legal obligation or based on the user's consent.
Further Information for Users
Legal basis of processing
The provider may process personal data of users only if one of the following applies:
The users have given their consent for one or more specific purposes.
The data collection is necessary for the performance of a contract with the user and/or for pre-contractual measures taken.
The processing is necessary for compliance with a legal obligation to which the provider is subject.
The processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider.
The processing is necessary for the purposes of the legitimate interests pursued by the provider or a third party.
In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a statutory or contractual requirement or a requirement necessary to enter into a contract.
Further information on the retention period
Unless otherwise specified in this document, personal data will be processed and stored for as long as necessary for the purpose for which it was collected and may be retained longer if required to fulfill a legal obligation or based on the user's consent.
Accordingly, the following applies:
Personal data collected for the purposes of fulfilling a contract between the provider and the user will be stored until the complete fulfillment of this contract.
Personal data collected to safeguard the legitimate interests of the provider will be retained as long as necessary to fulfill these purposes. Users can obtain further information about the legitimate interests of the provider in the relevant sections of this document or by contacting the provider.
Furthermore, the provider is entitled to retain personal data for a longer period if the user has consented to such processing, as long as the consent is not withdrawn. In addition, the provider may be required to keep personal data for a longer period if necessary to comply with a legal obligation or by order of an authority.
After the retention period expires, personal data will be deleted. As a result, the right to access, the right to erasure, the right to rectification, and the right to data portability may not be exercised after the retention period has expired.
The rights of users under the General Data Protection Regulation (GDPR)
Users can exercise certain rights regarding their data processed by the provider.
Users have the right, within the limits permitted by law, in particular to:
Withdraw consent at any time. If the user has previously consented to the processing of personal data, they can withdraw their consent at any time.
Object to the processing of their data. The user has the right to object to the processing of their data when the processing is based on a legal basis other than consent.
Obtain information about their data. The user has the right to know whether the data is being processed by the provider, obtain information about specific aspects of the processing, and obtain a copy of the data.
Verify and request rectification. The user has the right to verify the accuracy of their data and request for its updating or rectification.
Request restriction of processing their data. Users have the right to request the restriction of processing their data. In this case, the provider will process the data only for storage purposes.
Request deletion or removal of personal data. Users have the right to request the provider to delete their data.
Receive their data and transfer it to another controller. The user has the right to receive their data in a structured, commonly used, and machine-readable format and, where technically feasible, to transmit it without hindrance to another controller.
File a complaint. Users have the right to file a complaint with the competent supervisory authority.
Users also have the right to be informed about the legal basis of the data transmission abroad or to an international organization that is subject to international law or established by two or more countries, such as the UN, as well as to be informed about the security measures taken by the provider to protect their data.
Details regarding the right to object to processing
If personal data are processed in the public interest, in the exercise of an official authority vested in the provider, or to safeguard the legitimate interests of the provider, the user may object to this processing by stating a justification related to their particular situation.
Users are informed that they can object to the processing of their personal data for direct marketing purposes at any time free of charge and without providing any reasons. If the user objects to the processing for the purposes of direct marketing, their personal data will no longer be processed for these purposes. Whether the provider processes personal data for direct marketing purposes can be learned by users in the relevant sections of this document.
How rights can be exercised
All requests to exercise user rights can be directed to the provider through the contact details provided in this document. These requests can be made free of charge and will be answered by the provider as soon as possible, at the latest within one month, providing users with the legally required information. Any rectification or deletion of personal data or the restriction of processing will be communicated by the provider to all recipients to whom the personal data have been disclosed, if any. Unless this proves impossible or involves a disproportionate effort. The provider will inform the user about these recipients if the user requests this.
The user acknowledges that the provider may be required by authorities to disclose personal data. Further information about the user's personal dataIn addition to the information set forth in this privacy policy, this application may provide the user, upon request, with further contextual information related to specific services or regarding the collection and processing of personal data.System logs and maintenanceThis application and the services of third parties may collect files for operational and maintenance purposes that record the interaction occurring with this application (system logs) or use other personal data (e.g., IP address) for this purpose. Information not contained in this privacy policyFurther information regarding the collection or processing of personal data can be requested from the provider at any time using the contact details provided.Changes to this privacy policyThe provider reserves the right to make changes to this privacy policy at any time, notifying users on this page and, where technically and legally feasible, by sending a notification using the contact details provided by the users. Users are therefore advised to review this page regularly and particularly check the date of the last change indicated at the bottom of the page.
Where changes concern the use of data based on the user's consent, the provider will, where necessary, obtain a new consent.