Legal Information

Privacy Policy

We are glad that you are interested in using our web service. The protection of personal data is our first priority. Below you find information about the processing of your personal data and your rights within the use of our web service.

1. Controller

The controller responsible for the data processing is:
ip.labs GmbH
Schwertberger Str. 14-16
53177 Bonn
+49 228 18479 - 0
Contact: privacy@iplabs.de

2. Data protection officer(r)

You can contact our data protection officer as follows:
Scheja und Partner Rechtsanwälte mbB
Rechtsanwalt Herr Florian Reichert
Adenauerallee 136
D-53113 Bonn
Telephone: 0228/2272260
Contact: https://www.scheja-partner.de/kontakt/kontakt.html

3. Rights of the data subject

As data subject you have the following rights in accordance to the General Data Protection Regulation (GDPR) as far as the respective legal requirements are met:

Access: You have the right to obtain information about your personal data processed by us.

Rectification: You can obtain the rectification of inaccurate personal data concerning you. Furthermore you can obtain the completion of incomplete personal data.

Erasure: In specific cases you can obtain the erasure of your personal data.

Restriction of processing: In specific cases you can obtain restriction of processing of your personal data.

Data portability: If you provided data to us based on a contract or your consent you can demand that you receive the provided data in a structured, commonly used and machine-readable format or that we transmit the data directly to another controller.

Right to object

Individual right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 sec. 1, including profiling based on those provisions. We will then no longer process the personal data for those purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.


Right to object to processing for direct marketing purposes

In some cases we process your data for direct marketing. You have the right to object to the processing of your personal data for those purposes at any time. This applies to profiling as far as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, your personal data will not be processed for those purposes any longer.

Withdrawal of consent: If you gave your consent to the processing of your personal data you can withdraw your consent at any time with future effect. The lawfulness of the processing of your personal data until your withdrawal will not be affected. In addition to the options stated under ‘enforcement of your rights’ you can explain your withdrawal according to the respective information concerning ‘exercising the right to object’ in the section ‘Services & Cookies’.

Enforcements of your rights: To exercise the aforementioned rights please contact privacy@iplabs.de or by post to the address stated under number 1. When doing so please make sure an unambiguous identification of yourself is possible.

Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, particularly one in the member state of your habitual residence, work place or the place of the suspected violation, if you are of the view that the processing of your personal data is unlawful.

4. Automated individual decision-making, including profiling

Automated individual decision-making, including profiling within the meaning of Art. 22 GDPR does not take place within the use of our service.

5. Details on services, cookies & co.

5.1. Our own services

Functionality Data categories Purpose(s) Legal basis Pursued legitimate interests Recipients or categories of recipients Third country transfer: Adequacy decision (yes/no) Safeguards and access possibilities to those Storage periods or criteria for their determination Duty to provide personal data and possible consequences of failure to provide Exercising the right to object Data sources
Display of service Date and time of access, duration of visit, type of device, used operation system, used functions, amount of sent data, type of event, IP-address, domain name Providing service Article 6 section 1 b) and f) GDPR Technical functionality Hosting provider, internal departments, external service provider for technical support -- -- Directly after delivery by the web server No duty to provide, automatic collection by accessing the service -- Direct collection when accessing website/service
Log files Accessed URL, IP address, Date and time of access, amount of transferred data, website where the user came from (‘referrer’), websites accessed by the user’s system from our website, http-status, information about the browser type and the used version, operating system, internet service provider Statistical evaluations, optimizing the website, system security (fraud prevention), error diagnosis Article 6 section 1 b) and f) GDPR See purposes Hosting provider, internal departments, external service provider for technical support government agencies on demand -- -- 7 days after creation No duty to provide, automatic collection by accessing the service -- Direct collection when accessing website/service
Contact form Name of the contacting person, postal address, phone number, e-Mail address, content of the message Receipt and handling of requests, complaints and other feedback Article 6 section 1 b) and f) GDPR See purposes Hosting provider, internal departments, government agencies on demand India; No Standard data protection clauses Art. 46 sec. 2 GDPR, copies to be retrieved from contact stated in number 1 After handling the request Mandatory details in the contact form marked with ‘*’, other information is not mandatory but serves faster handling of the request - Direct collection in the contact form
Online Application form Name of the applicating person, e-Mail address, phone number, desired position, content of the application, how they became aware of ip.labs and required salary Receipt and handling of online applications Article 6 section 1 b) and f) GDPR See purposes Hosting provider, internal departments, government agencies on demand India; No Standard data protection clauses Art. 46 sec. 2 GDPR, copies to be retrieved from contact stated in number 1 After handling the application Mandatory details in the application form marked with ‘*’, other information is not mandatory but serves faster handling of the request - Direct collection in the application form

5.2. Integration of third party services

We use third party services to enable you to use their functions, services and features. These integrated services are designed and provided by the respective third party. Therefore we have no influence on the design, contents and function of those services or the processing of personal data by the provider. Please obtain further information directly from the providers of those integrated services.

Service Provider/recipient Purpose(s) Legal basis Pursued legitimate interests The provider’s data protection notice Further information
YouTube videos YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (represented by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA) Display of YouTube videos Article 6 section 1 f) GDPR Allowing the viewing of YouTube videos policies.google.com Integration uses the ‘extended data protection mode’ of YouTube

5.3. Cookies

On our website we use cookies to provide an extensive range of functions, make the usage more comfortable and optimize our offers. Cookies are small text files generated by a web server und stored on your computer during the online visit by your web browser.

We use so-called ‚session cookies‘ which are automatically deleted after upon completion of your browser session.

Furthermore we use persistent cookies which are mostly used to provide permanently recurring settings to you as a website visitor. This enables us to modify our website individually in accordance to your preferences. Persistent cookies also enable us to analyze our visitor’s usage behavior though only within the scope of validity.

In addition to that, further cookies might be used in connection with the integration of specific services by the providers of those services (so-called ‘Third-Party cookies’).

If you do not want cookies to be used you can prevent the storage of cookies on your device with respective configurations of your internet browser. Please bear in mind that the functionality and the range und functions could be restricted by that. Furthermore we will only use specific cookies with your previous consent. Also you can make use of your right to object when it comes to specific cookies. Detailed information about type, scope, purposes, legal bases and options to object to the processing in the context of those cookies you can find in the following tables.

5.3.1. First Party Cookies

Name Data categories Purpose(s) Legal basis Pursued legitimate interests Recipients or categories of recipients Third country transfer: Adequacy decision (yes/no) Safeguards and access possibilities to those Cookie validity/storage period Duty to provide personal data and possible consequences of failure to provide Exercising the right to object Data sources
cookieconsent_status Cookie-ID Website display Article 6 section 1 b) and f) GDPR Remember if a user has consented to the use of cookies hosting provider, external service provider for technical support -- -- 1 year If you do not accept the cookie, a banner explaining our use of cookies will appear -- Direct collection when accessing website/service

5.3.2. Third Party Cookies

Name Data categories Purpose(s) Legal basis Pursued legitimate interests Recipients or categories of recipients Third country transfer: Adequacy decision (yes/no) Safeguards and access possibilities to those Cookie validity/storage period Duty to provide personal data and possible consequences of failure to provide Exercising the right to object Data sources
YouTube Cookie-ID, anonymized IP-address; visited website; Accessed product and/or product category; date and time of the website access online marketing adequate to the interests Article 6 section 1 a) GDPR -- YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (represented by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA) USA; no -- 2 years No duty to provide Withdrawal of consent is possible in the cookie preference center Data collection by the provider after giving consent