Privacy Policy

Introduction

We, Doorboost GmbH, as the operator of the online service, are responsible for processing the personal data of the users of the online service. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this data protection declaration.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.

With this data protection declaration, we inform you to what extent and for what purposes personal data is processed in connection with the use of the online offer.

Personal data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. Information that cannot be associated with your identity (such as statistical data on the number of users of the online service) is not considered personal data.

In principle, you can use our online offer without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our online offer. However, for some of the services offered, personal data will be collected from you. This data will then only be processed by us for the purpose of using this online service, in particular for providing the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, in which case it is voluntary. We indicate in each case whether the information is mandatory or voluntary. We then provide information on the specific details in the corresponding section of this data protection declaration.

No automated decision-making based on your personal data takes place in connection with the use of our online services.

Processing of personal information

Your data is stored by us on specially protected servers within the European Union. These are protected by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Access to your data is only possible for a few authorized persons. These persons are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.

Your personal data is transmitted in encrypted form over the Internet. We use TLS encryption (Transport Layer Security) for data transmission.

Disclosure of personal data to third parties

We only use your personal information to provide the services you have requested. If external service providers are used by us in the course of providing the service, their access to the data is also exclusively for the purpose of providing the service. We take technical and organizational measures to ensure compliance with data protection regulations and also oblige our external service providers to do the same.

Furthermore, we do not pass on the data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to the data being passed on or if we are entitled or obliged to do so on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

Insofar as we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special provisions of Art. 44 et seq. GDPR and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is guaranteed in particular by an adequacy decision of the EU Commission or by suitable guarantees in accordance with Art. 46 GDPR.

Legal basis for data processing

Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR is the legal basis for data processing.

Insofar as we process your personal data because this is necessary to fulfill a contract or in the context of a contract-like relationship with you, Art. 6 para. 1 lit. b) GDPR is the legal basis for data processing.

Insofar as we process your personal data to fulfill a legal obligation, Art. 6 para. 1 lit. c) GDPR is the legal basis for data processing.

The legal basis for data processing is also Art. 6 (1) (f) GDPR if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

In this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.

Data erasure and storage duration

We always delete or block your personal data when the purpose of storage no longer applies. However, data may be stored beyond this if this is provided for by legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we delete or block your personal data after the end of the corresponding requirements.

Use of our online offer

Information about your computer

Each time you access our online offer, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded. We also collect product and version information about the browser used and the computer's operating system. We also record the website from which the online offer was accessed. The IP address of your computer is only stored for the time of use of the online service and is then deleted or anonymized by shortening it. The remaining data is stored for 14 months.

We use this data for the operation of the online offering, in particular to detect and eliminate errors, to determine the utilization of the online offering and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.

Use of cookies

For our online offer - as on many websites - cookies are used. Cookies are small text files that are stored on your computer and save certain settings as well as data for exchange with the online offer from us via your browser. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognize your computer and make any pre-settings and preferences immediately available. The cookies we use are - as far as possible - so-called session cookies, which are automatically deleted at the end of the browser session. Occasionally, cookies with a longer storage period may also be used so that your pre-settings and preferences can also be taken into account the next time you visit our website.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

If cookies are not required for our online offer, we ask you to consent to the use of cookies when you access the online offer for the first time. With regard to the non-essential cookies from third-party providers, you will find a more detailed description of the services we use from these third-party providers below. The legal basis for the associated data processing, including any data transfer, is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR. Once given, consent can be revoked at any time with effect for the future, in particular by changing the selected settings.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offer within the meaning of Art. 6(1)(f) GDPR and - insofar as contracts are concluded or fulfilled via our online offer - the fulfillment of the contract within the meaning of Art. 6(1)(b) GDPR.

We use a service provider to manage your cookies.

Registration

You can register to use our online services. To do so, you must provide the data requested during registration, such as your name, address and e-mail address. We also record the date and time of registration and the IP address. The advantage of this is that you do not have to re-enter this data every time you use our website or place an order.

The legal basis for the processing of data for registration is Art. 6 para. 1 lit. a) GDPR in the case of consent. If you register with us to fulfill or initiate a contract, the legal basis for the processing of the data is additionally Art. 6 para. 1 lit. b) GDPR.

The information requested as a mandatory field during registration is required for the fulfillment or initiation of a contract with us for certain services.

When you register, a customer account is created for you. The data in the customer account will be stored by us for as long as there is an active customer relationship. If no more activity can be detected over a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.

Integration of the services of third-party providers

We use third-party services for some of the functions on our website. The corresponding services are mainly optional functions that you must explicitly select or use. We have concluded contractual agreements with the respective providers for the provision or integration of their services and are committed, as far as possible, to ensuring that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with data protection regulations.

Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: "Google") for our online offering. Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google Tag Manager can be used to integrate Google services into a website.

When using the Google Tag Manager, a connection to the Google servers is established. As a result, the IP address of the browser of the device used by the visitor to this website is stored by Google. It cannot be ruled out that data may be transmitted to Google in the USA in this context and that US security authorities may gain access to the data. However, cookies are not set in connection with the use of Google Tag Manager.

You can find more information about the Google Tag Manager and data processing by Google here:

https://support.google.com/tagmanager/answer/6102821?hl=de

https://www.google.com/policies/privacy/

Our legal basis for the use of Google Tag Manager is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the tracking codes in our online offering, which enable us to analyse the use of our online offering and to improve and personalize our services.

Google Analytics

We use Google Analytics for statistical analysis. Google Analytics is a web analysis service from Google.

As part of Google Analytics, Google uses cookies for analysis purposes, among other things. The type and scope of the use and evaluation of cookies are specified by Google. The information generated by the cookies about your use of the online offer is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data. However, if IP anonymization is activated on this website, your IP address will be truncated by Google beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there.

Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us, as the operator of the website, with other services relating to website activity and internet usage. Google may also use the data for its own purposes. As part of these purposes, Google may, for example, create a profile of user behavior or link the data with other data, for example with an existing Google account. We have no influence whatsoever on these data processing operations. For more information, please refer to Google's data protection information, which is linked below.

We also use the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the following paragraph. You can find more information on the "demographic features" function at Google at https://support.google.com/analytics/answer/2799357?hl=de.  

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. For more information, please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our Internet pages Google Analytics has been extended by the code "anonymizeIp();" in order to anonymize the IP addresses, whereby the last octet is deleted.

The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Retargeting and remarketing

Retargeting or remarketing refers to technologies in which users who have previously visited a certain website are shown suitable advertising even after they have left this website. To do this, it is necessary to recognize Internet users beyond the website itself, for which cookies from the relevant service providers are used; previous usage behavior is also taken into account. For example, if a user views certain products, these or similar products can later be displayed as advertising on other websites. This is personalized advertising that is adapted to the needs of the individual user. For this personalized advertising, it is not necessary for the user to be identified beyond recognition. We therefore do not merge the data used for retargeting or remarketing with other data.

We use such technologies to place ads on the Internet. We use third-party providers to place the ads. We use offers from Google and LinkedIn, which enable the automatic display of products of interest to the Internet user. This function is implemented using cookies. It cannot be ruled out that data will be transferred to the USA in the course of this process and that US security authorities will gain access to the corresponding data.

For more information on this technology, please refer to the privacy policy of the provider:

Google: https://www.google.com/policies/privacy/

LinkedIn: https://www.linkedin.com/legal/privacy-policy

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

LinkedIn Conversion Tracking

In our online offer we use the conversion tracking technology "LinkedIn Insight Tag" of the provider LinkedIn Inc, 2029 Stierlin Ct, Mountain View, CA 94043 USA.

With the help of this technology, advertisements based on your interests can be displayed to you and anonymous reports on the performance of the advertisements can be created. LinkedIn Conversion Tracking is used to collect data about the use of our online offering, such as URL, referrer URL, IP address or device and browser characteristics.

As part of the technical process, personal data may also be stored on LinkedIn servers in the USA. In this context, it cannot be ruled out that US security authorities may gain access to this data. In this respect, the USA does not have a level of data protection comparable to that of the EU.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

Use of Google Fonts

Google Fonts are used as external fonts for our online offer. Google Fonts originate from Google and are made freely available by Google. These Google fonts are integrated locally via our own server. No data is transmitted to Google in the process. You can find more information about Google Fonts and Google's privacy policy here:

www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

The legal basis for the integration of Google Fonts is Art. 6 para. 1 lit. f) GDPR; our legitimate interest is the optimization of our online offer.

Weglot

The Weglot translation service from the provider Weglot SAS, 138, rue Pierre Joigneaux, Bois-Colombes 92270, France is integrated into our online offering. Weglot is loaded when you access our website. You have the option of having our online offer translated via the language icon in the footer. In this context, Weglot receives the information that you have visited our website with your IP address. The legal basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the multilingual offer and thus the optimization of our online presence.

Further information on data protection at Weglot can be found at: https://weglot.com/privacy/

Communication with us

You can contact us in various ways, including via the inquiry form on our website.

Enquiry form

If you wish to use the inquiry form on our website, we collect the personal data that you enter in the inquiry form, in particular your name, email address and telephone number. We also store the IP address and the date and time of the request. We process the data transmitted via the inquiry form solely for the purpose of responding to your inquiry or request. The form is provided to us by Jotform Inc. 111 Pine St. Suite 1815, San Francisco, CA 94111. The personal data is stored on Jotform servers in the European Union. However, under US law, it cannot be ruled out that US security authorities may gain access to this data.

You can decide for yourself what information you send us via the inquiry form. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

After the matter has been processed by us, the data will initially be stored in the event of any queries. Deletion of the data can be requested at any time, otherwise the data will be deleted after the matter has been fully dealt with; statutory storage obligations remain unaffected in each case.

Facebook Fanpage

In addition to our own online offering, we also operate a fan page on the social network Facebook. We use the fan page to provide information about our activities and offer a channel for communication. The social network Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Facebook").

Delimitation of responsibility

As far as possible, we try to ensure the protection of your privacy and your private data on Facebook. Insofar as your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Due to the integration of the fan page into the Facebook service, it should also be noted that personal data is processed by Facebook at the same time. Facebook has no influence on data processing by Facebook; in particular, Facebook does not act as a processor for us under our responsibility. Facebook's data processing - at least according to Facebook - is governed by Facebook's guidelines, which are available at https://de-de.facebook.com/policy.php.

In terms of data protection law, it can be assumed that Facebook and we are jointly responsible for the operation of the fan page and the analysis of user data when visiting the fan page. In accordance with the data protection regulations, we have reached an internal agreement with Facebook on the delimitation of responsibility.

Facebook Insights

Facebook offers fan page operators the option of using the Page Insights function to obtain an overview of the use of the fan page and its users. Page Insights can be used primarily to access and analyze statistical data. We use the data from Page Insights to make the fan page as attractive and efficient as possible. For this purpose, Facebook provides us with data that Facebook has generated itself. Facebook provides further information on how the Page Insights function works and who is responsible for it at https://www.facebook.com/legal/terms/page_controller_addendum.

Messenger

Facebook offers users who are registered with Facebook the opportunity to communicate directly via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, the evaluation of customer inquiries and the monitoring of misuse.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Further information on Facebook

If you have any questions about the use of personal data by us in connection with the use of the fan page on Facebook, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on Facebook, please contact Facebook directly. The German Federal Office for Information Security (BSI) also provides general information on the secure use of social networks on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

Instagram account

In addition to our own online offering, we also operate an account on the social network Instagram. We use the Instagram account to provide information about our activities and offer a channel for communication. The social network Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as "Facebook").

Responsibility under data protection law

Within the scope of the possibilities offered by Instagram, we try to ensure the protection of your privacy and your private data. Insofar as your personal data is processed by us in connection with your visit to the Instagram account, the explanations in this privacy policy apply without restriction. Due to the integration of the account into the Facebook service, it should also be noted that personal data is processed by Facebook at the same time. We have no influence on data processing by Facebook; in particular, Facebook does not act as a processor for us under our responsibility. Facebook's data processing - at least according to Facebook - is governed by Facebook's guidelines, which are available at https://de-de.facebook.com/help/instagram/519522125107875.

In terms of data protection law, Facebook and we have two separate responsibilities for the operation of the Instagram account and the associated communication and analysis options. Insofar as your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is usually the case if you communicate directly with us via the "Instagram Direct Messaging" function and transmit your data to us in the process. If your personal data is processed by Facebook and Facebook alone decides on the purposes and means of data processing, Facebook is solely responsible for this data processing. This applies in particular to the evaluation of user behavior by Facebook for its own purposes.

Instagram Insights

Facebook offers the operators of Instagram accounts the opportunity to obtain an overview of the use of the account and its users via the "Instagram Insights" function. Instagram Insights can be used primarily to access and analyze statistical data. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Facebook provides us with data that Facebook itself has generated under its own responsibility. The data we receive from Facebook is mostly anonymized data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our Instagram account.

Facebook provides further information on Instagram Insights at https://www.facebook.com/help/instagram/788388387972460.

Instagram Direct Messaging

Instagram gives you the opportunity to communicate directly with us via the "Instagram Direct Messaging" function. If you contact us via the Instagram Direct Messaging function, the data transmitted will be stored and used by us exclusively for the purpose of responding to your request. The legal basis for the processing of your data is your consent within the meaning of Art. 6(1)(a) GDPR and our legitimate interest within the meaning of Art. 6(1)(f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, the evaluation of customer inquiries and the monitoring of misuse.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Further information on Instagram

If you have any questions about the use of personal data by us in connection with the use of our Instagram account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on the Instagram social network offered by Facebook, please contact Facebook directly. We would also like to take this opportunity to point out that the German Federal Office for Information Security (BSI) provides general information on the secure use of social networks on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

Your rights and contact

We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you of the rights to which you are entitled. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can take care of your request.

Data subjects' rights

You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and, if necessary, you can request the correction and/or deletion or blocking of your personal data. You can also request a restriction of processing and have the right to object. You also have the right to data portability with regard to the personal data you have provided to us.

If you would like to assert one of your rights and/or receive more information about this, please contact our customer service. Alternatively, you can also contact our data protection officer.

Revocation of consent and objection

Once you have given your consent, you can freely withdraw it at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Contact persons for this are also our customer service and our data protection officer.

If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if the data processing is nevertheless to be continued - you will receive more detailed information from us as to why the data processing is permissible.

Data protection officer and contact

We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. Our data protection officer and his team will be happy to answer any questions you may have regarding our handling of personal data or further information on data protection issues:

Dr. Sebastian Meyer, LL.M.
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Phone: 0521 / 96535-812
E-mail: privacy@doorboost.com

If you would like to contact our data protection officer personally by e-mail, you can also reach him at sebastian.meyer@brandi.net.

Complaints

If you believe that we are not processing your personal data in accordance with this privacy policy or the applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority. You can also lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation.

Further information and changes

Links to other websites

Our online offer may contain links to other websites. These links are generally identified as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the data protection declarations of other websites.

Changes to this privacy policy

The status of this privacy policy is indicated by the date (below). We reserve the right to amend this privacy policy at any time with effect for the future. Changes will be made in particular in the event of technical adjustments to the online offering or changes to data protection regulations. The current version of the data protection declaration can always be accessed directly via the online offer. We recommend that you inform yourself regularly about changes to this privacy policy.