Data protection information

The protection of information relating to you, such as your name, your telephone number and your email or IP address (so-called "personal data") is important to us. Therefore we operate this website and the services offered by us on it in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This website does not use cookies, tracking or analytics tools, and it does not load fonts, scripts or other content from third-party servers.

Below you will find an explanation of how we process your personal data in this context.

A. General Information

I.The controller responsible for data processing on this website

Crowdprobe GmbH
represented by its Managing Director Peter Triesz
Wannerweg 2b
82467 Garmisch-Partenkirchen, Germany
Email: info@crowdprobe.com

The Data Protection Officer may be reached via dpo@crowdprobe.com

II.Providing of this website; communication via this website

1.Providing this website

The availability of this website requires the processing of personal data. When you access the website, your browser automatically transmits access data, in particular your IP address, the date and time of access, the requested page and information about your browser and operating system.

The legal basis is our legitimate interest in providing a functional and secure website (Art. 6(1)(f) GDPR). For the availability of this website it is technically necessary that we process this data.

2.Communication via email

You have the opportunity to contact us via email. In this case we process your email address and the information you provide in your message in order to handle your request.

If your request relates to the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. Otherwise, the legal basis is our legitimate interest in responding to your request (Art. 6(1)(f) GDPR). With respect to the balancing of legitimate interests required by law, we have weighed your interest in maintaining the confidentiality of your personal data against our interest in contacting you. Without processing this data, we cannot respond to your contact request.

III.Recipients or categories of recipients of personal data

We use service providers to provide our website and to communicate with you. For this purpose, we transmit personal data to these service providers, who process it on our behalf and according to our instructions as data processors (Art. 28 GDPR).

1.Hosting and content delivery network (CDN)

Our website is hosted on Google Firebase Hosting, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Data processed

When you visit our website, your web browser automatically transmits technical connection details. This includes your IP address (which is classified as personal data under the GDPR), the requested URL, device and browser properties (user-agent strings), and the timestamp of your request.

Purpose of processing

This processing is technically necessary to establish the connection, deliver our website's static files (such as HTML, CSS, fonts and images) to your browser, monitor technical performance, and prevent malicious activities (such as DDoS or other cyberattacks).

Data transfers and retention

Google processes this data as our data processor. Because Firebase Hosting uses a global content delivery network (CDN) to ensure fast loading speeds worldwide, visitor requests may be routed through and temporarily processed on servers located outside of the European Economic Area (EEA), including the United States. Google protects these transfers using recognised cross-border transfer mechanisms, such as the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Firebase Hosting retains server connection logs only temporarily for diagnostic and security purposes, after which they are automatically deleted. We have not enabled any additional logging, log export or analytics, and we do not evaluate this data ourselves.

Legal basis

This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) to provide a technically secure, stable and fast-performing website.

2.Email

For email we use Google Workspace, a service of Google Ireland Limited (address as above). Emails you send to us are processed by Google on our behalf. We have chosen data centres within the European Union for storing our email data.

IV.Criteria for the storage period of personal data

We delete your personal data if the particular purpose of the storage no longer applies and no legal regulation requires a storage.

Server connection logs are deleted automatically by Google (see section III.1). Emails are deleted once your request has been fully handled, unless statutory retention obligations apply, for example under German commercial and tax law. We do not carry out statistical evaluations of visits to this website.

V.Your rights as a data subject

You have the following rights with respect to your personal data:

• the right of access (Art. 15 GDPR),
• the right to rectification (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Please contact us to exercise these rights.

1.Right to object

Where we process your personal data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

2.Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de

VI.Security

We use appropriate technical and organizational security measures to protect your personal data managed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. This website is delivered exclusively via an encrypted connection (HTTPS).