1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data includes all data that can personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Dr. Lars-Oliver Heim, Hartenauer Str. 8, 64404 Bickenbach, Germany, Tel.: +49(0)160 96 0815 12, Email: heim@sqube.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or otherwise used. However, we reserve the right to review the server log files subsequently if specific indications point to unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser bar.
3) Cookies
To make the visit to our website attractive and enable the use of certain functions, we use cookies—small text files stored on your device. Some cookies are deleted automatically when you close your browser (so-called “session cookies”), while others remain on your device and allow us to save your settings for future visits (so-called “persistent cookies”). You can find the storage duration in your browser’s cookie settings.
If personal data is processed through individual cookies we use, processing is carried out either in accordance with Art. 6(1)(b) GDPR for contract execution, Art. 6(1)(a) GDPR if consent has been given, or Art. 6(1)(f) GDPR based on our legitimate interest in the optimal functionality of the website and a user-friendly experience.
You can configure your browser to inform you about the setting of cookies and decide on their acceptance individually or exclude the acceptance of cookies for specific cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting Us
When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your inquiry to the extent necessary.
The legal basis for processing this data is our legitimate interest in responding to your request under Art. 6(1)(f) GDPR. If your inquiry aims at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it is clear that the matter has been conclusively resolved, provided that no legal retention obligations prevent this.
5) Data Processing for Order Handling
To the extent necessary for contract fulfillment, including delivery and payment processing, the personal data we collect will be passed on to the assigned transport company and payment institution in accordance with Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or digital products under a relevant contract, we process the contact details you provided during the order (name, address, email) to inform you personally about upcoming updates within the legally prescribed period, using an appropriate communication method (e.g., postal mail or email) in accordance with Art. 6(1)(c) GDPR. Your contact details will be strictly used for notifications regarding updates owed by us.
Additionally, we collaborate with service providers to support contract execution, and certain personal data is shared with them as required.
6) Rights of the Data Subject
6.1 Under applicable data protection laws, you have the following rights regarding the processing of your personal data:
- Right to access under Art. 15 GDPR;
- Right to rectification under Art. 16 GDPR;
- Right to erasure under Art. 17 GDPR;
- Right to restriction of processing under Art. 18 GDPR;
- Right to notification under Art. 19 GDPR;
- Right to data portability under Art. 20 GDPR;
- Right to withdraw consent under Art. 7(3) GDPR;
- Right to lodge a complaint under Art. 77 GDPR.
6.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, CONTINUED PROCESSING MAY BE JUSTIFIED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING FOR SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL STOP PROCESSING YOUR DATA FOR THIS PURPOSE.
7) Duration of Personal Data Storage
The storage period of personal data depends on the legal basis, processing purpose, and, where applicable, statutory retention periods (e.g., commercial and tax retention obligations).
If processing is based on explicit consent under Art. 6(1)(a) GDPR, the data will be stored until you withdraw your consent.
If there are statutory retention obligations for data processed under Art. 6(1)(b) GDPR, the data will be routinely deleted after the retention period expires, unless it is still required for contract fulfillment or initiation.
If processing is based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(1) GDPR unless we demonstrate compelling legitimate grounds that override your interests, or if processing serves the establishment, exercise, or defense of legal claims.
For data processing for direct marketing purposes under Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(2) GDPR.
Unless stated otherwise, personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.