data protection

Data protection

Data protection notice in accordance with Art. 13 GDPR

Overview of data protection

‍

This data protection declaration serves to comply with the information obligations within the meaning of Art. 13 DSGVO. The following explanations are intended to provide an overview of the various types of processing of personal data on this website. Personal data means any information relating to an identified or identifiable person.

The data protection terms used in this declaration are based on the definitions of the GDPR (General Data Protection Regulation - Regulation (EU) 2016/679).

The person responsible for data processing on this website can be found in the imprint of the website.

Company: TrulySpace GmbH

Legal representative: Denis Jaschik, Anthony Wood

Address: Derchinger Strasse 141, DE-86165 Augsburg

Telephone number: +49 (0) 176-43343357

Email: hello[at]trulyspace.de

‍

General information on data processing

Legal basis for processing personal data

‍

In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not specified in the data protection notice, the following applies:
The legal basis for obtaining consent is Article 6 Paragraph 1 Letter a in conjunction with Article 7 GDPR. The legal basis for processing to fulfill our services and carry out contractual measures, as well as answering inquiries is Article 6 Paragraph 1 lit. b GDPR. The legal basis for processing to fulfill our legal obligations is Article 6 (1) (c) GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 Letter f GDPR serves as the legal basis for the processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 lit. d GDPR serves as the legal basis.

‍

Data Erasure and Storage Duration

We adhere to the principles of data avoidance and data economy. We only store your personal data for as long as is necessary to achieve the purposes stated here or as long as the retention periods provided for by law. After the respective purpose has ceased to exist or after these retention periods have expired, the corresponding data will be blocked or deleted as a matter of routine and in accordance with statutory provisions.

‍

Note on data transfer to third countries

We have also integrated tools from companies based in third countries (including the USA) on our website. If these tools are active, your personal data can be passed on to the servers of the respective companies. The level of data protection in third countries does not usually correspond to EU data protection law. There is then a risk that your data will have to be handed over to the security authorities of these countries and may be processed by the authorities of these countries for control and monitoring purposes, possibly without you being able to appeal. We have no influence on these processing activities.

‍

rights of the data subject

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have any further questions on the subject of data protection. The contact options can be found in the imprint.

As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The data subject rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21) , the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right of withdrawal:

Some data processing can only take place with your express consent. You have the option to revoke your consent at any time. However, the lawfulness of the data processing up to the point of revocation is not affected by this.

Right to object:

If the processing is based on Art. 6 Paragraph 1 lit. e or f GDPR, you as the data subject can object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions. If we cannot prove any compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms or if processing serves to assert, exercise or defend legal claims, we will no longer process the relevant data after an objection.

If the processing of personal data serves to operate direct advertising, you also have the right to raise an objection at any time. The same applies to profiling related to direct advertising. Here, too, we will no longer process personal data as soon as you raise an objection.

Right to lodge a complaint with a supervisory authority:

If you believe that the processing of your personal data violates the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the presumed violation, too.

Right to data portability:

If your data is processed automatically on the basis of consent or the fulfillment of a contract, you have the right to receive this data in a structured, common and machine-readable format. You also have the right to request the transfer and provision of the data to another person responsible, insofar as this is technically feasible.

Right to information, correction and deletion:

You have the right to receive information about your processed personal data with regard to the purpose of the data processing, the categories, the recipients and the duration of the storage. Furthermore, you have the right to know whether there is a right to correction, deletion or restriction of the personal data concerning you. If you have any questions on this topic or on other topics relating to personal data, you can of course contact us using the contact options given in the imprint.

Right to restriction of processing:

You can assert the restriction of the processing of your personal data at any time. To do this, you must meet one of the following requirements:

You contest the accuracy of the personal data. For the duration of the verification of the correctness, you have the right to demand a restriction of the processing.
If processing is unlawful, you can request the restriction of the use of the data as an alternative to deletion.
If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, you can request the restriction of processing as an alternative to deletion.
If you object to the processing in accordance with Art. 21 Para. 1 GDPR, your interests and ours will be weighed up. Until this consideration has been made, you have the right to request the restriction of processing.

A restriction of processing means that the personal data, apart from storage, is only used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State may be processed.

‍

Provision of the website web host

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

These are:

IP address of the website visitor's end device
device used
Host name of the accessing computer
Visitor's operating system
Browser type and version
Name of retrieved file
Time of server request
amount of data
Information whether the retrieval of the data was successful

We do not combine this data with other data sources.

The legal basis for processing this data is Art. 6 (1) (f) GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website.

Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company). Then the personal data collected on this website will be stored on the servers of the hosting company. In addition to the data mentioned above, it can be, for example, contact requests, contact data, names, website access data, meta and communication data, contract data and other data generated via a website.

The legal basis for the processing of data by using a hosting company is our interest in providing our website securely, quickly and efficiently (Art. 6 Para. 1 lit. f GDPR). Another legal basis can be for the purpose of fulfilling the contract with our future and existing customers (Art. 6 Para. 1 lit. b DSGVO). In the event that we have commissioned a hosting company, there is a contract for order processing with this service provider.

‍

Use of cookies

Our website uses "cookies". Cookies are information that a web server (server that provides web content) stores on your end device in order to be able to identify this end device. They are either temporarily deleted for the duration of a session (session cookies) and after your visit to a website or permanently (permanent cookies) on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies can also be stored on your end device by third-party companies when you enter our site (third-party requests). This enables us as the operator and you as a visitor to this website to use certain services from third parties that are installed on this website. Examples of this are cookies for processing payment services or cookies for displaying videos.

Cookies have a wide range of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and visitor flows and behavior can be analyzed. Depending on the individual functions, the cookies are classified under data protection law. If they are necessary for the operation of the website and for the provision of certain functions (shopping cart function) or if they serve to optimize the website (e.g. cookies for measuring the web audience), then they are used on the basis of Article 6 Paragraph 1 lit. f GDPR . As a website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. In all other cases, we ask for your consent to the storage of cookies, which can be revoked at any time (Article 6 (1) (a) GDPR).

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this data protection notice. Your required consent will be requested and can be revoked at any time.

‍

Use of External Services

External services are used on our website. External services are services provided by third parties that are used on our website. This can be done for a variety of reasons, such as embedding videos or for website security. When using these services, personal data is also passed on to the respective provider. If we have no legitimate interest in using these services, we will obtain your consent as a visitor to our website, which can be revoked at any time, before using it (Article 6 (1) (a) GDPR).

‍

Analytics

The processing of the personal data of our website visitors enables us to analyze the surfing behavior of our website visitors. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. The analysis tools used could be used, for example, to create user profiles for the display of targeted or interest-related advertising messages, to recognize our website visitors the next time they visit our website, to measure their click/scroll behavior and downloads, to create heat maps, to recognize page views, but to measure the duration of the visit or the bounce rates As a further example, the origin of the website visitors (city, country, from which site the visitor comes) can also be recognized. With the help of the analysis tools, our market research and marketing activities can be improved.

The processing of the data is based on the legal basis of consent (Article 6 (1) (a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, express and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 Para.1 DSGVO on which we base the processing. We proceed in the same way if you revoke your consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

‍

Google Analytics

We use the Google Analytics service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

‍

consent management

In order to be able to comply with data protection requirements, we use a consent management tool on our website. With this tool we obtain the necessary consent for the setting of cookies or the use of external services. The consents are stored accordingly.

The processing is necessary for compliance with a legal obligation to which the person responsible (operator of the website) is subject. The legal basis for processing is therefore Art. 6 (1) (c) GDPR.

‍

Usercentrics

We use the Usercentrics service on our website. The provider of the service is Usercentrics GmbH. This has its branch at Sendlinger Straße 7, 80331 Munich, Germany.

Further information can be found in the manufacturer's data protection information at the following URL: https://usercentrics.com/de/datenschutzerklaerung

‍

Content Delivery Network (CDN)

We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. For this purpose, your IP address and the information on when you visited our website will be processed by this service provider who makes this network available. All further information on data processing by this service provider can be found in their data protection information.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.

‍

Amazon CloudFront

We use the Amazon CloudFront service on our website. The service provider is Amazon Web Services EMEA SARL. Its office is at 38 Avenue John F. Kennedy L-1855, Luxembourg.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://aws.amazon.com/de/privacy/

‍

CloudFlare

We use the CloudFlare service on our website. The service provider is Cloudflare Ltd. It has its branch at 2nd Floor 25 Lavington Street London SE1 0NZ, Great Britain.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://www.cloudflare.com/de-de/privacypolicy/

‍

Google Statics

We use the Google Static service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

‍

jsDelivr

We use the jsDelivr service on our website. The provider of the service is Prospect One Ltd. It has its office at Królewska 65A/1, PL-30-081 Kraków, Poland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

‍

hosting

Hosting is the provision of web space and the accommodation of websites. In order for our website to be displayed, it must be hosted by a web host. Naturally, this involves the transmission and storage of personal data on the hoster's servers. In particular, the IP addresses, meta and communication data of the users and data on website access are processed. When a website visitor accesses the site, a connection to the web host's servers is established. Inevitably, the IP address and other information of the website visitor must be processed. But the use of a hoster may also be necessary for the use of other systems.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

Our legitimate interest is to be able to display our website and make it available on the internet.

‍

Webflow Hosting

We use the Webflow Hosting service on our website. The service provider is Webflow Inc. It has its branch at 398 11th Street, 2nd Floor San Francisco, CA 94103, USA.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://webflow.com/legal/eu-privacy-policy

‍

interface software

Business processes run more cheaply, faster and with fewer errors if they are automated using software via interfaces. In this way, they can be efficiently integrated into company processes via their own website or via social networks. We use interface software on our website to link different applications with one another and to transfer personal data securely from one application to another.

‍

Google APIs

We use the Google APIs service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

‍

Google Tag Manager

We use the Google Tag Manager service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

‍

Social media

Our company uses publicly accessible profiles in social networks in order to get in touch with customers or potential customers and to increase our level of awareness. As soon as social media accounts are entered, the users' personal data is processed. Users are also recognized by the operators of the social networks when they visit websites on which like buttons or advertising banners of the social media platforms are integrated, especially if they are logged into their social media accounts. The plugins process personal data of website users, establish a connection to the social networks and forward data to them. This transmission occurs as soon as the website is accessed. Processed data are, for example: names, addresses, e-mail addresses, telephone numbers, access times, device information, IP addresses. The aim is usually to process user data for market research and advertising purposes. User behavior and interests can be derived and user profiles can be created from the social media accounts and websites that users visit. These, in turn, serve to show you interest-based advertising via cookies on your end devices, on your social media accounts and on the websites you visit. If users are logged into their social media accounts, they can also be identified independently of their end devices.

Data processing usually takes place under joint responsibility between us and the operators of the social media networks. Please note that as the provider of social media accounts, we cannot trace all of the processing operations of the respective operators of the portals relating to your personal data.

The processing of the data is based on the legal basis of consent (Article 6 (1) (a) GDPR). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 DSGVO on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

‍

Meta Connect

We use the Meta Connect service on our website. The service provider is Meta Platform Ireland Limited (Marketplace). It is based at 4 Grand Canal Square Grand Canal Harbor Dublin 2, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://de-de.facebook.com/policy.php

‍

Meta Social Plugins

We use the Meta Social Plugins service on our website. The service provider is Meta Platform Ireland Limited (Marketplace). It is based at 4 Grand Canal Square Grand Canal Harbor Dublin 2, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://de-de.facebook.com/policy.php

‍

webfonts

This site uses so-called web fonts for the uniform display of fonts, which are provided by an external provider and loaded by the browser when the website is accessed. The provider of the web font is informed that our website was accessed from your IP address because your browser establishes a direct connection to the provider of the web font.

‍

Google Fonts

We use the Google Fonts service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

‍

web security

We use tools on our website that protect us from unauthorized access, spam and other attacks. This serves on the one hand for our security, but also on the other hand for the security of our website visitors.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

Our legitimate interest is to be able to guarantee the security of our website and to protect ourselves from unauthorized access, spam and other attacks.

‍

Google recaptcha

We use the Google Recaptcha service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

‍

contact form

On our website there is the possibility to notify us via a contact form. In order to contact you via this form, we ask for certain information. In particular, the request must be described and a contact option must be provided. At least this information is mandatory and must be provided to use the contact form.

The legal basis for answering the contact questions lies in the fulfillment of a contract or the implementation of pre-contractual measures. There may also be a legitimate interest in maintaining business relationships.

The legal basis for the processing of your data is therefore Article 6 (1) (f) GDPR or Article 6 (1) (b) GDPR.

The data will be deleted when we have answered your request to your satisfaction and if there are no other retention periods (e.g. tax retention periods).

‍

E-mail correspondence and contact via telephone

In accordance with legal requirements, we have provided a telephone number and e-mail address on our website. The data transmitted by telephone or e-mail is automatically stored by us in order to be able to process corresponding inquiries or to be able to contact the person concerned. Data that we obtain in this way will not be passed on to third parties without your consent.

E-mail correspondence and telephone contact serve pre-contractual or contractual purposes and the processing of personal data in this context is based on the legal basis of Article 6 (1) (b) GDPR.

‍