We are pleased that you have visited our website. First of all, we would like to introduce ourselves to you as the responsible body within the meaning of data protection law:
ibug e.V.
represented by the managing director Antonia Gerber
Markranstädter Straße 2a
04229 Leipzig
Telephone: +1 (111) 111-1111
Email: info@ibug-art.de
We would like to inform you about the collection and use of your personal data in accordance with our legal obligation.
When you use our website, personal data about you is collected. This can be done by you entering the data yourself - such as your email address. Our system also records data from you automatically, such as your visit to our website. This happens regardless of the device or software you use to access our website.
Any entry of data by you on our website is voluntary; there are no disadvantages for you if you do not disclose your data. Without certain data, however, it is not possible for us to provide services or conclude contracts. We will draw your attention to such mandatory information in each case.
On this website, personal data of the user is only collected within the framework of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Art. 4 of the GDPR.
According to the GDPR, data processing is permitted in three cases in particular:
We collect inventory data insofar as it is necessary for the establishment, content design or modification of a (also free of charge) contractual relationship between us and the user. This can include: customer data (e.g. name, address), contact details (e.g. e-mail address, telephone number), service data (e.g. ordered service, term, fee). When establishing the user relationship, we will ask you for this data (e.g. name, address and email address) and also inform you to what extent the information is mandatory in order to establish the user relationship.
We also collect usage data to enable the user to use the services on our website. This may include: usage information (e.g. websites or areas accessed, length of visit, interest in services), content data (e.g. data entered or uploaded by you, texts, images, sounds, videos), metadata (e.g. identity of your device, location, IP address).
We only combine usage data if and to the extent that this is necessary for billing purposes. Otherwise, we will only create usage data pseudonymously and only if you have not objected to this. You can send this objection at any time to the address given in the imprint or to the person responsible named in this data protection declaration.
The legal basis for this data processing is, on the one hand, our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR in the analysis of the website and its use, and if necessary also the legal permission to store data in the context of initiating a contractual relationship in accordance with Art. 6 Para. 1 lit. b GDPR.
Our website is made available for retrieval on the internet by a service provider (provider or host). We use the services of festiware, Andreas Kosmowicz e.K., Klingenstraße 22, 04229 Leipzig, for this purpose. We have concluded a data processing agreement with our provider. Under this agreement, our provider is obligated to process your data only on our behalf and in accordance with our instructions. Further information on data processing by our provider can be found in their privacy policy at https://festiware.eu/datenschutz. The legal basis for this data processing is, on the one hand, our legitimate interests pursuant to Art. 6(1)(f) GDPR in providing and using our website on the internet, and where applicable, the legal permission to store data in the context of initiating a contractual relationship pursuant to Art. 6(1)(b) GDPR.
Every time this website is used, our provider processes information known as server log files, which are automatically transmitted by your browser each time a website is accessed on the internet. These are:
This data is used only for statistical purposes and does not allow us to identify you as a user.
If you contact us electronically (e.g. email, fax, telephone, messenger, etc.), we store and process the data you have provided to us (e.g. name, contact information, content of the inquiry). The legal basis for this is our legitimate interest in effective customer communication pursuant to Art. 6(1)(a) GDPR and, insofar as the inquiry concerns entering into or fulfilling a contract, also Art. 6(1)(b) GDPR.
We will only disclose this data to third parties if this is necessary (pursuant to Art. 6(1)(b) GDPR) for the fulfillment of the contract, if this corresponds to the overriding interest in effective performance (pursuant to Art. 6(1)(f) GDPR), or if your consent (pursuant to Art. 6(1)(a) GDPR) or another legal permission or obligation exists.
You may request information from us at any time, free of charge, regarding the purpose of processing, the origin, and, if applicable, the recipients of your personal data. You may also assert the right to rectification, deletion, and restriction of the processing of your personal data. You may object to the (further) processing of your data at any time and have a right to data portability as well as a right to lodge a complaint with the competent supervisory authority.
Your data generally remains stored only for as long as required by the purpose of the respective data processing. Further storage may be considered in particular if this is still necessary for legal action or on the basis of legitimate interests, or if there is a statutory obligation to retain the data (e.g. tax retention periods, statute of limitations).
Insofar as we ask for your consent to process your data, we will inform you in clear and easily accessible language about the cases for which you are giving your consent. Any consent we request is voluntary; any benefit you wish to obtain by giving consent can also be obtained without giving consent — simply ask us.
For every consent given, you have the right to withdraw your consent to the processing of your personal data at any time. This can be done by an informal notification, e.g. via our contact form, an email to the address given in the imprint, or an unsubscribe link (where offered by us). Your withdrawal does not affect the lawfulness of the data processing carried out until that point.
Your data generally remains stored only for as long as required by the purpose of the respective data processing. Further storage may be considered in particular if this is still necessary for legal action by us or based on our other legitimate interests.
For your inventory data, which was required to fulfill a (also free of charge) contractual relationship, this means that we store it until the contractual relationship is fully performed or terminated, plus the statute of limitations (which is generally 2 or 3 years), plus a reasonable surcharge for any possible interruption of the limitation period.
For your usage data, which was collected in connection with your use of the website, this means that we store it only for as long as necessary for the proper functioning of our website and as long as our legitimate interest extends. Statistical data will primarily be stored only in pseudonymized form.
In addition, we still store your data insofar as we are legally obligated to do so. This applies in particular to tax retention periods, which generally amount to 6 or even 10 years.
As part of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6(1)(f) GDPR, our website uses cookies and, if applicable, technologies with a similar purpose such as pixels, web beacons, or tags. A cookie is a data set containing information that is stored on your device (computer, tablet, smartphone, etc.). Cookies can be "session cookies," which are automatically deleted at the end of your visit to our website. However, there are also persistent cookies, which are stored on your computer for a certain period of time unless you delete them. This allows us to recognize your browser the next time you visit our website and provide you with functions
based on your previous usage. However, our website only uses cookies that are necessary for using our website and, in particular, no external tracking or advertising cookies.
Your browser allows you to prevent the use of cookies entirely or on a case-by-case basis. Please refer to your browser's instructions for this purpose. You can also delete cookies; we have compiled some instructions for this here:
for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
for Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
for Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
for Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
for Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer
Blocking cookies may limit the functionality of our website and other websites you visit. For more information on how to manage, restrict, or completely disable third-party cookies and technologies with a similar purpose, please visit in particular:
https://www.aboutads.info/choices
https://www.youronlinechoices.eu
https://www.networkadvertising.org/choices
You may request information at any time, free of charge, about the personal data we have stored about you. To prevent misuse, verification of your identity will be required.
You may request the rectification (including supplementation) of inaccurate data at any time, as well as the restriction of its processing or the deletion of your data. This applies in particular if the purpose of processing has ceased to exist, a required consent has been withdrawn and no other legal basis exists, or our data processing is unlawful. We will then promptly rectify, restrict, or even delete your personal data within the legal framework.
YOU MAY OBJECT AT ANY TIME TO ANY PROCESSING OF YOUR PERSONAL DATA THAT WE BASE ON A BALANCING OF INTERESTS PURSUANT TO ART. 6(1)(f) GDPR, IF THERE ARE REASONS ARISING FROM YOUR PARTICULAR PERSONAL SITUATION.
WE WILL THEN NO LONGER PROCESS YOUR DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS ON OUR PART.
You may request that we transfer the data stored about you in a machine-readable format.
If you feel that your rights have been violated by our data processing, you may file a complaint with the competent supervisory authority (here you will find a list of authorities).
Should an amendment to this privacy policy become necessary for legal or factual reasons, we will update this page accordingly. In doing so, no changes will be made to the consents given by the user.
When you enter data on our website, whether on a contact form, during registration, when logging in, or for payment purposes, the website on which you enter the data is encrypted. This prevents third parties from reading the data you enter. You can recognize the encryption by the lock symbol in your browser and by the fact that the address bar begins with "https" instead of just "http".
If you fill out a contact form or send us an email or other electronic message, your information will be stored for the purpose of processing the inquiry, any follow-up questions, or related further questions, and will only be used in connection with the inquiry.
Your data is entered in encrypted form, meaning that third parties cannot read your data when it is entered, even if they have access to the network (e.g. in unprotected public Wi-Fi).
The basis for this storage is our legitimate interest in communicating with interested users pursuant to Art. 6(1)(f) GDPR, and in the case of contractual inquiries, also the storage of contractual data pursuant to Art. 6(1)(b) GDPR.
Your data remains stored for as long as required to process the inquiry, in particular if storage is still necessary for the fulfillment/execution of a contract, for legal action by us, or based on our other legitimate interests, or if we are legally obligated to retain your data (e.g. as part of tax retention periods).
Our website features a contact form that you can use to request a quote for our services. We collect the data shown in the form that is required to prepare the quote.
Your data is entered in encrypted form, meaning that third parties cannot read your data when it is entered.
The basis for this storage is our legitimate interest in communicating with interested users pursuant to Art. 6(1)(f) GDPR, and in the case of contractual inquiries, also the storage of contractual data pursuant to Art. 6(1)(b) GDPR.
Your data remains stored for as long as required to process the inquiry, in particular if storage is still necessary for the fulfillment/execution of a contract, for legal action by us, or based on our other legitimate interests, or if we are legally obligated to retain your data (e.g. as part of tax retention periods).
On our service page, you can request a callback from one of our service staff. We ask for the following:
– Your first name, because we like to address you personally,
– Your phone number, so we can call you back, and
– Your email address, because we send you confirmations of your inquiries by email.
Your data is entered in encrypted form, meaning that third parties cannot read your data when it is entered.
The basis for this storage is our legitimate interest in communicating with users who are themselves interested in this, pursuant to Art. 6(1)(f) GDPR, and in the case of contractual inquiries, also the storage of contractual data pursuant to Art. 6(1)(b) GDPR.
Your data remains stored for 6 months after processing has been completed, so that previously prepared service results can be referred to for subsequent service inquiries.
If you submit a job application to us, we process the personal data contained in your application. This includes all of your application documents. In particular, we store your contact details, information about your schooling and education, internships, work experience, and references.
Please refrain from submitting information relating to race, ethnic origin, gender, religion or belief, disability, age, illnesses, physical or mental health, pregnancy, political opinion, philosophical or religious conviction, trade union membership, sexual identity, or sex life, as we evaluate applications independently of such information.
Applications are subject to strict internal access management. Only employees involved in the application process are granted access to the application, generally only the HR and specialist departments and, where applicable, management. All of our employees are bound by confidentiality obligations.
The processing of your application information is justified under Art. 88 GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG), according to which personal data of employees may be processed for purposes of the employment relationship if this serves the decision on whether to establish an employment relationship.
If you are hired as a result of your application, your data will be stored as part of your personnel data in accordance with the then-separate privacy policy for our employee data. If your application is ultimately not successful, we will completely delete your data within 3 months of rejection, unless you have separately given us your consent to process your data for future applications as well. You may withdraw this consent at any time, and we will then promptly delete your applicant data.
If you register on our website, we request mandatory and, if applicable, non-mandatory data in accordance with our registration form for the purposes specified below.
Your data is entered in encrypted form, meaning that third parties cannot read your data when it is entered.
The basis for this storage is our legitimate interest in communicating with interested users pursuant to Art. 6(1)(f) GDPR, and in the case of contracts — including those free of charge — also the storage of contractual data pursuant to Art. 6(1)(b) GDPR.
Your data remains stored for as long as the registration lasts, in particular if storage is still necessary for the fulfillment/execution of a contract, for legal action by us, or based on our other legitimate interests, or if we are legally obligated to retain your data (e.g. as part of tax retention periods).
If you register for our members' area, we request data in accordance with our registration form, as we do not permit anonymous use of our services. We will only use your data to provide you with information necessary for using the members' area (messages, news in the members' area, and technical notices).
In our members' area, you can register to exchange information with our other members. We request the data specified in our registration form so that we can introduce you to our other members. If you unsubscribe from the members' area, your entries there will remain even after you unsubscribe. If you do not wish this, you may also request the deletion of these entries using the email address provided in the imprint. We will then delete the entries as well.
If you register for a course, we request data in accordance with our registration form, as we like to address you personally. We will only use your data to provide you with information necessary for using the course (course-related messages, progress, course news, and technical notices).
If you register in our shop, we request data in accordance with our registration form for the purpose of sending future orders. We will use your data to make future orders easier for you and to provide you with information necessary for use (technical notices).
If you subscribe to the newsletter offered on our site, we will inform you in detail about what we inform you of, what data of yours is stored, and what it is used for. We will not share your data with third parties and will only use it to send the newsletter.
We will only send you the newsletter if you have given us your prior consent to do so. To this end, you will receive an email from us with a link, further information, and a request for your consent. By clicking this link, you agree to receive the newsletter and advertising from us. Since we are legally required to log your consent as part of the so-called double opt-in procedure, your newsletter subscription, the sending of our consent email, and your consent given by clicking the link are logged and stored with the date, time, and your IP address.
The basis for this storage is your consent pursuant to Art. 6(1)(a) GDPR, which you give us when subscribing to the newsletter. You may withdraw this consent at any time; an informal notification to us is sufficient for this purpose (e.g. via contact form, email, or the unsubscribe link included in every email). Such withdrawal does not affect the lawfulness of the data processing carried out until that point.
However, we do not use an external provider to send the newsletter; instead, we send all emails using our own email program. This means that neither your data nor your user behavior is shared with any third-party provider. Although our email program allows us to see whether you have opened the email or clicked on a link contained within it, your data is stored only internally with us.
Your data remains stored for as long as it remains on our email list, for as long as storage is still necessary for legal action by us or based on our other legitimate interests, or for as long as we are legally obligated to retain your data.
If you choose one of the payment options offered by our payment service provider Mollie, Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Netherlands, https://www.mollie.com, the data you enter during the ordering process will be transmitted to our payment service provider for the purpose of processing the payment in accordance with the contract.
As part of the payment process, the purchase data you have entered, the goods or services purchased and their quantity, the billing address, and any further purchase data entered, as well as payment data such as credit card number, credit card holder, credit card expiration date (month and year), credit card CVC, bank details, or other payment-related data, will be transmitted to our payment service provider. This data is stored only for as long as it is needed for payment processing (including handling any chargebacks and debt collection) and for fraud prevention. Longer storage may be necessary to comply with a statutory retention period or to pursue a specific case of fraud.
Detailed information on this and on the credit reporting agencies used can be found in our payment service provider's privacy policy.
The legal basis for sharing your data with our payment service provider is primarily the processing of your contractual data pursuant to Art. 6(1)(b) GDPR, as well as our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6(1)(f) GDPR.
If you choose one of the payment options offered by our partner PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, the data you enter during the ordering process will be transmitted to PayPal for the purpose of processing the payment in accordance with the contract. Detailed information on this can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
The legal basis for sharing your data with PayPal is primarily the processing of your contractual data pursuant to Art. 6(1)(b) GDPR, as well as our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6(1)(f) GDPR.
As part of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6(1)(f) GDPR, we use the Sentry service provided by Sentry IO, Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (hereinafter "Sentry") for error logging.
Sentry can be used to collect and log errors in the code and analyze them for the purpose of system stability. To do this, Sentry also collects your usage data, such as your operating system, the software installed on your device, your IP address, your browser type, operating system, or the previously visited website ('referring URL'). This data is collected by Sentry in pseudonymized form and does not allow us to identify you as a user.
This may result in your data being transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the ECJ, this is a legal basis for the transfer of data to the USA. In addition, this provider is certified under the EU-US Data Privacy Framework. This means that data transfer to the USA is legally secure on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded a data processing agreement with this provider, according to which this provider processes your data only on our behalf within the framework of the GDPR and according to our instructions.
For more information on how Sentry uses your data, please refer to Sentry's privacy policy at https://sentry.io/privacy/.
For customer service, we use the customer service software from HelpDesk by HelpScout PBC, 177 Huntington Ave Ste 1703, Boston, Massachusetts, 02115, United States of America, as part of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6(1)(f) GDPR.
For more information on the privacy policy of our customer service software, please visit https://www.helpscout.com/company/legal/privacy/.
When our customer service software is accessed, it initially and temporarily collects the IP address in order to determine the country from which the support request originated. This makes it possible to offer visitors customer service tailored to their needs. The collection of the IP address serves this purpose only and is not permanently stored by our customer service software.
In addition, our customer service software stores communications related to support requests. This can save you from having to provide extensive explanations again for your inquiry.
Our current privacy policy dated 04/22/2024 applies.