Privacy policy

1. Privacy at a glance

General information

The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our privacy policy set out below this text.

Data collection on this website

Who is responsible for the data collection on this website?

Data on this website is processed by the website operator. You will find the operator’s contact details in the section "Information on the controller" of this privacy policy.

How do we collect your data?

Some of your data is collected because you provide it to us. This may be data that you send us by email, for example. Other data is collected automatically when you visit the website, by our IT systems or those of our hosting provider. This is mainly technical data (for example your browser, operating system or the time of the page request).

What do we use your data for?

The data is collected in order to ensure that the website is provided without errors and to process your enquiries. Your user behaviour is not analysed.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request that this data be rectified or erased. If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right to request the restriction of the processing of your personal data in certain circumstances. In addition, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

We host the content of our website with the following provider:

Amazon Web Services (AWS)

The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (hereinafter "AWS"). When you visit our website, various log files including your IP address are recorded on the servers of AWS. The server location is Frankfurt am Main, Germany (AWS region eu-central-1). Further information can be found in the privacy notices of AWS.

AWS is used on the basis of Art. 6 Abs. 1 lit. f DSGVO. We have a legitimate interest in presenting our website as reliably and securely as possible.

Data processing on our behalf

We have concluded a data processing agreement (Auftragsverarbeitungsvertrag, AVV) with AWS. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Email dispatch and mailbox

Enquiries submitted through the contact form are sent as email via the outgoing mail server of our email provider and are then stored in the mailbox hosted there. The provider is united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. The data processed comprises the details you enter in the form, the sender and recipient addresses and the time of transmission. Transmission to the outgoing mail server is TLS encrypted.

The provider processes this data exclusively in accordance with our instructions. We have concluded a contract on processing on our behalf pursuant to Art. 28 DSGVO with the provider. Processing takes place on servers in Germany. The legal basis is Art. 6 Abs. 1 lit. b DSGVO where your enquiry serves the initiation or performance of a contract, and otherwise our legitimate interest in functioning business communication pursuant to Art. 6 Abs. 1 lit. f DSGVO.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and with this privacy policy. We point out that data transmission over the internet (for example when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller for data processing on this website is:

BYB Agency GmbH
Hafenstraße 25
68159 Mannheim

Phone: +49 152 55787890
Email: info@byb-labs.io

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for the processing no longer applies. If you assert a justified request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data.

Legal bases for data processing

Where you have consented to the processing, we process your personal data on the basis of Art. 6 Abs. 1 lit. a DSGVO. Where your data is required for the performance of a contract or for pre-contractual measures, we process it on the basis of Art. 6 Abs. 1 lit. b DSGVO. Where a legal obligation exists, we process your data on the basis of Art. 6 Abs. 1 lit. c DSGVO. Processing may further take place on the basis of our legitimate interest pursuant to Art. 6 Abs. 1 lit. f DSGVO.

Recipients of personal data

In the course of our business activities we work with external bodies, in particular our hosting provider. We pass personal data on to external bodies only where this is necessary for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest in doing so, or where another legal basis permits the transfer. Where processors are engaged, we pass data on only on the basis of a valid contract on processing on our behalf.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your express consent. You may withdraw consent already given at any time. The lawfulness of the processing carried out until withdrawal remains unaffected by the withdrawal.

Right to object pursuant to Art. 21 DSGVO

Where data processing takes place on the basis of Art. 6 Abs. 1 lit. e or f DSGVO, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will be done only where it is technically feasible.

Information, rectification and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing, and where applicable a right to have this data rectified or erased. For this and for further questions on the subject of personal data you may contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us for this purpose at any time. The right to restriction of processing exists in the cases provided for by law, for example where you contest the accuracy of your data, where the processing was unlawful, where you need the data to establish legal claims, or where you have objected pursuant to Art. 21 Abs. 1 DSGVO.

SSL and TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the padlock symbol in your browser bar.

4. Data collection on this website

Cookies

This website does not use any cookies that require consent, and it does not use tracking or marketing cookies. Only technically necessary mechanisms are used, insofar as they are required for the operation of the website.

Server log files

The provider of these pages automatically collects and stores information in what are known as server log files, which your browser transmits to us automatically. These are: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address.

This data is not merged with other data sources. It is collected on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of its website; the server log files must be recorded for this purpose.

Contact form

If you send us an enquiry via the contact form on this website, we process the data you enter there: name, email address, on a voluntary basis company and telephone number, the topic you select and the content of your message. In addition, we process a shortened checksum of the IP address from which the submission is made, formed with a secret value, and the time of the submission, in order to detect and prevent abusive bulk messages. The IP address itself is not stored.

Transmission is encrypted via TLS. The form is processed exclusively by our own server in Frankfurt am Main; no third-party form service is embedded. Your enquiry is forwarded from there as an email to our mailbox. For dispatch and storage in the mailbox we engage the email provider named under section 2 as a processor; the processing takes place within the European Union. No transfer to further third parties takes place. In particular, we do not pass your details on for advertising purposes and we do not sell them.

The processing takes place on the basis of Art. 6 Abs. 1 lit. b DSGVO where your enquiry serves the initiation or the performance of a contract, and otherwise on the basis of our legitimate interest in dealing with enquiries addressed to us and in preventing abuse (Art. 6 Abs. 1 lit. f DSGVO), as well as on the basis of the consent you give in the form (Art. 6 Abs. 1 lit. a DSGVO). You may withdraw your consent at any time with effect for the future; the lawfulness of the processing carried out until withdrawal remains unaffected.

We store the content of your enquiry in our mailbox until you ask us to erase it, withdraw your consent or the purpose for storage no longer applies; mandatory statutory retention periods remain unaffected. The connection data processed for the prevention of abuse is erased after seven days at the latest.

Enquiry by email or telephone

If you contact us by email or telephone, your enquiry including all personal data arising from it (name, request) is stored and processed by us for the purpose of dealing with your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6 Abs. 1 lit. b DSGVO where your enquiry is connected with the performance of a contract or is necessary for pre-contractual measures. In all other cases the processing is based on our legitimate interest in dealing effectively with the enquiries addressed to us (Art. 6 Abs. 1 lit. f DSGVO) or on your consent (Art. 6 Abs. 1 lit. a DSGVO) where this has been requested.

The data you send us remains with us until you ask us to erase it, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

5. Analytics and reach measurement

No analytics tools

We do not use any third-party analytics, tracking or reach measurement tools on this website. Your user behaviour is not evaluated and no profiling takes place; no corresponding cookies or identifiers are set.

6. Fonts and media

Locally hosted fonts

For a uniform display of typefaces, this website uses fonts hosted locally on our server (Barlow, Barlow Condensed and Playfair Display). When the website is called up, no connection to third-party servers (for example Google Fonts) is established; no personal data is transferred to third parties in this context.