Privacy Policy
1. General Information
This privacy policy informs you about the type, scope, and purpose of the processing of personal data on our website https://www.3patec.com/.
The protection of your data is of great importance to us. We process your data in accordance with the applicable legal regulations for the protection of personal data, particularly the EU General Data Protection Regulation (GDPR) and national data protection laws.
Controller under the GDPR and Data Protection Officer:
Saurabh Joshi, 3patec
University of Bremen
Bibliothekstraße 1
28359 Bremen
Email: hello@3patec.com
2. Data Collection on Our Website
We do not generally collect or store any personal data about your visit to our website. Our website does not use cookies or similar technologies to track your behavior, except for the cookie consent manager solution provided by https://cookieyes.com, which stores your cookie preferences.
Purpose of Data Processing:
The sole purpose for which technical data may be processed is to provide and secure our website as well as to improve its performance.
Legal Basis:
The processing of this technical data is based on our legitimate interest according to Art. 6(1)(f) GDPR.
3. Hosting and Content Delivery Networks (CDN)
Our website is hosted on the platform provided by Webflow, Inc. Webflow may collect certain technical data such as IP addresses of visitors in order to provide and secure the service. This data processing is based on our legitimate interest in the secure and efficient provision of our online presence in accordance with Art. 6(1)(f) GDPR.
Webflow uses the following subcontractors for hosting and content delivery network (CDN) services:
- Amazon Web Services, Inc. (Hosting)
- Fastly, Inc. (CDN)
- Cloudflare, Inc. (CDN and DDoS protection)
These companies may have access to technical data such as IP addresses in order to provide their services. The processing of this data is solely for the purpose of providing the technical infrastructure and ensuring the security and performance of our website. Data processing agreements in accordance with Art. 28 GDPR have been concluded with these providers.
Data Transfer to Third Countries:
The mentioned subcontractors may transfer data to countries outside the EU/EEA. In such cases, we ensure that appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place to guarantee data protection. For data transfers to the USA, we rely on EU Standard Contractual Clauses and additional security measures.
4. Retention Period
Technical data, such as IP addresses, collected by our hosting and CDN service providers are only stored for as long as necessary to fulfill the stated purposes. Once these data are no longer needed, they are deleted.
5. Your Rights
You have the following rights concerning your personal data:
- Right to access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restrict processing (Art. 18 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to data portability (Art. 20 GDPR)
To exercise your rights, please contact us using the contact details provided above.
You also have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.
Right to Object:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on Art. 6(1)(e) or (f) GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
6. Automated Decision-Making and Profiling
We do not use automated decision-making or profiling.
7. Obligation to Provide Data
You are not obliged to provide personal data. The use of our website is possible without the provision of personal data.
8. Contact Form
Our website uses a contact form that allows you to get in touch with us. When using the contact form, the data you enter, particularly your name and email address, as well as any additional information you voluntarily provide, are transmitted to us and stored.
Purpose of Data Processing:
The processing of the personal data transmitted through the contact form is solely for the purpose of handling your inquiry and further communication with you.
Legal Basis:
The processing of your data is based on your consent according to Art. 6(1)(a) GDPR. By submitting the contact form, you consent to the processing of your data. You can withdraw your consent at any time with effect for the future. In this case, your data will be deleted immediately unless there are legal retention obligations.
Retention Period:
The data you provide in the contact form is generally stored for as long as necessary to fulfill the purpose of your inquiry. Once communication with you has been completed and no further legal retention obligations exist, the data will be deleted.
Storage and Processing by Webflow:
The data transmitted through the contact form is stored in our hosting system with Webflow, Inc. Webflow acts as a data processor under Art. 28 GDPR. A data processing agreement has been concluded with Webflow to ensure the protection of your personal data.
Data Transfer to Third Countries:
Webflow may transfer data to countries outside the EU/EEA. In such cases, we ensure that appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place to guarantee data protection.
9. Cookies and Third-Party Services
Cookies:
We do not use cookies or similar tracking technologies on our website, except for the cookies of the consent manager we use, https://cookieyes.com, which record and store your cookie preferences.
YouTube Videos:
Our website includes embedded YouTube videos using the enhanced privacy mode provided by YouTube. This feature ensures that no cookies are set by YouTube until you actively click to play the video. When you interact with the video, your data (such as your IP address) may be transmitted to YouTube and Google LLC.
Third-Party Data Processing:
YouTube is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you play an embedded video, YouTube/Google may collect and process data about your interaction with the video, including your IP address, viewing behavior, and device information. These data may be transmitted to a server in the USA and stored there. Google has committed to complying with the EU Standard Contractual Clauses, ensuring a sufficient level of data protection.
Legal Basis:
The embedding of YouTube videos and the associated data processing occurs on the basis of your consent according to Art. 6(1)(a) GDPR. By playing the embedded YouTube videos, you consent to the transmission of your data to YouTube/Google. You can withdraw your consent at any time with effect for the future by disabling the video playback before it starts or adjusting your privacy settings.
Data Transfer to Third Countries:
Data transferred to the USA is protected by the EU Standard Contractual Clauses implemented by Google. These clauses provide an adequate level of protection for your personal data.
Your Rights:
You have the right to object to the processing of your data at any time under the conditions described in Section 5 of this privacy policy. You can also manage your YouTube privacy settings directly on the YouTube platform.
10. Changes to This Privacy Policy
We reserve the right to amend this privacy policy as necessary to comply with current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. The new privacy policy will apply for your next visit.
Last updated: August 27, 2024