Privacy Policy

I. NAME AND ADDRESS OF THE CONTROLLER

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection provisions, is:

Nimbits GmbH
Am Sportpark 4
97246 Eibelstadt

Represented by:
Steffen Hoppe
Nils Heilemann
Lukas Hofmann

Am Sportpark 4
97246 Eibelstadt

Contact:
Phone: +49 (0)931 – 404 93 006
Email: info@nimbits.de

II. GENERAL INFORMATION ON DATA PROCESSING

1. SCOPE OF THE PROCESSING OF PERSONAL DATA

As a rule, we only process our users' personal data to the extent necessary to provide a fully functional website and to deliver our great content and services. The processing of personal data normally only takes place with the user's consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by statutory regulations.

2. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing. To provide our services, we use an infrastructure provider. This partner acts for us as a "processor" within the meaning of Art. 4 No. 8 GDPR and is therefore also committed to complying with all data protection regulations. In particular, the processor has undertaken to the controller to process the personal data only within the scope of correctly providing the infrastructure and to support us in complying with our obligations under the EU General Data Protection Regulation.

3. DATA DELETION AND STORAGE DURATION

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in Union regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned norms expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

III. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected during this process:

Information about the browser type and version usedThe user's operating systemThe user's internet service providerThe user's IP addressDate and time of accessWebsites from which the user's system reaches our websiteWebsites accessed by the user's system through our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.

3. PURPOSE OF DATA PROCESSING

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, this data helps us optimize our website and ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context. These purposes also constitute our legitimate interest in data processing according to Art. 6 (1) lit. f GDPR.

4. DURATION OF STORAGE

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting data to provide the website, this is the case when the respective session has ended. In the case of storing data in log files, this is the case after one month at the latest. Storage beyond this period is possible. In this case, the users' IP addresses are deleted or anonymized so that assigning the calling client is no longer possible.

5. OBJECTION AND ELIMINATION OPTION

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no option for the user to object.

IV. USE OF COOKIES

A) DESCRIPTION AND SCOPE OF DATA PROCESSINGOur website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables clear identification of the browser when the website is called up again. We use cookies to make our website even more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. We also use cookies on our website that allow an analysis of the user's surfing behavior. In doing so, we collect info on which of our pages are visited and how often. The user data collected in this way is pseudonymized through technical precautions. Therefore, assigning the data to the calling user is no longer possible. The data is not stored together with other personal data of the users. When calling up our website, the user is informed about the use of cookies for analysis purposes, and their consent to the processing of the personal data used in this context is obtained. In this context, a reference to this privacy policy is also provided. 

B) LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes, provided the user has given consent, is Art. 6 (1) lit. a GDPR.

C) PURPOSE OF DATA PROCESSING

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. These purposes also represent our legitimate interest in processing personal data according to Art. 6 (1) lit. f GDPR. The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our services.

D) DURATION OF STORAGE, OBJECTION AND ELIMINATION OPTION

Cookies are stored on the user's computer and transmitted from there to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

E) OBJECTION: OPT-OUT

If you agreed to the use of cookies during your last visit, you can exercise your right of objection and perform an "Opt-Out" below. Your current status: Consent accepted. Allow all cookies (Necessary, Uncategorized, Advertisement). Manage your consent.

F) Microsoft Clarity We use Microsoft Clarity. "Microsoft Clarity" refers to a procedure by Microsoft through which a user analysis is possible on the basis of a pseudonymous user ID and thus on the basis of pseudonymous data, such as the evaluation of data about mouse movements or performance data about certain internet presentations.
In doing so, we process usage data (e.g., visited internet presentations, interest in content, access times), meta/communication data (e.g., device information, IP addresses), location data (information on the geographical position of a device or a person), and movement data (mouse movements, scrolling movements) in pseudonymized form. We have adjusted the corresponding settings so that the data collection to and by Microsoft takes place in a pseudonymized manner, particularly in the form of IP masking (pseudonymization of the IP address). Affected by this data processing are all users of our website who have agreed to the corresponding use via our cookie consent service. The data processing is therefore based solely on your consent in accordance with Art. 6 (1) a) GDPR. The purpose of the processing is tracking (e.g., interest/behavior-based profiling, use of cookies), remarketing, conversion measurement (measuring the effectiveness of marketing measures), interest-based and behavioral marketing, profiling (creating user profiles), reach measurement (e.g., access statistics, recognition of returning users), and cross-device tracking (cross-device processing of user data for marketing purposes). You are informed of your rights to object in accordance with this privacy policy. Microsoft Clarity: Online marketing and web analytics; offered by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Website: https://clarity.microsoft.com; Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement; Objection option (Opt-Out): https://choice.microsoft.com/en-US/opt-out. Please note that we have concluded a data processing agreement with Microsoft to enable this activity, including the necessary Standard Contractual Clauses.

G) Google Analytics

Data protection information on the use of Google AnalyticsThis website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We point out in this context that Google Analytics has been expanded on this website to include the code "anonymizeIp" to ensure an anonymized collection of IP addresses (so-called IP masking), meaning that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=en. Alternatively, you can prevent future collection of your data by Google Analytics by setting an opt-out cookie. You set this cookie by clicking this link. Please note that the opt-out cookie only works in this browser and for this website. If you delete the cookies in your browser, you must click the link again. More information on the terms of use between us and Google regarding data protection can be found at http://www.google.com/analytics/terms/us.html and further information on Google's privacy policy can be found at https://policies.google.com/.

V. CONTACT FORM AND EMAIL CONTACT

1. DESCRIPTION AND SCOPE OF DATA PROCESSINGA contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
At the time the message is sent, the following data is also stored:The user's IP addressDate and time of the messageFor the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy. Alternatively, contact can be made via the email address provided. In this case, the user's personal data transmitted with the email is stored. In this context, there is no disclosure of the data to third parties. The data is used exclusively to process the conversation and address your request.PipedriveWe use Pipedrive as our CRM tool to process and store contact details. When contacting us (via contact form or email), the user's details are processed to handle the contact request and its execution in accordance with Art. 6 (1) lit. b) GDPR. To process and answer your requests and messages as quickly as possible, we use contact forms from our Customer Relationship Management tool ("CRM tool") Pipedrive. The data transmitted when filling out the form is sent to Pipedrive and stored there on Pipedrive's servers. We use the CRM system Pipedrive from the provider Pipedrive OÜ based on our legitimate interests (efficient and fast processing of user inquiries, customer relationship management, new customer business). Pipedrive OÜ is a limited liability company under Estonian law (EU) with the address Mustamäe tee 3a, 10615 Tallinn, Estonia, registered in the