Data protection notice

Name and address of the responsible person

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is/are:

TONALITY GmbH
In der Mark 100
56414 Weroth
Deutschland
Tel.: +496435909990
E-Mail: 

Contact to the data protection officer

The data protection officer of the responsible party can be contacted at the following address:

E-Mail:

General information on data processing

Scope of the processing of personal data

We process personal data of our users only insofar as this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

Data deletion and storage duration

The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Note on data transfer to the USA

Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data for monitoring purposes. We have no influence on these processing activities.

Provision of the website and creation of log files

a) Description and scope of data processing

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected in the process:

• Information about the browser type and version used
• The operating system of the user
• The user’s Internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites that are accessed by the user’s system via our website

The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

b) Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f) GDPR.

c) Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR.

d) Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

e) Possibility of objection and elimination

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Contact form and e-mail contact

a) Description and scope of data processing

Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are:

• First name
• Name
• Company
• Position (optional)
• E-mail address
• Address (optional)
• Your message

At the time of sending the message, the following data will also be stored:

• The IP address of the user
• Date and time of registration

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

b) Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending a message is Art. 6 para. 1 lit. f) of the GDPR. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR or, in the case of consent to further contact, Art. 6 para. 1 lit. a) GDPR.

c) Purpose of the data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d) Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

e) Possibility of objection and elimination

The user has the possibility to revoke the processing at any time.

The revocation is to be addressed to .

All personal data stored in the course of contacting us will be deleted in this case.

Newsletter

a) Description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the following data from the input mask is transmitted to us:

• E-mail address

In addition, the following data is collected during registration:

• IP address of the calling computer
• Date and time of registration

For the processing of data, your consent is obtained during the registration process and reference is made to this privacy policy.

No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.

b) Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a) GDPR if the user has given his consent.

c) Purpose of the data processing

The collection of the user’s e-mail address serves to deliver the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

d) Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address is stored for as long as the subscription to the newsletter is active.

The other personal data collected during the registration process is usually deleted after a period of seven days.

e) Possibility of objection and elimination

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.

This also enables revocation of the consent to the storage of the personal data collected during the registration process.

Monotype Web Fonts

a) Description and scope of data processing

This website uses so-called web fonts to display fonts, which are provided by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Monotype’s servers. Through this, Monotype obtains knowledge that our website was accessed via your IP address.

The following data is stored:

• IP address
• Browser information

If your browser does not support web fonts, a default font is used by your computer. For more information about these web fonts, see https://www.fonts.com/info/legal and Fonts.com’s privacy policy: https://www.fonts.com/info/legal/privacy/ and Monotype’s privacy policy https://www.monotype.com/legal/privacy-policy/.

b) Legal basis for data processing

The use of web fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

c) Purpose of data processing

The integration requires that a third-party provider of this content processes the IP address of the user, since without the IP address the content cannot be sent to their browser. The IP address is thus necessary for the display of this content or functionality.

d) Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

e) Possibility of objection and elimination

The collection of data for the provision of the plugin is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Cookies use

Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We also use cookies on our website that enable an analysis of the user’s surfing behavior.

The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users.

When calling up our website, users are informed by a so-called cookie layer about the use of cookies for analysis purposes.

Borlabs Cookie

a) Description and scope of data processing

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.

Borlabs cookie does not process any personal data.

Note: At this point, include the button to view / change the cookie settings of Borlabs.

b) Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR.

c) Purpose of data processing

In the borlabs-cookie cookie, your consents that you gave when entering the website are stored. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

d) Duration of storage

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies.

e) Possibility of objection and removal

By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

HubSpot

a) Scope of the processing of personal data

We use HubSpot on our website for marketing activities. HubSpot is a software company from the USA with a branch HubSpot Ireland Limited in 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

HubSpot uses cookies, which are small text files that are stored locally in the cache of your web browser on your terminal device and enable an analysis of your use of the website by us.

HubSpot evaluates the collected information on our behalf so that we can generate reports about the visit and the pages visited.

The following data is collected in the process:

• IP address
• the geographical location
• type of browser
• duration of the visit
• pages viewed)

b) Legal basis for the processing of personal data.

The legal basis for the processing of the users’ personal data is Art. 6 para. 1 lit. a) GDPR.

c) Purpose of the data processing

We use HubSpot our own marketing, lead generation and for customer service purposes. This includes, among other things, email marketing, which governs the sending of newsletters as well as automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages and contact forms.

d) Duration of storage

The data will be deleted as soon as it is no longer required for our recording purposes.

e) Possibility of objection and elimination

By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

Google Analytics

The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called „cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

a) Scope of the processing of personal data

In Google Analytics, interactions of visitors to our website are primarily recorded with the help of cookies. If individual pages of our website are called up, the following data is stored:

• Two bytes of the IP address of the user’s calling system.
• The web page called up
• The website from which the user accessed the accessed website (referrer)
• The subpages accessed from the accessed web page
• The time spent on the website
• The frequency with which the web page is accessed

The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (ex.: 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible.

b) Legal basis for the processing of personal data.

The legal basis for the processing of the users’ personal data is Art. 6 para. 1 lit. a) GDPR.

c) Purpose of the data processing

The processing of the users’ personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.

d) Duration of storage

The data will be deleted as soon as it is no longer required for our recording purposes.

e) Possibility of objection and elimination

By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

• Right to information
• Right to rectification
• Right to restriction of processing
• Right to deletion
• Right to information
• Right to data portability
• Right to object

Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of complaint to a competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us in matters of data protection law is the state data protection commissioner of the federal state in which our company is based.

A list of data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.