Privacy Policy
Responsible Authority
We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:
20inch Labs UG
represented by the Manager Peer Schelletter
Logenstraße 15
15907 Lübben
Germany
Phone: +49 3546 2354622
E-mail: info@20inchlabs.com
General Information
Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.
When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.
All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.
On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.
The GDPR allows data processing in three cases in particular:
- in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;
- in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
- in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.
Inventory Data
We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user. This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment). Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.
Usage Data
We also collect usage data to allow users to use the services on our website. These may consist of: usage information (for example visited websites or parts, duration of visit, interest in services), content data (for example data, text, images, sounds, videos entered or uploaded by you), meta data (for example identity of your device, location, IP address).
We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.
The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.
First Contact through Electronic Request
If you contact us in electronic form (for example by mail, fax, phone, messenger, etc.), we store and process the data which you have given us (for example name, contact information, content of the request). This is based on our legitimate interest in an effective communication with customers in accordance with Article 6 para. 1 (a) GDPR and, as far as it concerns a request to enter into or to perform a contract, also with Article 6 para. 1 (b) GDPR.
We will only pass on this data to third parties as far as required for the performance of the contract (in accordance with Article 6 para. 1 (b) GDPR), by the overwhelming interest in effective services (in accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in accordance with Article 6 para. 1 (a) GDPR) or if there is another legal permission or obligation.
You may ask us at any time and without any cost to provide information about the purpose of the processing, the origin and the recipient, if any, of your data. You may also request that we correct, delete or limit the processing of your personal data. You may object against the (further) processing of your data at any time and you have a right for the data to be made transferable as well as the right to file a complaint with the competent supervisory agency.
In general, your data will only remain stored as long as required by the purpose of the respective data processing. A longer storage is an option, in particular when required in order to pursue our rights, for other legitimate interests of ours or when there is a statutory duty to keep the data longer (for example record-keeping under tax law, statute of limitations).
Consent
Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.
Storage Period
Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.
For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus an adequate extra time for potential interruptions of the limitation period.
For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.
Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular the tax-law requirements to keep records, usually for 6 or even 10 years.
Cookies
Essential Cookies
Based on our legitimate interest in a flawlessly functioning online offer and its economic and efficient design and optimization according to Article 6 para. 1 (f) GDPR, our website uses cookies and where required technologies with a similar target bearing, like pixel, web-beacons or tags, in order to allow you to use our offer better, more effectively and in a more secure way. Cookies are text files that are stored on your computer and which store certain data about your user behavior on our page. These can be “session cookies”, which are automatically deleted when you leave our website. Other cookies are stored on your computer permanently until you delete them. That allows us to recognize your browser when you visit our website again and to provide you with features or offers according to your previous usage.
Our website only uses cookies which are necessary for the use of our website and in particular no external tracking or advertising cookies.
Your browser allows you to prevent the use of cookies in general or in specific cases. Please check the instructions for your browser to find out more about this. You can also delete cookies following these instructions which we have listed for you:
for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
for Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
for Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
for Edge: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
for Internet Explorer: https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer
Blocking cookies may limit the functionality of our website and of other websites visited by you.
More information on this topic, in particular how you can administer, limit or completely disable third-party cookies and technologies with a similar purpose, can be found at:
https://www.aboutads.info/choices
https://www.youronlinechoices.eu
https://www.networkadvertising.org/choices
Transfer of data
Transfer to Third Parties
We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.
Transfer of customer data may either
- be required for the performance of a contract and in that case be permitted according to Art. 6 para. 1 (b) GDPR, or
- be permitted based on our legitimate interest in an effective service structure pursuant to Art. 6 para. 1 (f) GDPR, or
- covered by your consent pursuant to Art. 6 para. 1 (a) GDPR, or
- become necessary if we will be legitimately asked by a government or an agency to hand over your data pursuant to Art. 6 para. 1 (c) GDPR.
If your data are transferred to third parties, this is mentioned in this privacy policy.
Users‘ Rights
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
Deletion, Correction, Limitation
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
Objection
The right to object to advertisement is governed by our text regarding consent:
Data Transfer
You may request us to transfer the data stored about you in machine-readable form.
Complaint
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).
Changes to the Privacy Policy
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
Data Entry
Encryption of Data Entry
When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.
Registration
If you register on our website, we will ask for compulsory and potentially also non-compulsory data in accordance with our registration form for the purposes listed hereinafter.
Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.
The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR in case of contracts, including non-remunerated ones.
Your data will remain stored for as long as you remain registered, particularly as long as the storage is still required to perform the contract, to pursue our rights or for our other legitimate interests or for as long as we are required by law to store your data (for example pursuant to tax-law requirements to store documents).
Membership Area
If you register for our membership area, we will ask for data in accordance with our registration form, because we do not permit the anonymous use of our services. We will only use your data to provide you with the information necessary for using the membership area (news, news in the membership area and technical information).
When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “Legal Notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.
Website Analysis
Fathom Analytics
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use web analysis tool Fathom Analytics.
Fathom Analytics does not use cookies and fully supports GDPR, CCPA and various other ePrivacy laws. The tool is operated by Conva Ventures Inc., 37058 Millstream PO, Victoria BC, V9B 0E8, Canada.
Security systems
reCAPTCHA
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the reCAPTCHA tool provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google“).
The reCAPTCHA tool provided by Google checks if the entries on our website are made by a human or are due to fraudulent automated machine processing and is therefore mainly used in connection with forms. The reCAPTCHA tool uses the following data points to determine that an action was taken by a human and not by an automated bot: IP address of the device used, identification of the browser and the operating system, date and duration of the visit as well as user behaviour, for example mouse movements or other information. The procedure only serves the purpose of fending off spam, DDoS attacks and similar automated attacks. The transmitted IP address will only be connected with information from your Google account if you are logged into your Google account at the time of using Google reCAPTCHA. If you don't want your data to be transmitted, you simply log out from Google before.
When using Google reCAPTCHA, personal data can be transferred to a server of Google in the USA.
You can find more information about the use of your data by Google in the privacy policy of Google https://www.google.de/intl/de/policies/privacy/.
If you don't want your data to be transmitted, you can deactivate Java scripts in your browser or install a blocker which will prevent Java scripts from being executed (for example https://noscript.net). We do however want to point out that this can impair the use of our or other websites.
Payment providers
FastSpring
If you choose one of the payment options of our partner FastSpring, provided by FastSpring B.V., Strawinskylaan 3101 Tenant B.V. 1077 ZX Amsterdam, Netherlands, the data entered by you when ordering will be sent to FastSpring in order to facilitate the contractual payment. Detailed information about this can be found in the privacy policy of FastSpring:
https://fastspring.com/privacy/
The legal basis for passing on your data to FastSpring is primarily the processing of your contractual data according to Art. 6 para. 1 (b) GDPR as well as our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR.
Cloud Storagesolutions
Amazon Web Services
Based on our legitimate interest in a flawlessly functioning online offer and its economic and efficient design and optimization according to Article 6 para. 1 (f) GDPR, our platform is backed up on servers of Amazon Webservices, an offer provided by Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA.
You will find more information about the data protection rules of Amazon in the Amazon white paper on the GDPR at https://aws.amazon.com/de/data-protection/. We have also entered into a contract on data processing with Amazon.
By using Amazon's servers for backing up data and using Amazon SES for sending e-mails from our system, Amazon will learn of all the data entered on our end. According to the agreed contract on data processing and the Amazon white paper on data protection, Amazon will not analyze or use this data.
KeyCDN
On our website we use what is known as a content delivery network ("CDN") from the technology service provider proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland ("KeyCDN"). A content delivery network is an online service with the help of which, in particular, large media files (such as graphics, page content or scripts) are delivered through a network of regionally distributed servers connected via the Internet. The use of the Content Delivery Network from KeyCDN helps us to optimize the loading speeds of our website.
Processing takes place in accordance with Article 6 para. 1 (f) GDPR based on our legitimate interest in a secure and efficient provision, as well as improving the stability and functionality of our website.
Further information can be found in KeyCDN's privacy policy at: https://www.keycdn.com/privacy.
Our Social Media Fan Page(s) - General Information
Beside our website, we also use fan page(s) on social media platforms. Above, we have already informed you about the data processing on our website and we have in particular made sure that the fact alone that you access our website is not yet forwarded to the social media platform. Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our social media fan page(s):
On the basis of our legitimate interest in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as well as for advertising and public relations purposes, we present ourselves and our offers on social media fan page(s).
Our social media fan page(s) usually can be accessed online independently of you having a user account with the relevant platform or not. But in either case, your data will be processed by the social media platform.
Each time the social media platform is accessed, your IP address will be collected and stored. Usually, a cookie will also be placed on your page, which will save your visit and further data about your visit to the social media platform.
If you are logged in with the social media platform, your visit will also be spotted by a cookie or through other technological means and will be attributed to your user account. Thus, the social media platform is usually able to analyse your user behaviour. In this process, a user profile with your interests is generated, which the social media platform will use to provide you with a user experience tailored to your interests, in particular advertisement tailored to your interests within and outside of the social media platform – even across different devices, if applicable. Your data may also be used for market research. For the details, we refer you to the following privacy policies of the social media platform(s) used by us.
We can usually also use the data of the social media platform in order to allow you to use our fan page in accordance with your interests or to approach you with advertising.
When you interact with our fan page and if you are logged in with the relevant social media platform, according to the social media page's terms of use, we can usually also recognise your user profile and see your content.
If you do not want this, we point you to our explanations about cookies above, with general information about cookies and their deactivation. There, we have laid out in general terms how you can prevent or limit cookies being stored on your devices. Further information about the respective social media platform can be found hereinafter.
According to the aforementioned ECJ ruling dated 5 June 2018, we are always jointly responsible for our social media fan page(s) together with the relevant social media platform. This means that you may also exercise your general rights, which we have listed in detail above under the heading “Users' Rights”, against us. To that purpose, we refer you to our contact details at the beginning of this Privacy Policy. Please keep in mind, though, that we have no conclusive knowledge of the exact scope of the processing of your data by the social media platform and have even less influence on it. Therefore, we kindly ask you to contact the relevant social media platform in the first place regarding your rights.
We generally leave your data on the social media platform and do not import it onto our server. But if that should occur, our general information regarding the storage period will apply.
Further information about the processing of your data and the storage period on the social media platform can be found in the respective privacy policy of the social media platform, which we have listed hereinafter.
We present ourselves on the social media platform Facebook.
Joint Responsibility
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
Contact
Contact Data Protection Officer
If you open our fan page on Facebook, your data will be forwarded to the USA.
Facebook has concluded an agreement with us https://www.facebook.com/legal/controller_addendum about our shared responsibility for processing the data, in which it recognises its primary responsibility and guarantees in particular that you can exercise your right to information, as described in the general part. You may obtain more information from Facebook's privacy policy at: https://www.facebook.com/about/privacy. Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA.
Facebook also provides us with statistics as part of "Facebook Insights" for the purpose of targeted advertising. These are created without our participation and then provided to us. The data include information like interaction with our page, such as likes, page activities, video views, reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page as well as statistical data about those interacting, such as gender, origin by country, city and language. The same applies to groups which we may manage.
When you are logged in, you can influence the processing of your data by Facebook considerably and in different ways.
Here you can make changes to your timeline, i.e. what can be seen about you and your page.
And you can change your advertisement preferences here.
We have a presence on the social media platform Instagram. Instagram is now owned by Facebook.
Jointly Responsible
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland.
Contact Data Protection Officer
Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA
We have neither knowledge of, nor any influence on the possible collection and processing of your data by Facebook and Instagram. Further information can be found in Instagram's privacy policy at https://help.instagram.com/519522125107875.
Instagram and Facebook also provide us with statistics as part of "Facebook Insights" for the purpose of targeted advertising. These are created without our participation and then provided to us. The data include information like interaction with our page, such as likes, page activities, video views, reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page as well as statistical data about those interacting, such as gender, origin by country, city and language. The same applies to groups which we may manage.
When you are logged in, you can influence the processing of your data by Instagram considerably and in different ways.
Your content, i.e. what is visible of you and your profile, can be changed here: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.
This is our current valid privacy policy from 02.11.2020