Data protection

1. General Information

This privacy policy regulates and informs about the handling of personal data and data processing by:

Controller (within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws applicable in the member states of the European Union, as well as other provisions with a data protection character):

tegoly GmbH
Managing Directors: Sven Gosda and Jan Gosda
Siepenstraße 26b
58452 Witten, Germany

contact@tegoly.com

We would like to inform you about the nature, scope, and purpose of the personal data we collect, use, and process, and also to explain the rights to which you are entitled.

This privacy policy applies both to our online offerings (e.g. websites, apps, social media) and to our other offline activities (e.g. provision of services, communication, documentation).

In principle, the use of the website is possible without providing any personal data. Personal data is all information relating to an identified or identifiable natural person.

If you wish to use special services of our enterprise via our website, processing of personal data may become necessary.
Processing is understood to mean any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, erasure, destruction, or any other form of making data available.
If there is no statutory basis for processing, we generally obtain the consent of the data subject.
Consent is to be regarded as any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

The processing of your personal data, such as your name, address, email address, or telephone number, will always be in line with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to our company.

As the controller, our company has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. However, absolute protection cannot be guaranteed due to security vulnerabilities.
For this reason, you are free to transfer personal data to us via alternative means, for example by telephone or in writing.

2. Cookies

We use cookies on our website. Cookies are text files that are stored on a computer system via an internet browser.
Many cookies contain a so-called cookie ID, i.e. a unique identifier of the cookie. It consists of a character string by which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited internet pages and servers to differentiate the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can therefore be recognised and identified using the unique cookie ID.
The use of cookies serves to make the use of our services more pleasant for you. For example, the user of a website that uses cookies does not have to enter their access data each time they visit the website, because this is taken over by the website and the cookie stored on the user's computer system.

For this purpose, we use so-called session cookies, which make it possible to recognise that you have visited individual pages of our website. These are automatically deleted after leaving our site.
In addition, to optimise user-friendliness, we also use temporary cookies, which are stored on your end device for a certain specified period of time. If you visit the site again, it is automatically recognised that you have already visited us and what settings and entries you made, so that you do not have to enter them again.
In particular, we use WordPress session cookies.
We use Borlabs Cookie, which sets two technically necessary cookies, namely borlabsCookie and borlabsCookieUnblockContent, to store your preferred cookies.
No personal data is processed when Borlabs Cookies are used.
The borlabsCookie merely stores the preference you chose when you accessed the website. The borlabsCookieUnblockContent then stores which media/content you always want automatically unblocked, without having to actively confirm this every time.
If you wish to retract these settings, simply delete the cookies in your browser. When reloading or entering the website again, you will be asked for your cookie preference once more.

The data processed by cookies is necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a warning always appears before a new cookie is created.

The setting of cookies through our website can be prevented at any time by means of a corresponding setting of the internet browser used, and the setting of cookies can thus be permanently objected to. Furthermore, already set cookies may be deleted at any time via an internet browser or other software programmes. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, not all functions of our website may be fully usable.

3. Collection of general and personal data

Our website collects general data and information each time you or an automated system accesses the website. This is temporarily stored in a so-called log file of the server.

The following information can be recorded and stored until automated deletion:

(1) browser types and versions used,
(2) the operating system used by the accessing system and the name of the access provider,
(3) the website from which an accessing system reaches our website (so-called referrer URL),
(4) the sub-websites which are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an Internet Protocol address (IP address) of the accessing computer,
(7) the internet service provider of the accessing system and
(8) other similar data and information that serve to avert danger in the event of attacks
on our commercial information technology systems.

This data and information is in no case used to draw conclusions about personal data or personal identity. Rather, this information is needed to

(1) ensure a smooth connection of the website as well as the comfortable use of the website,
(2) optimise the content of our website and its advertisement,
(3) evaluate system security and system stability,
(4) provide law enforcement authorities with the information necessary for prosecution
in the event of a cyberattack,
(5) achieve other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

The anonymously collected data and information are evaluated statistically and with the aim of increasing data protection and data security in our company. This is to ensure an optimal level of protection for the personal data processed by us.
The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

4. Use of Google Maps

To display maps for the purpose of creating directions on our website, we use Google Maps, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using Google Maps, information about your use of this website (including your IP address) can be transmitted to a Google server in the USA and stored there.
The terms of use can be found on the provider's pages.
You have the option of easily deactivating the Google Maps service and thus preventing data transfer to Google. To do this, disable JavaScript in your browser. We would like to point out, however, that in this case you will not be able to use the map display.

5. Use of Google Web Fonts

For the uniform display of fonts, we use so-called Web Fonts on our website, which are provided by Google. When you access our page, your browser loads the required Web Fonts into its browser cache in order to display texts and fonts correctly. If your browser does not support Web Fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

6. Use of Google ReCaptcha

To protect the transmission of forms (e.g. blog comments, contact form, registration for the internal member area), we use the reCAPTCHA service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in selected cases. The service includes sending your IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google.

For this data, the differing data privacy regulations of Google apply. Further detailed information can be found in Google's Privacy Centre: https://www.google.de/intl/en-GB/privacy

7. Privacy policy on the deployment and use of Google Analytics with anonymisation function

For the purpose of demand-oriented design and continuous optimisation of our pages, we use the component Google Analytics on our website. Google Analytics is a web analysis service of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA (https://www.google.de/intl/en-GB/about). Web analysis is the gathering, collection, and analysis of data about the behaviour of visitors to websites. A web analysis service collects, among other things, data about the website from which a person came to a website (so-called referrer), which sub-pages of the website were accessed, or how often and for how long a sub-page was viewed.

In connection with the use of Google Analytics, pseudonymised user profiles are created and cookies are used. Google Analytics sets cookies on the information technology system of the persons who visit our website. The information generated by the cookies about the use of our website and personal data such as browser type/version, used operating system, referrer URL (previously visited page), host name of the accessing computer (IP address), time of server request are transmitted to a Google server in the USA and stored there. Google may pass this personal data collected via the technical procedure on to third parties.

Through this procedure, visitor traffic on our website can be analysed. Google uses the collected data and information, among other things, to evaluate the use of our website to compile online reports for us showing activities on our websites, and to provide other services related to the use of our website.
We use Google Analytics on our website with an IP anonymisation function. In this case, your IP address is shortened by Google within member states of the European Union or in other state parties to the Agreement on the European Economic Area and thereby anonymised. According to its own statements, Google will in no case associate your IP address with other data held by Google.
You can prevent the setting of cookies through our website at any time by means of a corresponding setting of the internet browser used and permanently object to the setting of cookies.
Such a setting of the internet browser used would also prevent Google from setting cookies on the information technology system of the data subject. In addition, cookies already set by Google Analytics can be deleted at any time via the internet browser or other software programmes. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
Furthermore, you have the option of objecting to a collection of data generated by Google Analytics or the cookies relating to your use of this website, including your IP address, as well as the processing of this data by Google, and preventing it. To do this, you must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout.
This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the information technology system is deleted, formatted, or reinstalled at a later date, you must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by you or another person attributable to your sphere of control, the option of reinstalling or reactivating the browser add-on exists.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent tracking by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete cookies in your browser, you must set the opt-out cookie again.

Further information and the applicable data protection provisions of Google can be retrieved under https://www.google.de/intl/en-GB/policies/privacy/and under http://www.google.com/analytics/terms/gb.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/en_gb/analytics/.

8. Tracking pixel technology of WiredMinds GmbH

Our website uses the tracking pixel technology of WiredMinds GmbH (www.wiredminds.de) to analyse visitor behaviour. In this process, the IP address of a visitor is processed. The processing takes place solely for the purpose of collecting company-relevant information such as the company name. IP addresses of natural persons are excluded from further use (whitelist procedure). In no case is the IP address stored in LeadLab. When processing the data, it is our special interest to protect the data protection rights of natural persons. Our interest is based on Art. 6 para. 1 lit. (f) GDPR. The data collected by us does not allow any conclusions to be drawn about an identifiable person at any time.

WiredMinds GmbH uses this information to create anonymous usage profiles related to visitor behaviour on our website. The data obtained is not used to personally identify the visitor to our website.

<a onclick=“alert(‘Your visits will no longer be tracked.’);” href=“javascript:wiredminds.optOut()”>Exclude from tracking</a> (To permanently exclude you from tracking by WiredMinds LeadLab on this website, a technically necessary cookie is set)

9. Registration on our website

You have the option to register on our website by providing personal data.
The personal data transmitted to us in this process is determined by the respective input mask used for registration. The personal data entered is collected and stored solely for our internal use and for our own purposes. Transfer to one or more processors, such as a parcel service provider, can be initiated if the personal data is used solely for an internal use attributable to us.

By registering on our website, the IP address assigned by your internet service provider (ISP), the date, and the time of registration are stored. Storing this data prevents misuse of our services and makes it possible, if necessary, to investigate crimes committed. Storing this data is therefore necessary to safeguard our interests. In principle, this data is not passed on to third parties unless there is a statutory obligation to do so or the transfer serves law enforcement purposes.
Your registration serves us to offer you content or services that can only be offered to registered users. You are free to change the personal data provided during registration at any time or to have it completely deleted from our database.

We will provide you with information as to what personal data of yours is stored by us at any time upon request. At your request or instruction, we will correct or delete your personal data, provided that this does not conflict with statutory storage requirements. The data controller or another employee is available to you as a contact partner in this context.

10. Registration and subscription to our newsletter

We offer you the opportunity to sign up and subscribe to our company's newsletter.
Which personal data is transmitted to us when ordering the newsletter is determined by the input mask used for this purpose.
We use the newsletter to inform our customers and business partners at regular intervals about offers from our company as well as other interesting innovations.

In principle, our company's newsletter can only be received if you have a valid email address, register for the newsletter, and have thus expressly consented to the dispatch of the newsletter to the email address specified in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
The registration for our newsletter takes place in a double-opt-in process, i.e. after registration, you will receive an email in which you are asked to confirm your registration. This confirmation serves to verify whether you are the owner of the email address and have authorised the receipt of the newsletter.
The registration for the newsletter is logged in order to be able to prove the registration process in accordance with legal requirements. For this purpose, the IP address assigned by your internet service provider (ISP) as well as the date and time of registration and confirmation are stored. The collection of this data is necessary in order to be able to trace a possible misuse of your email address at a later date.
The personal data collected when registering for the newsletter is used exclusively for sending our newsletter. The personal data collected as part of the newsletter service will not be disclosed to third parties. You can cancel your subscription to our newsletter at any time, and the consent to store your personal data, which was granted to us for sending the newsletter, can be revoked at any time. A corresponding link can be found in each newsletter for this purpose. You can also unsubscribe from the newsletter at any time directly on our website or inform us of your wish to cancel or revoke the newsletter service in any other way.

11. SSL encryption

To protect your transmitted data as best as possible, we use SSL encryption. You can recognise encrypted connections by the prefix “https://“ in the page link in the address bar of your browser. Unencrypted pages are identified by „http://“.
All data that you transmit to this website – for example, in inquiries or logins – cannot be read by third parties thanks to SSL encryption.

12. Routine deletion and blocking of personal data

We process and store collected personal data only for the period necessary to achieve the purpose of storage, or if this has been provided for by the European directive and regulation maker or another legislator in laws or regulations to which we are subject.
If the storage purpose ceases to apply or if a storage period prescribed by the European directive and regulation maker or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.

13. Rights of the data subject

Due to the fact that personal data may be collected when using our website, you, as the data subject affected by the processing of personal data, have the following rights:

a) Right to confirmation
As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to request confirmation from us as to whether personal data concerning you is being processed. If you wish to avail yourself of this right of confirmation, you can contact an employee responsible for data processing at any time.

b) Right to information pursuant to Art. 15 GDPR

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to obtain from us at any time free information about your personal data stored or processed and a copy of this information. In particular, you may request information about:

– the purposes of processing
– the category of personal data
– the recipients or categories of recipients to whom your personal data has been or will be disclosed, in particular recipients in third countries or international organisations
– the planned storage period or, if this is not possible, the criteria for determining this period
– the existence of a right to rectification or erasure of personal data concerning you, or constraint of processing or a right to object to such processing
– the existence of a right to lodge a complaint with a supervisory authority
– the origin of your data, or if the personal data is not collected from you: any available information about the origin of the data
– the existence of automated decision-making, including profiling, pursuant to Article 22 paras. 1 and 4 GDPR and — at least in these cases — meaningful information about its details

Furthermore, if your personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards relating to the transfer. If you wish to exercise this right to information, you can contact an employee responsible for data processing at any time.

c) Right to rectification of personal data pursuant to Art. 16 GDPR

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to demand the immediate correction of inaccurate personal data concerning you. In addition, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
If you wish to exercise this right to rectification, you can contact an employee responsible for data processing at any time.

d) Right to erasure of personal data pursuant to Art. 17 GDPR
As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to demand from us that the personal data concerning you be deleted without delay where one of the following grounds applies, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims:

– the personal data was collected or otherwise processed for purposes for which they are no longer necessary
– the data subject withdraws consent on which the processing was based according to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR, and where there is no other legal ground for the processing
– the data subject objects to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 para. 2 GDPR
– the personal data has been unlawfully processed
– the personal data must be erased for compliance with a legal obligation in Union or Member State law to which we are subject
– the personal data has been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

If one of the aforementioned reasons applies, and you wish to arrange for the deletion of personal data stored by us, you can contact an employee responsible for data processing at any time. He or she will then immediately arrange for the deletion.

If the personal data has been made public by us and we as the controller are obliged to delete the personal data pursuant to Art. 17 para. 1 GDPR, we shall, taking into account available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other data controllers processing the published personal data that you have requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. The employee responsible for processing personal data will arrange for the necessary measures in individual cases.

e) Right to restriction of processing of personal data pursuant to Art. 18 GDPR

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to demand from us the restriction of processing where one of the following conditions is met:

– the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data
– the processing is unlawful, you oppose the erasure of the personal data and request instead the restriction of their use, and we no longer need your data
– we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defence of legal claims
– you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether our legitimate grounds override yours

If one of the aforementioned conditions is met, and you demand the restriction of personal data stored by us, you can contact an employee responsible for processing at any time, who will then arrange for the restriction of processing.

f) Right to data portability

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to receive the personal data concerning you, which was provided to us by you, in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, in exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
To assert the right to data portability, you can contact an employee responsible for the processing of data at any time.

g) Right to object pursuant to Art. 21 GDPR

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, provided that your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 e), f) GDPR.
The right to object requires that reasons exist arising from your particular situation or that the objection is directed against direct marketing.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms. The same applies if the processing serves the establishment, exercise, or defence of legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data for the purpose of such advertising without stating or giving a specific situation. This also applies to profiling to the extent that it is related to such direct marketing.

If you object to our processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, you can contact an employee responsible for data processing directly. An objection by email to the email address specified on our website is also sufficient.
In addition, you are free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use your right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, in so far as the decision

(1) is not necessary for entering into, or the performance of, a contract between you and us, or
(2) is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
(3) is based on your explicit consent.

If the decision is necessary for entering into or performing a contract with us, or if it is made with your explicit consent, we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests.

If you wish to assert rights concerning automated decisions, you can contact an employee responsible for data processing at any time.

i) Right to withdraw a data protection consent pursuant to Art. 7 para. 3 GDPR

As a data subject affected by the processing of personal data, you have the right granted by the European directive and regulation maker to withdraw consent to the processing of personal data at any time, with the consequence that we may no longer continue the data processing based on this consent in the future.
If you wish to assert your right to withdraw consent, you can contact an employee responsible for data processing at any time.

14. Legal basis of the processing

Art. 6 I a) GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract with you (e.g. for the provision of services or delivery), the processing is based on Art. 6 I b) GDPR. The same applies to such processing operations that are necessary for pre-contractual measures, e.g. in the case of inquiries about services.

If we are subject to legal obligations that require processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I c) GDPR.
In exceptional cases, the processing of personal data may become necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if you were to suffer an injury in our company and contact details or other vital information had to be passed on to a doctor, a hospital, or other third parties. In this case, the processing would be based on Art. 6 I d) GDPR.
Finally, processing operations could also be based on Art. 6 I f) GDPR if processing operations are not covered by any of the aforementioned legal bases, when processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests, fundamental rights, and freedoms. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. The latter considered that a legitimate interest could be assumed, for example, if you are a client of ours (Recital 47 Sentence 2 GDPR).

15. Legitimate interests in the processing pursued by us or a third party

Where the processing of personal data is based on Article 6 I f) GDPR, our legitimate interest is the performance of our business activities in favour of the well-being of all our employees.

16. Storage period for personal data

The basis for the storage period of personal data is the respective statutory retention period. When this period expires, the corresponding data is routinely deleted, provided it is no longer required for contract fulfilment or contract initiation.

17. Statutory or contractual provisions regarding the provision of personal data; Necessity for entering into the contract; Obligation of the data subject to provide personal data; Possible consequences of failure to provide such data

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). It may, for example, be necessary for the conclusion of a contract that you provide us with personal data, which must subsequently be processed by us. You are, for example, obliged to provide us with personal data when you close a contract with our company, as otherwise a contract could not be concluded.
An employee responsible for data processing can clarify on a case-by-case basis at your request whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract. You can also ask whether there is an obligation to provide your personal data and what consequences would arise if you did not provide it.

18. Up-to-dateness and revision of this Privacy Policy

This privacy policy is currently valid and is status as of April 2022.

Due to the further development of our website and our offers made available via it, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.