Privacy

1. Controller

The controller for data processing on this website is Spielvogel Technologies GmbH, Leopoldstr. 31, 80802 München, Germany. You can reach us at +49 89 693 190 86 or info@spielvogel.tech.

2. In short

• This website sets no cookies and uses no advertising services. We measure usage with self-hosted statistics that work without cookies.
• We record sessions to improve the website. You can object to this at any time (section Session recording).
• Fonts and images are served from our own web space, not from third parties. The calendar on the contact page comes from our own booking application.
• We process personal data only where technically necessary to operate the website, when you contact us or when you book an appointment.

3. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and delivered via its global network. When a page is requested, Cloudflare processes technically necessary connection data: IP address, date and time of the request, requested address, amount of data transferred, browser type and operating system, and the previously visited page (referrer).

Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website securely, reliably and quickly and in defending against attacks. We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, the EU Commission's standard contractual clauses apply.

4. Contacting us

If you contact us by email or phone, we process your details (name, contact data, content of the enquiry) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or quote, and otherwise Art. 6 (1) (f) GDPR (interest in answering enquiries).

We delete the data as soon as it is no longer required for processing and no statutory retention obligations apply.

5. Contact form

If you write to us via the contact form, we process the details you provide there: name, email address, your company if you give it, and your message. We use them to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or quote, and otherwise Art. 6 (1) (f) GDPR (interest in answering enquiries).

The enquiry is received via Cloudflare (see section 3) and delivered to us by email using Amazon Simple Email Service (SES) of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Sending takes place in a data centre in Frankfurt am Main. We have a data processing agreement with Amazon Web Services.

To prevent abuse, we store a hash of your IP address for one hour in order to limit the number of messages per sender. The legal basis is Art. 6 (1) (f) GDPR.

We delete the details as soon as they are no longer required to handle the enquiry and no statutory retention obligations apply.

6. Booking an appointment

On the contact page you can book a first call online. The calendar is embedded content (an iframe) and comes from our own booking application at termine.spielvogel.io. Like this website, the application is delivered via Cloudflare (see section 3). When you open the contact page, technically necessary connection data, in particular your IP address, is transferred to the booking application.

When you book an appointment, we process the details you provide (name, email address, chosen time and your notes on the subject) in order to arrange the appointment, send you a confirmation and hold the call. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or quote, and otherwise Art. 6 (1) (f) GDPR (interest in organising appointments).

The call itself takes place on Microsoft Teams. Microsoft's privacy notices apply in addition.

We store the booking data on a server we operate ourselves. We delete it as soon as it is no longer required to handle the appointment and no statutory retention obligations apply.

7. Web analytics with Rybbit

We use Rybbit, web analytics software that works without cookies, to evaluate the use of this website statistically. Rybbit runs on a server we operate ourselves. We do not pass the data on to third parties.

Rybbit uses no cookies and stores no information on your device. It records pages viewed, time on page, the previously visited page (referrer), approximate location (country and region), device type, browser and operating system, clicks on buttons and outbound links, copying of text, use of forms, technical error messages from the browser, and the fact that an appointment was booked. Your IP address is used only to derive the approximate location and is not stored. To tell visits apart, Rybbit uses hashed identifiers that change daily and do not allow lasting recognition.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the website on the basis of usage figures. Because Rybbit works without cookies and without access to your device, no consent is required for this.

8. Session recording

To see where visitors get stuck on our website, we record sessions with Rybbit. The recording covers the page content shown, clicks and scrolling. We do not record mouse movements, input in form fields is masked, and the embedded booking calendar is not captured. The privacy and imprint pages are excluded from recording.

Recording starts with the first page view. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in making the website easier to use. You can object to the recording at any time with effect for the future: in the notice on your first visit or with the switch below this section. We store your decision in your browser's storage so that it applies on later visits.

We store the recordings on a server we operate ourselves and do not pass them on to third parties. They are deleted automatically after 30 days.

9. Links to other websites

Our website contains links to external websites. When you click them, the privacy terms of the respective provider apply. No data is transferred to these providers before you click.

10. Your rights

You have the following rights towards us regarding personal data concerning you:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

11. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. Changes

We update this notice when the website or the legal situation changes. The version published here applies. The German version is the authoritative one.