Privacy Policy

To protect your data, we have taken technical, organizational and contractual measures to ensure that data protection regulations are observed both by us and by our cooperation partners and service providers. As technical innovations can quickly result in changes, you should not just read this privacy policy once, but should read it again from time to time. We will inform you in good time of any significant changes to our data protection provisions.

Definitions pursuant to Art. 4 GDPR

For a better understanding, here are some important definitions in advance:

• “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as your name, email address, postal address or telephone number.
• “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• “Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures.
• “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
• “Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
• “Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
• “Consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies agreement to the processing of personal data relating to him or her.

Controller

Data security

Your personal data is transmitted encrypted over the Internet. We use technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Nevertheless, we would like to point out that it is not possible to provide a 100% guarantee of security for data transmissions via the Internet, particularly in areas of email traffic that lie outside the sphere of influence of GO-getter Communications UG.

Purposes of data processing, legal bases and duration of data storage

Insofar as we obtain your consent for the processing of personal data, the legal basis for this is Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of personal data required to fulfill a contract concluded between us and to carry out pre-contractual measures is Art. 6 para. 1 lit. b GDPR. Insofar as the processing of your personal data is necessary to fulfill a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 lit. c GDPR. If processing is necessary for the purposes of the legitimate interests pursued by us or by a third party – except where such interests are overridden by your interests, fundamental rights and freedoms – the legal basis is Art. 6 para. 1 lit. f GDPR.

If we commission third parties with the processing of personal data, this is done on the basis of a commissioned data processing contract in accordance with Art. 28 GDPR, which ensures that the commissioned data processor subject to our instructions is subject to the same security standards as we are. Your personal data will only be stored for as long as the respective purpose continues, you do not revoke the respective consent and unless statutory retention obligations require longer storage.

Data processing for general use of our website

Each time our website is accessed, data and information from the accessing device is automatically recorded and stored in the server log files. The following can be recorded:

• the IP address (Internet Protocol address)
• the Internet service provider of the accessing system
• date and time of access to the website
• browser type and version used
• the operating system used by the accessing system
• the website from which an accessing system reaches our website
• sub-websites visited on our website
• other similar data and information required to defend against attacks on our online systems.

In order to be able to analyze attacks if necessary, the above data is stored for seven days and – unless it is required for evidence purposes in legal prosecution – deleted or anonymized. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in the trouble-free functioning of our website. Your IP address is required during the connection in order to transfer the content of our website to your browser; without the transmission of your IP address, our website content cannot be displayed.

Data transfer to third parties

Your data will only be passed on to third parties in accordance with the legal requirements, i.e. only if this is necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the establishment, execution or amendment of the contractual relationship or on the basis of our legitimate interest in the economic and effective operation of our business within the meaning of Art. 6 para. 1 lit. f GDPR. The use of services and data transfer to third parties and third-party providers that are not based in the European Union or the European Economic Area will only take place if an appropriate level of data protection, legal permission or your consent has been obtained. By order of the competent authorities, we may provide information about inventory data in individual cases if this is necessary for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights. The legal basis in these cases is Art. 6 para. 1 lit. c GDPR.

Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). Where personal data is also processed by cookies, the legal basis is Art. 6 para. 1 lit. b GDPR if the processing is necessary to perform the contract, or Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in optimizing and providing a user-friendly design of our website. You can set your browser to inform you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.

Note: If cookies are not accepted, the functionality of our website may be limited.

Audience measurement (our own cookieless statistics)

To understand which content is read and how fast our pages load, we operate our own cookieless audience measurement. No cookies are set and no information is stored on your device. Visitors are distinguished solely by a pseudonymous identifier that changes every day: it is computed from your IP address, technical browser information, the current calendar day and a secret server key using a one-way procedure (SHA-256) and cannot be traced back to your IP address. Your full IP address is never stored at any point. Because the identifier changes daily, recognition beyond a single day is impossible – no cross-day usage profile is created.

The data recorded includes in particular:

• the page accessed and the referring page (of the latter only the domain, not the full address)
• device group (mobile, tablet, desktop), browser and operating system – deliberately coarsened, major version only – as well as coarse technical characteristics such as screen-size category, color scheme, touch input and connection type
• country and region (derived from the IP address without storing it) and the language edition used
• time spent and scroll depth per page
• technical loading-time metrics (so-called Web Vitals, e.g. loading time, responsiveness to input and visual stability)
• campaign parameters from the address bar (so-called UTM parameters), where present
• the use of site features, such as queries to the internal search or clicks on links and buttons

This data is stored in our own database (PostgreSQL) with the database service Neon, which processes it exclusively on our behalf (commissioned processing pursuant to Art. 28 GDPR). The raw page-view records are automatically deleted after 90 days at the latest; for long-term statistics only aggregated daily figures without any identifier are retained. This data is not shared with third parties for advertising purposes; no external analytics service is used. The legal basis is Art. 6 para. 1 lit. f GDPR – our legitimate interest in understanding the reach of our offering and continuously improving its content and loading times.

Your rights as a data subject

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, restriction of processing, deletion or – insofar as deletion conflicts with statutory retention obligations – blocking of this data and to revoke the consent you have given with effect for the future. You also have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. You also have the right to lodge a complaint with the competent supervisory authority. A list of the state data protection officers and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html