Data Protection Statement
This Data Protection Statement informs you about the scope of the processing of your personal data (hereinafter “data”).
1. Legal basis for data processing
The data processing controller as defined by the provisions of the General Data Protection Regulation (GDPR) is:
BRAND SPIDERS GmbH
Balanstraße 73, House 10
2. General information on data processing
In the course of our business and website operations, we process data.
This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transfer data outside the EU or the EEA, we have indicated this accordingly below.
3. Data processing
The individual data concerned, processing purposes, legal bases, recipients and, if applicable, transfers to third countries are listed below:
a) Log file when you visit our website
We log your visit to our website. In doing so we process:
- the name(s) of our website(s) accessed,
- the date and time you accessed the site,
- the amount of data transferred,
- the browser type and version,
- the operating system you use,
- the referrer URL (the previously visited website),
- your IP address,
- the requesting provider.
We analyse the log files to provide a secure website and to ensure the performance of our website.
The legal basis for data processing in accordance with Article 6(1)(f) GDPR is our overriding legitimate interest in the ongoing provision and security of our website.
The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.
To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing in accordance with Article 6(1)(f) GDPR is our overriding legitimate interest in providing our website.
Our Webseite is hosted at Netlify Inc., 2325 3rd Street, Suite 29, San Francisco, CA 94104, USA.
Further information can be found at: https://www.netlify.com/privacy/.
c) Establishment of contact
If you contact us, we process the following data from you for the purpose of processing and handling your enquiry: Name, contact details—if provided by you—and your message.
The legal basis for data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations in accordance with Article 6(1) b) GDPR and/or our overriding legitimate interest in processing your enquiry in accordance with Article 6(1)(f) GDPR.
d) Contact in the case of job applications
If you contact us to send us your application for a job, e.g. by email or via a contact form, the data you enter (e.g. name, email address, desired place of employment), your message and the transmitted application documents will be processed exclusively for the purpose of handling and processing your application request.
The legal basis for data processing is primarily Section 26 BDSG (German Federal Data Protection Act). According to this, the processing of data is permissible where this is necessary in connection with the decision to establish an employment relationship.
Should the data be required after completion of the application process, for example for prosecution purposes, data processing can be performed to safeguard our legitimate interests in accordance with Article 6(1)(f) GDPR, namely to assert and/or defend claims.
We use technically necessary cookies to enable the optimal functionality of our web offer. These cookies make it possible, for example, to navigate on the website or to offer other basic functions of the website.
In addition, we use optional cookies that provide us with additional information, for example to analyse data traffic or for advertising and marketing purposes.
Lifespan of cookies
The cookies used remain on your end device for different periods of time:
Session cookies: These cookies are deleted from your end device immediately after you close your internet browser.
Permanent cookies: These cookies remain on your end device even after you close your web browser and enable us, for example, to recognise you the next time you visit our website.
Cookies that are set directly by us are known as first-party cookies. Third-party cookies, on the other hand, are set by external websites, for example when displaying content (advertisements, images, tracking pixels or similar).
Legal basis for data processing
In principle the following applies: The legal basis for data processing by means of a cookie is your consent according to Article 6(1)(a) GDPR or our overriding legitimate interests in optimising and establishing the functionality of our website according to Article 6(1)(f) GDPR.
Revocation and opting out
If data processing is based on your consent, you can revoke your consent at any time with effect for the future (opt-out). In the case of data processing based on our legitimate interest, you can object to further data processing with effect for the future.
You can revoke your consent via the opt-out link in the data protection statement for the respective service or by adjusting your preferences in our Cookie settings.
For information on objecting to data processing, please see section 5 b) of this Data Protection Statement.
Browser cookie settings
In addition, you can prevent or restrict future data processing by cookies by selecting the appropriate browser settings and, for example, deactivating cookie use there. Cookies that have already been saved can be deleted in the browser settings. Further information on your respective browser settings can be found through the following links:
Mozilla Firefox: https://support.mozilla.org/en-US/products/firefox
Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies
Google Chrome: https://support.google.com/accounts
Further information on the specific cookies set, the purposes pursued with these and their lifespan can be found in our Cookie information.
f) Analysis / Marketing
aa) Google services
We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website. It is possible that this may result in data also being transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.
Google ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here:
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website, thereby improving user-friendliness.
When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
You can find details of the cookies used in our Cookie information.
We use Google Analytics with the extension “anonymizeIp()”. This shortens IP addresses within the Member States of the EU or EEA. If a transmission to Google’s servers in the USA takes place, the full IP address will only be transmitted in exceptional cases and shortened there. This usually excludes a direct personal reference. In particular an assignment to the called-up computer and/or end device of the website visitor is no longer possible.
The following data is processed through the use of Google Analytics:
- 3 bytes of the IP address of the accessed system of the website visitor (anonymised IP address),
- the website accessed,
- the website from which the user reached the page accessed on our website (referrer),
- the sub-pages accessed from the website,
- the time spent on the website,
- how often the website is accessed.
On no account will Google link your IP address with other Google data.
The legal basis for this data processing is your prior consent according to Article 6(1)(a) GDPR.
Revocation of your consent
You can revoke your consent at any time with future effect by adjusting your preferences in our Cookie settings or the settings options at http://www.google.de/ads/preferences.
Please also note the information on the use of data by Google in the Google Partner Network at: https://policies.google.com/technologies/partner-sites
g) External content
We use dynamic content from external sources to optimise the presentation of our website and what it offers. When you visit the website, a request is automatically made via an interface to the server of the relevant content provider, and specific log data (such as the users’ IP address) is transferred. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) Integration of Vimeo videos
We have integrated videos from the Vimeo portal of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA on our website. When playing the videos, log data is transferred to the Vimeo servers in the USA. This processing is performed on the basis of our overriding legitimate interest in the optimal marketing of our offer in accordance with Article 6(1)(f) GDPR.
Further information can be found at: https://vimeo.com/privacy
bb) Integration of Facebook Videos
We have integrated videos from the Social Network, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland on our website. When playing the videos, log data is transferred to the Facebook servers servers in the USA. This processing is performed on the basis of our overriding legitimate interest in the optimal marketing of our offer in accordance with Article 6(1)(f) GDPR.
Further information can be found at: https://www.facebook.com/about/privacy/
In order to make 360° and VR experiences possible for our users we integrated VRdirect of VRdirect GmbH, Marcel-Breuer-Straße 15, 80807 München. When playing the videos, log data is transferred to the VRdirect servers in the USA. This processing is performed on the basis of our overriding legitimate interest in the optimal marketing of our offer in accordance with Article 6(1)(f) GDPR.
Further information can be found at: https://www.vrdirect.com/privacy-policy/
4. Duration of data storage
We only store personal data for as long as we need it for the purposes for which it is processed or until you withdraw your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to ten years, irrespective of the processing purposes.
5. Your rights as a data subject
You may request information free of charge at any time about all of the personal data that we have stored about you.
b) Correction, erasure, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if this data is no longer correct, we will on the basis of a corresponding instruction arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law). The same applies if we are only to process data in a restrictive manner in the future. You have a right of objection in particular in cases in which your data is necessary for the performance of a task carried out in the public interest or on the basis of our legitimate interest, as well as profiling based on this. You also have such a right of objection in the case of data processing for the purpose of direct advertising.
c) Right to withdraw consent with effect for the future
You may withdraw your consent at any time with effect for the future. Your revocation will not affect the lawfulness of the processing up until the time of revocation.
d) Data portability
If data processing is based on a contract, pre-contractual negotiations, consent or automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another controller if you wish.
e) Right to lodge a complaint
You also have the option to complain to a supervisory authority about your rights as a data subject:
The above rights do not apply for data where we are not able to identify the data subject, e.g. if it has been anonymised for analysis purposes. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
6. Exercising you rights as a data subject
If you have any questions about the processing of your personal data, if you would like information or to rectify, block, object to the use of, or erase data, or request for data to be transferred to another company, please contact .