Privacy

1. Controller

The controller for the processing of personal data on this website is the operator of DanBlue Labs identified in the Legal Notice.

Contact: daniel.heistruevers@danbluelabs.de

2. What this website does not do

danbluelabs.de is a static informational site. It uses no cookies, no analytics or tracking tools, no advertising, no social media plugins, no third-party video embeds, no contact form and no newsletter. It stores nothing in your browser, with one exception: if you choose a language with the DE/EN switch, that choice is saved in your browser’s local storage (localStorage, entry “dbl-lang”, value “de” or “en”) so the site opens in the same language next time. The entry never leaves your device and you can delete it at any time in your browser settings. No cookies and no sessionStorage are used.

Fonts, images and videos are served exclusively from danbluelabs.de itself. No content from other providers is loaded when you visit.

3. Hosting and delivery

The website is delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

To deliver the site and protect it against abuse, Cloudflare processes technically necessary connection data on every request, in particular:

• IP address,
• date and time of the request,
• the address requested and the amount of data transferred,
• browser and device information (user agent) and, where sent, the previously visited page (referrer).

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable and reliable provision of the website.

The operator does not create visitor profiles and uses no analytics or tracking tools. How long Cloudflare retains connection data is determined by the purposes of delivery, security and troubleshooting.

A data processing agreement (Data Processing Addendum) with Cloudflare is part of Cloudflare's terms of service. Where data is transferred to the USA, this is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare is certified (Art. 45 GDPR).

Only if Cloudflare classifies a request as suspicious may a security check be shown and a cookie that is technically required for that check be set. In normal operation, no cookies are set.

4. Contact by email

If you send an email, your email address, your name (if given), the content of your message and the technical details of the email are processed in order to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps, and otherwise Art. 6(1)(f) GDPR. The legitimate interest is answering your enquiry.

Email to addresses at danbluelabs.de is received and stored through Apple iCloud Mail. The provider for users in the EU is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. According to Apple, transfers of personal data from the EU to third countries are based on the European Commission's Standard Contractual Clauses.

Apple receives data only when you send an email. Merely visiting this website does not transfer any data to Apple.

Emails are deleted once the enquiry has been fully dealt with, unless statutory retention obligations require otherwise.

5. Cookies and device access

This website stores information on your device only when you trigger it yourself: the language you chose with the language switch (see section 2). On your first visit, the site reads the language preference your browser sends with every request in order to show this page in German or English. Both are strictly necessary to provide the service you asked for (Section 25(2) no. 2 of the German TDDDG), so consent is not required and there is no cookie banner.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence.

7. Further information

You are not obliged to provide personal data. Without the technically necessary connection data, however, the website cannot be delivered. No automated decision-making, including profiling, takes place.