Privacy
Your Rights as Data Subject
The responsible entity in accordance with data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Bitrebels GmbH
Under the contact details of our data protection officer, you can exercise the following rights at any time:
- Right to access your stored data and its processing (Art. 15 GDPR),
- Right to rectification of incorrect personal data (Art. 16 GDPR),
- Right to deletion of your stored data (Art. 17 GDPR),
- Right to restriction of data processing, if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Right to object to the processing of your data (Art. 21 GDPR), and
- Right to data portability, if you have consented to the data processing or entered into a contract with us (Art. 20 GDPR).
If you have given us consent, you may revoke it at any time with effect for the future.
You may file a complaint with a supervisory authority at any time, for example, with the supervisory authority of your place of residence or the authority responsible for us as the data controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at:https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
Contacting us and requests via our website
Type and purpose of processing:
When you send us a request via one of our forms (contact form, package request or the short contact form in the footer), we process the data you provide – your email address and, where given, your name, company, phone number, selected package and message – solely to handle your request and get in touch with you. Your details are sent to our team by email; you receive an automatic confirmation at the email address you provided. Your data is not passed on for advertising purposes.
Legal basis:
Processing is based on the consent you give when submitting the form (Art. 6(1)(a) GDPR). Where your request is aimed at concluding a contract, Art. 6(1)(b) GDPR (pre-contractual measures) is an additional legal basis. You can withdraw your consent at any time with effect for the future, e.g. by emailing info@bitrebels.de.
Protection against abuse:
To protect our forms against automated abuse (e.g. spam), we briefly process your IP address and the email address provided in order to limit the number of requests. This data is kept only in our server’s memory and is automatically discarded after 24 hours at the latest. The legal basis is our legitimate interest in operating our website securely (Art. 6(1)(f) GDPR).
Recipients:
Recipients of the data are the Bitrebels GmbH employees handling your request as well as the following service providers, who act as processors on our behalf: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hosting of our website and processing of the form data on servers in Germany) and STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (sending and receiving emails).
Storage period:
We delete your request once it has been fully handled and no statutory retention obligations apply (e.g. up to six years for commercial and business letters under Section 257 of the German Commercial Code), or when you withdraw your consent.
Provision required or necessary:
Providing your data is voluntary. However, without an email address and your consent we cannot handle your request via the form. Alternatively, you can contact us directly by email or phone.
Website analytics with Plausible Analytics
Type and purpose of processing:
We use Plausible Analytics to statistically evaluate and improve the use of our website, e.g. which pages are visited, which websites or campaigns visitors come from and how many requests are submitted via our forms. Plausible does not set cookies and does not store any information on your device. A hash is created from your IP address and browser identifier using a salt that changes daily, so you cannot be recognised across several days or websites. The IP address itself is not stored. The data is transmitted to Plausible via our own domain.
Legal basis:
Processing is based on Art. 6(1)(f) GDPR and our legitimate interest in a privacy-friendly analysis and optimisation of our website and our advertising. As no information is stored on or read from your device, no consent under Section 25 of the German TDDDG is required.
Recipients:
The recipient of the data is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, which acts as a processor on our behalf. The data is processed on servers in Germany; it is not transferred to third countries.
Storage period:
Plausible only stores aggregated statistics without any personal reference. The hash used to count unique visitors and the associated salt are deleted after 24 hours at the latest.
Objection:
You can object to the processing at any time under Art. 21 GDPR, e.g. by emailing info@bitrebels.de. You can also prevent the collection by using a content blocker in your browser.
Collection of General Information When Visiting Our Website
Type and Purpose of Processing:
When you access our website, i.e., if you do not register or transmit information otherwise, general information is automatically collected. This information (server log files) includes details such as the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar.
These are processed for the following purposes, in particular:
- Ensuring a problem-free connection setup of the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability, and
- For the optimization of our website.
We do not use this data to draw conclusions about you personally. Such information is anonymized and statistically evaluated to optimize our internet presence and the underlying technology.
Legal Basis and Legitimate Interest:
The processing takes place in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
Recipient:
The recipient of the data is our hosting provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which acts as a processor for operating our website.
Retention Duration:
The data will be deleted once it is no longer needed for the purpose of collection. This is generally the case when the session ends for data serving the provision of the website.
Provision of Data Required or Necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be ensured. Also, certain services may not be available or may be limited. For this reason, an objection is excluded.
SSL Encryption
To protect the security of your data during transmission, we use encryption methods that are in line with the current state of technology (e.g., SSL) over HTTPS.
Information About Your Right to Object According to Art. 21 GDPR
Individual-Based Right to Object
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data that is based on Art. 6 (1) lit. f GDPR (data processing based on balancing of interests); this also applies to profiling based on this provision under Art. 4 (4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Recipient of an Objection
Sebastian Weiß
Changes to Our Privacy Policy
We reserve the right to adjust this privacy statement to ensure it always meets the current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy statement will apply to your next visit.
Questions to the Data Protection Officer
If you have any questions regarding data protection, please send us an email or contact the person responsible for data protection in our organization directly: