Privacy Policy

1. Data Protection at a Glance

General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes any data that can personally identify you. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the Responsible Party” in this privacy policy.

How do we collect your data?
Some data is collected when you provide it to us—for example, by entering it into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This includes primarily technical data (e.g., internet browser, operating system, time of the page view). This data is collected automatically as soon as you enter the website.

What do we use your data for?
Some data is collected to ensure the error-free provision of the website. Other data may be used to analyze user behavior.

What rights do you have regarding your data?
You have the right at any time to request free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

For these and other questions regarding data protection, you can contact us at any time.

2. Hosting and Content Delivery Networks (CDN)

External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, metadata, communication data, contract data, contact information, names, website accesses, and other data generated through the website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the following host:
[Name, address, and contact of the host would be listed here]

Processing Agreement
To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

3. General Notes and Mandatory Information

Data Protection
The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When using this website, various personal data are collected. Personal data is data that can identify you personally. This privacy policy explains what data we collect and how we use it, as well as the purpose of the data collection.

Please note that data transmission over the internet (e.g., communication by email) may have security gaps. Complete protection of data from third-party access is not possible.

Responsible Party
The party responsible for data processing on this website is:

FORUM your brandbuilder GmbH
Vorländerstraße 16A
D-42659 Solingen
Phone: +49-(0)2151-56789-0
Email: hello@fybb.de

The responsible party is the natural or legal person who decides, alone or jointly with others, on the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Storage Duration
Unless a more specific storage period is mentioned in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you request the deletion of your data or revoke your consent to data processing, your data will be deleted unless there are legal reasons for storing your personal data (e.g., tax or commercial retention periods). In the latter case, deletion occurs once these reasons no longer apply.

Note on Data Transfer to the USA
Our website includes tools from companies based in the USA. If these tools are active, your personal data may be transferred to the respective US servers. We point out that the USA is not considered a safe third country under EU data protection law. U.S. companies are obliged to hand over personal data to security authorities without you being able to take legal action. Therefore, it cannot be ruled out that US authorities (e.g., intelligence services) process, analyze, and store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. The legality of the processing carried out before the revocation remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)
If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.
If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms or the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for direct advertising, you have the right to object at any time to the processing for such advertising purposes; this also applies to profiling insofar as it is associated with such direct advertising.

Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, workplace, or place of the alleged infringement.

Right to Data Portability
You have the right to receive the data that we process based on your consent or in fulfillment of a contract in a commonly used, machine-readable format. You can also request the direct transfer to another controller, where technically feasible.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content (e.g., orders or inquiries), this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address line switching from “http://” to “https://” and the lock symbol in your browser.

Right to Access, Erasure, and Correction
You have the right at any time, within the legal framework, to receive free information about your stored personal data, its origin, recipients, and the purpose of processing, and, if applicable, a right to correct or delete this data.

Right to Restrict Processing
You have the right to request the restriction of processing of your personal data under certain conditions:

• If you dispute the accuracy of your data, we usually need time to verify it. During verification, you may request the restriction of processing.
• If the processing is unlawful, you may request restriction instead of deletion.
• If we no longer need your data but you require it for legal claims.
• If you have objected to processing, a balance must be struck. Until it is determined whose interests prevail, you may request the restriction.
• If processing is restricted, such data may only be processed with your consent or for legal purposes.

Objection to Promotional Emails
The use of published contact details under the legal notice obligation for sending unsolicited advertising and informational materials is hereby rejected. The operators of this website reserve the right to take legal action in case of unsolicited promotional emails (spam).

4. Data Collection on This Website

Cookies
Our website uses cookies. Cookies are small text files that do not harm your device. Some cookies are temporary (session cookies), others remain (persistent cookies). Third-party cookies may also be used.

Some cookies are technically necessary for the website to function properly, while others are used for analyzing behavior or displaying ads.

Necessary cookies are stored under Art. 6(1)(f) GDPR unless otherwise stated. If consent is required for certain cookies, they are stored based on your consent under Art. 6(1)(a) GDPR, which can be revoked at any time.

You can configure your browser to notify you about cookies, allow them selectively, or delete them automatically. Disabling cookies may limit the website’s functionality.

Server Log Files
The site provider collects and stores data automatically in server log files that your browser sends to us:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address

These data are not merged with other sources. This is based on Art. 6(1)(f) GDPR.

Contact Form
If you send inquiries via contact form, your data is stored for processing your inquiry and follow-up. We do not share this without consent.

Processing is based on Art. 6(1)(b) GDPR or, if not applicable, on Art. 6(1)(f) or (a) GDPR.

Inquiries via Email, Phone, or Fax
If you contact us via email, phone, or fax, your data is stored and used for handling your inquiry. We do not share it without consent.

Processing is based on Art. 6(1)(b), (f), or (a) GDPR as applicable.

Let me know if you’d like the rest (including section 5 on Google Analytics) or a summarized version.

5. Google Analytics

The data collected by Google concerning the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising. If corresponding consent was requested (e.g., consent to store cookies), the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

IP Anonymization
We have activated the IP anonymization function on this website. This means that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

For more information on how Google Analytics handles user data, see Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en

Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic Features in Google Analytics
This website uses the “demographic features” function of Google Analytics. This allows reports to be created containing information about the age, gender, and interests of site visitors. This data comes from interest-based advertising by Google and from third-party visitor data. This data cannot be associated with a specific person. You can disable this feature at any time through the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as outlined under “Browser Plugin”.

6. Plugins and Tools

Google Web Fonts (Local Hosting)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google’s servers is established in the process.

Further information on Google Web Fonts can be found at:
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://policies.google.com/privacy?hl=en

7. Audio and Video Conferences

Data Processing
To communicate with our customers, we use various online conferencing tools. The specific tools we use are listed below. If you communicate with us via video or audio conference over the internet, your personal data will be collected and processed by us and the respective conference tool provider.

The conferencing tools collect all data you provide or use to access the tools (e.g., email address and/or telephone number). Additionally, the tools process data on the duration of the conference, start and end times, number of participants, and other “context information” related to the communication process (metadata).

The provider of the tool also processes all technical data necessary to facilitate online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and connection type.

If content is shared, uploaded, or otherwise made available within the tool, it will also be stored on the servers of the tool provider. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have complete control over the data processing activities of the tools used. Our influence is largely determined by the corporate policies of the respective providers. For more information on data processing by the conferencing tools, please refer to the privacy statements of the tools listed below.

Purpose and Legal Basis
The use of these conferencing tools serves to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Additionally, the use of the tools facilitates and accelerates communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). If consent was requested, the use of the tools is based on this consent; consent may be revoked at any time with future effect.

Storage Duration
Data collected directly by us via video and conferencing tools will be deleted from our systems as soon as you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage duration of your data as retained by the operators of the conferencing tools for their own purposes. For details, please consult the privacy policies of the respective tool providers.

Conferencing Tools Used

Zoom
We use Zoom. The provider of this service is Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
For details on data processing, please see Zoom’s privacy policy:
https://zoom.us/en-us/privacy.html

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here:
https://zoom.us/en-us/privacy.html

Data Processing Agreement
We have concluded a data processing agreement with Zoom and fully implement the strict requirements of the German data protection authorities when using Zoom.

Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
For details on data processing, please see Microsoft’s privacy policy:
https://privacy.microsoft.com/en-us/privacystatement

Data Processing Agreement
We have concluded a data processing agreement with Microsoft Teams and fully implement the strict requirements of the German data protection authorities when using Microsoft Teams.