1. Introduction and Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:
Andreas Schwaab
neurostrings
Weinbergstraße 37
14469 Potsdam
Phone: +49 176-72241164
E-Mail: info@neurostrings.de
(Hereinafter: “We” or “the Data Controller”)
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
2. General Information on Data Processing
2.1. Scope of Processing We generally process our users’ personal data only to the extent necessary to provide a fully functional website, as well as our content and services.
2.2. Hosting with Strato Our website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. We use the following host: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin.
We have entered into a data processing agreement (DPA) with the hosting provider in accordance with Article 28 of the GDPR. In this agreement, the hosting provider undertakes to process our users’ data only in accordance with our instructions and in compliance with EU data protection standards.
2.3. SSL or TLS Encryption For security reasons and to protect the transmission of confidential content—such as inquiries you send to us as the website operator—this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock icon in your browser’s address bar.
3. Data Collection When Accessing the Website (Log Files)
3.1. Each time our website is accessed, our system or our host’s web server (Strato AG) automatically collects data and information from the accessing computer’s system. The following data is collected:
- Information about the browser type and version used
- The user’s operating system
- The user’s Internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user’s system accessed our website (referrer)
3.2. This data is stored in our system’s log files. This data is not stored together with any other personal data of the user. IP addresses are stored by the hosting provider for a limited time (typically a maximum of 7 days) to detect and defend against attacks and are subsequently anonymised or deleted.
3.3. The legal basis for the temporary storage of the data and log files is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the technically error-free display, stability, and security of our website.
4. Cookies
Our website does not cookies for analytics, tracking, or advertising purposes. We use only technically necessary cookies that are essential for the operation of the website (e.g., for load balancing by the host or for storing language settings, if applicable). The legal basis for the use of technically necessary cookies is Article 6(1)(f) of the GDPR (legitimate interest in providing the service) and Section 25(2)(2) of the TDDDG.
5. Contacting Us (Email / Phone)
5.1. If you contact us via email or phone, we will store your information—including the contact details you provide—for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.
5.2. The legal basis for processing the data is Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures (e.g., an inquiry regarding a consulting engagement). In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent was requested.
6. Disclosure of Personal Data
We do not disclose your personal data to third parties unless you have consented to such disclosure or we are authorised or required to do so under applicable laws and/or by official or court orders.
7. Rights of the Data Subject
Subject to applicable legal provisions, you have the right at any time to:
- access your stored personal data (Art. 15 GDPR),
- rectify inaccurate data (Art. 16 GDPR),
- erase your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR).
You also have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR).
Right to Object (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) of the GDPR (balancing of interests), you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If you wish to exercise your rights, simply send an email to the address of the data controller listed above.
8. Changes to This Privacy Policy We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, such as when introducing new services. The new Privacy Policy will then apply to your next visit.