Privacy Policy

Our company attaches great importance to the protection of personal data and respects your wish for privacy. In the following, we inform you about the collection of personal data when using our website. If you still have questions about the handling of your personal data, please contact our data protection officer.

1. General information

1.1. Personal Data

Personal data within the meaning of Art. 4 of the General Data Protection Regulation (GDPR) is any information relating to an identified or identifiable natural person, such as the name, address, e-mail address of a person.

1.2. Controller

The data controller within the meaning of the GDPR is the:

10 Grad Event GmbH
Olof-Palme-Straße 9
81829 München
Mail: contact@10grad.de

1.3 Contact options for the data protection officers

You can reach our data protection officer at:

intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg

1.4. General purposes of the processing of personal data and their legal basis

In the case of a merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server and that are technically necessary for the presentation of our website and the guarantee of stability and security.
For retrieval from the website, the short-term registration of the IP number is indispensable. The IP address is the globally valid, unique identification of a computer and consists of four blocks of digits separated by dots. As a rule, private users are not assigned a constant IP address by the provider, but only temporary IP addresses for one session. Nevertheless, in the case of static IP addresses, it is in principle possible to unambiguously assign the user's data via this characteristic. The external web servers (see section 1.5) store IP addresses for a maximum of 31 days. After that, the access data is anonymized.

• Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Web page from which the request comes
  • browser
  • Operating system and its interface
  • Language and version of the browser software
  The legal basis for this is Art. 6 (1) sentence 1 lit. f) GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.

1.5. General information about the recipient of the data

In addition to the listed receiving parties in the individual sections below, we transmit the collected data for processing to the relevant internal departments and to other affiliated companies within Brainlab AG or to external service providers, order processors according to the required purposes. Within the scope of a legal obligation, we reserve the right to disclose information if and to the extent that there is an obligation to disclose it to competent authorities or law enforcement agencies (Art. 6 (1) sentence 1 lit. c) GDPR).
This website is hosted on web servers by an external service provider (hoster). The personal data listed in section 1.4 that is collected on this website is stored on the hoster's servers.

1.6. Transfers of personal data to third countries

The services used on this website are selected to ensure the best possible protection of personal data. Predominantly, therefore, services are used that have their registered office within the European Union. In the case of Google services, we have no influence on ensuring that the data processed by these services does not reach the parent companies in the USA. For this reason, standard contractual clauses have been concluded with Google. In this way, the provider contractually ensures that personal data is protected even if it is transferred to the USA. Other services are only used if you declare your consent to this and are prepared to accept the residual risk of your data being accessed by the US authorities (Art. 49 (1) sentence 1 a) GDPR).

2. Details on the processing of personal data when visiting the website

In addition to the data already described in section 1.4, further personal data may be collected on our website through cookies and other tools. The same applies to the use of the contact form.

2.1. Cookies and Tools

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that uses cookies. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective.
A distinction is made between transient cookies and persistent cookies. Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser. Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
The use of third-party offers also leads to the fact that so-called third-party cookies are sometimes used on this website. A third party cookie is set by a third party, i.e. not by the actual website you are currently on. Third party cookies can store the number of page views as well as the time spent on a website or the route taken by a user via hyperlinks. They enable the tracking of user behavior across different websites.
Details on the cookies and tools used on the website can be found below:

2.1.1. Cookiebot

Cookiebot is a consent management platform that enables websites to protect user privacy and comply with the GDPR when it comes to cookies and tracking. "Cookiebot" is an offer of the provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter referred to as "Cybot".
The "Cookiebot" function informs the users of the website about the use of cookies and enables them to make a decision about their use. If the user consents to the use of cookies, the following data is automatically logged:
• The IP number of the user
• The date and time of consent
• User agent of the end user's browser
• The URL of the provider
• The user's allowed cookies (cookie status), which is required as proof of consent.
• An anonymous, random and encrypted key
The encrypted key and the cookie status are stored on the user's terminal device by means of a cookie in order to establish the corresponding cookie status when the page is called up in the future. This cookie is automatically deleted after 12 months. The installation of the cookie as well as its storage, and thus his cookie consent, can prevent or terminate the user by settings of his browser at any time. You can open the cookie bot settings via the following link: [INSERT LINK TO OPEN COOKIE-CONSENT-BANNER HERE].
Further information on Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/.
The legal basis for this is Art. 6 (1) sentence 1 lit. f) GDPR. Our legitimate interest is the user-friendliness of the website as well as the fulfillment of the legal requirements from the GDPR.

2.1.2. Google Tag Manager

The website operator uses the Google Tag Manager, a service of Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The Google Tag Manager itself does not collect any personal data. The Tag Manager facilitates the integration and management of tags. Tags are small pieces of code that are used to, among other things, measure traffic and visitor behavior, track the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites. If you have made a deactivation regarding personalized advertising by Google, this deactivation will be taken into account by Google Tag Manager. Further information on the Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/use-policy.html.
The legal basis for the use of the Google Tag Manager is Art. 6 (1) sentence 1 lit. f) GDPR.

2.1.3. Google Maps

On the website, it is possible for users to use Google Maps to obtain a spatial overview or to plan a route. We make every effort to ensure that the services of this third-party provider are used on this website in a manner that is as privacy-compliant as possible. Thus, we have incorporated a "click-to-activate solution", or "Shariff solution". The Shariff solution prevents data (e.g. IP address) from being transmitted to the provider of the map service as soon as you open the website. This means that your data is only transmitted to the provider when you click on the click-to-activate button and thus activate Google Maps.
In the present case, the map service Google Maps is used to display an interactive map and to create route maps or to assist in the search for a stationary store. Google Maps is a map service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
In order to use the functions of Google Maps, information, including the IP address as well as the address entered as part of the route function, may be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When visiting a website that contains Google Maps, the browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. The operator of the website has no influence on this data transmission. According to current knowledge, this includes the date and time of the visit to the website in question, the Internet address or URL of the website called up, the IP address and, in the context of route planning, the (starting) address entered. More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de.
The collection and storage of data only takes place after explicit consent according to Art. 6 (1) sentence 1 lit. a) GDPR. This can be revoked at any time with effect for the future.

2.1.4. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Google Analytics uses cookies, which allow an analysis of the use of the website by the user. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The data sent by us and linked to cookies or user IDs (e.g. user ID) are automatically deleted after 14 months. For more information on terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/de/ or https://policies.google.com/?hl=de.
The data collection and storage is only carried out after explicit consent according to Art. 6 (1) sentence 1 lit. a) GDPR. This can be revoked at any time with effect for the future.

2.2. Contact form

If you contact us via the contact form, the data provided will be stored in order to respond to your request. The data will be deleted as soon as we no longer need them to process your request, unless there is a legal obligation to store the data longer. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.

2.3. Contact by e-mail

If you contact us by e-mail, the data provided will be stored in order to respond to your request. The data will be deleted as soon as we no longer need them to process your request, unless there is a legal obligation to store the data longer. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.

3. Rights of the data subject

You have the following rights as a data subject of the data processing in accordance with the legal provisions regarding the personal data concerning you:

3.1. General rights

As a data subject, you have the right to information, the right to rectification and erasure, the right to restrict processing, the right to object to processing and the right to data portability in accordance with the GDPR. Insofar as processing is based on your consent, you have the right to withdraw this consent with effect for the future.

3.2. Right to object

In part, we process data on the basis of our legitimate interests, Art. 6 (1) sentence 1 lit. f) GDPR. You may object to this processing at any time if you have individual reasons for doing so that take precedence over our interests.
If your personal data is processed for the purpose of direct marketing, you have the right pursuant to Article 21 (2) GDPR to object at any time to the processing of personal data concerning you for the purpose of such marketing, this also applies to profiling, insofar as it is related to such direct marketing.
In the event of objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.

3.3. Right to lodge a complaint with a supervisory authority

You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is:

Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)
Wagmüllerstraße 18, 80538 München
Tel.: 089 / 212672-0
Postfach: 22 12 19, 80502 München
E-Mail: poststelle@datenschutz-bayern.de