Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information on the handling of your personal data collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations. Where links are provided to other websites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend that you check the data protection declarations on the linked websites. In this way, you can determine whether and to what extent personal data is collected, processed, utilised or made accessible to third parties.

Studio3 GmbH
Erni-Singerl-Straße 1,  
85053 Ingolstadt
‍hallo@grid3.io

IDR – Weller - Institut für Datenschutzrecht (Institute for Data Protection Law)
Ziegelbräustraße 7
85049 Ingolstadt  
‍‍ra-weller@idr-datenschutz.de

When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is collected during an ongoing connection between your Internet browser and our web server.  
- Visited domain
- Date and time of the request  
- Page from which the file was requested  
- Access status (file transferred, file not found, etc.)  
- Web browser and operating system used  
- IP address of the requesting computer
-  Amount of data transferred  

We collect this data to ensure a smooth connection to the website and to enable users to use our website comfortably. The log file is also used to analyse system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

If data is stored beyond the respective session, this must be described and the purpose stated.  

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for six months. It is not possible to identify individual persons from this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level so that it is no longer possible to establish a link to the individual user. This data is not analysed in any way except for statistical purposes in anonymised form. This data is not merged with data from other data sources.

Our website uses so-called ‘cookies’. Cookies are small text files that are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behaviour or display advertising.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimised presentation of our services. Other cookies are only stored with your consent on the basis of Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. The legal basis may also arise from Art. 6 para. 1 lit. b GDPR if the processing is necessary for the fulfilment of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.

If cookies are used for analysis purposes, we will inform you about this separately in this privacy policy and obtain your consent.  You can set your browser so that you  
- be informed about the setting of cookies,  
- allow cookies only in individual cases,  
- exclude the acceptance of cookies for certain cases or in general,  
- activate the automatic deletion of cookies when closing the browser  

The cookie settings can be managed for the respective browsers under the following links:
- Google Chrome  
- Mozilla Firefox
- Edge (Microsoft)
- Safari  
- Opera  

You can also manage cookies from many companies and functions that are used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.  Most browsers also offer a so-called ‘do-not-track function’. If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be ‘tracked’ for the purpose of behaviour-based advertising and the like.  Information and instructions on how to edit this function can be found under the following links, depending on your browser provider:  
‍
- Google Chrome  
- Mozilla Firefox
- Edge (Microsoft)
- Safari  
- Opera  

You can also prevent scripts from loading by default. ‘NoScript’ only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that deactivating cookies may limit the functionality of our website.

You have the option of requesting a proposal for our services via a web form. The personal data provided in connection with contacting us will be transmitted to us. This data is only used for the purpose of obtaining an offer. It is not transmitted to third parties. The legal basis for the processing of this personal data can be found in Article 6 GDPR.

The personal data is stored for the purpose of requesting an offer and deleted after the purpose has expired, but at least for contacting the request for an offer.

If you send us enquiries via the contact form or e-mail, your details from the enquiry form or your e-mail, including the contact details you provided there, will be stored by us to process the enquiry and in the event of follow-up questions. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract. Your data will be deleted after final processing of your enquiry, provided that there are no statutory retention obligations to the contrary. In the case of Art. 6 para. 1 lit. f GDPR, you can object to the processing of your personal data at any time with effect for the future.

You can register for certain services offered on our website and thus create a user profile. We collect and use the following personal data as part of the registration and set-up process:

- E-mail address

Mandatory information required for the purpose of registration is labelled as such. Your user account gives you the opportunity to use other areas of our website and the offers you have purchased. The legal basis for data processing with consent is Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR, provided that the processing is necessary for the provision of the desired services. Your data will be deleted as soon as the user account on our website is deleted and insofar as there are no statutory retention obligations. You can usually change and/or delete your user account, including the data you have provided, directly in your user account after logging in or by sending a corresponding message to the controller named at the beginning.

Registration of the user is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures or for the provision of the desired services. The legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is no longer required to fulfil the contract. Please note, however, that it may be necessary to store personal data of our contractual partners even after conclusion of the contract in order to fulfil contractual or legal obligations. As a user, you have the option of cancelling your registration at any time. Premature deletion of your data is only possible insofar as this does not conflict with contractual or legal obligations.

By registering on the controller's website, the IP address assigned by the data subject's internet service provider (ISP), the date and time of registration are also stored. This data is stored against the background that this is the only way to prevent the misuse of our services and, if necessary, to enable criminal offences to be investigated. In this respect, the storage of this data is necessary to safeguard the controller. This data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the connection is encrypted using TLS technology.

This privacy policy describes the processing of personal data in connection with the comment function on our website. This data processing is carried out on the basis of consent in accordance with Art. 6 para. 1 lit. A GDPR, for the fulfilment or initiation of a contract in accordance with Art. 6 para. 1 lit. B GDPR or on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. F GDPR. Email and IP addresses are collected and stored as personal data. These are deleted after a reasonable period of time, unless there is a legal obligation to retain them.

The purpose of the processing is to provide the comment function on our website. The data is transmitted to third parties if this is required for the fulfilment of the contract or by law.

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. (‘Google’). Google Analytics uses so-called cookies. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area, which means that it cannot be traced back to a specific person. Since Google is a US company, a data transfer to the USA cannot be ruled out. Nevertheless, in order to ensure that personal data is handled in accordance with the GDPR in third countries, a data processing agreement (DPA) has been concluded with Google in addition to standard data protection clauses. In addition, current (court) decisions are followed and the necessary adjustments are made to ensure GDPR-compliant handling of personal data and possible data transfer to third countries such as the USA at all times.

Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the processing on this website is carried out for the purpose of website analysis.

Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The terms of use of Google Analytics and information on data protection can be accessed via the following links: http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=de.

Clicking on the following link will prevent Google Analytics from collecting data by setting an opt-out cookie:

Deactivation of Google Analytics

Information on how Google Analytics handles user data can be found in Google's privacy policy:  https://support.google.com/analytics/answer/6004245?hl=de

We use ‘Google Web Fonts’ on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: ‘Google’). Google Web Fonts enables us to use external fonts, so-called Google Fonts. For this purpose, the required Google Fonts are loaded from your web browser into your browser cache when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. We have stored the web fonts locally on our own server and these web fonts are integrated by a server retrieval via this server. No connection is established to a Google server in the USA. 

Google Tag Manager is a solution with which we can manage so-called website tags via an interface (and thus integrate Google Analytics and other Google marketing services into our online offering, for example). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, please refer to the following information on Google services.  

Terms of use: https://www.google.com/intl/de/tagmanager/use-policy.html .

As a rule, your personal data will not be transferred to third parties unless
‍
- We have explicitly pointed this out in the description of the respective data processing,
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure is necessary for the establishment, exercise or defence of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR or is in our legitimate interest for other reasons and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
- there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
- this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

We also use external service providers for the provision of our services and the processing of our services, which we select carefully and commission in writing. These service providers are bound by our instructions and are regularly monitored by us. Order processing contracts required in accordance with Art. 28 GDPR are concluded prior to commissioning. Specifically, these are service providers for web hosting, the sending of emails and the maintenance and servicing of our IT systems. Under no circumstances will your personal data be passed on to third parties by the service providers working for us.

The personal data isforwarded to Achtzig20 GmbH, which implements the creation and provision of thedigital values / NFTs on our behalf and supports the general further developmentof the website. The data shared in this context includes Surname, first name,email address, contract data on purchased products. In accordance with Art. 6para. 1 sentence 1 lit. b GDPR, personal data is only processed insofar as thisis necessary for the fulfilment and processing of the contract with you. Forthese purposes, we have concluded an order processing agreement with theservice provider.

The duration of the storage of personal data is based on the relevant statutory storage periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for contract fulfilment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you exercise your right of revocation or objection.

Below you will find information on which data subject rights the applicable data protection law grants you in relation to the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.

The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.

The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller in accordance with Art. 20 GDPR.

The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

The right to withdraw consent granted in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement to specify a particular situation.

If you would like to exercise your right of cancellation or objection, simply send an e-mail to: hallo@grid3.io

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits relevant application documents to the controller electronically, for example by email or via a contact form on the website. If the controller concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment contract in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted, provided that no other legitimate interests of the controller prevent deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

Applicant data is processed to fulfil our (pre-)contractual obligations as part of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if the data processing becomes necessary for us, e.g. in the context of legal proceedings (in Germany, § 26 BDSG also applies).

If you have given your consent to the processing of your data, you can revoke it at any time and by any means of communication. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can contact us about your objection to advertising at the address given in the legal notice.

We would like to inform you that the disclosure of personal data is sometimes required by law. However, it may also be possible that a data subject must provide us with personal data in order for a contract to be executed. Failure to do so would mean that the contract could not be concluded. Our employees will be happy to answer any questions on a case-by-case basis.

The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to legal requirements, data is stored for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 no. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 no. 2 and 3, para. 4 HGB (commercial letters).

We reserve the right to update this privacy policy if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The latest version applies to your visit.

Social networks are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

Status of this privacy policy: 02.05.2024