Table of contents

  1. Data privacy
    1. Who is responsible for the data collection on this website?
    2. How is data collected on this website?
    3. How is the collected data used for?
    4. What are your rights on your personal data?
  2. Details on data collecting services
    1. Server log files
    2. Contact form
    3. Newsletter
    4. Google Analytics
    5. Google Webfonts
    6. Font Awesome
  3. Data security
    1. SSL and TLS encryption
  4. Remarks on this privacy policy
    1. Revision
    2. Questions?

Overview of data privacy

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations as required by the GDPR of the European Union. If you use this website, various pieces of personal data will be collected. This personal data is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operators, which also is the responsible party pursuant to data protection laws, in particular to the EU General Data Protection Regulation (GDPR). The website operator’s contact details can be found in the website’s required legal notice.

Which data are collected on this website?

Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form. Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data, which e.g. comprises the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address. These data are collected automatically as soon as you enter our website. Additionally this website uses anonymous analytics data, which comprises information about your surfing behavior. This data does not allow us to identify you.

How is the collected data used for?

The technical data collected on this website is processed for ensuring an unproblematic website connection, for ensuring a grey use of our website, for the analysis of our system security and stability as well as for additional technical administrative purposes. This data is not connected with further data, such that we will not be able to draw conclusions about your person. The analytics data is used to analyze how visitors use the site, to improve the user experience. This allows us to understand if and how the website is used.

What are your rights on your personal data?

This website is subjected to the data protection and privacy regulation standard of the GDPR, which protects you as a natural person, whatever your nationality or place of residence, in relation to the processing of your personal data (Recital 14 GDPR). This allows you to exercise the following rights at any time using the contact details given in the legal notice.

Right of access by the data subject

You have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge (Art. 15 GDPR).

Right to rectification

You have the right to demand the rectification of incorrect personal data (Art. 16 GDPR.

Right to erasure

You have the right to demand the blocking, or deletion of your personal data (Art. 17 GDPR).

Right to restriction of processing

You have the right to restrict the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR.

Right to data portability

You have the right to receive all your personal data, that has been collected (Art. 20 GDPR)

Right to object

Many data processing operations are only possible with your express consent (Art. 21 GDPR). You may revoke your consent at any time with future effect. An informal email to the address given in the legal notice is sufficient making this request. The data processed before we receive your request may still be legally processed.

Right to complain to regulatory authorities

You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. Of course you may also file a complaint with the competent regulatory authorities, e.g. the supervisory authority of the state of your residence or the authority that oversees us as the responsible party. For Germany you’ll find a list of supervisory authorities for the non-public area with their respective addresses at the BfDI website.

Details on data collecting services

Server log files

Type and purpose

This website is hosted on GitHub Pages, a web hosting service of GitHub, Inc. (hereinafter: ‘GitHub’):

GitHub, Inc.
88 Colin P Kelly Jr St
San Francisco
CA 94107 USA

GitHub automatically collects and stores information that your browser transmits in “server log files”. These are: Browser type and browser version, Operating system used, Referrer URL, Host name of the accessing computer, Time of the server request, IP address. This data will not be combined with data from other sources. This type of information will be statistically analyzed by us if necessary to optimize our website and its underlying technology.

The processing occurs according to Art. 6 §1 (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.

Retention period

The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case, after the respective session has ended, for data that are used to make the website available.

Third country transfers

GitHub processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Objection

The provision of the aforementioned personal data is neither legally nor contractually mandatory. Without the IP address however, the service and functionality of our website are not guaranteed. Furthermore, individual services can be unavailable or limited. For this reason, an objection is excluded.

Contact form

Type and purpose

The data you enter are used for individual communication with you. A valid email address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.

The processing of the data entered in the contact form occurs on the basis of a legitimate interest according to Art. 6 §1 (f) GDPR.

By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions.

If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures according to Art. 6 §1 (b) GDPR.

Recipients

Recipients of the data may be processors.

Retention period

The data will be deleted no later than 6 months after processing the inquiry. Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.

Mandatory or required provision

The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, email address and the reason for your inquiry.

Newsletter

Type and purpose

Your data will be used exclusively to send you the newsletter you subscribed for via email. We request your name so that we can address you personally in the newsletter and identify you as needed should you want to exercise your rights as a data subject.

To receive the newsletter, providing your email address is sufficient. When you subscribe to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be notified by email about circumstances that are relevant to the service or registration (such as changes to the newsletter offer or technical matters).

We need a valid email address to complete your registration. In order to verify that a registration is actually made by the owner of an email address, we utilize the ‘double opt-in’ procedure. To this end, we log the newsletter subscription request, when a confirmation email is sent and the receipt of the requested reply. Additional data is not collected. The data will be used exclusively for sending the newsletter and will not be shared with third parties.

Based on your express consent according to Article 6 (1) a DSGVO, we will send you our newsletter on a regular basis or comparable information via email to your specified email address.

The consent to save and use your personal data for the newsletter may be withdrawn at any time and remain in effect in the future. Every newsletter contains a corresponding link, and you can also unsubscribe on this website at any time or inform us of your cancellation via the contact option indicated at the end of this privacy policy.

Recipients

Recipients of the data may be processors.

Retention period

Data are only processed in this context provided that the corresponding consent has been given. The data will be deleted thereafter.

Mandatory or required provision

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Google Analytics

Type and purpose

This website uses Google Analytics, a web analytics service of Google LLC (hereinafter: ‘Google’):

Google LLC
1600 Amphitheater Parkway
Mountain View
CA 94043 USA

Google Analytics uses so-called ‘cookies’, i.e. text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is typically transmitted to a Google server in the U.S. and stored there.

Due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. This guarantees anonymized data collection by masking the last part of your IP address. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, summarize reports on website activities and provide other services related to website and Internet usage to the website operator. The IP address transferred from your browser as part of Google Analytics will not be combined with other data from Google.

The data processing purposes are the website-use analysis and the summary of reports on activities on the website. Based on the use of the website and the Internet, other related services will be provided.

The processing of the data occurs on the basis of the user’s consent according to Art. 6 §1 (a) GDPR.

Recipients

The recipient of the data is Google as the processor. For this, we have entered into the corresponding data-processing contract with Google.

Retention period

The deletion of the data occurs as soon as they are no longer necessary for our recording-keeping purposes.

Third country transfers

Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Mandatory or required provision

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.

You can prevent the storage of cookies by a corresponding setting in your browser software; however, please note that in this case you may not be able to use all the functions of this website in their entirety. Furthermore, you can prevent the collected data generated by the cookie and the data related to your use of the website (including your IP address) being transmitted to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: browser add-on to deactivate Google Analytics.

In addition, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our web pages by clicking this link, which will install an opt-out cookie on your device. This will prevent data collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

Profiling

With the assistance of the tracking tool Google Analytics, the browsing behavior of the website visitors can be evaluated and their respective interests can be analyzed. For this analysis, we create a pseudonymous user profile.

Google Webfonts

Type and purpose

In order to present our content correctly and graphically appealing across all browsers, we use ‘Google Webfonts’ from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter ‘Google’) to display fonts on this website.

You’ll find the data protection guidelines of the library operator Google here: https://www.google.com/policies/privacy/

Your consent is the legal basis for the integration of Google Webfonts and the associated data transfer to Google according to Art. 6 §1 (a) GDPR.

Recipients

The use of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently also unclear whether and to what end – that the operator, in this case Google, will collect data.

Retention period

We do not collect any personal data via the integration of Google Webfonts.

You’ll find additional information on Google Webfonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third country transfers

Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Mandatory or required provision

The provision of your personal data is neither legally nor contractually required. However, the correct presentation of standard-fonts content is not possible without this provision.

The programming language JavaScript is regularly used to display content. Thus, you can opt out of the data processing by disabling JavaScript execution in your browser or by installing a JavaScript blocker. Please note that this may result in functional limitations on the website.

Font Awesome

Type and purpose

This site uses the common representation of fonts and icons, called Web Fonts and SVGs provided by Fonticons, Inc. If your browser does not support web fonts, a default font will be used by your computer. If your supports web fonts, it loads the required web fonts into your browser cache to display texts and fonts correctly, when you call up a page. To do this, the browser connects to the Fonticons, Inc. servers. This will give Fonticons, Inc. notice, that our website has been accessed through your IP address. For more information about Font Awesome, see https://fontawesome.com/help.

The use of web fonts is in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 §1 (f) GDPR.

Recipients

The use of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently also unclear whether and to what end – that the operator, in this case Fonticons, Inc. will collect data. For more information about the Privacy Policy of Fonticons, Inc.: https://fontawesome.com/privacy.

Data security

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

SSL and TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Remarks on this privacy policy

Revision

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.

Questions?

If you have any questions pertaining to data protection, please send us an email or contact the person responsible for data protection in our organization: contact@frootlab.org