Mon–Thu 09:30–17:00, Fri until 15:00

Bargteheide 04532 408 99 95Göttingen 0551 890 64 000
Start a project

Privacy policy

This website works without cookies and without connections to third parties unless you allow otherwise. This page explains which data is nevertheless processed, what we use it for and what rights you have.

Last updated:

This English translation is provided for convenience. The German version is legally binding: Datenschutzerklärung.

Controller

The controller responsible for processing personal data on this website is:

Web Labels Webdesign GmbH
Am Markt 15
22941 Bargteheide
Germany

Managing director: René Grosche

Phone: +49 4532 4089995
Fax: +49 4532 4089996
Email: [email protected]

Personal data is any information by which you can be identified directly or indirectly, for example your name, email address or IP address. We only process it to the extent necessary to operate the website, answer your enquiries or perform a contract, or where you have given your consent.

The legal bases under the General Data Protection Regulation (GDPR) are:

  • Art. 6(1)(a) GDPR, where you have given your consent,
  • Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for steps taken at your request prior to entering into a contract,
  • Art. 6(1)(c) GDPR, where we are under a legal obligation, for example due to statutory retention periods,
  • Art. 6(1)(f) GDPR, where we have a legitimate interest, for example in the secure operation of the website.

In addition, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG, formerly TTDSG) applies to the storage of information on your device and to accessing such information.

Hosting

This website is a static site hosted on the servers of an external hosting provider. We conclude a data processing agreement with the provider pursuant to Art. 28 GDPR. The provider processes the data only on our instructions. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the reliable and secure provision of the website.

Server log files

Each time you access the website, your browser automatically transmits data to the server. The following is stored in so-called log files: IP address, date and time, page accessed, amount of data transferred, status code, the previously visited page (referrer), browser and operating system. We need this data to deliver the website, find errors and fend off attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted automatically once the hosting provider’s retention period has expired and are not combined with other data.

Encryption

The website is delivered exclusively via HTTPS with TLS encryption. You can recognise this by the padlock symbol and the prefix “https” at the beginning of the address. Data you send to us cannot be read by third parties in transit.

On your first visit, we ask whether you allow additional services. Without your consent, the website only loads what is necessary for its operation and does not establish any connections to third parties.

We store your choice under the key wl-consent in your browser’s local storage (localStorage). The permitted categories, the version of the settings and the date are stored. This data does not leave your device. The legal basis is Section 25(2) TDDDG in conjunction with Art. 6(1)(c) GDPR (proof of consent). You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page.

Audience measurement

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: Audience measurement: which pages are viewed and how visitors use the website.

Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Storage period: up to 14 months. Cookies set: _ga, _ga_<ID>.

Transfer to a third country: USA. Safeguard: EU-US Data Privacy Framework, standard contractual clauses.

Privacy information from Google Analytics 4 · How to object with the provider

Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: Managing and firing measurement tags (such as Google Analytics) according to your consent. The Tag Manager does not analyse any data itself, but it does process your IP address.

Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Storage period: sets no cookies itself.

Transfer to a third country: USA. Safeguard: EU-US Data Privacy Framework, standard contractual clauses.

Privacy information from Google Tag Manager

Advertising and conversion measurement

We currently do not use any tool for advertising or conversion measurement on this website.

Videos and external media

We currently do not embed any videos or other content from external providers.

Fonts

All fonts are hosted on our own server. When you access the website, no connection is established to Google Fonts or any other font provider.

Contact form, email and telephone

If you write to us via the contact form, we process your name, your email address and your message, as well as voluntary details such as company, telephone number, website or preferred appointment. The form sends the details in encrypted form to a script on our server. From there they are sent as an email to our mailbox. They are not stored in a database or file.

To protect against misuse, we store a non-reversible hash value of your IP address (HMAC-SHA256) with a timestamp for a maximum of 24 hours in order to limit too many requests within a short time. The IP address cannot be derived from this value. We do not use third-party captcha services.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise your consent via the checkbox in the form (Art. 6(1)(a) GDPR). The same applies if you contact us by email or telephone. We delete your enquiry once it has been dealt with, provided that no statutory retention periods prevent this. You can withdraw your consent at any time by email to [email protected].

Video conferencing

For appointments with clients and prospective clients, we use Zoom (Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA) and Microsoft Teams (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) outside this website. The providers process your contact details, conference metadata such as start, end and participants, and technical data such as IP address and device type. Content you share in the conference is stored on the provider’s servers.

The legal basis is Art. 6(1)(b) GDPR where a contract or its initiation is concerned, otherwise Art. 6(1)(f) GDPR (straightforward communication). We have concluded a data processing agreement with both providers. Transfers to the USA are based on the European Commission’s standard contractual clauses. Details: Zoom privacy statement and Microsoft privacy statement.

Job applications

If you apply to us, we process your documents in order to decide on your application (Section 26 of the German Federal Data Protection Act (BDSG), Art. 6(1)(b) GDPR). We accept applications by email. If an employment contract is concluded, we transfer the data to your personnel file. Otherwise, we delete the documents two months after the rejection, unless we need them for longer to defend against claims, for example under the German General Equal Treatment Act (AGG).

Social networks

We have profiles on social networks. No plugins or feeds from these networks are embedded on this website. A connection is only made when you follow a link to a profile; the privacy information of the network in question then applies.

Recipients and processors

We only pass on your data if this is necessary for the purposes stated or if you have given your consent. Recipients are:

  • Website hosting provider (data processing on our behalf)
  • Email provider for sending and receiving enquiries (data processing on our behalf)
  • Google Ireland Limited (Google Analytics 4), only with your consent
  • Google Ireland Limited (Google Tag Manager), only with your consent

Data is only transferred to countries outside the EU if a provider listed above expressly names a third country; in that case, the respective safeguard is also stated.

Storage period

We only store personal data for as long as is necessary for the respective purpose. We then delete it, unless statutory retention periods require otherwise, for example six or ten years under German commercial and tax law. The specific periods are stated in the sections above.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). An informal message to [email protected] is sufficient.

Right to object under Art. 21 GDPR: where we process data on the basis of a legitimate interest, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds. You may object to direct marketing without giving reasons.

You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR), on the website via “Cookie settings” in the footer, or otherwise by email. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Independent Centre for Privacy Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

Automated decision-making

We do not make decisions based solely on automated processing, including profiling.

Changes

We update this privacy policy when the website or the services used change. The version published here applies.

Up to 80% government funding