Privacy Policy

1 Controller
The controller within the meaning of Art 4 no 7 GDPR for the processing of your personal data is:

Skylabs Development & Construction GmbH
Max-Jarecki-Straße 21
69115 Heidelberg
E-mail: haeusler@sky-labs.de
Phone: +49 6221 187 340
(hereinafter referred to as “we”, “us” or “our”)

2 Data protection officer
You can reach the data protection officer at the following contact details:

PROLIANCE GmbH
Address for postal contact:
Leopoldstr. 21
80802 Munich
D-Germany
E-mail: datenschutzbeauftragter@datenschutzexperte.de
Phone: +49 89 / 250 039 220

3 General information on data processing
3.1 Data erasure and retention period
Your personal data will be erased as soon as the purpose for which it was stored no longer applies or the legally prescribed retention period expires. It may be that due to EU regulations, laws or other regulations to which we are subject, your data will be retained even after the purpose no longer applies due to the statutory retention period.

3.2 Data transfers to third countries
Third countries are all countries outside the EU or the European Economic Area. We use various software systems to support our operational processes. When processing data, we take great care to ensure that the processing, especially the storage, takes place on servers within the EU and that external IT service providers are based in Germany or the EU. However, in exceptional cases, it may be that the transfer to third countries, e.g. to the U.S., takes place for reasons related to the selection of (sub)processors of our service providers. In this case, data is transferred in accordance with Art 44 et seq. GDPR.

4 Rights of the data subject
Under applicable data protection laws, you have the following rights.

4.1 Right of access
You can request information from us at any time about whether and which personal data we store about you. The provision of information is free of charge for you. The right to information does not exist or is restricted if and to the extent that information requiring secrecy would be disclosed, e.g. information subject to professional secrecy.

4.2 Right to rectification
If your personal data stored by us is incorrect or incomplete, you have the right to request us to correct this data at any time.

4.3 Right to erasure
You have the right to request that we erase your personal data if and to the extent that the personal data is no longer needed for the purposes for which it was collected or, if the processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and erase it from our IT systems and databases. Your right to erasure does not exist insofar as

• the personal data may not be deleted due to a legal obligation or must be processed due to a legal obligation;
• the personal data processing is necessary for the assertion, exercise or defence of legal claims.

4.4 Right to restriction of processing
You have the right to request that we restrict the processing of your personal data.

4.5 Right to data portability
You have the right to receive from us the personal data you have provided in a structured, common and machine-readable format, as well as the right to have this personal data transferred to another controller. This right only exists if

• you have provided us with the personal data on the basis of consent or on the basis of a contract concluded with you;
• the processing is carried out with the aid of automated procedures.

4.7 Exercising your data protection rights
You can exercise all of the data subject rights described above if you direct your specific request to our contact details.

4.8 Right to lodge a complaint with a supervisory authority
In accordance with Art 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws.

4.9 Data processing when exercising your rights
Finally, we would like to point out that we process the personal data provided by you when exercising your rights pursuant to Articles 15 to 22 GDPR for the purpose of complying with these rights and to be able to provide evidence thereof. We will only process personal data stored for the purpose of providing information and preparing it for this purpose and for the purpose of data protection control and otherwise restrict processing in accordance with Art 18 GDPR. These processing operations are based on the legal basis of Art 6 para 1 lit. c) GDPR in conjunction with Art 15 to 22 GDPR and Section 34 para 2 German Federal Data Protection Act.

5 Provision of the personal data
Even if an automatic transmission of personal data takes place in part when you call up our website, you are not legally or contractually obliged to provide us with personal data in connection with the use of our website.

In connection with contacting us via e-mail or the contact form, you are free to provide us with data via these channels, but without the corresponding provision of data in the course of contacting us, we cannot process and answer any enquiries from you in this respect.

6 Recipients
In addition to the other cases mentioned in this privacy notice, your personal data will only be passed on without your express prior consent in the following cases:

6.1.1 Recipients bound by instructions
We rely on contracted third-party companies and external service providers ("processors") to provide the services. In such cases, personal data will be disclosed to these processors to enable them to continue the data processing. These processors are carefully selected and regularly reviewed by us to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually instructed by us to treat your personal data in accordance with this privacy notice and applicable German data protection laws.

We use the following categories of processors:

• IT service provider
• Cloud provider
• Server hoster
• Software service provider

The transfer of data to processors is based on Art 28 para 1 GDPR, as well as our legitimate interest in the economic and technical benefits associated with the use of specialised processors, and the fact that your rights and interests in the protection of your personal data are not overridden, Art 6 para 1 lit f) GDPR.

In the event that personal data is transferred to a processor outside the EU or the European Economic Area and no adequacy decision has been issued by the EU Commission, we ensure the proper processing of the personal data through measures such as those described in Art 46 et seq. GDPR, for example by entering into appropriate contracts or certifications of the respective data-holding entity; for further information, please contact the data protection officer.

6.1.2 Other disclosure of data
In addition to the other cases mentioned in this privacy notice, your personal data will only be passed on without your express prior consent in the following cases:

• In the context of the use of external service providers, such as specialist planners, who are used to initiate or execute contracts with you.
• If it is necessary to clarify illegal or abusive use of the service or for legal prosecution purposes, personal data will be forwarded to the law enforcement authorities and, if legally feasible, to any concerned third parties. However, this only happens if there are concrete indications of unlawful or abusive behaviour. Data may also be passed on if this serves to enforce terms of use or other agreements. Our legitimate interest in processing data is to ensure the proper functioning of our website and the service and, if necessary, to assert, exercise or defend legal claims.
• We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities.
• As our business evolves, the structure of our business may change by changing its legal form, establishing, buying or selling subsidiaries, divisions or components. In such transactions, customer information is transferred together with the part of the company to be transferred. Whenever personal data is transferred to third parties to the extent described above, we will ensure that this is done in accordance with this privacy notice and the applicable data protection laws.

7 Contact form and contact by e-mail
You can contact us via e-mail. In addition, we offer a contact form on our website so that you can contact us with questions about us, our website and other enquiries.

When you contact us via e-mail or via the contact form, the personal data you provide (in particular your e-mail address, your first and last name and the text of your enquiry as well as any other information you have provided by e-mail or in the contact form) will be stored by us in order to process your enquiry and answer your questions.

The data processing is justified according to Art 6 para 1 lit f) GDPR. We have a legitimate interest in contacting you in response to your request. If your request is aimed at the performance of a contractual or pre-contractual measure with you, Art 6 para 1 lit b) GDPR is the legal basis for the personal data processing

We will delete the personal data generated in the course of your enquiry/contact as soon as it is no longer required for processing your enquiry. If there are legal retention obligations, the data will be stored for the duration of the legally prescribed retention period. The use of the contact form is completely voluntary for you and is not a prerequisite for the use of the website.

8 Processing of personal data when accessing the website
When you access our website, we collect the data that is technically necessary to display this website to you. This is the following personal data that is automatically transmitted to our server by your browser:

• IP adress
• Date and time of your request/call to the website
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (information about which specific page you called up)
• Access status/http status code
• Amount of data transmitted in each case
• Website from which the request comes
• Browser (information about the browser you are using)
• Operating system and its interface (operating system of the computer used by you to access the website or app)
• Language and version of the browser software

The processing of this personal data is based on Art 6 para 1 lit f) GDPR. The website cannot be called up and offered to users without the use of this data; there is a legitimate interest in making the use of the website technically possible.

The aforementioned data will be stored for 7 days and then deleted.
This website is hosted by our service provider STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin and the data collected on our website is stored on the service provider's servers. The server locations are within the EU / EEA.

9 Use of cookie
In order to make visiting our website attractive and to enable the use of certain functions, we and certain third parties use cookies on our website. Cookies are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognise your browser the next time you visit us (so-called persistent cookies).

We use the following cookie categories:

9.1 Cookies that are technically required for the operation of our website:
These cookies are technically required for the operation and functionality of the website. They make the website technically accessible, secure and usable and provide essential and basic functionalities, such as navigation on the website, correct display of the website in the internet browser or provide consent management.

9.1.1 Legal basis
The legal basis for the use of technically required cookies is Section 25 para 2 no 2 of the German Telecommunications Telemedia Data Protection Act ("TTDSG") in conjunction with Art 6 para 1 lit f) GDPR to protect our legitimate interests. In particular, our legitimate interests lie in being able to provide you with a technically optimised website that is user-friendly and tailored to your needs, and to ensure the security of our systems.

9.1.2 Deactivating the cookie settings
Most browsers are pre-set to automatically accept cookies. You can object to the generation of cookies by deactivating cookies in the system settings of your browser. However, please note that some cookies are technically required for our website to function, otherwise the website cannot be accessed or displayed correctly. By deactivating cookies, you will not be able to use parts of the website (without restrictions).

We only use cookies that are not technically required for our website to function, if you have provided us with your prior express consent.

In addition, you can also control the installation of cookies yourself at any time by changing your browser settings and/or deleting all cookies.

9.2 Other cookies and similar technologies

9.2.1 Legal basis
For all other cookies that do not fall under section 9.1 the legal basis for consent with regard to the storage and reading of information is Sec 25 para 1 TTDSG and with regard to the processing of personal data Art 6 para 1 lit a) GDPR.

The consent includes all cookies selected by you and the associated storage of information on your terminal device as well as their subsequent reading and the subsequent processing of personal data.

If we use cookies on the basis of your consent, you can withdraw your consent at any time with future effect, e.g. by adjusting your cookie settings here .

Your withdrawal does not affect the lawfulness of the processing carried out before its withdrawal.

9.2.2 Integration of Google Maps

9.2.2.1 Functionality and processing
If you give us your consent, we will include maps from the Google Maps service – a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users in the EU / EEA and by Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA ("Google") for other users to display maps.

Provided that you give your consent to the use of Google Maps services, we can display interactive maps directly on the website and enable you to use the Google Maps services conveniently.

Insofar as Google processes your personal data, this is done on the basis of Google's privacy policy (https://policies.google.com/privacy). The personal data processed includes in particular your IP address and location data.

9.2.2.2 Purpose of the data processing
The processing of your personal data enables us to include the Google Maps services on our website.

9.2.2.3 Duration of retention
Your personal data will be erased as soon as it is no longer required for our aforementioned purposes.

10 Links
If you interact with so-called hyperlinks to websites/services of other providers on our website, you will be forwarded directly from our website to the website of the other provider when you activate these hyperlinks. You will recognise this by the change of URL, among other things. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with applicable data protection laws. Please access the information provided by these companies directly on the respective website concerning the processing of your personal data.

11 Automated individual case decision
We do not use automated processing – including profiling – to make a decision that produces legal effects concerning you or similarly significantly affects you.

12 Changes to this privacy notice
In the course of the further development of our website, changes to this privacy notice may become necessary. We therefore recommend that you read this privacy notice again from time to time.