BrainPandora - Privacy Policy

Privacy Policy

1. Overview of Data Protection

General Information

The following provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you. Detailed information on data protection can be found in the privacy policy outlined below.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section "Information About the Responsible Party" in this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. For example, this may include data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or the time of the page visit). This data is collected automatically as soon as you access this website.

What do we use your data for?

Part of the data is collected to ensure the website functions properly. Other data may be used to analyze user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients, and purpose of your stored personal data at any time without charge. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

You can contact us at any time with questions regarding data protection.

Cookies

Our website uses cookies to enhance user experience and analyze website traffic. For detailed information, including how to opt out, please refer to our Cookie Policy.

2. Hosting and Content Delivery Networks (CDN)

Strato

Our website is hosted by Strato. The provider is Strato AG, Pascalstraße 10, 10587 Berlin (hereinafter referred to as “Strato”). When you visit our website, Strato collects various log files, including your IP addresses.

For more information, please refer to Stratos privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring a reliable presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be revoked at any time.

Conclusion of a Data Processing Agreement

We have concluded a data processing agreement with Strato. This is a legally required contract that ensures that Strato processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g., in a contact form) is performed by a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. To perform the analysis, reCAPTCHA evaluates various data (e.g., IP address, time spent on the website, or mouse movements). The data collected during the analysis is forwarded to Google.

reCAPTCHA analyses take place entirely in the background. Website visitors are not informed that such analysis is taking place.

The data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated crawling and spam.

For more information about Google reCAPTCHA and Googles privacy policy, visit: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Google Fonts

We use this service on our website. The service allows us to use external fonts. When retrieving our website, the required font is loaded into your browser cache by your web browser. This is necessary to display our texts in an improved format. If your browser does not support this feature, a standard font from your computer is used.

Integration of these fonts is achieved through a server call to a provider server. This transmits to the server which of our web pages you visited. The provider also stores the IP address of your browsers device. We have no control over the extent and further use of data collected and processed through this service by the provider.

The data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in optimizing its website to improve its user experience and make its design more user-friendly.

For more information about Google Fonts, visit: https://developers.google.com/fonts/faq and https://policies.google.com/privacy?hl=en.

Use of Google Translate

Our website integrates the Google Translate tool to provide translations of our content into different languages. The service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

How Google Translate Works

When you use Google Translate on this website by clicking the button Translate, to translate AI-Prompts:

Google may collect and process data, including your IP address and the text submitted for translation.
The translations are performed directly by Google's servers, and we have no control over the data processing performed by Google.

Data Protection

The use of Google Translate is subject to Google's Privacy Policy, which you can review at: Google Privacy Policy.

By using Google Translate, you acknowledge that:

Translations may not be accurate or entirely reflect the original content.
Data is transferred to and processed by Google.

Purpose of Google Translate

We integrate Google Translate to improve accessibility and provide multilingual support to users. However, translations are provided for convenience only, and the original text prevails in case of discrepancies.

If you have any concerns about the use of Google Translate or its impact on your data, we recommend reviewing Google's privacy practices or refraining from using the translation feature.

Cloudflare

Our website uses Cloudflare as a content delivery network (CDN) to ensure faster loading times and enhanced security. Cloudflare may collect data such as your IP address, system configuration information, and other information about traffic to and from the site. This data is used to manage and optimize the delivery of web content and to enhance security.

For more information on Cloudflare's data practices, please visit: Cloudflare Privacy & Security Policy.

User Profile Images (Gravatar)

We use Gravatar, a service provided by Automattic Inc., to allow users of our website to display a profile image that is globally recognized on the Internet. When you create an account on our site, we use your email address to check if you are registered with Gravatar. Your email address is hashed and sent to Gravatar servers to see if a profile picture is linked to your email address. If you have a Gravatar account associated with that email address, your profile image will automatically appear on your profile on our site.

Please note that your email address is hashed before being sent to Gravatar and is not used by Gravatar for purposes other than providing the profile image. For more details on how Gravatar handles your personal data, please see the Gravatar Privacy Policy.

FreeIP Service

Our website uses FreeIP to provide IP-based geolocation services. When you visit our site, FreeIP may collect data such as your IP address to determine your approximate location. This information helps us offer localized content and services.

For more information on FreeIP's data practices, please visit: FreeIP Privacy Policy.

OpenStreetMap

We use OpenStreetMap to provide map data and interactive maps. This service does not store any personal data through our site, but it can collect limited data such as your IP address during the interaction with map features. This data is used to deliver and improve the functionality of their mapping service.

For more details about how OpenStreetMap handles your data, please see their privacy policy: OpenStreetMap Privacy Policy.

3. Payment Service Providers

PayPal

Our website offers payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6(1)(b) GDPR (contract performance). For more information on PayPals privacy policy, visit: https://www.paypal.com/de/webapps/mpp/ua/privacy-full .

'Stripe

Our website also offers payment via Stripe. The provider of this payment service is Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA.

If you select payment via Stripe, the payment data you enter will be transmitted to Stripe.

The transmission of your data to Stripe is based on Art. 6(1)(b) GDPR (contract performance). For more information on Stripes privacy policy, visit: https://stripe.com/de/privacy .

4. General Information and Mandatory Information

Data Protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data that can identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., communication by email) can have security vulnerabilities. A complete protection of the data against access by third parties is not possible.

Notice Concerning the Responsible Party

The party responsible for data processing on this website is:

Bickert Web & Design
Eugen Bickert
Email: e.b@bickert-web-design.de

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing ceases to apply. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will occur after these reasons cease to apply.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke any consent already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and Direct Advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING IS FOR THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to File Complaints with Regulatory Authorities

In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged violation. The right to file a complaint is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data which we process automatically based on your consent or in fulfillment of a contract delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection in your browsers address line when it changes from "http://" to "https://" and the lock icon is displayed in your browsers address bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient, and the purpose for which it has been processed. You may also have the right to have your data corrected or deleted. If you have further questions about this or any other questions about personal data, you can always contact us at the address given in the legal notice.

Right to Restrict Processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time for this purpose. The right to restrict processing applies in the following cases:

If you contest the accuracy of your personal data stored by us, we will usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
If you have objected pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from being stored – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

5. Data Collection on This Website

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.

Inquiry by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

The data you send to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – especially legal retention periods – remain unaffected.

Newsletter Data

If you would like to receive the newsletter offered on this website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No further data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter subscription form is based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after the newsletter is canceled. Data that has been stored by us for other purposes (e.g., email addresses for the member area) remains unaffected.

API Services

By using our API services, you may be interacting indirectly with external language models provided by companies such as OpenAI, Stability AI, and Fal-Ai. These services are accessed through APIs for enhancing the functionality of our website and offering advanced features to you.

Please be aware that while we strive to protect your personal information, the nature of these services means that your data, excluding sensitive information such as passwords or private identifiers, might be processed by these external providers. We ensure that only non-sensitive data is sent to these APIs, but it is important to understand that the complete deletion of data by these providers cannot be guaranteed once it is transmitted.

We recommend keeping sensitive information out of the communications you send through our services. For more detailed information on how each provider handles your data, including their data retention and deletion policies, please refer to their respective privacy policies:

By using our API-connected services, you acknowledge and agree to the potential processing of your data by these external providers under their respective policies. We ensure that our integration adheres to the highest standards of data protection and privacy laws applicable to our operations.