Privacy Statement

Information on the collection, processing, and storage of personal data in accordance with the EU General Data Protection Regulation (EU-GDPR), the Federal Data Protection Act, and the German Telemedia Act (TMG)


I. Information on the Processing of Your Data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)


1. Responsible for Data Processing
Martin Mahn
Waldring 8
23176 Luhmühlen
hello@braintoast.de


2. Data Processed for Providing the Website and Generating Log Files

2.1. Which Data is Processed for Which Purpose?
‍Whenever content on the website is accessed, data is temporarily stored that may allow identification. The following data is collected:

•  Date and time of access
•  IP address
•  Hostname of the accessing computer
•  Website from which the site was accessed
•  Websites accessed through the website
•  Page visited on our website
•  Information on whether the request was successful
•  Amount of data transmitted
•  Information about the browser type and version used
•  Operating system

The temporary storage of this data is necessary for the website visit to function and to enable the delivery of the website. Further storage in log files is carried out to ensure the functionality of the website and the security of the IT systems. Our legitimate interest in the data processing lies in these purposes.

‍2.2. On What Legal Basis is This Data Processed?
‍The data is processed based on Art. 6 para. 1 letter f GDPR.

‍2.3. Are There Other Recipients of the Personal Data?
‍The website is hosted by the following service provider:

STRATO AG
Otto-Ostrowski-Strasse 7
10249 Berlin
impressum@strato.de

The hosting provider receives the aforementioned data as a processor. The privacy policy of STRATO AG can be viewed at https://www.strato.de/datenschutz.

‍2.4. How Long Is the Data Stored?
‍The data is deleted as soon as it is no longer required for the purposes for which it was collected. For the provision of the website, this is the case when the respective session ends. 


‍3. Data Processed When Contacting via Email

3.1. Which Data is Processed for Which Purpose?
‍It is possible to contact Brain Toast via the provided email address. The personal data sent with the email will be stored. No data will be forwarded to third parties in this context. The temporary storage of the data is necessary for the exchange of information and for initiating and processing business relations.

‍3.2. On What Legal Basis is This Data Processed?
The data is processed based on Art. 6 para. 1 letters b and f GDPR.

‍3.3. How Long Is the Data Stored?
‍The data is deleted as soon as it is no longer necessary for the purposes for which it was collected. For personal data sent via email, this is the case when the respective exchange of information is concluded and no further relationships (e.g., business relationships) follow.


4. Rights of the Data Subjects

4.1. Right to Access
‍You can request information in accordance with Art. 15 GDPR about your personal data that we process.

‍4.2. Right to Object
You have the right to object for specific reasons (see Section II).

‍4.3. Right to Rectification
‍If the data we hold about you is inaccurate, you can request a correction under Art. 16 GDPR. If your data is incomplete, you can request its completion.

‍4.4. Right to Deletion
‍You can request the deletion of your personal data under Art. 17 GDPR.

‍4.5. Right to Restriction of Processing
‍Under Art. 18 GDPR, you have the right to request the restriction of processing of your personal data.

‍4.6. Right to Lodge a Complaint
‍If you believe that the processing of your personal data violates data protection law, you have the right, under Art. 77 para. 1 GDPR, to lodge a complaint with a supervisory authority of your choice.

‍4.7. Right to Data Portability
‍If the conditions of Art. 20 para. 1 GDPR are met, you have the right to request that the personal data we process based on your consent or in the performance of a contract be provided to you or a third party in a structured, commonly used, and machine-readable format. The collection of data for the provision of the website and the storage of log files are mandatory for the operation of the website. Therefore, they are not based on consent under Art. 6 para. 1 letter a GDPR or a contract under Art. 6 para. 1 letter b GDPR, but are justified under Art. 6 para. 1 letter f GDPR. Therefore, the conditions of Art. 20 para. 1 GDPR are not met in this regard.
‍
‍
‍II. Right to Object Under Art. 21 para. 1 GDPR
‍You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data, which is based on Art. 6 para. 1 letter f GDPR. In this case, the controller will no longer process your personal data, unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. The collection of data for providing the website and the storage of log files are necessary for the operation of the website.