- Home
- /
- Privacy Policy
Privacy Policy
The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Grünspecht Vision Labs GmbH
Würzburger Str. 14, 01187 Dresden
Phone number: 01578 614 7487
Email: info@grunspechtvisionlabs.com
Authorized Managing Director: Georg Lempe
Responsible for editorial content: Georg Lempe
Court of Registration: Registered on May 27, 2024 – Dresden Local Court, HRB 43931
Value-Added Tax Identification Number pursuant to Section 27a of the Value-Added Tax Act: DE360956087
Data Protection Officer: /
This website was developed by falconDev / Teamanda in partnership with Blackfire
Collection of General Information When You Visit Our Website
Nature and Purpose of Processing: When you access our website—that is, when you do not register or otherwise submit information—information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data.
It is processed in particular for the following purposes:
- To ensure a smooth connection to the website,
- To ensure the smooth operation of our website,
- To evaluate system security and stability, and
- to optimize our website.
We do not use your data to draw conclusions about your identity. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.
Legal basis and legitimate interest:
Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website, as well as ensuring system security and detecting misuse.
Recipients:
Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.
Retention period:
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For data used to provide the website, this is generally the case once the respective session has ended.
Provision Required or Necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, certain features and services may be unavailable or limited. For this reason, an objection is not permitted.
Objection
Please read the information below regarding your right to object under Article 21 of the GDPR.
Audience Measurement
Nature and Purpose of Processing
Audience measurement is used to analyze visitor traffic on our website and may include pseudonymized data regarding visitors’ behavior, interests, or demographic information, such as age or gender. With the help of audience analysis, we can, for example, determine at what times our online offering, its features, or its content are used most frequently, or encourage repeat visits. We can also identify which areas require improvement.
You can find out which tools we use for audience measurement below.
Legal Basis
Processing is carried out in accordance with Art. 6(1)(f) of the GDPR on the basis of our legitimate interest. Audience measurement and the resulting information are suitable for customizing the website.
Recipients
We use technical service providers to operate and maintain our website; these providers act as our data processors.
Retention Period
Information regarding the retention period can be found in the details below regarding the tools used.
Is the Provision of Data Mandatory or Required?
The provision of data is neither legally nor contractually required.
Objection
Please read the information below regarding your right to object under Article 21 of the GDPR.
Cookies and Similar Technologies
Like many other websites, we also use so-called “cookies.” Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
You can delete individual cookies or all cookies. In addition, you’ll find information and instructions on how to delete these cookies or block them from being stored in the first place. Depending on your browser provider, you can find the necessary information at the following links:
Mozilla Firefox, Internet Explorer, Google Chrome, Opera, Safari
Basics of Cookies and the TDDDG
Since December 1, 2021, the use of cookies has been subject to the Telecommunications and Digital Services Data Protection Act (TDDDG). Pursuant to Section 25 of the TDDDG, the storage of information on your device or access to such information is permitted only with your consent, unless it is absolutely necessary for us to provide you with a service you have expressly requested.
Retention period and cookies used:
If you allow us to use cookies through your browser settings or by giving your consent, the following cookies may be used on our websites:
[borlabs-cookie type=”btn-cookie-preference” title=”View and Customize Cookies” /]
Please note that it may be necessary to reload the webpage and clear any cookies that have already been set. For more information, please see this Privacy Policy.
Technically Necessary Cookies
Nature and Purpose of the Processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the browser used to access the site can be identified even after changing pages.
The purpose of using technically necessary cookies is to make it easier for users to navigate websites. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after the user navigates to another page.
Legal Basis and Legitimate Interest:
Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in ensuring a user-friendly design of our website. Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in designing our website to be user-friendly, as well as in accordance with Section 25(2)(2) of the TDDDG, since these cookies are strictly necessary.
Recipient:
Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.
Provision required or mandatory:
The provision of the aforementioned personal data is not required by law or by contract. However, without this data, the service and the functionality of our website cannot be guaranteed. In addition, certain features and services may not be available or may be limited.
Objection
Please read the information below regarding your right to object under Article 21 of the GDPR.
Non-Essential Cookies
We also use cookies to better tailor the content on our website to the interests of our visitors or to generally improve it based on statistical analyses.
Please refer to the information provided on the display, tracking, remarketing, and web analytics technologies used to see which providers set cookies.
Legal Basis
The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.
Recipients
Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.
For information on other recipients, please refer to the details below regarding the display, tracking, remarketing, and web analytics technologies we use.
Transfers to Third Countries
Please refer to the lists provided by the individual display, tracking, remarketing, and web analytics providers for information on this.
Provision Required or Necessary
Of course, you can generally view our website without cookies. Web browsers are typically set to accept cookies. In general, you can disable the use of cookies at any time via your browser settings (see Withdrawal of Consent).
Please note that certain features of our website may not function properly if you have disabled cookies.
Withdrawal of Consent
You can withdraw your consent at any time via our cookie consent tool.
Profiling:
For details on how we analyze the behavior of website visitors using pseudonymized user profiles, please refer to the information below regarding the display, tracking, remarketing, and web analytics technologies we use.
Your Rights as a Data Subject
You may exercise the following rights at any time using the contact details of the data controller provided above:
- Information about the data we have stored about you and how it is processed (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Erasure of your data stored by us (Art. 17 GDPR),
- Restriction of data processing, provided that we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, provided that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us your consent, you may revoke it at any time with future effect.
You may file a complaint with a supervisory authority at any time, such as the competent supervisory authority in the federal state where you reside or the authority responsible for us as the data controller. A list of supervisory authorities (for the private sector) with their addresses can be found at: BFDI (Federal Data Protection Commissioner).
Contact Form and Email/Phone Contact
Our website features a contact form that can be used to contact us electronically. If a user chooses this option, the data entered in the form is transmitted to us and stored.
When the message is sent, the following data is also stored:
- The URL from which the request was made
- Date and time
- IP address
- Browser data
You can contact us using the email addresses provided. In this case, the user’s personal data transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.
You can contact us using the phone numbers provided. In doing so, we collect log data that includes your phone number and the duration of the call.
Regardless of the chosen method of communication, we collect the content of your inquiry. Your data is stored for the purpose of individual communication with you.
Legal Basis
The data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in processing your data is to facilitate easy contact.
If you contact us to request a quote, your data will be processed for the purpose of taking steps prior to entering into a contract (Art. 6(1)(b) GDPR).
Recipients
Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.
Retention Period
Data will be deleted no later than 12 months after the initial contact is processed.
If a contractual relationship is established, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper bookkeeping and tax law requirements.
Provision Required or Necessary
The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for the request.
Objection
Please read the information below regarding your right to object under Article 21 of the GDPR.
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.
Use of the Google Analytics Tracking Tool
Nature and Purpose of Processing
If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
Google Analytics uses cookies that enable an analysis of your use of the website. The information collected is generally transmitted to a Google server in the United States and stored there.
IP addresses are automatically anonymized by default in Google Analytics. Because IP anonymization is enabled on this website, Google will truncate your IP address within EU or EEA member states. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. According to information provided by Google, the IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
While you are visiting our website, your user behavior is tracked in the form of so-called events, such as:
- Page Views
- Start of a session
- Time spent on site
- User engagement
- First visit to a website
- Scrolls (when a visitor scrolls 90% of the way to the bottom of the page)
- Clicks on external links
- Ads viewed or clicked
- Internal searches
- Interaction with video content
- Downloads
- Language settings
In addition, the following information is collected:
- Your approximate location (region)
- Your IP address (in truncated form)
- Technical information such as browser, Internet service provider, device, and screen resolution
- The source (referrer URL) of your visit (i.e., which website or advertising channel brought you to us)
For more information on terms of use and privacy, see About Google Analytics and About Google Privacy.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.
Legal Basis
The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) of the GDPR.
Recipients
We use technical service providers to operate and maintain our website and to analyze cookies; these providers act as our data processors.
Another recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the United States (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
Retention period
The data we send that is associated with cookies is automatically deleted after 14 months.
Google Analytics cookies have a maximum lifespan of two years. Data that has reached the end of its retention period is automatically deleted once a month.
Transfer to a Third Country
Since Google’s headquarters are located in the United States, it cannot be ruled out that the data may be processed on Google’s servers in the United States. This poses the risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes without you having any legal recourse. To ensure an adequate level of data protection, we have entered into EU Standard Contractual Clauses with Google, which can be viewed here: Google LLC is certified under the EU-U.S. Data Privacy Framework. Data transfers to the United States are based on the EU Commission’s Adequacy Decision of July 10, 2023.
Withdrawal of Consent
You can withdraw your consent at any time in the cookie settings, effective for the future.
You can also disable Google Analytics tracking on our website by clicking this link. Doing so will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and this browser in the future, as long as the cookie remains installed in your browser.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link: Browser Add-On to Disable Google Analytics: Go to Google
Order Processing
We have entered into a Data Processing Agreement (DPA) with the provider mentioned above. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Hetzner
Nature and Purpose of Processing
We host our website with Hetzner. In the process, server log files are automatically generated that contain information about visits to our website (IP address, browser type, operating system, referrer URL, time of access). This data is used to ensure the technical operation and security of the website.
Legal Basis
The use of Hetzner is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If cookies are set, this is done on the basis of Section 25(2)(2) of the TDDDG (technically necessary).
Recipient
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen
Retention Period
Server log files are automatically deleted after 7 days.
Transfer to Third Countries
There is no transfer to a third country, as Hetzner is a German company.
Provision is mandatory or necessary
Provision is technically necessary for the operation of the website.
Withdrawal of Consent
Since the use is based on legitimate interests, revocation is not required. However, you may object in accordance with Art. 21 of the GDPR.
For details, please refer to Hetzner’s Privacy Policy: About Hetzner
Data Processing
We have entered into a data processing agreement (DPA) with the provider mentioned above. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Spam Protection for Forms
Nature and Purpose of Processing
To protect our forms from spam, automated submissions, and misuse, we use spam protection provided by falconDev IT GmbH. The spam protection runs on a falconDev server and is integrated into our website. When you visit a page with a protected form or submit a form, the following data is transmitted to this server and checked there:
- IP address,
- time the form was accessed and submitted,
- technical characteristics of the browser and JavaScript, and
- results of technical tests, in particular honeypot, timing, and multiple-submission tests.
The data is used solely to detect and prevent automated or malicious access attempts. It is not used for advertising or analysis purposes and is not combined with any other data.
Legal Basis
Processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our website and our communication channels from spam, automated submissions, and other forms of misuse. To the extent that information is stored on or read from your device in the process, this is done in accordance with Section 25(2)(2) of the TDDDG, as it is absolutely necessary for the secure operation of the form.
Recipient
falconDev IT GmbH, Mohorner Straße 13, 01159 Dresden, Germany
Retention period
The IP address is stored in encrypted form and automatically deleted after 7 days. The remaining exam data is deleted as soon as the exam is completed, or after 7 days at the latest.
Transfer to a Third Country
The data is processed on a server in Germany. It is not transferred to third countries.
Provision Required or Necessary
This validation is technically required for you to be able to submit the form. Without this validation, the form cannot be submitted.
Objection
You may object to the processing at any time for reasons related to your particular situation (Art. 21 GDPR). To do so, please use the contact information provided in the legal notice. Alternatively, you may also contact us by phone or email without using the form.
Order Processing
We have entered into a Data Processing Agreement (DPA) with the provider mentioned above. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Sending Emails via Mailgun
Nature and Purpose of Processing
When you submit our contact form, we will be notified of your inquiry via email. We use the email service provider Mailgun to send this notification. In this process, the information from the form (name, company, email address, use case, and your selection regarding the feasibility study), as well as technical delivery data (e.g., the time and delivery status of the email), is transmitted via Mailgun’s servers to our email inbox. Mailgun processes the data solely for the purpose of delivering the email.
Legal Basis
To the extent that your inquiry is aimed at entering into a contract, the processing is based on Article 6(1)(b) of the GDPR; in all other cases, it is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in the reliable and prompt handling of your inquiry.
Recipient
Mailgun Technologies, Inc. (part of the Sinch Group), 112 E. Pecan Street #1135, San Antonio, TX 78205, USA. Emails are sent via the Mailgun account of our service provider, falconDev IT GmbH, Mohorner Straße 13, 01159 Dresden, Germany.
Retention period
Mailgun stores delivery logs only for a limited period of time and then automatically deletes them. We delete the notification from our inbox as described in the section “Contact Form and Email/Phone Contact.”
Transfer to a Third Country
We use Mailgun’s EU region. The data is processed there in data centers in Germany and Belgium. Since Mailgun Technologies, Inc. is headquartered in the U.S., access from the U.S. cannot be completely ruled out. Mailgun Technologies, Inc. is certified under the EU-U.S. Data Privacy Framework. For certified companies, there is an adequacy decision by the European Commission (Art. 45 GDPR).
Provision Required or Necessary
This service is not required by law or contract. However, without sending this notification, we cannot reliably process inquiries submitted via the contact form. Alternatively, you can contact us directly by email or phone.
Objection
You may object to the processing at any time for reasons related to your particular situation (Art. 21 GDPR).
For more details, please refer to Mailgun’s Privacy Policy: About Mailgun
Order Processing
We have entered into a data processing agreement (DPA) with our service provider, falconDev IT GmbH. Mailgun is included in this agreement as an additional data processor and processes the data only in accordance with our instructions and in compliance with the GDPR.
OpenStreetMap
Nature and Purpose of Processing
On our contact page, we embed a map from OpenStreetMap so you can see where to find us. The provider is the OpenStreetMap Foundation (OSMF). The map is not loaded automatically. Only after you consent to the map being loaded via our cookie consent tool (Borlabs Cookie) will your IP address and technical information (e.g., browser type, time of access, and the page accessed) be transmitted to OSMF servers. In doing so, the OSMF may store cookies in your browser or use comparable recognition technologies.
Legal Basis
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may revoke your consent at any time with future effect.
Recipients
OpenStreetMap Foundation, St. John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom
Retention Period
We have no control over how long the transferred data is stored. For details, please refer to the OSMF’s Privacy Policy.
Transfers to Third Countries
The OSMF is headquartered in the United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom (Art. 45 GDPR).
Provision Required or Necessary
Provision is neither legally nor contractually required. The map will not be displayed without your consent. You can still find our address on the Contact page and in the Legal Notice.
Withdrawal of Consent
You can withdraw your consent at any time via our cookie consent tool (Borlabs Cookie). The lawfulness of the processing carried out prior to withdrawal remains unaffected.
For details, please refer to the OSMF’s Privacy Policy: About OpenStreetMap
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object to such processing at any time; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for those purposes.
Recipient of an objection
Grünspecht Vision Labs GmbH
Würzburger Str. 14, 01187 Dresden
Phone number: 01578 614 7487
Email: info@grunspechtvisionlabs.com
Authorized Managing Director: Georg Lempe
Court of Registration: Registered on May 27, 2024 – Dresden Local Court, HRB 43931
Value-Added Tax Identification Number pursuant to Section 27a of the Value-Added Tax Act: DE360956087
Data Protection Officer: /
Changes to Our Privacy Policy
We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, such as when introducing new services. The new Privacy Policy will then apply to your next visit.
This Privacy Policy was created with the assistance of activeMind AG, the experts in external data protection officers (Version #2025-06-10): About activeMind