Privacy Policy

Version 1.2, last updated August 2019

The responsible controller for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Back Technologies GmbH („Back“)
Manteuffelstr. 77
D-10999 Berlin
hi@backhq.com

The Data Protection Officer of Back can also be contacted at:

dataprivacy@backhq.com

1. Server Logfiles

Type of Data and Purpose of Processing:

When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address.

This data is processed for the following purposes:

  • Ensuring a trouble-free connection to the website
  • Ensuring usability and functionality of our website
  • Evaluation of system safety and stability

Legal Basis:

The Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the security, stability and functionality of our website.

Recipients:

Recipients of the data are technical service providers who are responsible for the operation and maintenance of our website. As processors on behalf, the service providers are obliged to process the data only within the scope of our instructions set forth in data processing agreement.

Retention Period:

The server log files are deleted no later than 6 months.

Requirements for Provision of Data and possible Consequences:

The provision of the aforementioned personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed.

2. Early Access Subscription

Type of Data and Purpose of Processing:

The data entered by you will be processed in order to contact you, to offer news and updates regarding our product, and essentially enabling you to set up a user account. We will track if you open communications received by us.

In order to subscribe to this service, you need to share your e-mail address with us. We use a double-opt in procedure to ensure that the e-mail address you submit is valid and belongs to you.

Legal Basis:

The processing is carried out with your consent according to Art. 6 para. 1 lit. a GDPR.

Recipient and International Transfer:

Recipients of the data is Rocket Science Group LLC, located in the United States, operating the service “Mail Chimp”. As processors on behalf, Mail Chimp is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Adequate safeguards for the transfer of your data to countries outside of the EU/EAA are in place. Mail Chimp is self-certified under the EU-US Privacy Shield. Furthermore, the data processing agreement includes Standard Contractual Clauses approved by the EU Commission.

Retention Period:

We will keep your data until you withdraw your consent.

Requirements for Provision of Data and possible Consequences:

The provision of your personal data is voluntary. However, we are only able to send you communications if you do not provide the data.

Withdrawal of consent:

You can withdraw your consent by clicking the unsubscribe link contained in every communication, or by contacting us by e-mail.

3. Contact via E-mail

Type of Data and Purpose of Processing:

We offer you the possibility to get in contact with us directly via e-mail. The data entered and transmitted by you will be processed exclusively for the purpose of individual communication with you.

Legal Basis:

The processing of data transmitted by e-mail is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in efficient and simple communication with you.

Depending on the nature of your request, the processing of data transmitted by e-mail may serve to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Retention Period:

Data will be deleted at the latest 6 months after the last contact and final processing of the request.

In case of the establishment of a contractual relationship might be subject to legal retention periods. We will delete your data after applicable legal retention periods.

Requirements for Provision of Data and possible Consequences:

The provision of your personal data is voluntary. Without the provision of the data we cannot answer your inquiry however.

4. Website Analysis

Type of Data and Purpose of Processing:

This website uses technology based on cookies that helps us better understand how the website is used. We do this by compiling reports about activity on the site that do not identify specific individuals. Analysis cookies transmit your IP address to a service provider for this purpose.

Legal Basis:

The processing is carried out with your consent according to Art. 6 para. 1 lit. a GDPR.

Recipients:

Recipient of the data is a processor on behalf. For this purpose, we have concluded the necessary data processing agreement with Google Ireland Ltd. As processor, the service provider is obliged to process the data only in accordance with our instructions.

Retention Period:

The data will be deleted after one year.

Requirements for Provision of Data and possible Consequences:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this will not affect to use of our website.

Withdrawal of Consent:

You can withdraw your consent at any time by clicking OPT OUT LINK. An opt-out cookie will be installed on your device. This will prevent collection in the future as long as the cookie remains installed in your browser.

SSL Encryption

In order to protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Overview Processors on Behalf

The following organizations, companies or persons have been instructed by the operator of this website to process data:

Hosting Provider

The Rocket Science Group LLC
675 Ponce De Leon Ave NE, Suite 5000
Atlanta, Georgia 30308

Google Ireland Limited
Google Building Gordon House
4 Barrow St, Dublin, D04 E5W5, Ireland

Your Rights as a Data Subject

You can contact us at dataprivacy@backhq.com any time to exercise the following rights:

  • Information about your data stored with us and its processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored with us (Art. 17 GDPR),
  • Restriction of processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us on the ground of your particular situation (Art. 21 GDPR) and
  • Data transferability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can withdraw it at any time with effect for the future.

You may lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority of the federal state in which you reside or to the authority responsible for us.

Changes to our privacy policy

We reserve the right to adapt this data protection policy so that it always complies with the current legal requirements or to implement changes to our services in the data protection policy, e.g. when introducing new services. The current data protection declaration applies to every visit of the website.

Version 1.2, last updated August