Privacy Policy

Personal data (hereinafter referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

According to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), "processing" means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

With the following privacy policy, we specifically inform you about the nature, scope, purpose, duration, and legal basis of processing personal data, to the extent that we either alone or jointly with others determine the purposes and means of processing. Additionally, we provide information below about third-party components used by us for optimization purposes and to enhance the quality of use, where these third parties process data in their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as data controllers
II. Rights of users and data subjects
III. Information about data processing

I. Information about us as data controllers

The responsible provider of this website in terms of data protection law, as well as the data protection officer, can be found in the Imprint.

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right
  • to confirmation as to whether or not personal data concerning them is being processed, access to the processed data, further information about the data processing, and copies of the data (see also Article 15 GDPR);
  • to rectification or completion of inaccurate or incomplete data (see also Article 16 GDPR);
  • to immediate deletion of personal data concerning them (see also Article 17 GDPR), or alternatively, if further processing according to Article 17(3) GDPR is necessary, to restriction of processing according to Article 18 GDPR;
  • to receive the personal data concerning them and provided by them, and to transmit those data to other controllers (see also Article 20 GDPR);
  • to lodge a complaint with a supervisory authority if they believe that the processing of personal data concerning them violates data protection regulations by the provider (see also Article 77 GDPR).

Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider about any rectification or deletion of data, or restriction of processing carried out in accordance with Articles 16, 17(1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Regardless, the user has the right to information about these recipients.

Users and data subjects also have the right, under Article 21 GDPR, to object to future processing of personal data concerning them, where such data processing is carried out by the provider in accordance with Article 6(1)(f) GDPR. In particular, objection to data processing for the purposes of direct marketing is permissible.

III. Information about data processing

The personal data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, unless there are legal retention obligations preventing deletion of the data, or unless there are other specifications regarding individual processing procedures.

Server Data

For technical reasons, especially to ensure the security and stability of our website, data transmitted by internet browsers is stored. These so-called server log files collect information such as the type and version of the internet browser, the operating system, the website visited before ours (referrer URL), the pages of our website visited, date and time of access, and the IP address of the internet connection from which our website is accessed.

This data is temporarily stored, but not together with other data from you. This storage is based on Article 6(1)(f) GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.

The data will be deleted after sixty days at the latest, unless further storage is required for evidence purposes. Otherwise, the data will be excluded from deletion until the incident is finally clarified, in whole or in part.

Cookies

We use so-called cookies on our website. For information on what cookies are, the types of cookies we use, how and why we use them, and how you can adjust cookie settings on your device, please refer to our Cookie Policy.

Contract processing

The data submitted for using our goods and/or services are processed by us for the purpose of contract processing and are necessary for this purpose. Conclusion and execution of contracts are not possible without providing the data.

The legal basis for processing is Art. 6(1)(b) GDPR.

We delete the data upon complete contract processing, but must observe the tax and commercial retention periods as well as regulatory requirements.

Customer Account / Registration Function

If a customer account is requested via our website, we will collect and store the data provided during registration (such as name, address, or email address) exclusively for pre-contractual services, contract fulfillment, or customer care purposes (for example, to provide an overview of previous orders). We also store the IP address and date/time of registration. These data will not be disclosed to third parties.

During the registration process, reference is made to this privacy policy. The data collected by us during this process will be used exclusively for providing the customer account.

If consent is given for processing, Article 6(1)(a) GDPR serves as the legal basis for the processing. If the opening of the customer account also serves pre-contractual measures or contract fulfillment, Article 6(1)(b) GDPR additionally serves as the legal basis for this processing.

The consent granted to us for the opening and maintenance of the customer account can be revoked at any time with future effect in accordance with Article 7(3) GDPR. To do this, the data subject simply needs to inform us in writing of their revocation.

The data collected for this purpose will be deleted as soon as the processing is no longer necessary. However, we must comply with tax and commercial retention periods.

Newsletter

We provide a free newsletter for customers and interested parties. The data collected for this purpose is used exclusively for newsletter delivery and is therefore not shared with third parties.

The legal basis for this processing is Article 6(1)(a) GDPR.

Consent to receive the newsletter can be revoked at any time with future effect in accordance with Article 7(3) GDPR. To do this, the data subject simply needs to inform us in writing of their revocation or use the unsubscribe link included in every newsletter.

Contact inquiries / Contact options

If you contact us via contact form or email, the data provided will be used to process your inquiry. Providing this data is necessary to handle and respond to your request – without it, we may not be able to answer your inquiry fully or at all.

The legal basis for this processing is Art. 6(1)(b) of the GDPR.

The data will be deleted once the request has been conclusively processed, provided that there are no legal retention obligations preventing deletion, such as those arising from subsequent contract processing.

Google AdWords with Conversion-Tracking

In our website, we use the advertising component Google AdWords, including the so-called Conversion Tracking. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

Through Certification under the EU-US Privacy Shield („EU-US Privacy Shield“) Google guarantees that EU data protection requirements are adhered to when processing data in the USA.

We use conversion tracking for targeted promotion of our offerings. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.

If you click on an ad placed by Google, our conversion tracking places a cookie on your device. These so-called conversion cookies expire after 30 days and are not used for personal identification.

As long as the cookie is valid and you visit a specific page on our website, both we and Google can evaluate that you clicked on one of our ads placed with Google and were subsequently directed to our website.

The information collected in this way by Google enables us to create statistics about visits to our website. Additionally, it provides us with information about the number of users who clicked on our ad(s) and the pages subsequently visited on our website. Neither we nor third parties using Google AdWords are able to identify you through this process.

You can prevent or restrict the installation of cookies by adjusting the settings of your internet browser. You can also delete already stored cookies at any time. The steps and measures required for this depend on the specific internet browser you use. For guidance, please consult the help function or documentation of your internet browser, or contact its manufacturer or support team if you have any questions.

Furthermore, Google also provides further information on this topic and specifically on options to prevent data usage at the following links:

https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads
https://www.google.de/policies/privacy

Google-Maps

"Google Maps is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as 'Google'."

"In our website, we have placed a link to Google Maps. By clicking this link, you will leave our website and be directed to a pre-filled page where you can generate directions to our location. As with all external links, once you click on the link, the privacy policies of the external site will apply."

Durch die Certification under the EU-US Privacy Shield („EU-US Privacy Shield“) google guarantees that the EU's data protection requirements are adhered to even when processing data in the USA."

Changes to this privacy policy

We may update this privacy policy from time to time. The most current version will always be published on our website.

Contact

If you have any questions or concerns regarding this privacy policy, please contact us at: office@cybx.rs.

Date of last update: 08.07.2024