Data protection

1. General information and principles of data processing

Prime-Analytics GmbH (hereinafter also referred to as "we" or "Prime-Analytics") respects your privacy and takes the protection of your data seriously. We always strive to operate our website and the services offered therein in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). With this Privacy Policy, we aim to give you a clear understanding of how we use your personal data, what rights you have, and what options you have to exercise control over your data and protect your privacy. We recommend that you read this Privacy Policy carefully and thoroughly and check it regularly for updates when using our services and website.

2. Responsible body

The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is Prime Analytics Consulting GmbH, Huttropstr. 60, 45138 Essen, Germany.

3. Provision and use of the website/server logs

1. Type and scope of data processing: When you use this website without otherwise transmitting data to us (e.g., through registration or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:
   • IP address
   • Date and time of the request
   • Name and URL of the retrieved file
   • Website from which access is made (referrer URL)
   • Access status/HTTP status code
   • Browser type
   • Language and version of the browser software
   • Operating system
2. Purpose and legal basis: This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for this processing is Art. 6 (1) (f) GDPR. The processing of the aforementioned data is necessary for the provision of a website and therefore serves to safeguard a legitimate interest of our company.
3. Storage period: As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data to provide the website and the storage of data in log files is mandatory for the operation of the website. Therefore, there is no possibility of objection by the user regarding this aspect. Further storage may occur in individual cases if this is required by law.

4. Use of cookies

1. Type, scope, and purpose of data processing: We use cookies. Cookies are small files that are sent by us to the browser of your device during your visit to our website and stored there. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, some cookies can recognize the browser you use on your next visit to our website and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, cookies enable us to make our internet offering more user-friendly and effective for you, for example, by tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your device. They cannot run programs and do not contain viruses. Our website uses various types of cookies, the type and function of which are explained below.
   • Temporary cookies/session cookies:
     Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognize your device on subsequent website visits.
   • Persistent cookies:
     Our website uses so-called persistent cookies. Persistent cookies are cookies that are stored in your browser for an extended period of time and can transmit information. The respective storage period varies depending on the cookie. You can delete persistent cookies yourself via your browser settings.
   • Third-party cookies:
     We use analytical cookies to monitor anonymous user behavior on our website. We also use advertising cookies. These cookies allow us to track user behavior for advertising and targeted marketing purposes. Social media cookies enable us to connect to your social networks and share content from our website within your networks.
   • Configuring browser settings:
     Most web browsers are preset to automatically accept cookies. However, you can configure your browser to accept only certain cookies or even no cookies at all. Please note, however, that if you do, you may no longer be able to use all the features of our website. You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the appropriate configuration options. Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will need to disable it again.
2. Legal basis:
   Due to the purposes described, the legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR. If you have given us your consent to the use of cookies based on a notice we provided on the website ("cookie banner"), the legal basis is also Art. 6 (1) (a) GDPR.
3. Storage period:
   As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may occur in individual cases if required by law.

5. Data collection for the implementation of pre-contractual measures and for the performance of the contract

1. Type and scope of data processing:
   We collect personal data about you during the pre-contractual process and upon conclusion of the contract. This includes, for example, your first and last name, address, email address, telephone number, and bank details.
2. Purpose and legal basis of data processing:
   We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations. The legal basis for this is Art. 6 (1) (b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 (1) (a) GDPR.
3. Storage period:
   The data will be deleted as soon as it is no longer required for the purpose of its processing. Legal retention obligations may also apply, for example, commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention periods.

6. Data transfer

We will only share your personal information with third parties if:

1. You have given your express consent in accordance with Art. 6 (1) (a) GDPR.
2. this is legally permissible and, pursuant to Art. 6 (1) (b) GDPR, is necessary to fulfill a contractual relationship with you or to carry out pre-contractual measures.
3. According to Art. 6 (1) (c) GDPR, there is a legal obligation to disclose data. We are legally obliged to transmit data to government authorities, e.g., tax authorities, social security institutions, health insurance funds, supervisory authorities, and law enforcement agencies.
4. the transfer is necessary pursuant to Art. 6 (1) (f) GDPR to protect legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.
5. According to Art. 28 GDPR, we use external service providers (so-called data processors) for processing, who are obligated to handle your data with care. We use such service providers in the following areas:
   • IT
   • logistics
   • Telecommunications
   When transferring data to external entities in third countries, i.e., outside the EU or EEA, we ensure that these entities treat your personal data with the same level of care as within the EU or EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or if we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

7. Contact form

Type and scope of data processing:
On our website, we offer you the opportunity to contact us using a form provided. When submitting your request via the contact form, you will be referred to this privacy policy to obtain your consent. If you use the contact form, the following personal data will be processed:

• Salutation
• First name
• Last name
• Email address
• Subject
• Message

1. Purpose and legal basis of data processing:
   Providing your email address serves the purpose of sending you an email response to your inquiry. When using the contact form, your personal data will not be shared with third parties. The legal basis for processing is consent pursuant to Art. 6 (1) (a) GDPR, based on the declaration of consent you voluntarily provide below and which can be revoked at any time in the future.
2. Storage period:
   The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions - in particular, retention periods under the German Commercial Code (HGB) or the German Tax Code (AO) - remain unaffected.

8. Contact option via email

You can contact us via email on our website.

1. Type and scope of data processing:
   You can contact us by email at [email protected]. Our data collection is limited to the email address of the email account you used to contact us, as well as any personal data you provide during the contact process.
2. Purpose and legal basis:
   The purpose of data processing is to be able to respond to your request appropriately. The legal basis for this is Art. 6 (1) (f) GDPR. There is a legitimate interest in processing the above-mentioned personal data in order to be able to process your request appropriately.
3. Storage period:
   The duration of storage of the above-mentioned data depends on the reason for your contact. Your personal data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer necessary. This may, for example, result from processing your request.

9. Tracking and analysis tools

We currently do not use any tracking or analysis tools.

10. Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological advances.

This includes, among other things, the use of recognized encryption methods (SSL or TLS). Data disclosed unencrypted, for example, if sent via unencrypted email, may be read by third parties. We have no control over this. It is the responsibility of the respective user to protect the data they provide against misuse by encryption or other means.

10. Changes to the privacy policy

We reserve the right to update this statement at any time as necessary.

11. Your rights

Here you will find your rights regarding your personal data. Details can be found in Articles 7, 15-22, and 77 GDPR. You can contact the responsible party (Section 2) regarding this matter.

a) Right to revoke your data protection consent according to Art. 7 Para. 3 S. 1 GDPR

You can revoke your consent to the processing of your personal data at any time with future effect. However, this does not affect the legality of the processing carried out up to the point of revocation.

b) Right to information according to Art. 15 GDPR

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to information about this personal data as well as further information, e.g., the purposes of processing, the categories of personal data processed, the recipients, and the planned storage period or the criteria for determining that period.

c) Right to rectification and completion according to Art. 16 GDPR

You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

d) Right to erasure (“right to be forgotten”) according to Art. 17 GDPR

You have the right to erasure if processing is no longer necessary. This is the case, for example, if your data is no longer required for the original purposes, you have revoked your consent under data protection law, or the data was processed unlawfully.

e) Right to restriction of processing pursuant to Art. 18 GDPR

You have the right to restrict processing, e.g., if you believe that the personal data is inaccurate.

f) Right to data portability according to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

g) Right of objection according to Art. 21 GDPR

You have the right to object at any time to the processing of certain personal data concerning you for reasons related to your particular situation. In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

h) Automated decision-making in individual cases, including profiling, in accordance with Art. 22 GDPR

You have the right not to be subjected to a decision based solely on automated processing - including profiling - except in the exceptions mentioned in Art. 22 GDPR. Decision-making based solely on automated processing - including profiling - will not take place.

i) Complaint to a data protection authority pursuant to Art. 77 GDPR

You can also lodge a complaint with a data protection supervisory authority at any time, for example, if you believe that the data processing is not in compliance with data protection regulations.