Introduction
With the following privacy policy, Digital Water Solutions UG (hereinafter also referred to as “Blue Activity” for short) would like to inform you about the types of your personal data (hereinafter also referred to as “data” for short) that Blue Activity processes, for what purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites.
Table of contents
Introduction, controller, overview of processing operations, relevant legal bases, technical and organizational measures, transfer of personal data, data processing in third countries, rights of data subjects, definitions of terms
Controller within the meaning of the GDPR
Details of the data controller under data protection law:
BlueActivity GmbH
Management: Lars Havighorst
Rudolf-Diesel-Str. 11
69115 Heidelberg
Types of data processed
Inventory data (e.g. names, addresses)
Content data (e.g. text entries, photographs, videos)
Contact data (e.g. e-mail, telephone numbers)
Meta/communication data (e.g. device information, IP addresses)
Usage data (e.g. websites visited, interest in content, access times)
Contract data (e.g. subject matter of the contract, term, customer category)
Categories of data subjects
Business and contractual partners
Interested parties
Communication partners
Users (e.g. website visitors, users of online services)
Purposes of the processing
Visitor action evaluation
Office and organizational procedures
Interest-based and behavioral marketing
Contact requests and communication
Conversion measurement (measurement of the effectiveness of marketing measures)
Use of cookies
Contractual performance and service.
Managing and responding to inquiries.
Relevant legal bases
We process personal data in accordance with the following legal bases of the GDPR
Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)
The data subject has given their express consent to the processing of their personal data for one or more specific purposes.
Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR)
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Technical and organizational measures
Blue Activity shall take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in accordance with legal requirements.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, safeguarding availability and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
Transfer and disclosure of personal data
As part of our processing of personal data, data may be transferred to other bodies, other companies, legally independent organizational units or persons. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.
Use of cookies
Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after their visit to an online service. The information stored may include, for example, the language settings on a website or the location where a video was watched. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also known as “user IDs”).
A distinction is made between the following cookie types and functions:
Temporary cookies (also: session cookies):
Temporary cookies are deleted at the latest after a user has left an online offer and closes their browser.
Third-party cookies (also: third-party cookies):
Third-party cookies are mainly used by advertisers (so-called third parties), to process user information.
Necessary (also: essential or absolutely necessary) cookies:
Cookies can be absolutely necessary for the operation of a website on the one hand (e.g. to save logins or other user input or for security reasons).
Use of Google Analytics:
This website uses Google Analytics, a web analysis service of Google Inc (hereinafter: Google). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
Use of Google Maps:
This website uses Google Maps API to display geographical information visually. When Google Maps is used, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google privacy policy. You can also change your personal data protection settings there in the data protection center.
Detailed instructions on managing your own data in connection with Google products can be found here.
Commercial and business services
We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as “contractual partners”) in the context of contractual and comparable legal relationships and associated measures and in the context of communication with the contractual partners (or pre-contractual), e.g. to answer inquiries.
We process this data to fulfil our contractual obligations, to safeguard our rights and for administrative tasks and business organization. We only pass on the data of the contractual partners to third parties within the framework of the applicable law insofar as this is necessary for the aforementioned purposes or with the consent of the contractual partners (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about other forms of processing, e.g. for marketing purposes, as part of this privacy policy.
We delete the data after the expiry of statutory warranty and comparable obligations, i.e. as long as it must be retained for legal archiving reasons (e.g. for tax purposes, generally 10 years). We delete data disclosed to us by the contractual partner as part of an order in accordance with the specifications of the order, generally after the end of the order.
Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.
Processed data types: inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. email, telephone numbers), contract data (e.g. subject matter of the contract, term, customer category).
Affected persons: Interested parties, business and contractual partners.
Purposes of Processing: Contractual services and support, contact requests and communication, Office and organizational procedures, Managing and responding to inquiries.
Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), Legal obligation (Art. 6 para. 1 sentence 1 lit. c. GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Making contact
When contacting us (e.g. by contact form, email, telephone or via social media), the information of the inquiring persons is processed insofar as this is necessary to answer the contact inquiries and any requested measures.
Contact inquiries are answered in the context of contractual or pre-contractual relationships in order to fulfil our contractual obligations or to respond to (pre)contractual inquiries and otherwise on the basis of legitimate interests in responding to the inquiries.
Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos).
Affected persons: Communication partner.
Purposes of processing: Contact requests and communication.
Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as the consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data no longer applies or it is not required for the purpose).
If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person.
Further information on the deletion of personal data can also be found in the individual data protection notices of this privacy policy.
Changes and updates to the privacy policy
We ask you to inform yourself regularly about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
If we provide addresses and contact information of companies and organizations in this privacy policy, please note that the addresses may change over time and ask you to check them.
Rights of the data subjects
Under the GDPR, you are entitled to various rights as a data subject, which arise in particular from Art. 15 to 18 and 21 GDPR:
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.
Right to withdraw consent: You have the right to withdraw any consent you have given at any time.
Right of access: You have the right to request confirmation as to whether your data is being processed and to request information about this data in accordance with the legal requirements.
Right to rectification: In accordance with the legal requirements, you have the right to have your personal data completed or rectified if your personal data is incorrect.
Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to demand that the data concerning you be deleted immediately, or alternatively to demand a restriction of the processing of the data according to the legal requirements.
Right to data portability: You have the right to receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with the legal requirements or to request its transmission to another controller.
Complaint to a supervisory authority: You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
