Privacy Policy for tabiola

I. General Information

1. Important Terms

This Privacy Policy uses various terms defined according to the General Data Protection Regulation (GDPR). "Personal data" refers to information about an identified or identifiable natural person. "Processing" includes any operation related to personal data, such as collection, storage, modification, or deletion. The "Controller" is the person or entity that decides on the purposes and means of processing personal data. Other important terms used in this Privacy Policy include "Processor," "Consent," and "Data Subject."

2. Scope

This Privacy Policy applies to all personal data processed by us as the Controller. It covers data that we collect and process from both our customers and users of our website and our services, including our Chrome extension "tabiola." The Privacy Policy informs you about the nature, extent, and purposes of the collection and processing of personal data by our company and your rights as a data subject. It applies regardless of whether you use our services via a website, a browser extension, in social networks, or as part of other services and features that we offer.

3. Controller

The Controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Dariyousch Käther
c/o COCENTER
Koppoldstraße 1
86551 Aichach, Germany
privacy@tabiola.org

For more information about our company, the legal basis of our data processing, and our partners, you can refer to our legal notice, which is available on our website.

4. Data Protection Officer

Currently, no data protection officer is appointed. For questions regarding data protection, please contact our Controller.

5. Updates to the Privacy Policy

We reserve the right to revise or update this Privacy Policy from time to time to reflect changes in our data processing practices or changes in legal requirements. The current version of the Privacy Policy will be published on our website. We recommend that you regularly review it to stay up to date. Significant changes that affect your rights and freedoms regarding the processing of your personal data will additionally be communicated to you via email or other communication channels, provided you have given us the relevant contact details.

II. Detailed Data Processing

1. General Information on Data Processing

We take the protection of your personal data very seriously. Your personal data is treated confidentially and processed in accordance with the legal data protection regulations and this Privacy Policy. The use of our website and our Chrome extension is generally possible without providing personal data. As far as personal data (such as name, email addresses, or usage data) is collected, this is done, as far as possible, on a voluntary basis. These data will not be passed on to third parties without your explicit consent.

2. Data Transfer to Third Countries

As part of our digital services, we use cloud infrastructures and Content Delivery Networks (CDNs) that are partly operated outside the European Economic Area (EEA). In particular, we use services from Amazon AWS and Hetzner with server locations in the EU, mainly in Frankfurt am Main. However, for the provision of our services via CDNs, international edge locations may also be used. This is necessary to ensure high availability and performance of our software. We take appropriate protective measures to ensure an adequate level of data protection and comply with the legal provisions for international data transfer. The transfer is carried out observing the required security standards and in compliance with contractual arrangements that ensure the protection of your personal data, such as Standard Contractual Clauses approved by the European Commission. For more information on the protective measures we use when transferring your data to third countries, you can refer to our Privacy Policy or inquire directly with us.

3. Data Collection When Visiting Our Website

When you visit our website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request comes, browser, operating system and its interface, as well as the language and version of the browser software.

4. Data Collection Upon Contact

When you contact us via email, telephone, or a contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions. This data is not passed on without your consent. The processing of this data is based on your consent or, if it relates to contractual or pre-contractual measures, to fulfill our contractual obligations. The data processing is carried out here according to Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest.

5. Data Collection When Using the Chrome Extension "tabiola"

When using our Chrome extension "tabiola," personal data may be processed to enable you to use its full functionality. This includes data necessary for creating and managing your user account, such as your name, email address, and possibly payment information if applicable. Additionally, usage data is collected, which is necessary for providing and improving the functionality of the extension. This may include data about your browser tabs, session information, and interaction with the extension. The processing of this data is carried out to fulfill the contract between you and us or for the execution of pre-contractual measures.

6. Data Collection When Integrating with Google Drive

Our Chrome extension "tabiola" offers an integration with Google Drive, allowing you to save your data within your own Google Drive account. In order to provide this functionality, we may process certain personal data, such as your Google account information and authentication tokens required to access your Google Drive. This data is used solely to facilitate the integration and is not shared with third parties. The processing is based on your consent and is necessary for the performance of the service.

7. Data Collection When Using Our Hosted Sync and Backup Service

Alternatively, you may choose to use our hosted sync and backup service to store your data without relying on Google Drive. In this case, we process personal data such as your name, email address, and the data you choose to sync or backup. This data is stored on our secure servers and is used solely for the purpose of providing the sync and backup functionality. The processing of this data is based on your consent and is necessary for the performance of the service.

For creating a user account on our platform, we collect personal information such as your name, email address, and a password of your choice. These data are necessary to grant you access to your account and our services and to enable secure and personalized use. The processing of these data is based on your consent or, if the user account is necessary for the fulfillment of a contract or for carrying out pre-contractual measures, on this legal basis.

We may use your data to inform you about our products, services, and offers. This includes sending newsletters, promotional emails, or postal advertising, provided you have consented to this type of use of your data. You can revoke your consent at any time. The processing for marketing purposes is based on your consent or, as far as legally permitted, within the scope of our legitimate interest in direct marketing.

If you participate in one of our surveys, we use your data for evaluation and improvement of our services and offers. Participation in such surveys is voluntary, and your data will be processed anonymously unless otherwise stated. The data processing is based on your consent or our legitimate interest in improving our services and offers.

If you participate in one of our contests or promotions, we process your data for the purpose of conducting the contest, particularly for determining winners and awarding prizes. Your data may also be used for marketing purposes if you have consented to this. The terms and conditions and privacy notices of the respective contest or promotion contain detailed information about the processing of your data. The processing is based on your consent or for conducting the contest.

If you, as a data subject, make requests regarding your personal data, e.g., for access, correction, deletion, or restriction of processing, we will process your requests in accordance with the legal provisions. Your requests are carefully examined by us and processed in accordance with the legal requirements. For processing these requests, your contact details and the data related to the request are processed in order to clarify and respond to your concern.

13. Tracking & User Analysis

We use tracking technologies on our website and within our Chrome extension to analyze the usage behavior of our users and to optimize our services accordingly. This processing is either based on your consent or on our legitimate interest in improving the functionality and user-friendliness of our services as well as the effectiveness of our online marketing measures. You have the right to object to such processing. Detailed information about the tracking technologies used, their functioning, and your options to object can be found in our Cookie Policy.

14. Tools and Miscellaneous

On our website and in our Chrome extension, we use various tools from third-party providers to offer additional features and make our services more efficient. These tools may process personal data, such as IP addresses or usage data. The processing of such data is either based on your consent or our legitimate interest in optimizing and securing our services. Detailed information about each tool, the processed data, and your rights and options for settings can also be found in our Cookie Policy and in the section on third-party tools in this Privacy Policy.

Data Retention Period

The duration for which we store your personal data depends on the respective purpose for which the data is processed, as well as any applicable legal retention periods. In general, we retain personal data only as long as it is necessary for the fulfillment of the purpose for which it was collected, or as prescribed by legal regulations. For example, data collected in the context of contractual relationships is typically stored until the end of the contractual relationship and thereafter in accordance with legal retention periods. Data collected for other purposes, such as data from contact inquiries or newsletter subscriptions, is deleted as soon as it is no longer needed and there are no legal retention obligations. If specific information on the retention period for certain types of data is required, these will be explained separately in the respective sections of this Privacy Policy.

III. Rights of Data Subjects

1. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

2. Right of Access

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have the right to access this personal data and other information as listed in Art. 15 GDPR.

3. Right to Rectification

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

4. Right to Erasure ("Right to be Forgotten")

You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g., if the data is no longer necessary for the pursued purposes. This does not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

5. Right to Restriction of Processing

You have the right to obtain the restriction of processing of your personal data if one of the conditions listed in Art. 18 GDPR applies, e.g., if you contest the accuracy of the personal data or have objected to the processing. In this case, we may only process the data, apart from storing it, with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, as long as the processing is based on consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and the processing is carried out by automated means.

7. Right to Withdraw Consent

You have the right to withdraw consent to the processing of personal data at any time. This applies to consent for the processing of specific data or for specific processing operations. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon receipt of the withdrawal, we will stop the corresponding data processing unless there is another legal basis for further processing.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. You can exercise this right particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The complaint with the supervisory authority is without prejudice to other administrative or judicial remedies.

Cookies and Similar Technologies

Our website and Chrome extension use cookies and similar technologies to enhance your user experience, make the website more efficient, and tailor our services. Cookies are small text files that are stored on your device when you visit our website or use our extension. They help us understand how our services are used, enable a personalized user experience, and can contribute to making your interaction with our services faster and more secure.

We use both session cookies, which are deleted after you close your browser, and persistent cookies, which remain on your device for a longer period. Our website and extension may also use similar technologies such as Local Storage or IndexedDB to store and retrieve information in your browser or device.

You have the option to manage your cookie settings in your browser. You can disable or delete cookies completely or partially. However, please note that disabling cookies may impair the functionality of our services and restrict your access to certain features.

A detailed list of the cookies we use and the purpose of their use is listed separately. For more information about managing your cookie settings and protecting your privacy, please visit the help page of your browser or contact us directly.

Cookie Details

To edit your current preference settings, please click the following button:

Third-Party Tools

On our website and within our Chrome extension, we use various tools and services from third parties to provide additional features and enhance the user experience. These may include, but are not limited to, analytics tools, cloud services, or backup services. When using these tools, personal data such as IP addresses or usage data may be processed and transferred to the servers of the third parties, which may also be located outside the EU. We carefully select our third-party providers and ensure that an adequate level of data protection is maintained. The use of these tools is based on your consent or our legitimate interest in making our services functional and informative. For detailed information about the third-party tools used, the type of data processed, and your rights and settings options, please refer to the specific sections of our Privacy Policy and our Cookie Policy.

Use of Analytics Tools

We may use analytics tools such as Google Analytics to understand user behavior on our website and within our Chrome extension and improve our services accordingly. These tools collect information such as the number of visitors, the pages they visit, and other relevant statistics. The information generated by the cookie about your use of our services is usually transmitted to and stored on a server in the USA or other countries. We use these tools with IP anonymization where possible, so your IP address is truncated and cannot be directly linked to you. You can prevent the collection of your data by adjusting your browser settings or by using opt-out mechanisms provided by these tools.

Targeting and Audience Optimization Tools

To make our advertising and marketing efforts more effective, we use targeting and audience optimization tools on our website and within our Chrome extension. These tools enable us to tailor advertisements and content more precisely to the interests of our users and personalize the user experience. They collect information about your interactions with our services, your preferences, and may use cookies or similar technologies. We ensure that these tools are used in compliance with data protection laws and offer you the option to withdraw your consent at any time or adjust your preferences. Information on how to withdraw your consent or change your preferences can be found in our Privacy Policy and in the settings of your user account.

To edit your current preference settings, please click the following button:

Please note that this Privacy Policy may be subject to further adjustments. For any questions or concerns, feel free to contact us at privacy@tabiola.org.