Principles of data processing at ip.labs GmbH

You have come to this page via a link because you want to find out about our handling of (your) personal data. In order to fulfill our information obligations according to Art. 12 et seq. of the General Data Protection Regulation (GDPR), we are happy to provide you with our information on data protection below:

Who is responsible for data processing?

The responsible party in terms of data protection law is the

ip.labs GmbH
Schwertberger Str. 14–16
53177 Bonn

You will find further information about our company, details of the persons authorized to represent it and also further contact options in the imprint of our website:

Which of your data do we process? And for what purposes?

If we have received data from you, we will generally only process it for the purposes for which we received or collected it.

Data processing for other purposes can only be considered if the legal requirements pursuant to Art. 6 (4) of the GDPR are met. We will, of course, comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR in this case.

What is the legal basis for this?

The legal basis for the processing of personal data is in principle - unless there are still specific legal provisions - Art. 6 GDPR. The following possibilities in particular come into consideration here:

  • Consent (Art. 6 para. 1 lit. a) GDPR)
  • Data processing for the performance of a contract (Art. 6 para. 1 lit. b) GDPR
  • Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
  • Data processing for the compliance of a legal obligation (Art. 6 para. 1 lit. c) GDPR)

If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time with effect for the future.

If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing of personal data, taking into account the requirements of Art. 21 GDPR.

How long will the data be stored?

We process the data as long as this is necessary for the respective purpose.

Insofar as statutory retention obligations exist - e.g. under commercial law or tax law - the personal data concerned will be stored for the duration of the retention obligation. After expiry of the retention obligation, it is checked whether there is a further need for processing. If there is no longer a need, the data will be deleted.

As a matter of principle, we carry out an examination of data towards the end of a calendar year with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific types of data or purposes of processing.

Of course, you can at any time (see below) request information about the data we have stored about you and, if it is not necessary, request deletion of the data or restriction of processing.

To which recipients is the data passed on?

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, the transfer is permissible on the basis of a balancing of interests in the sense of Art. 6 Para. 1 lit. f) GDPR, we are legally obligated to the transfer or you have given your consent in this respect.

Where is the data processed?

Your personal data is processed by us in data centers in the European Union. In addition, your personal data is also processed in our CRM system with data centers in the USA. As a suitable guarantee for the data transfer, we cite the use of EU standard data protection clauses.

Your rights as a "data subject

You have the right to obtain information about the personal data we process about you.

In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are entitled to this by law.

Furthermore, you have the right to object to processing within the framework of the legal requirements. The same applies to a right to data portability.

In particular, you have a right of objection pursuant to Art. 21 (1) and (2) GDPR against the processing of your data in connection with direct marketing, if this is carried out on the basis of a balancing of interests.

Our data protection officer

We have appointed a data protection officer in our company. You can reach them under the following contact options:

ip.labs GmbH
Data Protection Officer
Schwertberger Str. 14–16
53177 Bonn

Right of appeal

You have the right to complain about the processing of personal data by us to a data protection supervisory authority.

Status: 01.01.2022

This statement was written in German. If you are facing inconsistencies between the translated version of this statement compared to the German version, always the German version shall prevail.