1. Scope and Subject of the Privacy Policy

The subject of this data protection declaration is to provide information on whether and to what extent we collect personal data through our website, accessible at https://www.laboremus.de, and for what purpose it is processed. In doing so, we fulfill our obligations under Art. 13 and Art. 14 of the GDPR to inform you comprehensively and transparently about the collection of personal data on our website. This data protection declaration applies exclusively to the aforementioned website. To the extent that links are provided to other websites, we have neither influence nor control over the linked content and their data protection provisions. We recommend that you review the data protection declarations on these websites to determine whether and to what extent personal data is collected, processed, used and/or made accessible to third parties.

2. Definition and Terminology

This privacy policy is based on the terms and definitions used by the European legislator in the development of the General Data Protection Regulation (GDPR). Our privacy policy aims to be easily readable and understandable for the general public as well as our customers and business partners. In order to ensure this, we would like to explain the terminology used in this privacy policy.

In this privacy policy, we use the following terms, among others:

(a) Personal data

Any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

(b) Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

(c) Data processing

Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

(d) Third party

This is a natural or legal person, public authority, agency or other body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

(e) Controller or person responsible for the processing

Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Name and contact details of the controller:

Laboremus GmbH, Feodor-Lynen-Straße 35, 30625 Hannover, represented by Managing Director Li Wang

Email: info@laboremus.de

3. Categories of personal data processed on our website

(a) Personal data

IP address, cookie identifier

(b) Description

You can visit our website without providing any personal information. However, we collect usage data when you access our website and store it in a log file. This access data includes your IP address. In addition, the log file stores the name of the website accessed, the file accessed, the date and time of access, the amount of data transferred, a message about successful access, the browser type and version, the operating system, the so-called referrer URL (the previously visited page), and the requesting provider. It is not possible to draw conclusions about your person from this data.

In addition, so-called cookies are stored on your end device (laptop, tablet, smartphone, or PC) when you access our website. For details on the cookies used on the website, the specific purpose they serve, and how you can delete these cookies, please refer to the cookie and opt-out notices.

We collect log file data, including IP address, to ensure a smooth connection to the website and to enable users to use our website comfortably. The log file also serves to evaluate system security and stability as well as for administrative purposes. Cookies also allow us to make the use of our offerings and website more pleasant for visitors, by using cookies to determine, for example, whether you have already visited a particular page on our website. With the help of the cookie identifier, we also obtain information about user behaviour on our website or the search queries with which you reach our site and can tailor the offering to the user's interests during future visits.

(c) Purpose of data processing

(d) Legitimate interest

The log file data, including the IP address, is used solely for technical and design optimization of the website and to secure our systems (e.g., in the event of an attack on our IT or a security incident). From the log file data, including the IP address, it is not possible for us to establish a personal reference when accessing our website. This can only be the case if you log in to your customer account at the same time. In this case, we can directly assign the IP address to you. With the help of the cookie identifier, we can find out, for example, whether and to what extent you have already visited our website, whether you have already registered with a specific identifier, and when you returned to it. For details and information on how to delete cookies, please refer to the cookie and opt-out notices.

(e) Recipients of the data

Company:

Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA

Description:

Amazon Web Services, Inc. is responsible for hosting the website. The data is hosted in a highly secure data center located in the EU.

Privacy information:

https://aws.amazon.com/privacy/

(f) Duration of data storage

The log files, including the IP address contained therein, will be automatically deleted after 2 months. However, the IP address is anonymized beforehand and only stored for administrative (technical) purposes.

(g) Legal basis

Art. 6 para. 1 f) GDPR

(h) Required or necessary provision

The provision of personal data is neither legally nor contractually required. However, without the cookie identifier, the service and functionality of our website may be restricted.

4. Category of Opening customer account & shopping function

You have the option to create a customer account for our shop on our website. When you open a user account, we store the necessary data that you voluntarily provide. When you order from our online shop, we automatically create a user account based on your order data. We will send you your order data along with our terms and conditions via email. As a registered user, you can view your order data and past orders at any time in your user account. You have the option to request that we delete your user account at any time. We use the data you provide to fulfill and process your order.

(a) Personal data

Email address, first and last name, company, address, password

(b) Purpose of data processing

We use the data for billing purposes as well as to process and deliver your ordered products.

(c) Recipient of data

Your registration data will not be disclosed to third parties. The recipient of the data is ourselves.

(d) Duration of data storage

Until you request the deletion of your personal data. In all other cases, the duration of data storage is determined by the statutory retention periods (if billing and invoice data are affected: 10 years).

(e) Legal basis

Art. 6 para. 1 a, b) GDPR

(f) Special right of revocation

You have the right to revoke your consent to the processing of personal data at any time. The lawfulness of the processing based on consent until revocation shall not be affected.

(g) Required or necessary provision

The provision of personal data is neither legally nor contractually required. However, without providing the data, it is not possible to use our paid services.

5. Category of Contact Form

(a) Personal data

Email address, first and last name, date, time, comment (inquiry/request)

(b) Description and purpose of data

We use a contact form on our website to communicate with our customers and interested parties, and to respond to their inquiries and requests. The requests and information directed to us in this context are processed for the purpose of handling your inquiry and contacting you. At the same time, the data serves to assign your profile if you register as a customer with the same data. We also use your contact form data, including the inquiry itself, to create offers.

(c) Duration of data storage

We use the data until the respective conversation with you is concluded. The conversation is considered concluded when it can be inferred from the circumstances that the matter in question has been finally clarified. In addition, we store the communication for a maximum of until we are asked to delete it. You can revoke your consent to data processing at any time without affecting the lawfulness of the processing that occurred based on the consent prior to revocation.

(d) Legal basis

Art. 6 para. 1 a, b) GDPR

(e) Required or necessary provision

The provision of personal data is neither required nor mandatory by law or contract. However, without providing the necessary information, we cannot process your inquiry.

6. Category of Web Analytics

(a) Personal data

IP address, cookie identifier.

(b) Description

Tracking tools are used on the website, which use cookies and collect IP addresses among other data. Tracking tools typically examine where visitors come from, which areas of a website are visited, and how often and how long subpages and categories are viewed.

(c) Purpose of data processing

These tools help to investigate how and where visitors come to our site, which areas of a website are visited most frequently, and how often and how long subpages and categories are viewed. We can also determine which search terms and websites the user has entered, evaluate how many users visit our pages in total, and which information or offers are in greatest demand. The aim is to use the insights gained to make our offers and website more user-friendly.

(d) Legitimate interest

By statistically evaluating user profiles, we can make statements about the functioning and success of our websites, such as answering questions about how often information pages about certain product groups were accessed or how many visitors clicked on specific offers. With the help of tracking tools, we can more effectively target our offerings to our customers, visitors, and prospects. Details about the providers, how the tools work, and information on how to delete cookies and prevent tracking can be found in the cookie and opt-out notices.

(e) Recipients of data

The following providers of tracking or web analytics tools process access data on our behalf for the purpose of user analysis and statistical preparation. We have concluded the corresponding order processing contracts with the providers. Further details on the technical functioning of the tools and information on how to prevent data transmission (tracking) can be found in the cookie and opt-out notices.

7. Category of Social media recommendation buttons

Our website and apps provide you, under certain circumstances, with social plug-ins from various social media networks. If you want to interact with a social network like Facebook or Twitter (e.g., by registering an account), your activity on our website or through our apps will also be disclosed to the respective social network. If you are logged into one of these social networks during your visit to one of our websites or interact with one of the social plug-ins, the social network may add this information to your respective profile on that network depending on your privacy settings.

(a) Personal data

Your IP address, assignment of visit data on our website to your user account, should you be logged into a social media platform. The plugin provider stores the data collected about you as usage profiles and uses them for advertising, market research, and/or customizing its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the purpose of displaying customized advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, and to exercise this right, you must contact the respective plugin provider. Through the plugins, we offer you the opportunity to interact with social networks and other users so that we can improve our offerings and make them more interesting for you as a user (Art. 6 para. 1 f) GDPR).

If you are logged in with the plugin provider, your data collected by us will be directly associated with your existing account with the plugin provider. If you activate the button and link the page, for example, the plugin provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out after using a social network, especially before activating the button, as this way you can avoid an association with your profile with the plugin provider.

For more information on the purpose and scope of data collection and processing by the plugin provider, please refer to the privacy policies of these providers provided below. You will also find more information on your related rights and privacy settings.

(b) Purpose of data processing

The purpose of integrating this component is to enable our users to distribute the content of this website, make it known in the digital world, and increase our visitor numbers.

(c) Recipients of data

Details about the recipients of the data, how the tools work, and information on how to prevent data transfer (tracking) can be found under privacy opt-out.

Facebook

Company: Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA

Tool / Description: With the Facebook "Share" button, individuals can add a personalized message to links before sharing them on their Facebook timeline, in groups, or with friends via a Facebook message.

Third-country transfer: Yes

Privacy Shield Certification: The EU-US Privacy Shield is a data protection agreement between the European Union and the USA, which consists essentially of a set of assurances given by the USA to the EU. The agreement regulates the protection of personal data transferred from a member state of the European Union to the USA. The self-certification by the American companies regulated therein can be used as a basis under Art. 45 GDPR that the recipient organization offers an adequate level of protection.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

(d) Duration of data storage

We have neither influence on the data collected by the plugin providers and the data processing operations associated with it, nor do we have information about the full extent of data collection, the purposes of processing, and the storage periods. We also do not have information on the deletion.

(e) Legal basis

Art. 6 para. 1 f) GDPR

(f) Required or necessary provision

The provision of personal data is neither legally nor contractually required.