3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.
When you use this website, various personal data will be collected. Personal data includes all data that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmission on the Internet (e.g., communication via email) can have security vulnerabilities. Complete protection of data from access by third parties is not possible.
Information on the Responsible Party
The party responsible for data processing on this website is:
Entropy GmbH
Doreen Wernicke
Gmunder Str. 37a
81379 Munich, Germany
Phone: +49 89 7244 952 – 0
Email: info@entropy-gmbh.de
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Retention Period
Unless a specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate deletion request or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods). In the latter case, the data will be deleted after these reasons no longer apply.
Legal Basis for Data Processing
We process your personal data based on the following legal grounds:
- Consent: If you have provided your consent (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special categories of data).
- Contract Fulfillment: If the data is necessary for the fulfillment of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
- Legal Obligations: To fulfill legal obligations (Art. 6(1)(c) GDPR).
- Legitimate Interest: For purposes such as improving our website or ensuring its security (Art. 6(1)(f) GDPR).
Specific details about the applicable legal basis are provided in the relevant sections of this privacy policy.
Data Transfers to Third Countries
We may use tools from companies based in countries that do not provide adequate data protection standards. This includes U.S. companies that are not certified under the EU-US Data Privacy Framework (DPF). When using such tools, personal data may be transferred to these countries and processed there.
We emphasize that adequate protection comparable to EU standards may not always be guaranteed in such countries. In the case of U.S. companies certified under the DPF, data transfers are permissible. Further details on data transfers to third countries, including recipients, are provided in this privacy policy.
Recipients of Personal Data
In the course of our business activities, we collaborate with external parties. Personal data is transferred to these external parties only if:
- It is necessary for contract fulfillment.
- We are legally obliged to do so (e.g., sharing data with tax authorities).
- We have a legitimate interest (Art. 6(1)(f) GDPR).
- Other legal grounds permit the data transfer.
When using processors, we ensure compliance with the GDPR through data processing agreements. For joint processing, appropriate agreements are also concluded.
Withdrawal of Consent
Many data processing activities are only possible with your explicit consent. You can revoke your consent at any time. The legality of data processing up until the withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)
You have the right to object to the processing of your personal data at any time for reasons arising from your specific situation if the processing is based on Art. 6(1)(e) or (f) GDPR. This includes profiling based on these provisions.
If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
If your data is processed for direct advertising purposes, you have the right to object to this at any time. If you object, your personal data will no longer be used for such purposes.
Right to Lodge Complaints with Supervisory Authorities
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, workplace, or where the alleged violation occurred.
Data Portability
You have the right to receive data that we process based on your consent or in the fulfillment of a contract in a commonly used, machine-readable format. If you request direct transfer to another controller, this will only be done where technically feasible.
Access, Rectification, and Deletion
Within the framework of legal provisions, you have the right to free information about your stored personal data, its origin, recipients, and purpose. You may also have the right to correct or delete this data.
Restriction of Processing
You have the right to request restriction of the processing of your personal data in the following cases:
- You dispute the accuracy of the data.
- Processing is unlawful, but you oppose deletion.
- We no longer need the data, but you require it for legal claims.
- You have objected under Art. 21(1) GDPR, pending verification of whose interests prevail.
If processing is restricted, the data may only be processed with your consent or for legal claims, protecting another person’s rights, or for important public interest reasons.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from „http://“ to „https://“ and a lock icon appearing.
Objection to Advertising Emails
The use of contact data published under the legal notice obligation for sending unsolicited advertising and informational material is hereby prohibited. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional materials, such as spam emails.