Privacy policy

General information about the processing of your data

We are legally obliged to inform you about the processing of your personal data (hereinafter referred to as “data”) when you use our website. We take the protection of your personal data very seriously. This data protection notice informs you about the details of the processing of your data and your legal rights in this regard. For terms such as “personal data” or “processing”, the legal definitions from Art. 4 GDPR are authoritative. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the corresponding case law. We recommend that you read the privacy policy from time to time and take a printout or copy for your records.

Scope of application

The privacy policy applies to all pages of https://geniussteps.de. It does not extend to any linked websites or internet presences of other providers.

Responsible provider

Responsible for the processing of personal data within the scope of this privacy policy is

bs future solutions GmbH
Hilgestraße 24
55294 Bodenheim
Phone: +49 6135 70 41 59 60
E-mail: atik@geniussteps.de

Questions about data protection

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

Mustafa Atik
bs future solutions GmbH
Hilgestraße 24
55294 Bodenheim
Phone: +49 6135 70 41 59 60
E-mail: atik@geniussteps.de

Security

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external interference. To this end, we regularly review our safety measures and adapt them to the state of the art.

Your rights

You have the following rights with regard to the personal data concerning you, which you can assert against us:

  • Right to information: You can request information in accordance with Art. 15 GDPR about your personal data that we process.
  • Right to rectification: If the information concerning you is not (or no longer) accurate, you can request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
  • Right to erasure: You can request the erasure of your personal data in accordance with Art. 17 GDPR.
  • Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to request the restriction of your personal data.
  • Right to object to processing: You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6 (1) GDPR. 1 p. 1 lit. e) or lit. f) GDPR is carried out in accordance with Art. 21 para. 1 GDPR to file an objection. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, including where the processing serves the establishment, exercise or defense of legal claims (Art. 21 (1) GDPR). In addition, according to Art. 21 para. 2 GDPR, you have the right to object at any time to the processing of personal data concerning you for the purpose of direct marketing; this also applies to any profiling insofar as it is associated with such direct marketing. We draw your attention to the right to object in this privacy policy in connection with the respective processing.
  • Right to withdraw your consent: If you have given your consent for processing, you have the right to withdraw your consent in accordance with Art. 7 para. 3 GDPR to a right of revocation.
  • Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format (“data portability”) and the right to transmit those data to another controller where the requirements of Art. 20 (1) GDPR are met. 1 lit. a, b GDPR are present (Art. 20 GDPR).

You can assert your rights by sending a message to the contact details given in the “Responsible provider” section or to the data protection officer appointed by us.
If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 GDPR.

Use of our website

You have the following rights with regard to the personal data concerning you, which you can assert against us:

  • Browser type/browser version,
  • operating system used,
  • Language and version of the browser software,
  • Date and time of access,
  • Host name of the accessing end device,
  • IP address,
  • Content of the request (specific website),
  • Access status/HTTP status code,
  • Websites that are accessed via the website,
  • Referrer URL (the previously visited website),
  • Message whether the call was successful and
  • the amount of data transferred.

The temporary processing of this data is necessary to technically enable the course of a website visit and delivery of the website to your end device. The access data is not used to identify individual users and is not merged with other data sources. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. The storage of access data in log files, in particular the IP address, for a longer period of time enables us to recognize and prevent misuse. This includes, for example, the defense against requests that overload the service or any bot usage. The access data is deleted as soon as it is no longer required for the purpose for which it was processed. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website. The log data is always stored directly and only accessible to administrators and is deleted after seven days at the latest. After that, they are only available indirectly via the reconstruction of backup tapes (backups) and are permanently deleted after a maximum of four weeks.
You can object to the processing. You have the right to object on grounds relating to your particular situation. You can send us your objection using the contact details provided in the “Responsible provider” section.

Cookies

In addition to the aforementioned access data, cookies are stored in the Internet browser of the device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute any programs. They serve to make our website more user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis/evaluation of website use).

Technically necessary cookies
Some elements of our website require that the accessing browser can be identified even after a page change. The following data is processed in the cookies:
  • Language settings,
  • Item in shopping cart,
  • Log-in information.
  • Information that you leave us when using project requests (project request button)
  • Information that you leave us via the chat system (Live Helper Chat).
The user data collected by technically necessary cookies is not processed to create user profiles. We also use so-called “session cookies”, which store a session ID that can be used to assign various requests from your browser to the shared session. “Session cookies” are necessary for the use of the website. In particular, this allows us to recognize the device you are using when you return to the website. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests in the processing are to provide the aforementioned special functionalities and thereby make the use of the website more attractive and effective. The “session cookies” are deleted when you close the browser, depending on which browser you are using and which browser settings you have made.
Contacting our company
If you contact our company, e.g. by e-mail or via the contact form on the website, the personal data you provide will be processed by us in order to respond to your inquiry. In order to process inquiries via the contact form on the website, it is necessary to provide a name or pseudonym, your company and a valid e-mail address. At the time the message is sent to us, your IP address and the date and time of contact are also processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR or Art. 6 para. 1 p. 1 lit. b) GDPR, if the contact is aimed at the conclusion of a contract. If the request is aimed at concluding a contract, the information you provide is necessary and mandatory for the conclusion of a contract. If the data is not provided, it is not possible to conclude or execute a contract in the form of making contact or processing the request. The processing of personal data from the input mask serves solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. No data will be passed on to third parties in this context. We delete the data arising in this context after the processing is no longer necessary – usually two years after the end of the communication – or, if necessary, restrict the processing to compliance with the existing mandatory statutory retention obligations.
You can object to the processing. You have the right to object on grounds relating to your particular situation. You can send us your objection using the contact details provided in the “Responsible provider” section.
Processing for contractual purposes
We process your personal data if and insofar as this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this arises from Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute a contract. After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted, unless we are authorized to further processing on the basis of a consent given by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. authorization to send direct mail) or on the basis of legitimate interests (e.g. storage for the enforcement of claims).
Your personal data will be passed on to third parties if
  • it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. when passing on data to a payment service provider/shipping company to process a contract with you), (Art. 6 para. 1 sentence 1 lit. b) GDPR), or
  • a subcontractor or vicarious agent whom we use exclusively in the context of providing the offers or services requested by you requires this data (unless you are expressly informed otherwise, such auxiliary persons are only authorized to process the data to the extent necessary for the provision of the offer or service), or
  • there is an enforceable official order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
  • there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
  • we are obliged to do so by law (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
  • processing is necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1 sentence 1 lit. d) GDPR), or
  • it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e) GDPR), or
  • we can rely on our overriding legitimate interests or those of a third party for disclosure (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Your personal data will not be passed on to other persons, companies or bodies unless you have effectively consented to such a transfer. The legal basis for processing is then Art. 6 para. 1 p. 1 lit. a) GDPR. As part of this data protection information, we draw your attention to the respective recipients in relation to the respective processing operation.
E-mail marketing
Existing customer acquisition
We reserve the right to use the e-mail address provided by you in the context of the order in accordance with the statutory provisions in order to send you the following content by e-mail during or following the order, unless you have already objected to this processing of your e-mail address:
  • Information on our business areas and research projects in the fields of software development and data analysis,
  • Interesting offers from our portfolio, in particular data analysis and software development,
  • New service offers for our products and services and
  • Customer feedback requests.
If the sending of electronic information is necessary for the execution of the contract (e.g. e-mail in an informative form), the processing is based on the legal basis of Art. 6 para. 1 p. 1 lit. b) GDPR. In this case, you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to send you electronic information by e-mail as part of the execution of the contract. If the sending of electronic information is not necessary for the execution of the contract (e.g. e-mail in an informational form), the processing is based on the legal basis pursuant to Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests in the aforementioned processing lie in increasing and optimizing our services, sending direct advertising and ensuring customer satisfaction. We delete your data when you end your usage process, but no later than three years after termination of the contract.
We would like to point out that you can object to the receipt of direct advertising and processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). To do this, click on the unsubscribe link in the respective e-mail or send us your objection to the contact details given in the section “Responsible provider”.
Integration of third-party content
Third-party content such as videos, maps or graphics from other websites are integrated into the website. This integration always presupposes that the providers of this content (“third-party providers”) are aware of the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is therefore required to display this content. We will inform you below about the services of external providers currently used on our website as well as about the respective processing in individual cases and about your existing options to object.
Matomo
We use the web analysis service Matomo, an open source software for the statistical analysis of the use of our website. This enables us to guarantee you a user-friendly and optimized use of the website. Matomo is operated on HighPots’ own servers. With the help of a locally integrated Matomo script on our website, we process information about the use of our website by your end device – e.g. that you have accessed a certain web page – and process, among other things, the data mentioned in the “Access data” section, in particular your IP address, browser information, the previously visited website and the date and time of the server request for the purpose of statistical analysis of website use. The provider of Matomo is Innocraft Ltd, 150 Willis Street, 6011 Wellington, New Zealand, contact@innocraft.com”. Your IP address transmitted by your end device is only processed in abbreviated form. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interests lie in the statistical analysis of website usage and the optimization and improvement of our website. Our legitimate interests in processing lie in the statistical analysis of website usage, reach measurement and the optimization and improvement of our website. The maximum storage period is set at 13 months. Further information on data protection at Matomo can be found at https://matomo.org/privacy-policy/.
You can object to the processing. You have the right to object on grounds relating to your particular situation. You can object to the processing in various ways: by clicking on the opt-out button at the following link: https://matomo.org/privacy-policy/ (“Opt-Out of website tracking”) or by opening the browser you are using in “private mode”.
Elementor
Elementor is a software program used to create the layout of this website, which is operated on Highpots’ own servers.
(Elementor Ltd., based in Israel, https://elementor.com/about/privacy/). Cookies are used to store the number of page views and active sessions of the user. The data collected is not used for analysis purposes, but only to ensure that, for example, elements that have been hidden during several active sessions are not displayed again.
Real Cookie Banner
Real Cookie Banner asks website visitors for their consent to the setting of cookies and the processing of personal data. For this purpose, each website visitor is assigned a UUID (pseudonymous identification of the user), which is valid until the cookie for storing consent expires. Cookies are used to test whether cookies can be set, to store reference to the documented consent, to store which services from which service groups the visitor has consented to and, if consent is obtained in accordance with the Transparency & Consent Framework (TCF), to store the consents in TCF partners, purposes, special purposes, functions and special functions. The consent obtained is fully documented as part of the duty of disclosure under the GDPR. In addition to the services and service groups to which the visitor has consented, and if consent is obtained according to the TCF standard, to which TCF partners, purposes and functions the visitor has consented, this includes all settings of the cookie banner at the time of consent as well as the technical circumstances (e.g. size of the viewing area at the time of consent) and the user interactions (e.g. clicks on buttons) that led to consent. Consent is collected once per language.
Stock material
Images provided by: Adobe Stock, Adobe Systems Software Ireland Limited.
We would like to thank all the photographers and artists.
WordPress Cookie Plugin by Real Cookie Banner