• You are here:
  • Privacy Policy

Privacy Policy

General

This English version is a translation provided for your convenience; in case of doubt, the German version is legally binding. As the operator of this website and as a company, we come into contact with your personal data. This means all data that says something about you and that can be used to identify you. In this privacy policy we would like to explain to you how, for what purpose and on what legal basis we process your data.

The party responsible for data processing on this website and in our company is:

Testboy GmbH

Beim Alten Flugplatz 3

49377 Vechta

Germany

Phone: +49 4441 8911264

Email: info@testboy.de

General information

SSL/TLS encryption

Whenever you enter your data on websites, place online orders or send emails via the internet, you must always expect that unauthorised third parties may access your data. There is no complete protection against such access. However, we do everything we can to protect your data as well as possible and to close security gaps as far as we are able.

An important protective mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognise the encryption by the padlock icon in front of the internet address entered in your browser and by the fact that our internet address begins with https:// and not with http://.

How long do we store your data?

At some points in this privacy policy we inform you how long we, or the companies that process your data on our behalf, store your data. If no such information is given, we store your data until the purpose of the data processing no longer applies, you object to the data processing or you withdraw your consent to the data processing.

In the event of an objection or withdrawal, however, we may continue to process your data if at least one of the following conditions is met:

  • We have compelling legitimate grounds for continuing the data processing that override your interests, rights and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot put forward any legitimate grounds).
  • The data processing is necessary for the establishment, exercise or defence of legal claims (does not apply if your objection is directed against direct marketing).
  • We are legally obliged to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer applies or apply.

Data protection officer

We have appointed a data protection officer for our company.

DataGAP GmbH

Michael Michalak

Bessemerstr. 51, 1st floor

12103 Berlin, Germany

Email address: datenschutz@datagap.de

Phone number: +49 30 577 10 513

Your rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE BASE THIS PROCESSING ON ART. 6 (1) SENTENCE 1 (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS IN ACCORDANCE WITH ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING CARRIED OUT ON THE BASIS OF THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU STATE GROUNDS FOR THE OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. NO GROUNDS ARE REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY ONLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

  • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.
  • THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING RELATED TO IT.

Further rights

Withdrawal of your consent to data processing

Many data processing operations are carried out on the basis of your consent. You give this consent, for example, by ticking a corresponding box in online forms before you send the form, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7 (3) GDPR). From the time of withdrawal, we may then no longer process your data. The only exception: we are legally obliged to retain the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to lodge a complaint with the competent supervisory authority

If you believe that we are in breach of the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You can contact a supervisory authority in the Member State of your habitual residence, your place of work or the place where the alleged infringement took place. The right to lodge a complaint exists alongside administrative or judicial remedies.

Right to data portability

Data that we process automatically on the basis of your consent or in performance of a contract must be handed over to you or a third party in a commonly used, machine-readable format if you so request. We can only transfer the data to another controller insofar as this is technically feasible.

Right of access, erasure and rectification

Under Art. 15 GDPR you have the right to obtain information free of charge about which of your personal data we have stored, where the data comes from, to whom we transmit the data and for what purpose it is stored. If the data is incorrect, you have the right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR you may demand that we erase the data.

Right to restriction of processing

In certain situations you can demand under Art. 18 GDPR that we restrict the processing of your data. The data may then – apart from being stored – only be processed as follows:

  • with your consent
  • for the establishment, exercise or defence of legal claims
  • to protect the rights of another natural or legal person
  • for reasons of important public interest of the European Union or of a Member State

The right to restriction of processing exists in the following situations:

  • You have contested the accuracy of your personal data stored by us and we need time to verify this. In this case the right exists for the duration of the verification.
  • The processing of your personal data is unlawful or was unlawful in the past. In this case the right exists as an alternative to erasure of the data.
  • We no longer need your personal data, but you need it for the exercise, defence or establishment of legal claims. In this case the right exists as an alternative to erasure of the data.
  • You have lodged an objection under Art. 21 (1) GDPR and your interests and ours now have to be weighed against each other. In this case the right exists as long as the outcome of this weighing has not yet been determined.

Hosting

External hosting

Our website is located on a server of the following internet service provider (host):

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen, Germany

Hetzner Online GmbH

Industriestr. 25

91710 Gunzenhausen, Germany

Has a data processing agreement been concluded with the host, or are standard contractual clauses (SCCs) used?

Yes

How do we process your data?

The host stores all the data of our website. This also includes all personal data that is collected automatically or through your input. In particular, this may be: your IP address, pages accessed, names, contact details and enquiries, as well as meta and communication data. When processing data, our host follows our instructions and only ever processes the data to the extent necessary to fulfil its performance obligations towards us.

On what legal basis do we process your data?

As we address potential customers via our website and maintain contacts with existing customers, the data processing by our host serves the initiation and performance of contracts and is therefore based on Art. 6 (1) (b) GDPR. In addition, it is our legitimate interest as a company to provide a professional website that meets the necessary requirements for security, speed and efficiency. In this respect, we also process your data on the basis of Art. 6 (1) (f) GDPR.

Data collection on this website

Use of cookies

Our website places cookies on your device. These are small text files that serve different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required in order to perform certain actions or functions on the site (functional cookies). Without cookies it would not be possible, for example, to use the benefits of a shopping basket in an online shop. Still other cookies are used to analyse user behaviour or to optimise advertising measures. If we use third-party services on our website, e.g. for processing payments, these companies may also leave cookies on your device when you access the website (so-called third-party cookies).

How do we process your data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they therefore disappear by themselves. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This may, for example, result in your user behaviour being analysed on a permanent basis. You can use the settings in your browser to influence how it handles cookies:

  • Do you want to be informed when cookies are set?
  • Do you want to exclude cookies in general or in certain cases?
  • Do you want cookies to be deleted automatically when you close the browser?

If you deactivate or do not allow cookies, the functionality of the website may be restricted.

If we use cookies from other companies or for analysis purposes, we inform you about this in this privacy policy. We also ask for your consent in this regard when you access our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that visitors can use our online services without technical problems and that all the desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 (1) (f) GDPR. We use all other cookies on the basis of Art. 6 (1) (a) GDPR, provided that you give us your consent. You can withdraw this consent at any time with effect for the future. If, when asked for your consent, you have consented to the placement of necessary and functional cookies, these cookies are also stored exclusively on the basis of your consent.

Your consent (cookie settings)

On your first visit, we ask you in a notice window whether we may use the Matomo visitor statistics. We store your choice in your browser’s local storage (entry “tbConsent” with your choice and the time) so that we do not have to ask you again on every page. This entry is technically necessary (Section 25 (2) No. 2 TDDDG). You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.

Server log files

Server log files record all requests and accesses to our website and log error messages. They also include personal data, in particular your IP address. However, this is anonymised by the provider after a short time, so that we cannot assign the data to you personally. The data is transmitted automatically by your browser to our provider.

How do we process your data?

Our provider stores the server log files in order to be able to trace activities on our website and to locate errors. The files contain the following data:

  • browser type and version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address (anonymised where applicable)

We do not merge this data with other data, but use it solely for statistical evaluation and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymised overview of the accesses to our website. The data processing is therefore lawful pursuant to Art. 6 (1) (f) GDPR.

Visitor statistics

With your consent, we evaluate how our website is used. We do not display advertising on our website.

Matomo (on our own server)

How do we process your data?

With your consent, we use the open-source software Matomo to evaluate how our website is used and to improve it on that basis. Matomo runs on our own server (stats.testboy.de) at Hetzner Online GmbH in Germany. The data is not passed on to third parties.

Matomo records in particular the pages viewed and files downloaded, the date and time of the visit, the page from which you came to us (referrer), browser, operating system, screen resolution and the approximate region. Your IP address is shortened before it is stored, so that we cannot assign it to you. Matomo sets cookies to recognise returning visits (“_pk_id”, stored for 13 months) and to group the page views of one visit (“_pk_ses”, 30 minutes).

Without your consent, Matomo is not loaded and no data is recorded.

On what legal basis do we process your data?

The processing is based exclusively on your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page. The Matomo cookies are deleted in the process.


Font Awesome (hosted locally)

We use icons from the Font Awesome icon library on our website. The library is provided by Fonticons Inc. We have installed the icons locally, so that no connection to the company's servers is established when you visit our website.

Further information about Font Awesome can be found at https://fontawesome.com/ and there specifically in the privacy policy: https://fontawesome.com/privacy.

Fonts (hosted locally)

We use the Roboto font to display texts. It is installed on our server, so no connection to Google or other providers is established when you visit our website.

Videos (YouTube)

How do we process your data?

On some pages we embed videos from our YouTube channel. To prevent data from being transmitted to YouTube as soon as the page is opened, we only load a video when you click “Load video”. Only then is a connection to the YouTube servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) established via the address youtube-nocookie.com. In particular, your IP address and the page visited are transmitted to YouTube. Google may also transfer data to the USA.

On what legal basis do we process your data?

By clicking “Load video”, you consent to the transmission (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Further information can be found in Google’s privacy policy: https://policies.google.com/privacy.

Contact by email and telephone

If you contact us by email or telephone, we process your details (e.g. name, contact details and the content of your enquiry) in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is related to a contract or is necessary for pre-contractual measures, otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

Service forms (calibration and repair)

How do we process your data?

Using the forms on the “Calibration” and “Repairs” pages, you can register instruments for calibration or repair. We process the details you enter: company, contact person, address, email address, telephone number, customer number, the details of your instruments (e.g. instrument name, serial number, fault description) and your comments. After you submit the form, our service team receives the details by email, and you receive a confirmation of receipt with your details at the email address provided. In addition, we store the request in our website’s database so that it is not lost if sending the email fails.

To protect against abusive mass requests, we store an irreversible check value (hash) of your IP address with each request and use it to limit the number of requests per hour. We do not store your IP address itself.

On what legal basis do we process your data?

The processing serves to carry out the calibration or repair order you have requested or pre-contractual measures (Art. 6 (1) (b) GDPR). The protection against abuse is based on our legitimate interest in operating the forms securely (Art. 6 (1) (f) GDPR).

How long do we store your data?

We store your details for as long as they are needed to process your order. Data that we have to retain due to commercial or tax regulations is deleted after the statutory periods have expired.

Newsletter

How do we process your data?

If you subscribe to our newsletter, we process your email address and – if provided – first name, last name and company in order to send you the newsletter. We use the double opt-in procedure: after registering, you receive an email with a confirmation link, and your registration only becomes effective once you confirm it. We store the time of registration and confirmation in order to be able to prove the registration.

Links in our newsletters lead via our website, so that we can evaluate which links are clicked. This shows us which topics are of interest to our readers.

On what legal basis do we process your data?

The newsletter is sent and evaluated on the basis of your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time, e.g. via the unsubscribe link in every newsletter. This withdraws your consent with effect for the future. After you unsubscribe, we delete your data unless we need it to prove an earlier consent.

Sending emails

To send the emails of this website (confirmations of receipt for the service forms and confirmation of the newsletter registration), we use an external email service provider that delivers the emails on our behalf. It processes the recipient address and the content of the email exclusively in accordance with our instructions (Art. 28 GDPR).