Privacy Policy

Note: This is a courtesy translation of our German privacy policy (“Datenschutzerklärung”). The German version is legally binding.

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information, please refer to the privacy policy set out below this text.

The short version

This website sets no cookies, embeds no analytics or tracking services and loads no content from third-party servers. Fonts, scripts and images are served entirely from our own server. A consent prompt (a “cookie banner”) is therefore not required, because there is nothing for you to consent to.

We process personal data in two situations only: your browser transmits technically necessary data to the server when it requests a page, and you actively send us something, for example through the contact form.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to have this data corrected or erased. If you have given consent, you may withdraw it at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted, as well as a right to lodge a complaint with the competent supervisory authority.

2. Hosting and delivery

netcup

We host the content of our website with netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany (“netcup”). The data is stored on servers in Germany. For details, please refer to netcup’s privacy policy.

netcup is used on the basis of Art. 6 (1) lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible.

Cloudflare

This website is delivered through the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare sits in front of our server: your request first reaches a Cloudflare server, which delivers the content and establishes the encrypted connection to your browser.

In doing so, Cloudflare processes technically necessary connection data, in particular your IP address. The purpose is the fast and reliable delivery of the site and the mitigation of attacks. The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in operating this website securely and performantly.

Cloudflare is based in the USA. Processing of your data outside the European Union is therefore possible. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare: the Data Processing Addendum forms an integral part of the Cloudflare terms of service and incorporates the European Commission’s standard contractual clauses. For details, see Cloudflare’s privacy policy at cloudflare.com/privacypolicy.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Please note that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller responsible for data processing on this website is:

aceArt GmbH
Sieglestraße 33G
70469 Stuttgart, Germany

Phone: +49 (0) 711 21955380
Email: info@aceart.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies. If you assert a legitimate request for erasure or withdraw consent, your data will be deleted unless we have other legally permissible reasons for storing it.

Data transfer to third countries

With the exception of delivery through Cloudflare described above, we process your data exclusively on servers located in Germany. We do not use any further services based in the USA or other third countries on this website.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Right to object to data collection (Art. 21 GDPR)

If data is processed on the basis of Art. 6 (1) lit. e or f GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. The respective legal basis can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged breach. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

Information, correction and erasure

Within the scope of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing, and where applicable a right to correction or erasure of this data. You can contact us at any time regarding this and any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of the personal data we hold, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing.
• If the processing of your personal data was or is unlawful, you may request the restriction of processing instead of erasure.
• If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request the restriction of processing instead of erasure.
• If you have lodged an objection under Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar shows “https://” and by the lock symbol in your browser bar.

Objection to advertising emails

We hereby object to the use of contact data published within the scope of the legal-notice obligation for the purpose of sending unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising being sent.

4. Data collection on this website

No cookies

This website does not store cookies on your device and does not use comparable techniques such as local storage to recognise you. A consent prompt is therefore not required.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

• browser type and browser version
• operating system used
• referrer URL, i.e. the previously visited page
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. It is not evaluated for statistical purposes. The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and the security of the website; the server log files must be recorded for this purpose. The logs are deleted regularly as soon as they are no longer required for these purposes.

Contact form and project enquiry

You can reach us on this website via the contact form and via the multi-step enquiry assistant. What is transmitted is the information you enter yourself: name, email address, phone number, your message and – in the enquiry assistant – your answers regarding the type, scope and time frame of the project.

This information is stored by us and sent by email to our mailbox in order to process your enquiry and in case of follow-up questions. We do not pass on this data without your consent.

To protect against automated submissions, the form contains an additional field that is invisible to you as well as a simple arithmetic question. No data is passed to an external service in the process.

This data is processed on the basis of Art. 6 (1) lit. b GDPR, provided your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) lit. f GDPR).

Enquiries by email or phone

If you contact us by email or phone, your enquiry, including all resulting personal data, will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

Job applications

Please send applications by email to bewerbung@aceart.de. There is no application form on this website.

We process the documents and information you send us exclusively for the purpose of conducting the application procedure. The legal basis is Section 26 (1) BDSG in conjunction with Art. 6 (1) lit. b GDPR. If no employment relationship comes about, we delete your documents six months after the procedure has been concluded. This period takes account of possible claims under the German General Equal Treatment Act. If you would like us to keep your documents beyond that for future positions, we require your consent, which you may withdraw at any time.

5. Fonts and third-party content

Google Fonts (local hosting)

This site uses so-called web fonts, originally provided by Google, for a consistent display of typefaces. The fonts are installed locally on our server. No connection to Google’s servers is established in the process.

No embedded third-party services

We do not embed any content from third-party servers on this website – no maps, videos, fonts, icons, review widgets or social media widgets. All files are delivered from our own server. The references to our profiles on social networks are plain links: only when you click one do you leave this website, and the privacy policy of the respective provider then applies.

6. Online tools

At /en/tools we provide free utilities, including a QR code generator, a QR code reader, a password generator and a dummy text generator.

These tools run entirely in your browser. The content you enter there – texts, addresses, generated passwords – is not transmitted to our server and is neither stored nor viewed by us.

The QR code reader can use your device’s camera if you wish. The camera image is likewise evaluated exclusively in your browser; neither individual images nor the video signal leave your device. You grant access to the camera through your browser’s prompt and can revoke it there at any time.

7. Video conferences

Google Meet

We use Google Meet for calls with clients. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you take part in a video conference with us, Google processes the data required for this: your display name, your email address if you join via an invitation, the technical connection data of your device, and the start, end and duration of your participation. Image and sound are necessarily processed during transmission as well. We do not record our calls.

The legal basis is Art. 6 (1) lit. b GDPR insofar as the call serves the initiation or performance of a contract. In all other cases we base the processing on our legitimate interest in straightforward communication (Art. 6 (1) lit. f GDPR).

Google also processes data in the USA. A data processing agreement is in place with Google which incorporates the European Commission’s standard contractual clauses. For details on how your data is handled, see Google’s privacy policy at policies.google.com/privacy.

This processing takes place outside this website — Google Meet is not embedded here and loads nothing when you visit these pages.