Privacy policy

Dominik Braun, project lead of the EXIST research transfer project GRASPAGAIN n-squared lab, Friedrich-Alexander-Universität Erlangen-Nürnberg Nürnberger Straße 74, 91052 Erlangen Email: info@GRASPAGAIN.com

For questions about data protection on this website and to exercise your rights, contact us at info@GRASPAGAIN.com or via the contact form.

This website is operated via Firebase App Hosting on Google Cloud (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Images and directly embedded videos are loaded from Google Cloud Storage. When you visit the site, Google processes technically necessary data: IP address, date and time, the page requested, referrer URL, and browser and operating system information. The purpose is the secure delivery of the website. Application and access logs are retained for 30 days in the default log bucket. Required cloud audit logs of administrative operations are retained separately for 400 days. The legal basis is Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in the secure and stable provision of the website. Processing by Google LLC in the US cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework.

We only use technically necessary storage: a cookie for your language choice (stored for one year) and entries in your browser's local storage for the colour scheme (light/dark) and the cookie notice. We do not use analytics or marketing cookies. The legal basis is § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). When an administrator signs in to the protected administration area, Firebase Authentication also processes sign-in data and stores authentication state in the browser for access control. The legal basis is Art. 6(1)(f) GDPR.

When you write to us via the contact form or by email, we process your name, email address, the chosen topic, your message and, for job applications, your attachments in order to answer your request. The message is sent by email via the mail server of Telekom Deutschland GmbH (Landgrabenweg 151, 53227 Bonn) to our team. You receive an automatic confirmation of receipt. To prevent abuse, we store the IP address and email address as pseudonymised hashes (not in plain text) in time-limited counters. IP counters expire after 15 minutes and recipient counters after 24 hours. Expired counters are automatically deleted through Firestore TTL. Deletion is delayed, typically by up to a further 24 hours. The legal basis is Art. 6(1)(1)(f) GDPR (legitimate interest in answering your request and in preventing abuse). For job applications and requests about a collaboration, Art. 6(1)(1)(b) GDPR. We delete the data once your request has been dealt with and no statutory retention periods apply. Please do not send us health data that is not necessary for your request.

The contact form is protected against automated requests by Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Your IP address and technical characteristics of your browser and device are transmitted to Cloudflare to check whether the request comes from a human. The legal basis is Art. 6(1)(1)(f) GDPR (legitimate interest in protection against spam) and § 25(2) no. 2 TDDDG. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. Further information: https://www.cloudflare.com/turnstile-privacy-policy/

We embed videos using a two-click solution: only when you click “Play” is the video loaded from YouTube in privacy-enhanced mode (youtube-nocookie.com, Google Ireland Limited). Among other things, your IP address and device information are then transmitted to Google. Google may set cookies and also process data in the US. The legal basis is your consent given by clicking (Art. 6(1)(1)(a) GDPR, § 25(1) TDDDG). The consent only applies to the respective playback. Directly embedded product videos load from our Firebase Storage. The hosting information applies to these videos. They do not connect to YouTube.

The fonts used are served from our own server. No connection to Google Fonts servers is made when you visit the website.

This website contains links, for example to LinkedIn, FAU, the n-squared lab or Google Maps. The respective page is only opened when you click a link. The privacy policy of that provider then applies.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You can withdraw any consent given at any time with effect for the future. Please contact the contacts named above.

You can lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.