This post is also available in:
Deutsch
Below we inform you about the type, scope and purpose of the processing of your personal data when you use our website at the address “https://www.schulinfobot.de”. Personal data is any information relating to an identified or identifiable natural person.
1. responsible person
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. The controller within the meaning of the GDPR for the personal data processed in this store is: plaxon GmbH, Kurfürstendamm 30, 10719 Berlin, phone +49 30 34655551, email nr@plaxon.de (hereinafter referred to as “we”).
2. when you visit our website
When you visit our website, our server collects the following information from your end device: browser type and version, operating system, the previously visited website (“referrer”), IP address and time of the page view.
We collect and process this data to ensure the trouble-free operation of our website and to be able to detect, prevent and prosecute any misuse of our services. We also use the collected data for statistical purposes, for example to evaluate which end devices and browsers are used to access our store in order to continuously adapt and improve our offer to the needs of users. This data processing is carried out on the basis of Article 6(1)(f) GDPR.
We delete all of the above-mentioned personal data no later than twelve months after its collection.
3. if you conclude a contract with us
When you order or book with us, we process your name, your address (if provided by you) and your e-mail address. If you voluntarily provide further data with your order (e.g. a different billing address or a telephone number), we will also process this data.
We process this data electronically for the proper performance of the contract, in particular for the delivery, invoicing, booking of payments and processing of complaints. If we are obliged to provide you with updates for a digital product or for a product with digital elements, we will also process your contact data for this purpose. This data processing is carried out on the basis of Article 6(1)(b) GDPR.
We store this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
In order to conclude a contract between you and us, it is necessary that we receive your name and your e-mail address. The necessity of providing this data results from statutory provisions (e.g. Section 312i (1) (3) BGB, Section 14 (4) UStG). Therefore, you cannot conclude a contract with us without providing this data.
We do not use automated decision-making or profiling when deciding whether to conclude a contract.
4. payment
For the payment, the payment service provider selected by you collects and processes your name, your e-mail address, your card or account number and/or other data as required for the payment method selected by you. In this respect, the contractual and data protection provisions of the payment service provider you have chosen also apply.
When receiving a payment, we process the data transmitted to us by the payment service provider.
When we receive a transfer to our account, we process in particular the name of the account holder making the transfer, the account number (IBAN and BIC) and the purpose of the transfer.
Processing is carried out on the basis of Article 6(1)(b) GDPR. We store this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
5. processors
To support our operational processes, we use the services of Lexoffice / Haufe-Lexware (Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany) as a processor in accordance with Article 28 GDPR.
For the operation of our website on the Internet, we use the technical services of Strato (Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin) as a processor in accordance with Article 28 GDPR.
For the AI functions of the chatbot, we use the interface (API) of the French-based company “Mistral AI”, 15 rue des Halles, 75001 Paris, France.
Mistral AI is a company that enables us to use services for processing data using “artificial intelligence / AI” via an interface. The chatbot technically serves as a proxy to Mistral AI, so that your IP address and other information (browser used, etc.) are not transmitted to Mistral AI. Only the content of the chat texts entered (conversations) is transmitted to Mistral AI and processed there. If you do not enter any personal data there, none will be transmitted to Mistral AI.
You can view OpenAI’s privacy policy at the following link: https://mistral.ai/terms#privacy-policy
The content of the conversations (your input and the chatbot’s response) may be stored and evaluated by the operator of the chatbot (plaxon GmbH) for quality control purposes. The legal basis for this is a legitimate interest of the operator to optimize the service and thus improve the offer technically and economically and to be able to offer support.
Data processing by Mistral AI: The data (text input) that you enter to use the chatbot is transmitted to OpenAI and processed by OpenAI.
Voluntary use: The use of the chatbot is completely optional and not required for the use of the website
6. making contact
If you use a contact form or a chat function on our website, we process the data you enter; in addition to your message, this may include your name and e-mail address.
If you send us a message by email, we store your message with the sender data transmitted with it (name, email address and any other information added by your email program and the transmitting servers). To receive, store and send emails, we use an email provider that acts as a processor for us in accordance with Article 28 GDPR.
The legal basis for this data processing is our legitimate interest in responding to your message and also being able to respond to any follow-up questions you may have (Article 6(1)(f) GDPR). We will delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the regulation in the following paragraph.
If you send us a legally relevant declaration regarding the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing is also Article 6(1)(b) GDPR, regardless of the transmission channel. In such a case, we will delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.
7. use of cookies
If you have consented to the use of cookies, we will store one or more “cookies” on your end device. A cookie is a small text file that allows us to recognize your device when you visit our website again at a later time. With the help of cookies, we can analyze certain user behavior, e.g. which page areas you look at, how long you stay on our website and when and how often you return to our website. We can also use cookies to store your consent to the use of cookies and, if applicable, other marketing or analysis methods. Cookies stored by us are deleted no later than twelve months after your last visit to our website.
This data processing is based on your consent (Article 6(1)(a) GDPR).
You can prevent the storage of cookies by going to the cookie settings of your Internet browser and objecting to the storage of cookies for our website or for all websites. You can also delete cookies that have already been stored there.
8. your rights
You have the following rights with regard to the personal data that we process about you:
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, we will provide you with the personal data stored about you and further information in accordance with Article 15 (1) and (2) GDPR.
You have the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You can demand that we delete the personal data concerning you immediately under the conditions of Article 17 (1) GDPR, unless their processing is necessary in accordance with Article 17 (3) GDPR.
You can request that we restrict the processing of your data if one of the requirements of Article 18 (1) GDPR applies. In particular, you can request the restriction instead of erasure.
We will communicate any rectification or erasure of your personal data or restriction of processing to each recipient to whom we have disclosed your personal data, unless this proves impossible or involves disproportionate effort. We will also inform you about these recipients if you request this.
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and may request that we transmit this data to another controller without hindrance, where technically feasible.
If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the data processing that took place prior to your withdrawal.
RIGHT TO OBJECT: ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; This right to object exists in relation to data processing carried out on the basis of Article 6(1)(f) GDPR for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. If you exercise your right to object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G. NEWSLETTERS), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
If you believe that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.
