Privacy Policy
Introduction: Protecting your personal data matters to us. In this Privacy Policy, we explain which information we collect, how we use it, and which rights you have regarding your data. We aim to present all relevant aspects transparently and clearly so that you can feel confident when visiting our agency website and using our services. If our privacy practices change, we will update this policy and publish the changes on our website.
Controller
The controller responsible for data processing on this website and in the context of our services is InboundLabs GmbH, Eselshof I, 5, 97320 Sulzfeld am Main, Germany (hereinafter also “we” or “us”). Please refer to the imprint (Impressum) on our website for contact details. You can direct questions about data protection to datenschutz@inboundlabs.de at any time.
Collection and use of personal data
General principle. You can generally use our website without providing personal data. Where we do collect personal data by way of exception (for example, name, email address, or phone number in a form), this always occurs voluntarily by you and with knowledge of the intended purpose.
We process personal data only if you actively provide it to us (e.g., by filling out a contact form, registering for a newsletter, or in the course of placing an order/engagement) and if processing is permitted by law or you have given consent.
Purposes of processing. We use the personal data you provide primarily for the following purposes:
- To provide our services: e.g., to perform a contract, provide requested services, or respond to your inquiries.
- To improve our offering: e.g., we analyze anonymized usage data to continuously optimize the quality and content of our website and services.
- For marketing activities: e.g., to send you newsletters or information about new offers with your consent.
- To track usage patterns: we want to understand which content on our website is particularly popular and how visitors find us—this helps us make our online offering more relevant.
- To comply with legal obligations: e.g., to meet this Privacy Policy and data protection laws or to ensure the security of user accounts and our IT systems.
- To protect rights and safety: to protect the property, rights, and safety of our visitors, customers, and the public, where required or permitted by law.
Consent. By providing us with personal data and using our services, you voluntarily consent to the respective data processing within the described scope—to the extent consent is legally required. You have the right to withdraw consent at any time with effect for the future (see User rights below).
No disclosure without legal basis. We do not disclose your personal data to third parties unless:
- this is necessary to fulfill our contract with you (e.g., use of subcontractors or shipping service providers),
- we are legally obliged to do so,
- you have expressly consented, or
- disclosure occurs for the purposes described here on the basis of a legitimate interest and in compliance with data protection requirements.
Data collection on our website
Server log files
The provider of our website automatically collects and stores information in so-called server log files that your browser transmits when you visit our pages. These data cannot readily be assigned to specific individuals. In particular, the following information may be logged:
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Hostname of the accessing computer (IP address in anonymized form where possible)
- Time of the server request
We use these server log data solely for the operation, security, and optimization of our web offering. We do not combine these data with other data sources. However, we reserve the right to subsequently review log files if we become aware of concrete indications of unlawful use (e.g., a hacking attempt).
Cookies
Our website uses cookies. These are small text files that your browser stores on your device. Cookies do not damage your computer and do not contain viruses. We use cookies to make our offering more user-friendly, effective, and secure.
There are different types of cookies:
- Session cookies: These are automatically deleted when you close your browser. They enable, for example, maintaining a session while you visit our site.
- Persistent cookies: These remain stored on your device until you delete them or a predefined storage period expires. Such cookies allow us to recognize your browser on your next visit (e.g., to retain preferences such as language or login status).
Cookie settings. You can configure your browser so that cookies are set only with your consent, to reject cookies in specific cases or generally, or to delete cookies automatically when closing the browser. You can also delete cookies that have already been set at any time via your browser settings. Please note, however, that disabling cookies may impair the functionality of this website—some features may then not be available.
(Further information about the specific cookies we use and any cookie banners or consent managers can be found in our detailed Cookie Policy, if available.)
Contact forms and inquiries
If you send us inquiries via a contact form on our website or contact us by email, we store the information you provide in the inquiry (in particular name, email address, phone number, subject, and message content). We use these data exclusively to process your inquiry and for any follow-up questions.
Disclosure. We do not pass these data on to third parties unless this is necessary to answer your inquiry (e.g., involving a partner for subject-matter questions) or you have asked us to do so. In any case, we treat your information confidentially.
We delete your data from contact inquiries as soon as communication with you is concluded and the purpose of contacting has been fully achieved, unless statutory retention obligations prevent deletion.
Newsletters and email marketing
If you wish to subscribe to our newsletter, we require a valid email address from you. You must also confirm in a double opt-in process that you are the owner of the specified email address and agree to receive the newsletter. For this purpose, after registration you will receive an email with a confirmation link that you must click to complete the signup. We do not collect additional data or only on a voluntary basis (e.g., name for newsletter personalization).
We use these data exclusively to send the requested information and do not disclose them to third parties.
Withdrawal (newsletter). You can withdraw your consent to the storage of the email address and any additional data and their use for sending the newsletter at any time. To do so, use the “unsubscribe”/“opt-out” link included in each of our newsletters, or contact us directly. After withdrawal, we will promptly delete your data from the newsletter distribution list.
Tracking and analytics tools
Google Analytics (web analytics)
Our website uses Google Analytics, a web analytics service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland)—hereinafter “Google.” Google Analytics uses cookies (see above) that enable analysis of your use of the website. The information generated by the cookie about your use of our website (including your IP address) is generally transmitted to a Google server in the USA and stored there.
We have activated IP anonymization on this website. This means that Google truncates your IP address within the EU or the EEA before transmission. Only in exceptional cases is the full IP address transmitted to a server in the USA and truncated there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to us as the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Opt-out of tracking. You can prevent the storage of Google Analytics cookies by selecting the appropriate settings in your browser. However, please note that in this case you may not be able to use all functions of this website in full. Alternatively, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as processing of these data by Google, by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on data protection at Google Analytics can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
Social media plugins (Facebook & Twitter)
Our website integrates plugins from social networks to make sharing and recommending content easier. Specifically, we use:
Facebook plugin. Our pages include components of the social network Facebook (provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). You can recognize the Facebook plugin, for example, by the Facebook logo or the “Like”/“Gefällt mir” button.
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. Facebook thereby receives the information that your IP address has visited our website. If you are logged into Facebook and click the “Like” button or leave a comment, this information is also transmitted to Facebook and may be published on your profile. We point out that, as the website operator, we have no knowledge of the precise content of the transmitted data or their use by Facebook. For more information, please see Facebook’s Data Policy: https://de-de.facebook.com/policy.php.
Note. If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of Facebook before visiting our website.
Twitter plugin. Our pages may include functions of the Twitter service (provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland). By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data are also transmitted to Twitter. Again, we have no influence on the scope of data collected by Twitter. Details can be found in Twitter’s Privacy Policy: https://twitter.com/privacy. You can change your privacy settings at Twitter in the account settings at https://twitter.com/account/settings.
(By way of example—if we integrate additional social media such as LinkedIn, XING, etc., we would list them here analogously.)
Privacy notices for applications (recruitment)
We appreciate your interest in applying to us. If you submit personal data to us as part of an application process (e.g., by email or online form), we process your information exclusively for the purpose of handling the application. The legal basis for processing your applicant data is Section 26 BDSG (Germany) as well as Art. 6(1)(b) GDPR (decision on the establishment of an employment relationship) and Art. 6(1)(f) GDPR (legitimate interest, e.g., in efficient applicant management).
Security. Please note that an email application may be transmitted unencrypted. If you send us your application by email, we accept no liability for the security of the transmission path. If you have concerns, please ask us for an encrypted transmission option or send sensitive data by postal mail if necessary.
If we cannot offer you a position, we will delete your data after completion of the application process, unless statutory retention obligations prevent this. If your application may be of interest for future positions, we will ask for your consent to retain your data for a longer period. Otherwise, we will generally delete application data no later than 6 months after completion of the process.
User rights
As a data subject, you have the following rights at any time (under the GDPR and the BDSG) regarding your personal data stored by us:
- Right of access: you can request confirmation as to whether we process personal data about you. If so, you have the right to access these data and further information such as the purposes of processing, recipients, and planned storage period.
- Right to rectification: you have the right to have inaccurate or incomplete personal data we hold about you corrected.
- Right to erasure (“right to be forgotten”): you can request that we delete your personal data, provided the legal requirements are met. This is the case, for example, if the data are no longer necessary for the purposes for which they were collected, you withdraw consent and there is no other legal basis, or the data were processed unlawfully.
- Right to restriction of processing: in certain cases (e.g., if the accuracy of the data is contested or processing is unlawful but you do not want deletion), you can request that processing of your data be restricted. In that case, the data may—apart from storage—only be processed with your consent or for the establishment, exercise, or defense of legal claims.
- Right to data portability: you have the right to receive the data you provided to us and that we process automatically based on your consent or for performance of a contract in a commonly used, machine-readable format. Upon request—and where technically feasible—we can also transmit these data directly to a third party named by you.
- Right to object: where we process your data on the basis of legitimate interests, you have the right to object to processing on grounds relating to your particular situation. In particular, you can object to the processing of your data for advertising purposes at any time. In the event of an objection, we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
To exercise your rights, you can contact us at any time using the contact details provided in the imprint (e.g., by email or post). Please provide sufficient information so that we can assign and respond to your request (in case of doubt, proof of identity so that data are not disclosed to unauthorized persons).
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent supervisory authority for our company is the Bavarian Data Protection Commissioner (BayLfD) and/or the Bavarian State Office for Data Protection Supervision, if our registered office is in Bavaria. Otherwise, you can contact the data protection authority of your federal state.
Data security
We protect your personal data with appropriate technical and organizational security measures to ensure a level of protection appropriate to the risk. These include, in particular, measures to prevent unauthorized access or unauthorized alterations to data, as well as to avoid loss, misuse, or destruction of data. Our security measures are continuously improved in line with technological developments.
Examples. We use current encryption methods (e.g., SSL/TLS for the website), secure authentication procedures, firewalls, and least-privilege access permissions for our employees. However, please note that no internet-based data transmission can be 100% protected against access. You can be assured that we exercise a very high level of care to protect your data.
Storage periods and deletion
We generally store personal data only for as long as is necessary for the respective purposes. Specifically:
- Data you provide to us in the context of an inquiry or a contract are stored for the duration of the contractual relationship or the processing of the inquiry. After the purpose has been fulfilled (e.g., execution of the contract), the data are deleted unless statutory retention obligations (e.g., tax retention periods of 6–10 years for business records) prevent deletion.
- Application data are, as described above, generally deleted after 6 months if no employment takes place.
- Newsletter data are stored until you unsubscribe from the newsletter.
- If you exercise your right to erasure or withdraw consent, we promptly review the conditions and delete the data if no other legitimate ground or retention obligation exists.
Objection to advertising and marketing calls as well as advertising or spam emails
We hereby expressly object to the use of the contact details published in our imprint for advertising, market research, or other commercial purposes (Section 7 UWG, Art. 21 GDPR). Unsolicited telephone, email, or fax advertising and other direct marketing measures are prohibited. In the event of violations, we reserve the right to take legal action, in particular to assert claims for injunctive relief and reimbursement of costs.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy as needed, whether due to changes in the legal situation, new technologies, or the expansion of our services. If we make changes, we will indicate this on this webpage. The current version of the Privacy Policy applies to our data processing.
We therefore recommend that you review the Privacy Policy again from time to time. We will also notify you of major changes (in particular if new consent is required) by email upon request.
If you have further questions about data protection, you can contact us at any time using the contact details provided in the imprint or directly by email at hallo@inboundlabs.de. We are happy to help and will address your concerns regarding the protection of your data.
Version: March 2025 (These privacy terms reflect the current version. Subject to change—when updated, we will adjust the date accordingly.)
Translation notice (informational)
This English translation of our Privacy Policy has been prepared with due care and in good faith for the convenience of our clients. However, to the extent legally permissible, only the corresponding German versions are legally binding for all legal texts, contracts, and policies. If any discrepancies arise between this translation and the German original, the German original shall prevail. If you require an authoritative legal translation for a specific jurisdiction, please consult a qualified attorney or sworn translator.