Privacy Policy

Last Updated: 29.08.2024

Privacy Statement

1. General

If you would like an introduction to the topic of data protection and the General Data Protection Regulation (GDPR), you can find further information on the website of the Federal Data Protection Commissioner, available at https://www.bfdi.bund.de/DE/Home/home_node.html.

Below, we inform you how we use your personal data.

2. Information about the Controller and Data Protection Officer

2.1. The controller for the processing of your personal data is Claudius Winkel, Am Katzenberg 4, 91338 Igensdorf. You can reach us for general inquiries either by phone at +49 (0) 9192 9953O65 or by email at [email protected]. Further information can be found on our website at https://antiguerilla.com.

2.2. For questions about data protection or to exercise your rights under data protection law (see Section 4), you can contact our Data Protection Officer, Mr. Claudius Winkel, either at the address Am Katzenberg 4, 91338 Igensdorf, Germany, or by email at [email protected].

3. Activities in which we process your personal data

3.1. Visit to our website
If you visit our website without logging in, registering, or otherwise filling in input fields on the website, we process your personal data as follows:

3.1.1. For the purpose of providing our website, we process IP addresses, access time, information about the browser, operating system, language settings, screen resolution, the page or file called up, as well as the access status (successful or error code) for each page view of all website visitors.
Data processing is technically necessary to enable the use of our website (Art. 6 Para. 1 lit. b GDPR).
The personal data will be deleted after the end of your visit to our website unless individual personal data is further processed for one or more of the purposes mentioned in this privacy policy.

3.1.2. For the purpose of detecting and preventing attacks on our website and the technical infrastructure (e.g., hacking, denial-of-service attacks), we process personal data including identification data, connection data, or location data (including IP addresses).
This processing is necessary to protect our legitimate interest in taking protective measures against attacks (Art. 6 Para. 1 lit. f GDPR).
The personal data is processed by Cloudflare Inc., 101 Townsend St San Francisco, CA 94107 based on a processing agreement (Art. 28 GDPR).

3.1.3. The personal data will be deleted no later than two (2) years after the end of your visit to our website, unless an attempted attack is detected. In the event of an attempted attack detected from your connection, the personal data will be further processed for technical and possibly legal processing.
Visitors to our website have the right to object to the use of these cookies in accordance with the provisions in Section 4.2.3.

3.1.4. For the purpose of providing our website, we use the cloud platform Vercel, provided by Vercel Inc. 340 S Lemon Ave #4133 Walnut, CA 91789 based on a processing agreement (Art. 28 GDPR). Each visit to our website is processed or delivered via Vercel. Vercel processes information that may include IP addresses, system configuration information, and other information about traffic to and from our website, for the purpose of operating, maintaining, and improving the service. This data can help identify new threats, identify malicious third parties, and provide stronger security protection. The processing of this data is technically necessary to enable the use of our website (Art. 6 Para. 1 lit. b GDPR).

3.1.5. Cookies
We use cookies on our website. Cookies are small text files. They allow us to store specific, user-related information related to the use of our website. You can find details about our cookie policy at https://antiguerilla.com/privacy-policy/

3.2. Registration on the website

a) In order to make the functionalities of our website that require registration, such as the user and customer portal or the ability to leave comments on the website, accessible and usable, we process IP addresses, first name, last name, gender, address and country, email address, status as a private individual or business customer, and in the case of registration as a business customer, also the company and the tax identification number or comparable information for company identification.

This processing is necessary to enable the use of specific functionalities of our website (Art. 6 Para. 1 lit. b GDPR). For individuals who are not a party to the contract but represent their company, the legal basis for data processing is Art. 6 Para. 1 lit. f GDPR.

We will store the personal data until you request the deletion of your account. After that, the processing of the data will be restricted and not further used for identification and access to functionalities of the website that require registration.

Individuals representing their company have the right to object to the processing of their data in accordance with Section 4.2.3.

b) For the purpose of verifying the identity of the requesting customer, we process the IP address, first name, last name, gender, address and country, email address, status as a private individual or business customer, and in the case of registration as a business customer, also the company and the tax identification number or comparable information for company identification.

This processing is necessary to ascertain the identity of our customers and to enable the use of our website (Art. 6 Para. 1 lit. b GDPR). For individuals who are not a party to the contract but represent their company, the legal basis for data processing is Art. 6 Para. 1 lit. f GDPR.

We will store the data until you request the deletion of your account. After that, the processing of the data will be restricted and not further used for identification and access to functionalities of the website that require registration.

Individuals representing their company have the right to object to the processing of their data in accordance with Section 4.2.3.

3.3. Commenting function of the website

For the purpose of displaying the username along with the comment left on our website or blog, as well as identifying the author of a comment in the event of later complaints regarding the content of that comment, we process the IP address of the device from which the comment was sent and, if available, the email address and/or username of the author of the comment.

Registered users can subscribe to the comment feed. In this case, we use the email address to send new comments and responses via email.

The processing is necessary to safeguard our legitimate interest in protecting our users from illegal content on our website and enabling a community by displaying usernames (Art. 6 para. 1 lit. f GDPR).

We store the IP addresses, email addresses, and/or usernames for as long as the comment is stored and visible on our website or until the registered user has terminated their subscription to the comment feed.

Comment authors have the right to object to the processing of their data as per section 4.2.3. This right can also be exercised by using the anonymous comment function.

3.4. Email - Advertising to Customers

For the purpose of conducting email advertising with information on industry news and promoting our own products and services, such as information about promotions, product launches, and new offers, we process the customer's email address.

This data processing is based on the customer’s consent (Art. 6 para. 1 lit. a GDPR).

We store the email address until the consent is revoked. The processing of the email address for this purpose is restricted after the consent is revoked, and the email address will be deleted unless it is also processed for other purposes.

The customer has the right to revoke their consent as per section 4.2.4. The customer can also revoke their consent by using the "Unsubscribe" link included in every email.

3.5. Email Newsletter

For the purpose of sending email newsletters with information on industry news and promoting our own products and services, such as information about promotions, product launches, and new offers, we process the subscriber’s email address.

This data processing is based on the subscriber’s consent (Art. 6 para. 1 lit. a GDPR).

We store the email address until the consent is revoked. The processing of the email address for this purpose is restricted after the consent is revoked, and the email address will be deleted unless it is also processed for other purposes.

The subscriber has the right to revoke their consent as per section 4.2.4. The subscriber can also revoke their consent by terminating their subscription using the "Unsubscribe" link included in every newsletter.

3.6 Application for Job Offers

By submitting an application on our recruiting page or via email to us, the applicant expresses their desire to take up employment with us. In this context, you provide us with personal data that we use and store exclusively for the purpose of your job search/application.

In particular, the following data is collected: Name (first and last name), email address, phone number, LinkedIn profile (optional), and the channel through which you became aware of us.

Additionally, you have the option to upload relevant documents such as a cover letter, your resume, and certificates. These may contain further personal data such as date of birth, address, etc.

If provided by the applicant, we also process special categories of personal data, such as information about disabilities, ethnic origin, or biometric data (handwritten signature).

The processing of the aforementioned personal data is necessary as a pre-contractual measure for the conduct and processing of the application process as well as for assessing the suitability for the respective position, and is therefore carried out in accordance with Art. 6 para. 1 lit. b, Art. 88 GDPR in conjunction with § 26 BDSG.

If special categories of personal data are voluntarily provided by the applicant, the processing occurs based on Art. 9 para. 2 lit. a GDPR, Art. 88 GDPR in conjunction with § 26 para. 2 BDSG. By providing the relevant special categories of personal data, the applicant consents to the processing.

The storage of personal data is generally exclusively for the purpose of filling the vacant position for which you have applied. We store the personal data for six months after the decision regarding the filling of the vacancy has been communicated to the applicant. Subsequently, the personal data will be deleted or anonymized. In this case, we only retain the data as so-called metadata without direct personal reference for statistical evaluations (for example, the proportion of female vs. male applications, the number of applications per period, etc.).

The applicant has the right to revoke their consent to the processing of the voluntarily provided special categories of personal data as per section 4.2.4.

If you receive a job offer from us during the application process and accept it, we will store the personal data collected during the application process for at least the duration of the employment relationship.

3.7 Talent Pool

For potential consideration for future job offers, we process the personal data that the applicant has provided, either for an application (see above section 3.6) or as an unsolicited application (regarding the description of data categories, see above section 3.6) for the decision on considering an applicant for other vacant positions.

The processing occurs based on the explicit consent of the applicant (Art. 6 para. 1 lit. a, Art. 9 para. 2 lit. a GDPR).

We store the data for six months or until the consent is revoked, whichever occurs first. The application and the data contained therein will be deleted, returned to the applicant, or destroyed unless the applicant has renewed their consent (e.g., at our request) or the data is further processed for employment purposes.

The applicant has the right to revoke their consent as per section 4.2.4.

3.8 Order Processing

For the purpose of processing customer orders for our products and services and delivering the products and services, we process the personal data that was provided during registration on the website (see above section 3.2) and the status of the customer’s payment.

The processing is necessary for the fulfillment of the contract with the customer (Art. 6 para. 1 lit. b GDPR).

We store the personal data until after the completion of all contracts with the customer. Subsequent processing is limited to this purpose. The data will be deleted after the expiration of all statutory retention periods.

3.9 Fraud Prevention

For the purpose of protection against attempts of payment fraud or abuse of our products or services for unlawful purposes (e.g., spamming, hosting illegal content), we process personal data that was provided during registration on the website (see above section 3.2).

The processing is necessary to safeguard our legitimate interest in fraud prevention (Art. 6 para. 1 lit. f GDPR).

We will store the data until you request the deletion of your account. After that, the processing of the data will be restricted and not further used for fraud prevention.

3.11 Customer and Product Support

To address all customer and product support inquiries that reach us via email or phone, we process the name, first name, email address, phone number, and other personal data provided in the email, as well as the content-related information of the request.

The processing is necessary for the handling of the request or concern (Art. 6 para. 1 lit. b GDPR).

Depending on the content of the request, the processing is limited to the specific purpose of the request and will be terminated immediately after the request has been processed. The data will be deleted after the expiration of all mandatory retention periods.

4. Your Rights as a Data Subject

4.1. You can exercise your rights as a data subject at any time in writing at the address or email address specified in section 2.2 above. Please note that we cannot process phone inquiries regarding personal data, as the identity of the caller cannot usually be determined with sufficient certainty.

4.2. You have the following rights regarding your personal data:

4.2.1. You can assert your right to information (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to deletion (Art. 17 GDPR), and right to restriction of processing, i.e., blocking for certain purposes (Art. 18 GDPR) at any time if the respective legal requirements are met.

4.2.2. Your right to data portability (Art. 20 GDPR) also states that you may request us to transmit your personal data concerning you – or where technically feasible, to a third party named by you – in a structured, commonly used, and machine-readable format if the legal requirements are met.

4.2.3. You have the right to object to the processing (Art. 21 GDPR) for specific processing purposes, particularly for...