Privacy Policy
1. Controller
Root Two Labs UG (haftungsbeschränkt) i.G.
Auestieg 21
22926 Ahrensburg, Germany
Email: hallo@roottwolabs.de
2. Overview of Data Processing
Types of data processed:
- Inventory data (names, companies)
- Contact data (email addresses)
- Content data (text input in contact form)
- Usage data (pages visited, access times)
- Meta/communication data (IP addresses, browser information)
3. Legal Basis
- Pre-contractual measures / contract performance (Art. 6(1)(b) GDPR) — processing of contact form inquiries
- Legitimate interests (Art. 6(1)(f) GDPR) — website operation, spam protection, server logs
4. Contact Form
When you contact us via the contact form, the data you provide (name, email address, optional company, message) is stored for the purpose of processing your inquiry and for possible follow-up questions. We do not share this data without your consent.
Processing is based on the performance of pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).
Your data remains with us until you request deletion or the purpose for storage no longer applies. Mandatory statutory retention periods remain unaffected.
Spam Protection in the Contact Form
To protect against automated spam submissions, we use a honeypot method and a client-side time check. An invisible form field is included that automated programs (bots) fill out. Additionally, we check whether the form was submitted unusually quickly. No data is transmitted to external services and no cookies are set for this purpose. Processing is based on our legitimate interest in preventing spam (Art. 6(1)(f) GDPR).
5. Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Personal data collected on this website is stored on the host's servers within the European Union.
We have concluded a data processing agreement (DPA) with Hetzner in accordance with Art. 28 GDPR.
The use of the hosting provider is in the interest of secure, fast and efficient provision of our online service (Art. 6(1)(f) GDPR).
6. Fonts (Locally Hosted)
This site uses the fonts Inter, Inter Tight and JetBrains Mono. The font files are hosted locally on our server. There is no connection to Google servers or any other external font provider. Use is in the interest of a uniform presentation of our online service (Art. 6(1)(f) GDPR).
7. Server Log Files
The hosting provider automatically collects and stores information in server log files that your browser transmits automatically:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
- Time of server request
- IP address
This data is not merged with other data sources. Log files are automatically deleted after 14 days. Collection is based on our legitimate interest in ensuring the security and stability of our website (Art. 6(1)(f) GDPR).
8. Cookies
This website uses no tracking cookies, no analytics tools and no advertising services.
When you switch the language, a language preference cookie ("lang") is set. This cookie is technically necessary, contains only the language code ("de" or "en"), and is stored for 12 months. It contains no personal data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in remembering the user's language preference).
No data is transmitted to third parties for advertising purposes.
9. External Links
Our website contains links to external websites (e.g. LinkedIn profiles). When you click on such a link, you leave our website and are subject to the privacy policies of the respective provider. We have no influence on the data collection and processing by those third parties. Please refer to the privacy policy of the respective provider (e.g. LinkedIn Privacy Policy).
10. Data Transfer to Third Countries
We currently do not transfer personal data to countries outside the EU/EEA. Our hosting provider processes data exclusively within the European Union. Should this change, we will update this privacy policy and ensure appropriate safeguards (e.g. EU Standard Contractual Clauses).
11. Your Rights
You have the right to:
- Access your processed personal data (Art. 15 GDPR)
- Request rectification of inaccurate data (Art. 16 GDPR)
- Request erasure of your stored data (Art. 17 GDPR)
- Request restriction of processing (Art. 18 GDPR)
- Receive your data in a structured, commonly used format (data portability, Art. 20 GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
Supervisory authority: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.
12. Right to Object
If your personal data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR). Please send your objection to: hallo@roottwolabs.de.