Privacy Policy

I. General information

This data protection information applies to data processing on the website www.regpit.com by the data controller:

Regpit GmbH
Jägerstraße 54-55
10117 Berlin

 +49 30 4397 2586 0
contact@regpit.com

Contact person: Dr Jacob Wende

II. Legal bases

Regpit processes personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing only takes place on the basis of legal permission as follows:

  • with your consent (Art. 6 para. 1 lit. a) DSGVO),
  • for the performance of a contract to which you are a party,
  • or at your request to carry out pre-contractual measures (Art. 6 para. 1 lit. b) DSGVO),
  • for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c) DSGVO)
  • or if the processing is necessary to protect the legitimate interest of Regpit or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6 para. 1 lit. f) DSGVO).

III. Your rights

You have the following rights vis-à-vis Regpit regarding your personal data:

  • Pursuant to Art. 15 DSGVO and § 34 BDSG, you have the right to request information as to whether and to what extent personal data relating to you is being processed or not.
  • You have the right to have the data corrected (Art. 16 DSGVO) and deleted (17 DSGVO and § 35 BDSG).
  • You have the right to restrict the processing of your personal data (Art. 18 DSGVO).
  • You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided to Regpit in a structured, common and machine-readable format and to transfer this data to another controller.
  • If you are of the opinion that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
  • If you have given Regpit separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 (3) DSGVO. Such a revocation does not affect the lawfulness of the processing that took place on the basis of the consent until the revocation.

IV. Right of objection

In accordance with Art. 21 (1) DSGVO, you have the right to object to processing based on the legal basis of Art. 6 (1) e) or f) DSGVO on grounds relating to your particular situation. If Regpit processes personal data about you for the purpose of direct marketing, you may object to this processing in accordance with Art. 21 (2) and (3) DSGVO.

V. Recipients of the data

For individual processing operations, Regpit uses commissioned service providers for hosting, maintenance and support of IT systems or marketing measures, for example. These include:

  • STRATO AG
  • WordPress
  • Google Analytics
  • BroadSoft Germany GmbH
  • Sendinblue GmbH

These service providers only process the data according to explicit instructions and are contractually obliged to guarantee appropriate technical and organisational measures for data protection. Regpit will only disclose your personal data to third parties, except in the aforementioned cases of processing on behalf of third parties, if:

  • you have given your express consent to this pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO,
  • this is necessary for the conclusion or fulfilment of a contract with you pursuant to Art. 6 para. 1 p. 1 lit. b DSGVO,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO,
  • this is necessary in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO to protect the legitimate interests of Regpit GmbH in contacting you.

VI. Storage period

All accruing data will be deleted insofar as storage is no longer necessary. If there are legal obligations to retain data, processing will be restricted unless otherwise stated in these notes.

VII. Processing of personal data and purposes of processing

1. Web hosting
For the provision of this website, we use the web hosting service STRATO AG, Pascalstr. 10, 10587 Berlin (hereinafter “STRATO”). The provision of a website requires the commissioning of a web hosting service. The use of STRATO takes place in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO due to our legitimate economic interest in making our offer available on this website. In connection with the hosting, STRATO processes personal data on our behalf, which is generated when using the website. Regpit has concluded an order processing contract with STRATO. Through this contract, the service provider assures that it will process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject.

2. Visiting the website
When you visit the website www.regpit.com, general information that your browser transmits to the server is initially stored automatically (i.e. not via registration). This includes browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. This processing serves the technical administration and security of the website. The processing is carried out to protect the legitimate interest of Regpit and is based on the legal basis of Art. 6 (1) (f) DSGVO. Regpit cannot identify you as a data subject from the stored data. The stored data is automatically deleted after seven days, unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason.

3. Ordering the newsletter
Insofar as you have expressly consented in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, Regpit will use your e-mail address to send you a newsletter on a regular basis. To receive the newsletter, you must provide an email address. You will then receive a registration notification by e-mail, which you must confirm in order to receive the newsletter (so-called double opt-in). This ensures that the registration was actually initiated by you.
You can revoke your consent at any time with effect for the future, for example via the “unsubscribe” link in the newsletter or by contacting Regpit by email at contact@regpit.com. The legality of the data processing operations already carried out remains unaffected by the revocation. When registering for the newsletter, the IP address and the date and time of registration are also stored. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from the legal obligation to document your consent by Regpit (Art. 6 para. 1 lit. c) in conjunction with. Art. 7 para. 1 DSGVO).
Regpit uses the newsletter service of Sendinblue GmbH to send the newsletter.
With regard to the processing of personal data, Regpit has contractually obliged this provider to comply with the requirements of European data protection law. All data collected to order the newsletter is transferred to Sendinblue’s email marketing system. The email addresses of our newsletter recipients are stored on Sendinblue’s servers on our behalf.
The newsletter service also offers statistical evaluation options for usage data. This includes, among other things, information on whether an email has reached the recipient or was rejected by the server. We can also analyse the reading behaviour and opening rates of our newsletter. For this purpose, pseudonymised usage data is collected and processed, which is not merged with your e-mail address or your IP address. The legal basis for the analysis of the newsletter is Art. 6 (1) f) DSGVO and the processing serves the legitimate interest of optimising our newsletter through Regpit.

4. Contact by e-mail
Regpit can be contacted by e-mail via the e-mail addresses published on the website.
If you use this contact method, the data you provide (e.g. surname, first name, address), but at least the e-mail address, as well as the information contained in the e-mail together with any personal data you may have provided will be processed. If your request is directed towards the conclusion or implementation of a contract with Regpit, Art. 6 (1) b) DSGVO is the legal basis for the data processing. Otherwise, Regpit processes the data on the basis of the legitimate interest in contacting persons making enquiries. The legal basis for data processing is then Art. 6 (1) (f) DSGVO.
We delete your personal data as soon as we have finally processed your request and there are no legal storage obligations to the contrary.

5. Contact by telephone
Contacting Regpit is possible by telephone via the telephone number published on the website. To process your call, our telephone provider (BroadSoft Germany GmbH, Lothringer Str. 56, D-50677 Cologne, hereinafter BroadSoft) stores connection data, such as your connection number, time and date and duration of the telephone connection on servers in Germany. This connection data is processed within the legal regulations and deleted by our telephone provider after 6 months. You can find more information on this in BroadSoft’s privacy policy. If your request is directed towards the conclusion or implementation of a contract with Regpit, Art. 6 (1) (b) DSGVO is the legal basis for the data processing. Otherwise, Regpit processes the data on the basis of the legitimate interest to get in contact with inquiring persons. The legal basis for data processing is then Art. 6 (1) (f) DSGVO.
We have concluded an order processing contract with BroadSoft. Through this contract, the service provider assures that it processes the data in accordance with the General Data Protection Regulation and ensures the protection of the rights of the data subject.

6. Contact via contact form
If you use the contact form provided on the website for communication, it is necessary to provide your name and first name as well as your e-mail address. Without this data, your request transmitted via the contact form cannot be processed. Insofar as your request is directed towards the conclusion or implementation of a contract with Regpit, Art. 6 (1) b) DSGVO is the legal basis for data processing. Otherwise, we process the data on the basis of the legitimate interest in contacting enquirers. The legal basis for data processing is then Art. 6 (1) (f) DSGVO.
 Your personal data will be deleted as soon as your enquiry has been conclusively processed and there are no statutory retention obligations to the contrary.

7. Further data processing in the contractual relationship
The processing of the provided personal master, contract and payment data is regularly required for the establishment or implementation of the contractual relationship. The legal basis for this processing is Art. 6 para. 1 letter b) DSGVO. Regpit also processes customer and prospective customer data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 (1) (f) DSGVO and serves the interest of further developing Regpit’s offer and informing you specifically about Regpit’s offers. Further data processing may take place if you have consented (Art. 6 (1) a) DSGVO) or if this serves the fulfilment of a legal obligation (Art. 6 (1) c) DSGVO).
Within the framework of the contractual relationship or the initiation of a contractual relationship, Regpit processes your contact, communication and contractual data as well as data for the provision of the contractual services. These data are necessary for the conclusion of the contract. Without this information, a conclusion of the contract is not possible. The legal basis for this processing is Art. 6 para. 1 letter b) DSGVO.

VIII. Cookies

Regpit uses cookies on the website www.regpit.com. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognised by Regpit’s web server. If this use of cookies results in the processing of personal data, this is based on the legal basis of Art. 6 (1) f) DSGVO and the processing serves the legitimate interest in terms of a user-friendly, effective and secure design of this website. Session cookies” are used, which are deleted again when the browser session is closed. “Persistent cookies” are automatically deleted after a specified period of time, whereby the duration may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time and object to the use of cookies through your browser settings in principle or for specific cases. Additional information is provided by the Federal Office for Information Security. https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html

IX. Google Analytics

Regpit uses Google Analytics on this website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated in this way about your use of this website is generally transferred to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f DSGVO. Regpit has a legitimate interest in analysing user behaviour in order to constantly optimise the existing online offer.
For this purpose, Regpit has concluded an order processing contract with Google for the use of Google Analytics. Through this contract, Google assures that the data is processed in accordance with the General Data Protection Regulation and this thus ensures the protection of the rights of the data subject.
The IP anonymisation function is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and finally shortened there.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.
Set opt-out cookie for Google Analytics

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

X. Other services of Google Ireland Limited (Ireland/EU)
On this website, services and contents (hereinafter collectively referred to as “contents”) provided by third-party providers are used. For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers. This data processing is carried out in each case to protect the legitimate interest in the optimisation as well as the economic operation of this website and is based on the legal basis of Art. 6 para. 1 lit. f) DSGVO. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website. The website includes content from the following services provided by third-party providers:
Services of Google Ireland Limited (Ireland/EU):

  • “Google Web Fonts” for the display of fonts.
    When using Google services, a transmission of processed data to the US-based Google LLC (USA) by us cannot be excluded. Google LLC is certified under the EU-US Privacy Shield.

XI. Social Media Plug-ins

We use social media plug-ins on our website on the basis of Art. 6 (1) sentence 1 lit. f DSGVO in order to raise awareness of our company. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR.
The plug-ins do not establish a direct contact from the user’s browser to the provider’s servers. By clicking on the respective plug-in, the user is redirected to the website of the provider. We have no influence on the processing of personal data on third-party websites.

1. LinkedIn
Plug-ins of the LinkedIn network of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter: “LinkedIn”) are integrated on our website. You can recognise the LinkedIn plug-ins by the white “in” on a blue background.
When you call up a page of our website, no connection is established with the LinkedIn servers. If you click on the corresponding button, you will be redirected to a LinkedIn website. On this website, you can share our content by clicking again. We have no influence on the processing of personal data on third-party websites.
This information is transmitted by your browser directly to a LinkedIn server in the USA and stored there. LinkedIn observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” programme of the US Department of Commerce.
By accessing the LinkedIn website, LinkedIn thereby receives the information that you have visited their site with your IP address and further log data. This log data includes browser type, operating system, information about the website you previously visited and the pages you viewed, location, your mobile carrier, device information (including device ID and application ID), search terms and cookie information. Furthermore, LinkedIn uses tracking and targeting tools to optimise the website and adapt it to the needs of the users.
If you click the LinkedIn button while logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This allows LinkedIn to associate the content of our pages with your user account.
For more information, please see LinkedIn’s privacy policy.

2. Facebook
Plug-ins from the Facebook network of Facebook Inc, 
Menlo Park, California, United States (hereinafter: “Facebook”) are 
integrated on our website. You can recognise the Facebook plug-ins by the white “f” on a blue or grey background.When you call up a page of our website, no connection is established with the Facebook servers. If you click on the corresponding button, you will be redirected to a Facebook website. On this website, you can share our content by clicking again. We have no influence on the processing of personal data on third-party websites.
This information is transmitted by your browser directly to a Facebook server in the USA and stored there. Facebook observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” programme of the US Department of Commerce. By accessing the Facebook website, Facebook thereby receives the information that you have visited their site with your IP address and further log data. This log data includes browser type, operating system, information about the website you previously visited and the pages you viewed, location, your mobile carrier, device information (including device ID and app ID), search terms and cookie information. Furthermore, LinkedIn uses tracking and targeting tools to optimise the website and adapt it to the needs of the users.
If you click the Facebook button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the content of our pages with your user account.
For more information, please see Facebook’s privacy policy.

3. Twitter
Plug-ins of the Twitter network of Twitter International Company are integrated on our website.
One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (hereinafter: “Twitter”). You can recognise the Twitter plug-ins by the white bird symbol on a blue or grey background.
When you call up a page of our website, no connection is established with the Twitter servers. If you click on the corresponding button, you will be redirected to a Twitter website. On this website, you can share our content by clicking again. We have no influence on the processing of personal data on third-party websites.
This information is transmitted by your browser directly to a Twitter server in the USA and stored there. Twitter observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” programme of the US Department of Commerce.
By calling up the Twitter website, Twitter thereby receives the information that you have visited their page with your IP address and further log data. This log data includes browser type, operating system, information about the website you previously visited and the pages you viewed, location, your mobile carrier, device information (including device ID and application ID), search terms and cookie information. Furthermore, Twitter uses tracking and targeting tools to optimise the website and adapt it to the needs of users.
If you click the Twitter button while you are logged into your Twitter account, you can link the content of our pages on your Twitter. This allows Twitter to associate the content of our pages with your user account.
For more information, please see Twitter’s privacy policy.

XII. Complaints and warnings

If you feel that your rights have been violated or that you have been disadvantaged in any other way, please inform us of this yourself. You will then receive a personal, individual response. In the context of your duty to minimise damages, we would like to point out that we will not assume the costs of a lawyer commissioned by you out of court without prior contact. There is expressly no intention on our part that you instruct a lawyer to issue a cease-and-desist letter or a declaration of discontinuance with a penalty clause. Consequently, a presumed intention cannot be taken into account.

XIII. Amendments to this Privacy Policy

This data protection declaration may be updated from time to time due to the technical progress of Regpit’s offers. Insofar as the change to the data protection declaration does not relate to the use of existing data, the new data protection declaration will apply from the date of its update on this website. A change to the data protection declaration that relates to the use of data already collected will only be made if it is reasonable for you. In such a case, we will notify you in good time by e-mail, on our websites, in our application or in another form. You have the right to object to the validity of the new data protection declaration within four weeks of receipt of the notification. In the event of an objection, Regpit reserves the right to terminate the contractual relationship if necessary. If no objection is made within the aforementioned period, you will be deemed to have accepted the amended data protection statement. You will be informed of your right of objection and the significance of the objection period in the notification.