Data Privacy - Forevermind GmbH

Privacy Policy

The following privacy policy applies to the websites “www.forevermind.de”. The privacy information when using the app “Forevermind” can be found here.

The protection of your personal data (hereinafter referred to as “data”) is a major and very important concern for us. In the following, we would therefore like to inform you in detail about which data we collect and how we process it in the following.

I. Name and contact details of the person responsible

The person responsible within the meaning of the data protection regulations for the processing of personal data is:

Forevermind GmbH

Adress: Friedrich-Eberle-Str. 4d, D-76227 Karlsruhe
Email: info@forevermind.de
Webseite: www.forevermind.de

II. Purpose of the processing of personal data, legal basis and storage period

Below we inform you about the data processing that takes place on our site (a) whose purposes (b), legal basis (c) as well as the respective storage period and, if applicable, concrete options for objection and elimination (d).

1. Logfiles

a) When you visit our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

IP address of the requesting computer
Date and time of the call
Name and URL of the accessed web page
Website from which the access is made (referrer URL)
Browser used, version of the browser
Operating system and version of the operating system of your computer as well as the name of your access provider
Transferred data volumes and the access status (file transferred, file not found, etc.)
Language and version of the browser software.

b) The aforementioned data will be processed by us for the following purposes:

Ensuring a smooth connection of the website,
Ensuring a comfortable use of our website,
Evaluation of system security and stability as well
for other administrative purposes.

c) The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data processing listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

d) The data in the log files are deleted after 14 days at the latest.

2. Cookies

a) We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

We use the following cookies:

Session cookies
Persistent cookies

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

b) The use of cookies serves on the one hand to make the use of our offer more pleasant for you.

For example, we use so-called session cookies to recognize that you have already visited individual pages of our website.

In addition, we also use other temporary cookies to optimize user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

c) Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f DSGVO, or § 25 II TTDSG, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to store cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a DSGVO, or § 25 I TTDSG); consent can be revoked at any time.

d) Session cookies are automatically deleted after leaving our site. Temporary cookies for the cookie banner are automatically deleted after a defined period of time, in this case 182 days.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can delete already stored cookies at any time in the security settings of your browser.

3. contact form for general contact

a) A contact form is available on our website, which can be used for electronic contact. If you use this option, the data entered in the input mask will be transmitted to us and stored.

The mandatory information that must be filled in to contact us electronically via the contact form is the field for entering your e-mail address. If you provide us with additional data (name, first name, etc.), this is done voluntarily.

If you contact us directly via the e-mail address provided, only your e-mail address is mandatory and all other information is voluntary.

b) The data is processed to enable us to contact you and process your request, to prevent misuse of the contact form and to ensure the security of our information technology systems.

c) Legal basis for the processing of the mandatory data is Art. 6 para. (1) sentence 1 lit. f GDPR In the aforementioned purpose, there is also a legitimate interest in the processing of the data. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. (1) sentence 1 lit. b GDPR.

The legal basis for the processing of the data voluntarily provided to us by you is Art. 6 para. (1) sentence 1 lit. a DSGVO.

d) The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form/from your e-mail or the callback service, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. If a contract is concluded, the data will also be stored until the expiry of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we are obliged to store data for a longer period due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or you have consented to additional storage in accordance with Art. 6 para. (1) sentence 1 lit. a DSGVO.

In addition, you have the option to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. To exercise the revocation, see Section VII. All personal data stored in the course of contacting us will be deleted in this case.

4. user account via trust service

a) On our website, we offer users/trusted third parties the opportunity to register as trusted third parties via the Trust Service by providing personal data. The data is entered in an input mask and transmitted to us and stored.

The following personal data is collected as mandatory information (*) during the registration process:

Mail Adress

At the time of registration of the message, the following data is also stored:

– The IP address of the user/trusted person
– Date and time of registration

Otherwise, no further data is collected for the trust service.

b) A registration on your part under specification of the mandatory data is necessary for the provision of certain contents and services on our website, namely to be able to deposit you as a person of trust.

We will use any further data voluntarily provided to address you personally.

The collection of the registration and confirmation time, as well as your IP address is done to fulfill our legal obligation to prove the registration. The password is for your security.

c) The legal basis is Art. 6 para. (1) sentence 1 lit. a DSGVO for the mandatory information, as well as your other voluntary information, and additionally Art. 6 para. (1) sentence 1 lit. c DSGVO, Art. 7 para. 1 DSGVO for the registration and confirmation time, as well as your IP address.

d) You have the option at any time to revoke your consent to the processing of the data voluntarily provided during registration and thus automatically deregister as a trusted third party. You can declare the revocation to the responsible person named in section I.

5. postbox

The users of our “forevermind” app maintain the contact data of persons as message recipients in order to deliver messages created for them via the “Postbox”. This means that the users of the app who make use of this message delivery function solely determine the purpose and means of the processing of personal data stored there and are responsible to this extent for the processing of this personal data.

If you are a contact person as a message recipient of a user whose personal data is processed in this way, please direct corresponding inquiries about data protection or the assertion of data subject rights under data protection law to the user.

6. embedded YouTube videos

a) We have integrated YouTube videos into our online offer, which are available at www.youtube.com. and can be played directly from our website. YouTube is a service of Google Inc. The videos are all embedded in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. At the same time, only a preview image loaded from our own web server is displayed.

Only when you play the videos, the data mentioned under point II 1 are transmitted. We have no influence on this data transmission. The data transfer takes place regardless of whether YouTube provides a user account via which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account.

b) YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

c) The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The legal basis for this processing is Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in the underlying promotional purpose. If consent to the storage of cookies has been requested, the storage of the relevant cookies is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO , or § 25 I TTDSG); the consent can be revoked at any time. If you do not wish to be associated with your YouTube profile, you must log out of YouTube before starting the video. You also have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this. Further information on data processing, in particular on the legal basis and storage period by YouTube, can be found in the provider’s privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

7. online presence in social media

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.

We have no influence on the collection of data and its further use by the social networks. There is no knowledge of the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. We therefore expressly draw your attention to the fact that your data (e.g. personal information, IP address) will be stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.

We would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the users’ rights could be made more difficult.

Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

The processing of users’ personal data is based on our legitimate interests in providing users with effective information and communicating with users in accordance with Art. 6 para. (1) lit. f. DSGVO . If the users are asked by Forevermind or the respective providers of the platforms for consent to the aforementioned data processing, the legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.

For a detailed presentation of the respective processing and the objection options, we refer to the information of the providers linked below.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland), Privacy policy: https://www.facebook.com/about/privacy/
Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) – Privacy policy: https://policies.google.com/privacy
Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland), Privacy policy: https://help.instagram.com/155833707900388, Instagram Cookie Settings: https://help.instagram.com/cookie_settings
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) , Privacy policy: https://www.linkedin.com/legal/privacy-policy
Pinterest (Jointly responsible: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland und Pinterest, Inc., 651 Brannan St., San Francisco, CA 94107) Privacy policy: https://policy.pinterest.com/de/privacy-policy
TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irland). Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de

III. Cooperation with processors and third parties

In some cases, we use external service providers (processors) to process your data. These have been carefully selected and commissioned by us, are bound by instructions and are regularly monitored. These are external service providers who provide us with technical support (web hosters, programmers). This is done on the basis of order processing contracts pursuant to Art. 28 DSGVO.

Otherwise, we only pass on your data to third parties if:

You have given your express consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,
the disclosure is necessary in accordance with Art. 6 (1) p. 1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
there is a legal obligation for disclosure according to Article 6 Paragraph 1 Clause 1 Letter c GDPR, or
this is legally permissible and necessary for the fulfillment of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.

A commissioning of service providers in a third country only takes place if the special requirements of Art. 44 et seq. GDPR are fulfilled.

IV. Rights of data subjects

You have the right:

in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your habitual residence or place of work or the place of the alleged infringement for this purpose.

V. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. This also applies to profiling, insofar as it is associated with such direct advertising.

VI. Right to revoke consent under data protection law

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.

VII. Up-to-dateness and changes to this data protection declaration

This privacy policy is current as of October 2023.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current data protection declaration at any time from the website at https://forevermind.de/datenschutz/.