This privacy policy informs you in accordance with Art. 13 GDPR about which personal data we process when you visit this website, contact us or use the SafetyCampus Client Area, for which purposes and on which legal basis. In case of doubt, the German version prevails.
1. Summary
- This is a static website without a content management system or user accounts.
- We use no cookies, no tracking, no third-party analytics and no advertising services. We only count anonymously how often pages are viewed and files are downloaded (section 5).
- Fonts and icons are hosted locally; visiting a page does not transfer any data to third parties such as Google.
- We only process personal data where technically necessary (server log files) or where you provide it yourself (contact form, email, phone, Client Area).
2. Controller
biosafety4u.berlin GmbH
represented by its managing director Christian Lange
Schulzestraße 20
13187 Berlin, Germany
Phone: +49 (0)157 75726939
Email: service@biosafety4u.berlin
3. Hosting and server log files
This website is hosted by DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany, a company of the GoDaddy group. According to the provider, its servers are located in data centres in Strasbourg (France) and Cologne (Germany) (DomainFactory: technology), i.e. within the European Union. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR.
Each time the website is accessed, the server automatically records the following data in log files: IP address, date and time of access, requested page or file, amount of data transferred, HTTP status code, referrer URL, browser type and version, and operating system.
The purpose is the secure and error-free provision of the website, in particular defence against attacks and error analysis. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in stable and secure operation. The data is not combined with other data sources. The host deletes the log files automatically after its defined retention period.
4. Encryption
The website is delivered exclusively via a TLS-encrypted connection (https). Data you send to us – for example via the contact form – cannot be read by third parties in transit.
5. No cookies, anonymous visit counting, no external content
This website does not store cookies and does not access information on your device. Consent under Section 25 of the German TDDDG is therefore not required, and there is no cookie banner. Fonts (Roboto) and icons (Font Awesome) are loaded from our own server. Maps, videos or social media plugins are not embedded.
Anonymous visit counting
To understand which content is used, we count on our own server how often a page is viewed and a file (e.g. a PDF) is downloaded. For this purpose, each page loads an invisible image file from our server; downloads are counted when the file is delivered. Only the address of the page or file, the date and the number of requests are stored. IP addresses, browser details or other characteristics are not stored; no cookies are set, no information is read from your device and no usage profiles are created. The browser identifier is only checked at the moment of the request so that automated requests (search engines, bots) are not counted. No data is passed on to third parties; the figures are stored exclusively on our web server in the EU.
As no personal data is stored, the statistics do not allow any conclusions about you. Insofar as your IP address is briefly processed for technical reasons during the request, section 3 applies; the legal basis is Art. 6 (1) (f) GDPR, our legitimate interest lies in designing our website according to demand.
Icons and links to other services (e.g. LinkedIn, Google Maps, Matrix) are plain links. Only when you click such a link do you leave our website; the respective provider is then responsible for any processing.
6. Contact form
When you write to us via the contact form, we process your name, email address and message in order to answer your enquiry. The form is passed to a script on our server that sends the information as an email to our mailbox service@biosafety4u.berlin. The form data is not stored on the web server.
To protect against spam, we use an invisible check field, a timestamp and a limit on the number of requests. For this limit, a non-reversible hash of your IP address is kept on the server for a maximum of one hour and then deleted. We do not use third-party services such as captcha providers.
The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries and preventing abuse). We delete your enquiry once it has been dealt with, unless statutory retention obligations apply (e.g. for business correspondence under Section 257 HGB and Section 147 AO).
7. Contact by email, phone or Matrix
If you contact us by email, phone or Matrix, we process your details (e.g. name, contact details, content of your enquiry) to deal with your request. Legal bases and retention periods are as described in section 6.
8. SafetyCampus Client Area
The menu item “Client Area” leads to our licence-based customer area at www.sicherheitsfachkraft.berlin/webapps/. It is a separate web application outside this website. biosafety4u.berlin GmbH (section 2) is also the controller there. The Client Area is excluded from search engines and is operated on the servers of our hosting provider (section 3).
Licence check
- To sign in, you enter your organisation's licence key. A central licence server checks the key and returns the list of apps and documents released to you.
- We process the licence key, the associated licence data (organisation, released apps, term) and technical connection data, including the IP address in the server log files.
- There are no personal user accounts and no passwords. We recommend not linking the licence key to personal data.
Storage in your browser
- So that you do not have to enter the key every time, the Client Area stores the licence key, your privacy confirmation, your language choice and the most recently loaded overview in your browser's local storage (localStorage). Activated SafetyCampus apps use the same storage and can then also work offline.
- This storage is strictly necessary for the service you have explicitly requested (Section 25 (2) No. 2 TDDDG). It remains until you sign out via “Enter another key” or “Sign out”, or delete the site data in your browser. Please sign out after use on shared devices.
- Content you enter in the apps generally remains in your browser or in files you export yourself; it is not transferred to us unless an app expressly states otherwise.
Requests, tickets and downloads
- Via the integrated ticket system and the buttons “Add”, “Register interest” or “Request trial access” you can send us requests. We process the licence key, organisation, contact person, email address, optionally a phone number, the content of your request and our replies. Notifications are sent by email.
- Some buttons open your own email program with a prepared message to service@biosafety4u.berlin; data is only transmitted when you send the email yourself.
- When you download released documents, the server checks the authorisation of your licence key; server log files are generated in the process.
Legal bases and retention
The legal basis is Art. 6 (1) (b) GDPR (performance of the licence or service contract and pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in secure licence operation and in handling requests). We store licence data for the duration of the contractual relationship and tickets until the matter is closed; the data is then deleted unless statutory retention obligations apply.
9. Recipients
Apart from us, the only recipients of your data are our hosting and email providers as processors. We do not intend to transfer data to countries outside the EU/EEA. We do not sell data or use it for advertising.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR). Simply contact service@biosafety4u.berlin.
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.
11. Further information
You are under no statutory or contractual obligation to provide personal data; without it, however, we cannot answer enquiries or check a licence. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
We will update this privacy policy if our website, the Client Area or the legal situation changes. The version published here applies.
