BotReach Logo

Privacy Policy

We appreciate your visit to our website. Privacy is crucial to us, and we want you to feel secure while visiting our site.

You can visit our website without providing your personal information. However, as soon as you use individual functions, services or offers on our site, personal data may be processed. We collect, process and use only personal data, as far as you have consented to the collection, processing, and use or a similar legal basis exists.

We reserve the right to change the Privacy Policy at any time with future effect. The current version of the privacy policy can be accessed, saved and printed on our website at any time.

Below we will inform you in detail about the nature, extent, and purpose of the personal data collected, used and processed by us and explain the rights you have as the data subject.

Name and Address of the Person Responsible

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Philipp Reinking

Im Mediapark 5, c/o STARTPLATZ

50670 Cologne

Phone: +49 (0) 171 6500 980

Email: phil@botreach.co

Access Data in Server Log Files

Every time a visit on our website occurs, we automatically store access data in so-called server log files.

This includes the date and time of retrieval, amount of data transferred and, if necessary, the name of the requested file, browser and version used, the operating system used, IP address, requested URL including subpage, referrer URL (URL that you visited immediately before) and the requesting provider.

The temporary storage of the IP address by the system is necessary to allow delivery of the website to your browser. For this, your IP address must remain stored for the duration of the session.

The legal basis for the temporary storage of your data and log files is Art. 6 para. 1 lit. f GDPR.

This information is used solely to ensure the continued and correct operation of the website and to improve the content of our site, as well as for submission to law enforcement authorities in the event of a cyber attack and to ensure the security of our information technology systems. An evaluation of your data for marketing purposes does not take place in this context.

For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

The data of the server log files are stored separately from all other personal data provided by you.

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of our website. There is consequently no possibility of contradiction.

Use of Cookies

To make the visit to our website attractive and to enable the use of specific functions, we use "cookies" on our website. These are small text files that are stored and saved on your device via a browser.

Many cookies contain a so-called cookie ID. It consists of a string through which websites and servers can be assigned to a specific browser in which the particular cookie was stored. After the end of the browser session, most of the cookies we use will be deleted again ("session cookies"). The persistent cookies ("persistent cookies") remain on your device.

The following data is stored and transmitted in the cookies: language settings, CSRF security tokens.

Your data collected on our website will be pseudonymized by technical means. Therefore, it is no longer possible to assign the data to you. The data will not be stored together with other personal data.

The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f GDPR.

The purpose of using technically necessary cookies is to facilitate the use of our websites for you (for example, we store your shopping cart). Some features of our site cannot be offered without the use of cookies. For these, it is necessary that your browser is recognized even after a page break. The non-acceptance or deactivation of cookies may limit the functionality of our website.

The use of analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how, and so we can continuously optimize our offer.

For these purposes, our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f GDPR.

Some of our third-party services may use cookies. Please inform yourself about the respective functioning and data processing on the websites of the individual providers. The services we use can be found in this privacy policy.

Cookies are stored on your device and transmitted to our website. You, therefore, have control over the use of cookies. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general, or set so that the setting of cookies is prevented and thus the setting of cookies permanently contradict. Also, you can delete already set cookies at any time via your browser. The transmission of Flash cookies cannot be prevented by the settings of your browser, but by changing the settings of the Flash Player. This also applies to all third-party cookies listed below.

Data Collection and Use at Registration

You have the possibility to register on our website. In this case, we collect the personal data that you voluntarily provide to us as part of your registration. The data collected is shown in the respective input forms.

The legal basis for processing your data is accordingly Art. 6 para. 1 lit. b GDPR.

We only use the data provided by you to process the contract and offering our services to be provided under the contract. We may also share your information with one or more processors (such as payment service providers) who also use or use your information solely for internal use on our behalf.

We also store your IP address and the date and time of registration to prevent the misuse of our website and the services offered and, if necessary, to investigate past offenses committed. The storage of this data is therefore required for our protection. The legal basis for the processing of personal data is Art. 6 (1) lit. f GDPR. In the purposes mentioned above, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

Disclosure of this data to third parties is not, as long as there is no legal obligation to disclose or the disclosure of law enforcement serves.

After complete completion of the contract or deletion of your account, your data will be blocked for further use and deleted after expiration of the statutory retention periods, unless you have expressly consented to a further use of your data, or we reserve the right to use the data, which is permitted by law and about which we will inform you below.

Use of our Chatbot

Insofar as you use our chatbot within the scope of offers from our customers and provide personal data in the course of using the chatbot, the personal data you provide will be automatically saved.

We process this data exclusively on behalf of our customers for processing your specific request to the chatbot. The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.

For further information on the collection and processing of your data by our customers, please refer to the respective privacy policy of our customer.

Google Analytics

We used Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google Analytics") on our website. The generated information about your use of this website is usually transmitted to a Google server in the USA and stored there. The US is an insecure third country. However, Google Inc. has voluntarily certified under the US-EU Privacy Shield and is committed to complying with EU privacy requirements.

The legal basis for the processing of personal data is Art. 6 (1) lit. f GDPR.

Google Analytics uses methods that allow you to analyze the use of the website by you, in particular from which site you have come to our website (so-called referrers), to which subpage you access or how often and for which length of stay you view a subpage. Google Analytics uses cookies. Each visit to a page on our site that integrates Google Analytics automatically causes your browser on your device to submit data to Google Analytics for analysis.

By activating the IP anonymization on our website, the IP address will be shortened before transmission within the member states of the European Union or in other contracting countries of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymized IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with other services related to the use of this website and the internet.

For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

Google will also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. In this case, pseudonymous user profiles of the processed data can be created.

You may prevent the collection of the data (including your IP address) generated by the cookie and related to your use of our website to Google as well as the processing of this data by Google by using the link http://tools.google.com/dlpage/gaoptout Download and install the available browser add-on. Google considers the installation of the browser add-on as a contradiction.

As an alternative to the browser plug-in or within browsers on mobile devices, please click this link to disagree with the collection and use of your data by Google Analytics with future effect. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.

The Terms of Use and Privacy Policy of Google and Google Analytics can be found here https://www.google.com/intl/en/policies/privacy/ or here http://www.google.com/analytics/terms/en.html.

Integration of Third-Party Content

On our website, we partly integrate third-party content, such as maps from Google Maps and Apple Maps, RSS feeds or graphics from other websites/providers. To display this content, it is necessary to transfer your IP address to the third party. Therefore, when you visit our website, your browser will establish a direct connection with the servers of the respective third-party provider. Your browser will automatically be prompted by the content embedded on our site to download a representation of the relevant third-party component. As part of this technical process, the third party will be aware of the specific bottom of our site you are visiting.

By clicking on the content, you consent to the data transfer to the respective third party.

The legal basis for the processing of your data after your consent is Art. 6 para. 1 lit. a GDPR.

Unfortunately, we do not influence whether the third party provider collects or stores the IP address for other purposes beyond merely displaying the content. If we become aware of such use, we will inform you in this Privacy Policy.

Newsletter and Analysis by Mailchimp

You can register to receive our newsletter. To send our newsletter, we use the newsletter mailing service MailChimp, which is operated by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA ("Mailchimp"). We provide data to MailChimp in the United States as described below. The US is an insecure third country. However, MailChimp has voluntarily certified under the US-EU Privacy Shield and is committed to complying with EU privacy requirements.

Our newsletter is published regularly and contains information about updates of our products, tips and best practices for using conversation and chatbot marketing, notes on blog posts, workshops and lectures.

To register, you must tell us your email address. You can voluntarily provide us with additional information, such as your name. The application takes place in a so-called double-opt-in procedure. After registering on our website, you will receive a confirmation e-mail from us, in which you have to confirm the registration again. This entire process is documented and stored. This includes both the storage of the registration and the confirmation time, as well as your IP address. The collection of this data is required so that we can understand the processes in case of misuse of the e-mail address, and therefore serves our legal protection. By subscribing to our newsletter, you agree to its receipt.

The legal basis for processing your data after registering for the newsletter is if you have given your consent, Art. 6 para. 1 lit. a GDPR.

Your data will be stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter. The evaluation takes place on our behalf, but MailChimp can also use the data for quality assurance and to improve the quality of their services.

For example, the "web beacon" contained in the newsletter is retrieved from the MailChimp server when the newsletter is opened. This retrieves information about the browser, your system, your IP address, and the time it was retrieved. Also, the information is collected whether the newsletter is opened, when it is opened and which links are clicked. These statistical surveys are used for the technical improvement of the services described above.

Your consent to the storage and use of your personal data for the receipt of the newsletter and the statistical survey described above, you can revoke at any time with effect for the future. To revoke your consent, you can use the provided link in the newsletter or send us your revocation by email to the following address: privacy@botreach.co.

Your data will be deleted as soon as it is no longer necessary to achieve the purpose of the survey. Your e-mail address will, therefore, be saved as long as the subscription to the newsletter is active.

For further information on data protection, please refer to the privacy policy https://mailchimp.com/legal/privacy/ of MailChimp.

Email

On our website, we provide information by law that allows us to contact us electronically as well as communicate with us directly. This includes above all our email address. As far as you contact us by email, the personal data you provide will be automatically saved.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the establishment of contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

However, we use the personal data you provide only for the processing of your specific request. The given data will always be treated confidentially.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data sent by e-mail, this will be the case when the conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.

You have the opportunity to revoke your consent to the processing of your personal data at any time. If you contact us, you can object to the storage of your personal data at any time. In such a case, the conversation cannot continue.

Payment Service Stripe

We have engaged Stripe Payments Europe Ltd, Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland ("Stripe") to process our payment process.

If you choose "credit card" as a payment option during the order process, your data will automatically be transmitted to Stripe. By choosing one of these payment options, you consent to the transfer of your personal data described below.

We provide Stripe with the following information: first name, last name, address and other data required for payment. For the settlement of the payment also necessary personal data are necessary, which stand in connection with your respective order. In particular, there may be a reciprocal exchange of payment information, such as card number, expiration date, and CVC code, order data, prices and taxation or information on previous order behavior.

The purpose of the data transmission is solely payment processing. The legal basis for processing your data is accordingly Art. 6 para. 1 lit. b GDPR.

Stripe may also disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill the contractual obligations or to process the data on behalf of.

For more information on privacy, please refer to the Privacy Policy https://stripe.com/en/privacy#translation of Stripe.

Data Security

We secure our website and other systems through numerous technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. However, despite regular checks, full protection against all dangers is not possible and can not be granted by us. For this reason, you are always free to submit your personal data in other ways, such as by phone or by post to us.

Legal Basis for the Processing of Personal Data

As far as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis for the processing of personal data.

In the processing of personal data required to fulfill a contract of which you are a party, Art. 6 para. 1 lit. b GDPR as a legal basis. This also applies to process operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR as a legal basis.

In the event that your vital interests or the vital interests of another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as a legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as a legal basis for processing.

Legitimate Interests in Processing

Is the processing of your personal data based on Article 6 I lit. f DS-GMO, is our legitimate interest unless otherwise stated to carry out our business. Incidentally, we have specified our purposes and interests in the context of the above list of processing.

Data Deletion and Storage Duration

Your personal data will be deleted or blocked as soon as the purpose of the storage is removed or you revoke your consent. Storage may also take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. If the purpose of the storage is omitted, if you revoke your consent, or if a storage period prescribed by the European Directives or any other relevant legislature expires, the personal data will be routinely and in accordance with the statutory provisions blocked or deleted, unless there is a need for further storage the data for a contract or a contract.

Right to Information

You also have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. You also have the right to information regarding the following information:

  • the processing purposes,
  • the categories of personal data being processed,
  • the recipients or categories of recipients to whom the personal data have been or are being disclosed, in particular in the case of beneficiaries in third countries or international organizations,
  • if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration,
  • the existence of a right to rectification or erasure of personal data concerning them or of processing by the person responsible or a right to object to such processing,
  • the existence of a right of appeal to supervisory authority,
  • if the personal data are not collected from the data subject: all available information on the source of the data and,
  • the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.

You also have the right to know whether personal data has been transmitted to a third country or to an international organization. If this is the case, then you have the right to obtain information about the appropriate guarantees in connection with the transfer.

Right to Correction

You have the right to demand immediate correction and/or completion of any incorrect or incomplete personal data concerning you. We have to correct this immediately.

Right to a Restriction of Processing

You have the right to ask us to restrict processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject for a period that allows the data controller to verify the accuracy of the personal data.
  • The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data.
  • The data controller no longer needs the personal data for processing purposes, but the data subject requires them to assert, exercise or defend their rights.
  • The person concerned has objected to the processing acc. Art. 21 para. 1 DS-GVO and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the person concerned.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the limitation of the processing according to the o.g. If conditions are restricted, you will be informed by us before the restriction is lifted.

Right to Cancellation

You have the right to request that the personal data concerning you be deleted without delay, provided that one of the following reasons is satisfied and the processing is not required:

  • The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
  • The data subject withdraws the consent on which the processing was based on Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and lacks any other legal basis for the processing.
  • The data subject submits an objection to the processing pursuant to Article 21 (1) DS-GVO, and there are no legitimate reasons for the processing or the person concerned objects to the proceedings pursuant to Art. 21 (2) GDPR Processing.
  • The personal data was processed unlawfully.
  • The deletion of personal data is required to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
  • The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DS-BER.

If the personal data have been made public by us and if we as the person in charge are obliged to delete personal data pursuant to Art. 17 para. 1 DS-GVO, we shall take appropriate measures, including technical ones, for others, taking into account the available technology and the implementation costs (a) inform data controllers processing the published personal data that the data subject has requested the other data controllers to delete all links to such personal data or to make copies or replicas of such personal data; Processing is not required.

The right to delete does not exist if the processing is required:

  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of the official authority conferred on the controller;
  • for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
  • for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
  • to assert, exercise or defend legal claims.

Right to Briefing

If you have used the right to rectify, delete or restrict the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right of us to be informed about these recipients.

Right to Data Portability

You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance by us, if the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or Article 6 (1) (b) of the GDPR and processing by automated means, unless the processing is necessary for the performance of a task of public interest or in the exercise of official authority which delegates it to us has been.

Furthermore, in exercising your right to data transferability under Article 20 (1) of the GDPR, you have the right to obtain that your personal data are transmitted directly by us to another person responsible, provided that this is technically feasible and if this is not the case Rights and freedoms of others.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

Right to an Objection

You have the right to object to the processing of personal data concerning you on the basis of your particular situation at any time in accordance with Article 6 (1) (e) or (f) of the GDPR. This also applies to profiling based on these provisions.

In the event of an objection, we will no longer process personal data unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights, and freedoms, or the processing is intended to assert, exercise or defend legal claims.

If we process your personal data in order to operate direct mail, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, as far as it is associated with such direct mail. If you object to our processing for direct marketing purposes, we will no longer process your personal data for these purposes.

You also have the right, for reasons arising from your particular situation, against the processing of your personal data relating to you, which takes place with us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DS-BER, Objection, unless such processing is necessary to fulfill a public interest task.

You can contact us at any time to exercise the right of opposition. In addition, in the context of the use of information society services, regardless of Directive 2002/58 / EC, they are free to exercise their right of opposition through automated procedures using technical specifications.

Right to Revoke a Data Protection Consent

You have the right to revoke your consent to the processing of personal data at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to Automated Decisions in Individual Cases, including Profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner, if the decision

  • is not required for the conclusion or fulfillment of a contract between you and us or
  • is permitted by Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  • with your express consent.

Is the decision

  • required for the conclusion or fulfillment of a contract between you and us or
  • it takes place with your express consent,

We take reasonable steps to safeguard your rights and freedoms, as well as your legitimate interests, including at least the right to obtain the intervention of a person on our part and to challenge the decision.

Existence of Automated Decision Making

We do not do automatic decision making or profiling.

Right to Complain to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the GDPR violates.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

Last updated: April 2018