1. name and contact details of the controller

This privacy notice applies to data processing by:

Person responsible: BOTfriends GmbH
Address: Eichhornstr. 28 97070 Würzburg, Germany
Phone: 0931 80474739
E-mail: [email protected]

2. contact details of the data protection officer

You can contact our data protection officer at the following address:
E-mail: [email protected]
SiDIT GmbH, Ms. Delphine Lambert, Langgasse 20, 97261 Güntersleben, Germany

3. collection and storage of personal data, as well as the type and purpose of such data and their use

a) Collection and storage

When you first contact us and/or enter into a contract with us, we typically collect the following information:

• Salutation, first name, last name of the designated contact persons
• Address (if different: billing address)
• a valid e-mail address
• Bank details
• Aggregated usage
• Browser type
• Device identifier
• Device model
• Device drive system
• Domain name
• Viewed files
• Frequency of use of the mobile application
• Geographical location
• Internet service provider
• IP address
• Duration of the page visit
• Mobile application information
• Operating system version
• Performance data
• Referrer URL
• Time of access or retrieval
• Where the application was downloaded from
• Clickstream data
• Events occurring within the application
• Navigation information
• Pages viewedHubSpot Forms:
  The following data is collected to provide online forms:
• User agent data
• IP address
• Browser type
• Internet service provider
• Company name
• HTML pages
• Information from third-party sources
• Device drive system
• Usage data
• Telephone number
• Referrer URL
• Session duration
• Device type
• Visited pages
• Click path
• Domain name
• Contact information
• Date and time of the visit
• Device identifier
• Geographical location
• E-mail address
• Data collected via forms on the website
• be provided

We will assign you a customer number in our system.

b) What do we process your data for (purpose of processing) and on what legal basis?

In the following, we inform you about what we process your data for and on what legal basis.

aa) For the fulfillment of contractual obligations and/or the implementation of pre-contractual measures (Art. 6 para. 1 p. 1 lit. b) DSGVO)

We process your personal data to fulfill contractual obligations and/or carry out pre-contractual measures based on your request, i.e. in particular

• for the performance of the contract;
• for correspondence with you;
• for invoicing;
• for the handling of warranty claims;
• for the settlement of any existing liability claims and the assertion of any claims against you.

bb) Based on your consent (Art. 6 para. 1 p. 1 lit. a) DSGVO)

Insofar as you have given us consent to process personal data, the respective consent is the legal basis for the processing referred to therein.
This concerns in particular

• Collection and storage of further personal data
• Promotional speeches by telephone or e-mail
• Salutation, first name, last name of the designated contact persons
• Address (if different: billing address)
• a valid e-mail address
• Bank details
• Aggregated usage
• Browser type
• Device identifier
• Device model
• Device drive system
• Domain name
• Viewed files
• Frequency of use of the mobile application
• Geographical location
• Internet service provider
• IP address
• Duration of the page visit
• Mobile application information
• Operating system version
• Performance data
• Referrer URL
• Time of access or retrieval
• Where the application was downloaded from
• Clickstream data
• Events occurring within the application
• Navigation information
• Pages viewedHubSpot Forms:
  The following data is collected to provide online forms:
• User agent data
• IP address
• Browser type
• Internet service provider
• Company name
• HTML pages
• Information from third-party sources
• Device drive system
• Usage data
• Telephone number
• Referrer URL
• Session duration
• Device type
• Visited pages
• Click path
• Domain name
• Contact information
• Date and time of the visit
• Device identifier
• Geographical location
• E-mail address
• Data provided via forms on the website

You can revoke consent at any time with effect for the future. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

cc) Within the framework of the balancing of interests (Art. 6 para. 1 p. 1 lit. f DSGVO)

We may also use your data on the basis of a balance of interests to protect the legitimate interests of us or third parties. This is done, for example, for the following purposes:

• Maintaining an order history for our future services
• For customer advice and support and sales
• General business management and further development of services and products
• Advertising, market and opinion research
• Birthday, Christmas or other greetings by mail
• Creditworthiness data

Our interest in the respective processing results from the respective purposes and is otherwise of an economic nature. As far as possible and appropriate, we process your data pseudonymously or anonymously.

dd) Due to legal requirements (Art. 6 para. 1 p. 1 lit. c) DSGVO)

We are subject to various legal obligations, such as statutory commercial storage and documentation obligations (from HGB, StGB or AO).

4. processing of special categories of personal data (Art. 9(2)(a) GDPR)

The processing of your special category of personal data is based on your consent pursuant to Art. 9 (2) lit. a DSGVO. You can revoke consent at any time with effect for the future. This also applies to declarations of consent that you gave to us before the DSGVO came into force, i.e. before May 25, 2018. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

5. disclosure of data to third parties and processors

The transfer of personal data is also processing within the meaning of the previous section 3. However, we would like to inform you again here separately about the subject of transfer to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
A transfer of your personal data to third parties usually takes place for the following purposes.

• Processors with whom we have concluded an agreement pursuant to Art. 28 DSGVO
• Shipping (e.g. shipping service provider)
• Payment (e.g. payment service provider)
• Accounting (e.g. tax consultant)
• Litigation (e.g. lawyer)
• Communication platform (e.g. e-mail, WhatsApp, other messenger services)
• Authorities, if applicable

Data processing shall take place exclusively in a member state of the European Union or in another state party to the Agreement on the European Economic Area. Any transfer to a third country shall only take place if the special requirements of Art. 44 et seq. DSGVO are fulfilled.

6. deletion

We will erase your personal data once those data are no longer necessary for the purposes for which they were collected or otherwise processed, and where the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

7. data subject rights

You have the right:

- in accordance with Art. 7 (3) DSGVO to revoke your consent once given to us at any time. This means that we may no longer process the data based on this consent in the future.
based on this consent, may no longer be continued in the future;

• in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
• in accordance with Art. 17 DSGVO to request the erasure of your personal data stored by us, insofar as it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
• in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, and
• complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.

8. right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation. If you wish to exercise your right to object, simply send an e-mail to [email protected].

Status: 04.08.2023