The data controller according to Art. 4(7) EU General Data Protection Regulation (GDPR) is

Dr. Lukas Twardon
Dammwiese 23
33613 Bielefeld
Germany

Phone: +49 521 94594201
E-Mail: mail@icot.de

When you use icot.de, data collection is minimized. The website collects and processes data from its users when necessary to provide the service. In addition, personal data may be processed if the data processing is necessary for financing, securing, or improving the service, or if required by law, or if you give your consent.

The website icot.de is hosted by an external service provider (Hetzner Online GmbH) whose certified data centers are located exclusively within the EU. In the hoster's log files, the anonymized IP address of the user, the browser used (if transmitted), the operating system used, and the time of the request are stored. In order to ensure data protection-compliant processing, a data processing agreement (DPA) has been concluded with the hoster.

The anonymized log files are stored permanently on the server.

Cookies are small text files that are temporarily stored on your device when you visit a website and enable the identification of the web browser when you visit it again. When using icot.de, no cookies are set.

All data are transmitted via HTTPS which uses TLS encryption. This means that data sent from your device to the server or vice versa cannot be read by third parties.

When you send a message to mail@icot.de, it may be stored in order to process it, to improve the service and support, or to contact you.

The data controller according to the GDPR for the Pinterest and LinkedIn pages of the internet cafe of things is the respective provider, i.e., Pinterest Europe Limited or LinkedIn Ireland Unlimited, together with me. Data processing in connection with the social media pages is carried out in accordance with Art. 6(1) f GDPR based on my legitimate interest in communication and public relations. Your data (e.g., comments, postings, likes, pictures, or videos) are published by the respective provider. I do not use this data for other purposes. I may share your posts on the respective platform if this feature is available. I also reserve the right to delete content from my social media pages if possible and necessary. Pinterest and LinkedIn use cookies and similar technologies. For data transfers to the U.S., the providers rely on model contract clauses which have been approved by the European Commission as a means of ensuring adequate protection when transferring data outside of the EU. I have very limited control over how Pinterest and LinkedIn process your data. For more information, please visit https://policy.pinterest.com/privacy-policy or https://linkedin.com/legal/privacy-policy.

According to the EU General Data Protection Regulation (GDPR), you have the following rights as a data subject:

• Right of access: You have the right to obtain from me as the controller access to personal data concerning you and further information as per Art. 15 GDPR.
• Right to rectification: You have the right to obtain from me the rectification or completion of personal data concerning you that is inaccurate or incomplete.
• Right to erasure: You have the right to obtain from me the erasure of personal data concerning you if one of the grounds referred to in Art. 17 GDPR applies.
• Right to restriction of processing: You have the right to obtain from me restriction of processing if one of the conditions referred to in Art.18 GDPR applies.
• Right to be informed: You have the right to obtain from me the communication of any rectification, erasure, or restriction of processing of personal data concerning you to each recipient to whom personal data have been disclosed, unless this is impossible or involves disproportionate effort. You also have the right to obtain from me information about these recipients.
• Right to withdraw your consent: You have the right to withdraw your consent to the processing of your personal data at any time.
• Right to data portability: You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.
• Right to object: You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6(1) e or f GDPR.
• Right to object to automated processing You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

I reserve the right to change this data policy. The current version is always available on the website.