1. General data protection declaration
Data protection and data security is very important for us as at The Product Lab. The protection of your privacy is important to us. Therefore the protection of personal data has priority during all business processes. We respect your personality and privacy and ensure their protection as well as the processing of your personal data in accordance with the law.
With this data protection declaration we inform you which data we process from you, for what we need these data, how you can object to the data collection and which further rights you have.
The Product Lab is responsible for the processing of your data.
If you have any questions or suggestions regarding data protection, please contact us by email to:
2. Collection of personal data
In the context of this data protection declaration, personal data refers to all data relating to an identifiable user of our services. This includes both persons who use our website for information purposes and persons who use other services, regardless of whether they register with us.
As The Product Lab we collect in particular those personal data which are necessary for the conclusion and the execution of service contracts with you as The Product Lab customer. In addition, we collect the personal data that you as a user disclose when registering for one of our services and during other contacts with us. This includes in particular the following categories of personal data:
User data that you provide when registering for a The Product Lab service (e.g. personal data and service-specific settings).
Non-personal information collected as a result of technical processes involved in using the The Product Lab website or services, and IP addresses.
In detail, these can be the following data, not exhaustively enumerated:
Your personal data
Name and first name
Identification numbers of technical devices
Online customer account information (including opening date, user names, profile pictures)
Data on user activities
Customer service information
Session data related to visits to Internet sites, apps for mobile devices or offers on Internet platforms, multimedia portals or social networks (including duration and frequency of visits, language and country preferences, information about browsers and computer operating systems, Internet protocol addresses, search terms and search results).
Location-based data when using mobile devices
Communications via telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages, or instant messaging.
We reserve the right to collect such personal data from third parties and process it together with the other data of the user in accordance with the provisions of this data protection declaration. Users shall be reasonably informed of this data collection.
3. Processing purposes
At The Product Lab we process the personal data collected primarily to fulfil our contractual obligations and to provide our services. All data processing is carried out only for specific purposes. These may, for example, result from technical necessity, contractual requirements, statutory provisions, overriding interest, i.e. for legitimate reasons, or your express consent.
We collect, store and process personal data to the extent necessary, for example for the administration of customer relations, the provision of our services and products, the answering of questions and concerns, information on our products and services and their marketing, support in technical matters as well as the evaluation and further development of services and products.
Visit the website:
For technical reasons, we must collect and store certain data when you visit our website (the date, duration of the visit, the websites used, the browser used and its version, the operating system used and its version, Internet protocol addresses and the website from which you are visiting us).
Legal basis of the processing:
Insofar as we obtain your consent for the processing of personal data, this serves as the legal basis as per GDPR regulations.
In the case of the processing of personal data which is necessary for the fulfilment of a contract with you, the contract is the legal basis according GDPR. GDPR shall also apply to processing operations which are necessary for the implementation of pre-contractual measures, e.g. in cases of inquiries regarding our products or services.
If our company is subject to a legal obligation which makes the processing of personal data necessary, for example to fulfil tax obligations, the processing is based GDPR regulation.
In the case of justified interests on our part as the responsible party or of a third party, the processing is based on GDPR.
Most browsers are set to accept cookies. As a user, you are free to prevent this generally in the browser settings or to select the setting in such a way that each storage of a cookie must be accepted. You can also delete each stored cookie individually. We draw your attention to the fact that the deactivation or deletion of a cookie can lead to individual parts of our website or web services no longer functioning correctly and completely.
5. Web analysis tools
In order to constantly improve our offers and to make our website and services as user-friendly as possible, we use technologies that enable an analysis of the use of the website by users. The evaluations carried out in the process allow us to identify in particular how many users visit our website and services and in what way. The evaluations are anonymous and do not allow any personal reference and are used exclusively for statistical purposes as well as for the further development and improvement of our website and services. As a user, you are free to object to the collection of such data.
Google Analytics: We use Google Analytics as our web analytics tool. The provider of Google Analytics is Google Inc, a company of the holding company Alphabet Inc, based in the USA. The anonymous IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google Inc., in no case will the IP address be associated with other data relating to the user.
For more information about the web analytics service used, please visit the Google Analytics website. You can object to the processing of your data by the Google web analysis service either by using a browser add-on plugin or by setting the opt-out cookie.
resolution purpose offerer Address
Google Analytics web analytics Google LLC 1600 Amphitheatre
Mountain View, CA 94043
USA – data protection
– opt-out plugin
6. Other third party services which are included on our website
To provide you with an excellent service on our website, we use the following third party services:
Wix : we use wix as host for our website
7. Disclosure of personal data and outsourcing
We do not disclose personal data to third parties without obtaining the consent of the customer concerned. We reserve the right to impose statutory duties to provide information on authorities.
We may outsource the processing of personal data to external contractors. We at The Product Lab ensure compliance with data protection and data security. Contractors shall be obliged to process the data only as we are entitled to do ourselves. It is ensured that the commissioned companies do not use the data beyond the scope of the specific order and that they do not use the data for their own purposes or pass it on to third parties. We are granted the appropriate audit and control rights for this purpose.
If necessary, data processing is transferred to contractors abroad. We make sure that the data is mainly processed in EU countries. If the data is processed outside the EU, we ensure compliance with data protection and data security through additional guarantees, in particular through contractual obligations on the part of the contractors.
We mainly host our own systems and data ourselves. The servers used are located exclusively in the European Union.
8. Data security
We use appropriate technical and organizational measures to protect the data from loss, destruction, falsification or unauthorized access.
As The Product Lab, we do not assume any liability for the security of the information transmitted on the Internet to the extent permitted by law.
9. Storage obligation / deletion of data
We will retain users’ personal information for as long as it is necessary or appropriate to comply with applicable laws or as long as it is necessary for the purposes for which it was collected. We delete personal data as soon as they are no longer needed and in any case after the maximum retention period prescribed by law has expired.
10. Right of access, right to rectification, right to cancellation, right to limitation of processing, right to data transfer, right of objection and right of appeal
According to the EU Data Protection Basic Regulation you have the following rights as a user:
Right to information:
You can request information at any time about what data about you is stored, processing purposes, any recipients of the data and the planned storage period.
Right to rectification:
You have the right to correct your personal data if it is incorrect or no longer up to date.
Right to deletion (“right to be forgotten”):
You have the right to request the deletion of your personal data. Legal or contractual storage obligations of 89 degrees remain reserved here.
Right to limitation of processing:
Under certain circumstances, you may request that your personal data be restricted for processing (blocked) if deletion is not possible or the obligation to delete is in dispute.
Right to data transferability:
You have the right to transfer those data which you have provided to us on the basis of a consent or a contract (data transferability). This means that you can receive the data that you have provided to us in a common machine-readable format such as CSV and, if necessary, transmit it to others.
Right of objection:
If you have given us your consent to data processing, you can revoke it at any time with effect for the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation.
Right of appeal:
You have the right to lodge a complaint with a supervisory authority.
To exercise your rights, please either send an email to the following email address: