DATA PRIVACY AGREEMENT
Privacy Policy
1. Data Controller
Pheno-Inspect GmbH
Friesenstraße 46
45476 Mülheim an der Ruhr
Germany
E-mail: [email protected] Website: https://www.phenoinspect.eu
Represented by: Dr. Philipp Lottes (Managing Director), Dr. Josef Exler (Managing Director)
2. General Information on Data Processing
Protecting your personal data is very important to us.
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This Privacy Policy explains which data we collect, how we use it, and what rights you have.
3. Collection and Storage of Personal Data
3.1 When Visiting Our Website
When you visit our website https://www.phenoinspect.de, your browser automatically transmits certain information to our server.
This information is temporarily stored in log files and may include:
-
IP address of the requesting device
-
Date and time of access
-
Name and URL of the accessed file
-
Referrer URL (the website previously visited)
-
Browser type and operating system
The processing of this data is based on Art. 6 (1) (f) GDPR, reflecting our legitimate interest in ensuring the website's stability, functionality, and security.
This data is not combined with other data sources or used for profiling.
3.2 When Using the Contact Form
If you contact us via the online contact form, we collect the following data:
-
Name
-
Email address
-
Message text
We process this data solely for the purpose of responding to your inquiry.
The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract).
Your data will be deleted once the request has been completed, unless legal retention obligations apply.
3.3 When Redirecting to the FarmAnalyzer™ Registration Platform
Our website provides links to register for the FarmAnalyzer™ App.
By clicking "Register Now," you will be redirected to an external registration platform (e.g., https://farm.phenoinspect.com/login/signup/basic-info).
Please note: The FarmAnalyzer™ platform is operated separately and subject to its own Privacy Policy, which can be accessed directly on that platform.
4. Cookies and Consent Management
4.1 Use of Cookies
Our website uses cookies and similar technologies. Cookies are small text files stored on your device.
We distinguish between:
Technically necessary cookies: These cookies are essential for the website to function.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest)
Analysis and marketing cookies: These cookies are only set after your explicit consent.
Legal basis: Art. 6 (1) (a) GDPR (consent)
4.2 Usercentrics Consent Manager
We use Usercentrics to obtain and document your consent for the use of certain cookies.
Provider: Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany
Purpose: Obtaining, managing, and documenting your cookie consents
Data processed:
-
Cookie settings
-
Timestamp of consent
-
Browser and device information
-
IP address (anonymized)
Storage duration: 12 months
Legal basis: Art. 6 (1) (c) GDPR (legal obligation to document consent pursuant to Art. 7 GDPR)
Data processing: Servers in the EU
More information: https://usercentrics.com/privacy-policy/
You can adjust your cookie settings at any time via the cookie banner or in your browser settings.
5. Use of Third-Party Services
5.1 Google Tag Manager
We use Google Tag Manager to manage website tags via a single interface.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Managing website tags (code snippets) without directly modifying the website code
Data processed:
-
IP address
-
Information about visited pages
-
Referrer URL
Google Tag Manager itself does not store cookies or collect personal data. It only triggers other tags that may collect data (e.g., Google Analytics).
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in efficient management and optimization of our website tags)
Data transfer to third countries: USA – safeguarded by EU Standard Contractual Clauses and EU-US Data Privacy Framework
More information: https://policies.google.com/privacy
5.2 Google Analytics 4
We use Google Analytics 4, a web analytics service to evaluate website usage.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Analyzing user behavior, creating statistics about website usage, improving our offering
Data processed:
-
IP address (shortened)
-
Page views and dwell time
-
Browser and device information
-
Location (country/city level)
-
Interactions on the website
How it works: Google Analytics uses cookies and similar technologies to record your usage behavior. The collected information is generally transferred to Google servers and stored there.
IP anonymization: With Google Analytics 4, IP addresses are automatically shortened by Google before storage.
Legal basis: Art. 6 (1) (a) GDPR (consent via Usercentrics cookie banner)
Storage duration: Data we send is automatically deleted after 14 months.
Data transfer to third countries: USA – safeguarded by EU Standard Contractual Clauses and EU-US Data Privacy Framework
Opt-out options: You can prevent data collection by Google Analytics by:
-
Withdrawing your consent in the cookie banner
-
Installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
More information:
-
Privacy Policy: https://policies.google.com/privacy
-
Terms of Service: https://marketingplatform.google.com/about/analytics/terms/
-
5.3 Google Fonts
We use Google Fonts to display fonts consistently across our website.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Optimized and consistent display of fonts
How it works: When you visit our website, your browser loads the required fonts directly from Google servers. Your IP address is transmitted to Google in the process.
Data processed:
-
IP address
-
Browser and device information
-
Referrer URL
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in optimized and consistent display of our website)
Data transfer to third countries: USA – safeguarded by EU Standard Contractual Clauses
More information: https://policies.google.com/privacy
5.4 YouTube Videos (Embedded)
We embed videos from the YouTube platform on our website.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Purpose: Providing and displaying video content
How it works: When you play a YouTube video, cookies are set and data is transmitted to YouTube/Google. YouTube may track your usage behavior and use it for its own purposes.
Data processed:
-
IP address
-
Information about visited pages
-
Device information
-
Date and time of visit
Legal basis: Art. 6 (1) (a) GDPR (consent via Usercentrics cookie banner)
Data transfer to third countries: USA – safeguarded by EU Standard Contractual Clauses
More information:
-
Privacy Policy: https://policies.google.com/privacy
-
YouTube Terms of Service: https://www.youtube.com/t/terms
6. Social Media Presences
We maintain online presences on the following social media platforms:
-
Instagram: https://www.instagram.com/phenoinspect/
On our website, we link to these profiles. When you click on one of these links, you will be redirected to the respective platform. From that point on, the privacy policy of the respective provider applies.
Please note: The social media buttons on our website are implemented as simple links. No automatic tracking takes place unless you actively click on the links.
When you visit our social media profiles, the operators may collect data about you and process it for their own purposes. We have no control over this data processing.
Legal basis for linking: Art. 6 (1) (f) GDPR (legitimate interest in public relations and customer communication)
More information on the providers' privacy policies:
-
Instagram (Meta): https://privacycenter.instagram.com/policy/
-
YouTube (Google): https://policies.google.com/privacy
7. Data Sharing and Third Countries
Personal data will only be transferred to third parties if:
-
you have given your explicit consent (Art. 6 (1) (a) GDPR),
-
it is necessary to fulfill contractual or legal obligations (Art. 6 (1) (b)/(c) GDPR), or
-
it is necessary to safeguard legitimate interests (Art. 6 (1) (f) GDPR) and no overriding protectable interests exist.
Data Transfer to Third Countries (USA)
Some of the services we use (Google Tag Manager, Google Analytics 4, Google Fonts, YouTube) transfer personal data to the USA.
Legal basis for transfer:
-
EU Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR
-
EU-US Data Privacy Framework for certified companies
Google is certified under the EU-US Data Privacy Framework and is thereby committed to complying with EU data protection standards.
More information:
-
EU Standard Contractual Clauses: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
-
EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/
8. Data Security
We use industry-standard SSL/TLS encryption to protect your data during transmission.
A secure connection is indicated by the "https://" prefix and a padlock symbol in your browser's address bar.
9. Your Rights as a Data Subject
Under the GDPR, you have the following rights:
-
Right of access (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to data portability (Art. 20 GDPR)
-
Right to object (Art. 21 GDPR)
-
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR (data processing based on a balance of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
To exercise these rights, please contact us at [email protected].
10. Data Retention
Personal data will be deleted as soon as the purpose of storage ceases to apply and no legal retention obligations prevent deletion.
The specific retention periods depend on the respective processing purpose and are stated for each service.
11. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy as necessary to comply with current legal requirements or to reflect changes in our services.
The current version is always available on our website.
Last updated: November 2025