This privacy policy explains how we handle your data. With regard to the terms used, such as ‘pro-cessing’ or ‘controller’, please refer to the definitions set out in Article 4 General Data Protection Regulation (GDPR). Our documentation websites (hereinafter ‘documentation sites’) are not intended for children or young people under the age of 16.
Data controller
The data controller within the meaning of Article 4 (7) GDPR is Brockmann Consult GmbH; you can contact us using the contact details provided in the legal notice.
The contact details of our Data Protection Officer
Mauß Datenschutz GmbH, Phone: +49 40 999 99 52 – 0, Email: daten-schutz@datenschutzbeauftragter-hamburg.de. When you are contacting the DPO, please always refer to us as the client.
Purpose and legal basis of processing
Below you will find information about when and what data is collected from you in connection with the use of our documentation sites, how this data is used (type, scope and purpose of the pro-cessing of personal data), as well as the legal basis and the duration of storage.
Operation of the web server, delivery of the documentation sites
We host our documentation sites via GitHub Pages, a service provided by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. As GitHub is headquartered in the USA, a transfer of data cannot be ruled out. Should your data be transferred to the USA, this is also permissible, as an adequacy decision pursuant to Article 45(1) of the GDPR exists for the USA under the EU-US Data Privacy Framework (DPF), and GitHub has submitted to its conditions via self-certification. You can find information on data protection here: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement.
When you access these documentation sites, your personal data is automatically processed by GitHub, Inc. in order to provide our documentation sites and the services offered through them. This information is stored in log files by GitHub, Inc. for security reasons. We do not have access to these log files or the personal data stored therein.
The legal basis for the processing of your data is Article 6 (1) (f) GDPR. GitHub, Inc. states that it has a legitimate interest in processing your data so that the documentation sites and the services provided via them can be offered to you in a technically sound, secure manner and optimised to your needs.
Storage and retrieval of data on your device
In order to provide the functions you have requested, including the provision of the documentation sites, data is stored in your browser and subsequently retrieved in accordance with Section 25 TDDDG. To this end, we use so-called cookies, as well as the browser’s session storage and local storage.
Local storage and retrieval are permitted on the grounds of technical necessity for the provision of the service you have requested (Section 25 (2) (2) of the TDDDG).
Where personal data is processed in this context, the legal basis for such processing is Article 6 (1) (f) GDPR and thus our legitimate interest or the legitimate interests of a third party. Where a third party is involved, please refer to the following details regarding the individual processing operations for further information.
Technical documentation and display presentation
We use external JavaScript libraries and plugins to display our documentation sites. These are used in particular to display diagrams, embed Jupyter notebooks and automatically generate tech-nical documentation content. These include, amongst others, MkDocs plugins such as mkdocs-gen-files, mkdocs-jupyter, mkdocstrings, autorefs and Mermaid.
Technical content is loaded from external Content Delivery Networks (CDN), in particular jsDelivr and unpkg. When you access the relevant pages, your browser establishes a connection to the servers of the respective providers. In doing so, your browser automatically transmits technically necessary information, in particular your IP address, browser information, the date and time of the request, and the page accessed, to the respective providers.
Furthermore, the integration of diagrams, Jupyter notebooks or other plugins may result in addi-tional technical content being loaded from external servers.
This processing is carried out on the basis of Article 6 (1) (f) GDPR. Our legitimate interest is the efficient provision of technically up-to-date, user-friendly and clear documentation.
Automated decision-making
Unless otherwise stated above in relation to the individual processing operations, we do not carry out any automated decision-making.
Transfer of personal data to non-EU countries
When using our documentation sites, personal data may be transferred to recipients in countries outside the EU or the EEA, or processed there. This may be the case, in particular, when we inte-grate external technical services, content delivery networks (CDN), software libraries or other third-party content.
When transferring personal data to third countries, we ensure that the legal requirements set out in Articles 44 et seq. GDPR are complied with. Where no adequacy decision has been issued by the European Commission for the third country in question, the transfer is generally carried out on the basis of appropriate safeguards, in particular the Standard Contractual Clauses adopted by the European Commission.
Your data protection rights
Every data subject has the right of access under Article 15 of the GDPR, the right to rectification and to have incomplete data completed or supplemented under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, and the right to data portability under Article 20 of the GDPR. The right of access and the right to erasure are subject to the restrictions set out in Sections 34 and 35 of the Federal Data Protection Act. Furthermore, there is a right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 Federal Data Protection Act).
No obligation to provide data
You are under no legal or contractual obligation to provide us with personal data when using our documentation sites. However, our documentation sites cannot be accessed without providing your IP address.
Right to withdraw consent
If you have given us your consent to process your personal data, you may withdraw this consent at any time.
To exercise your right to withdraw consent, please contact us using the contact details provided above.
