Privacy Statement

The protection of your data is important to us. I - the developer of the website - make sure in my private life to protect my data by using alternative search engines for example.

Why is this privacy statement so long? Do you store so much data? As you can read in this document, we limit the data processing to the essentials: in particular anonymous analysis, contact possibilities and user accounts. In case of orders there are legal obligations for storing data. The list is also long because we may use external providers (e.g. external content such as Youtube videos, payment providers) on this website. We want to give you the opportunity to inform yourself comprehensively about data processed by us.

Insofar data is processed using this website, the data protection is carried out in accordance with the General Data Protection Regulation (GDPR). The responsible person (including address and contact data) can be found in the impressum. At the bottom of this page you will find and overview of important terms and your rights (especially your right to object, which you can use to prevent processing due to legitimate interests).

You are processing yourself personal data of other users when using 60tools? In general, we recommend to reduce the use of personal data to a minimum. However, if such processing is necessary for your purposes, you can find a data processing agreement here, which we subject ourselves to.

The data processing by is not used for solely automated individual decision-making.

Analytical purposes

Web Analysis
Affected data: Accessed page (URL), browser and operating system, access time, referrer if applicable (page via whose link the current page was accessed), no IP adress or cookies (ip address only as long as your request is processed to send you the answer)
Related to person: Can not be assigned to natural person trustworthy → anonymous data
External providers/software: Storage in server log files, analysis using Matomo
Purpose: Web analysis to determine the most popular subpages and for a range assessment
Storage period: 32 days, after that only recap in daily reports
Legal basis: Not necessary, because anonymous data; the processing of the ip address for processing you ip address bases on Art. 6 (1) lit. f GDPR

 

Cookies & session information

Cookies are small text files that are stored on you device and contain information (e.g. a character string). Each time your device requests data from our servers the cookie content will be attached to this request. We use cookies to allow a better user experience on our website (e.g. enabling log-in functionality). In addition, we use other technologies (e.g. local HTML5 storage), which are similar to cookies.

Under certain circumstances, external content can also set cookies. You can find out more about this on this page under the respective category. We do not set cookies not essential for the website functionality without your consent. The content of a cookie can only be accessed by the party who set it.

Prevent cookies: You always have the possibility to set up your browser to prevent cookies generally or for special websites. Just visit the settings of your browser, for example in the "Privacy" or "Content settings" menu. In addition, you can delete your browser cache and all cookies at any time.

Session cookies
Affected data: Basic settings for using the website (e.g. hiding information windows (e.g. notes on cookies), captchas, login, allocation of downloads, purchases, storage of game scores if applicable)
Purpose: Enabling the website functionality as expected by the user
Storage period: Automated deletion after at most 48 hours, login data and information window for the cookie lifetime; the cookie itself is stored in your browser for up to 30 days after the last change
Legal basis: Legitimated interest in website functionality (Art. 6 (1) lit. f GDPR)

 

Payment

Payment using PayPal
Affected data: Disclosure to PayPal (by clicking on the PayPal-button): Price, product name if applicable, our website/URL, identification number to assign this data to you
Disclosed by PayPal (by clicking on the buy-button): Your name, your address, your email address
External providers/software: PayPal
Purpose: Processing of payment and preparation of invoice
Storage period: Data disclosed by PayPal is deleted if not the user registers for example; the invoice and the sent email (incl. name, address, email address) is stored in accorance with legal requirements (see below)
Legal basis: Required for contract processing or as a pre-contractual measure when choosing PayPal as payment method (Art. 6 (1) lit. b GDPR)

 

Payment using GoCardless/SEPA
Affected data: Disclosure to PayPal (by clicking on the SEPA-button): price, product name if applicable, our website/URL, identification number to assign this data to you
Disclosed by GoCardless: Your name and your email address (we can not access your bank details)
External providers/software: GoCardless
Purpose: Processing of payment and preparation of invoice
Storage period: Data disclosed by GoCardless is deleted if not the user registers for example; the invoice and the sent email (incl. name, address, email address) is stored in accorance with legal requirements (see below)
Legal basis: Required for contract processing or as a pre-contractual measure when choosing SEPA/GoCardless as payment method (Art. 6 (1) lit. b GDPR)

 

General contents

Artificial Intelligence
Affected data: Only in case of your consent (participation in test programs): pseudonymous usage data (e.g. access duration, search queries)
Purpose: Improving services through artificial intelligence
Storage period: Regular anonymization of data after a few days
Legal basis: Consent (Art. 6 (1) lit. a GDPR)

 

Contacting, e.g. contact form
Affected data: information provided by you (e.g. name, email address, text) and the exact time
Purpose: Processing of your request (correction of errors, answering questions) and compliance with legal retention obligations
Storage period: If related to conclusion of a contract as commercial letter 6 years from the end of the respective year; otherwise until clarification of the request or after some time in case of unanswered mails (usually several weeks)
Legal basis:
  • Consent (Art. 6 (1) lit. a GDPR)
  • in the case of rights based on warranty law, execution of the contract (Art. 6 (1) lit. b GDPR)
  • legal obligations if realted to a contract: especially §§ 147 German AO, 257 German HGB, 14 German UStG (Art. 6 (1) lit. c GDPR)

 

Newsletter
Affected data: email address, date of registration and IP address
Purpose: Delivery of the newsletter and proof of your consent
Storage period: Until you (at any time possible) unsubscribe
Legal basis: Consent (Art. 6 (1) lit. a GDPR) and legitimate interest of consent proof for the ip address (Art. 6 (1) lit. f, Art. 7 (1) GDPR

 

Rating function
Affected data: Star rating, rated website, date, if applicable feedback text, individual user number as pseudonym
Related to person: Assignment of the pseudonym is possible for up to 48 hours (in this period you can therefore be recognized when rating again)
Purpose: Providing a rating function
Legal basis: Legitimate interest on individual, real ratings (Art. 6 (1) lit. f GDPR, § 5 German UWG)

 

Fraud detection and server protection
Affected data: IP address, date, time of queries, accessed page, possible connection with other queries
Purpose: Protection against fraud attempts and attacks on our websites (e.g. so-called DDOS attacks, wrong login data)
Storage period: Usually only a few seconds, minutes our hours for activities that are not suspicious afterwards
Legal basis: Legitimate interest in fraud prevention and server protection (Art. 6 (1) lit. f GDPR)

 

Special contents on 60tools

60tools account and orders
Affected data:
  • Orders: address, email address, date of order, order data (esp. bought usage ticket, remaining usages), invoice document, IP address
  • Account: Your orders (see above) and transactions (e.g. SEPA payments), credit, your usage tickets, account data (esp. email address, password, address, registration date)
Purpose: Performance of the contracts, compliance with legal obligations and enabling your user account
Storage period: Invoice and purchase data 10 years (legal retention requirement), other account data until your account is deleted (possible at any time)
Legal basis:
  • Consent (Art. 6 (1) lit. a GDPR)
  • Performance of contracts (Art. 6 (1) lit. b GDPR)
  • Legal retention obligation, esp. § 147 German AO (Art. 6 (1) lit. c GDPR)

 

60tools tool usage
Affected data: Very important: In general no personal data is stored!
Exceptions: Tool requires download or similiar (e.g. PDF or image generated), Stored by you via the Save & Share function
Purpose: Enabling tool usage or permanent storage at your request
Storage period:
  • Necessary downloads are automatically deleted within a few hours
  • Results saved at your request are saved until (at any time possible) deletion
Legal basis:
  • Consent (Art. 6 (1) lit. a GDPR)
  • Legitimate interest in enabling tool functionality as desired by the user (Art. 6 (1) lit. f GDPR)

 

Processors as data recipients

In order to provide our services we need so-called web hosters and DNS service providers. These may process personal data in accordance to contracts that we have concluded with them. Such providers are for this website: INWX Gmbh & Co. KG, Prinzessinenstraße 30, 10969 Berlin, Germany, https://inwx.de and Alfahosting GmbH, Ankerstraße 3b, 06108 Halle, Germany, https://alfahosting.de.

Your rights as data subject

As data subject you have the rights described below. You can exercise these rights at any time, e.g. by sending us an email to our email address given in the Impressum.

Right of confirmation and access (Art. 15 GDPR)

You can ask us to confirm whether personal data of you is processed. If this is the case, you have the right of access (in the form of a copy) including several information.

Right to rectification (Art. 16 GDPR)

You have the right to obtain without undue delay the rectification of inaccurate personal data from us. Where appropiate taking into account the purposes you have the right to have incomplete data completed.

Right to erasure/to be forgotten (Art. 17 GDPR)

You have the right to erasure of personal data. If we made your personal data public, we have to take reasonable steps to inform controllers which are processing the personal data. You have the right to erasure if there is a cause (e.g. unlawful processing, withdrawn consent), apart from some expections (e.g. legal obligation, public interest).

Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain from us the restriction of processing (e.g. contested accuracy, objected). In most cases only the storage is still allowed.

Right to data portability (Art. 20 GDPR)

You have the right ro receive the personal data you provided to us in a structured, machine-readable format and to transmit those data to another controller, where the processing is based on your consent or on a contract. Where technically feasible you have the right to have the personal data transmitted directly to another controller (e.g. another internet platform).

Right to object (Art. 21 GDPR)

You have the right to object on grounds relating to your particular situation at any time. This applies to data processed on the basis of a performance of a task carried out in the public interest or for the purposes of legitimate interests. If we can not demonstrate legitimate grounds overriding your interests we will no longer process the data. In the case of direct marketing and, if applicable, profiling related to it, you can object at any time without any further requirements. An objection can also be exercised by automated means (e.g. Do-Not-Track).

Right to withdraw your consent (Art. 7 GDPR)

You can withdraw your consent at any time. A withdrawal does not affect the lawfulness of the processing before your withdrawal.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you think the processing of your personal data violates the GDPR, you have the right to lodge a complaint with your supervisory authority.

Terms

For a better understanding we would like to explain some central terms in the following.

Personal data:Any information relating to a natural person. It is sufficient that the person can be identified by attributes such as a user identification (e.g. in the case of a IP adress).

Processing: Any operation relating personal data (e.g. collection, storage, modification).

Pseudonymous and anonymous: If data is stored with a user identification and can only be assigned to you through further, separately stored information, it is pseudonymous data. Anonymous data, on the other hand, cannot be assigned to a natural person by the controller.

Controller: This is us. The natural or legal person determining the purposes and means of the processing.

Recipient: A natural or legal person, to which the personal data are disclosed.