Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how 360stockvr collects, processes, and protects personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG). This policy applies to all visitors accessing this website from within the Federal Republic of Germany and the European Union.

We are committed to transparency regarding our data processing practices. This document provides comprehensive information about the types of data collected, the purposes and legal bases for processing, data retention periods, and your rights as a data subject.

2. Categories of Personal Data Collected

The following categories of personal data may be collected during your use of this website:

2.1 Technical Access Data

When you access our website, certain technical information is automatically transmitted by your browser. This includes your IP address (anonymized where technically feasible), browser type and version, operating system, referrer URL, date and time of access, and pages viewed. This data is processed for the technical operation of the website and to maintain system security.

2.2 Contact Form Data

If you choose to contact us through the contact form, we collect the information you voluntarily provide, including your name, email address, and message content. This data is processed solely for the purpose of responding to your inquiry.

2.3 Cookie-Related Data

Our website uses cookies as described in our Cookie Policy. Cookie-related data collection is limited to technically necessary cookies required for website functionality. We do not use advertising cookies or behavioral tracking technologies.

3. Sources of Personal Data

Personal data processed by this website is obtained directly from you as the data subject. We collect data through the following means:

• Direct voluntary submission through contact forms
• Automatic transmission of technical data by your browser during website access
• Cookie consent interactions through our cookie management interface

We do not acquire personal data from third-party sources, data brokers, or public registries. All data processed originates from your direct interaction with this website.

4. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes under the specified legal bases pursuant to Article 6 GDPR:

4.1 Website Operation and Technical Security

Processing of technical access data is necessary for the provision of website services and maintenance of IT security. Legal basis: Article 6(1)(f) GDPR (legitimate interests in operating a functional and secure website).

4.2 Responding to Contact Inquiries

Data submitted through contact forms is processed to address your inquiry and provide requested information. Legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures at your request).

4.3 Cookie Management

Processing related to cookie consent is conducted to comply with legal requirements regarding user consent. Legal basis: Article 6(1)(c) GDPR (compliance with legal obligations under TDDDG).

5. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:

• Technical access logs: Deleted or anonymized within 7 days of collection
• Contact form submissions: Retained for the duration necessary to process your inquiry, then deleted within 12 months unless legal retention obligations apply
• Cookie consent records: Retained for the validity period of the consent (typically 12 months)

Data may be retained beyond these periods only where required by applicable legal obligations, such as commercial or tax law retention requirements.

6. Rights of Data Subjects

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Article 15): You may request confirmation of whether personal data concerning you is being processed and access to such data.
• Right to Rectification (Article 16): You may request correction of inaccurate personal data concerning you.
• Right to Erasure (Article 17): You may request deletion of your personal data under certain circumstances.
• Right to Restriction (Article 18): You may request restriction of processing under specific conditions.
• Right to Data Portability (Article 20): You may receive your personal data in a structured, commonly used format.
• Right to Object (Article 21): You may object to processing based on legitimate interests at any time.

To exercise these rights, please contact us using the contact details provided above.

7. Data Sharing and Disclosure

We do not sell, trade, or transfer personal data to third parties for commercial purposes. Personal data is not shared with external entities except where:

• Required for technical service providers operating under data processing agreements
• Mandated by applicable law or valid legal process
• You have provided explicit consent for a specific transfer

This website does not engage in behavioral advertising, targeted advertising, or data monetization practices.

8. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls, and regular security assessments.

While we strive to protect personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of data transmitted to or from this website.

9. Processing of Minor's Data

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you become aware that a minor has provided personal data through this website, please contact us so that we may take appropriate steps to remove such information.

10. Information Provided at Point of Collection

Where personal data is collected through this website, we provide relevant information about data processing at the point of collection. Contact forms include references to this Privacy Policy, and our cookie management interface provides information about cookie usage before consent is requested.

11. Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in our data processing practices or applicable legal requirements. Material changes will be indicated by updating the "Last updated" date at the beginning of this document. We encourage you to review this policy regularly.