Privacy Policy
This is a translation for information purposes. In case of doubt, the German version applies.
1. Controller
LaborEP UG (haftungsbeschränkt)
represented by its managing director Thomas Schäfer
Bruno-Taut-Str. 11 C
14469 Potsdam, Germany
Phone: +49 331 90062429
Email: info@labor-ep.de
We have not appointed a data protection officer, as there is no legal obligation to do so.
2. General
We process personal data only to the extent necessary to provide this website, to answer enquiries, to carry out our proficiency testing schemes or to comply with legal obligations. This website does not use analytics or marketing tools and does not set cookies for tracking purposes. Data is transmitted in encrypted form via HTTPS (TLS).
3. Hosting
This website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. When you visit the website, technically necessary data is processed on netcup’s servers. We have concluded a data processing agreement with netcup in accordance with Art. 28 GDPR. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable provision of the website.
4. Server log files
Each time the website is accessed, the following data is recorded automatically: IP address, date and time of access, page or file requested, amount of data transferred, referrer URL, browser and operating system used. This data is processed solely to ensure the operation and security of the website and is deleted after 14 days at the latest, unless it is needed to investigate a security incident. The legal basis is Art. 6(1)(f) GDPR.
5. Cloudflare
To secure and speed up the website, we use the content delivery network and security services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Traffic between your browser and our website is routed through Cloudflare’s servers. Cloudflare processes in particular your IP address and technical connection data and may set technically necessary cookies to defend against bots. Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, a data processing agreement including standard contractual clauses has been concluded. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the security and availability of the website. More information: https://www.cloudflare.com/privacypolicy/
6. Contact form and email
If you contact us via the contact form or by email, we process the data you provide (name, company, email address, message and any further voluntary details) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations (e.g. under commercial or tax law) apply.
To protect the contact form against spam, we use Cloudflare Turnstile. Technical data from your browser and device (including your IP address) is transmitted to Cloudflare in order to detect automated input. No cookies are set for tracking purposes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against misuse. For Cloudflare, see section 5.
7. File upload for proficiency testing participants
To submit results and documents as part of our proficiency testing schemes, participants receive individual upload links at upload.labor-ep.de.
Data processed: the uploaded files and their content, the name or participant code entered during upload, the date and time of upload, and the IP address of the device used. When you open the upload page, a technically necessary session cookie is set and deleted when the session ends.
Purpose and legal basis: Processing is necessary to carry out the proficiency testing scheme in which you participate (Art. 6(1)(b) GDPR). Logging IP address and time serves the security and traceability of the system (Art. 6(1)(f) GDPR).
Storage and access: Files are stored on a server in Germany operated by LaborEP UG itself. Each participant receives a separate, password-protected link with an expiry date. Uploaded files are not visible to other participants. Access is restricted to LaborEP UG.
Transmission: The connection is encrypted end to end (TLS) and is routed through Cloudflare’s network (see section 5). Cloudflare does not permanently store the transmitted files.
Retention: We retain uploaded documents for as long as necessary to evaluate the proficiency test and to meet our documentation and record-keeping obligations. They are deleted thereafter.
8. Security features
To protect against attacks (e.g. brute-force login attempts), we use the Kadence Security plugin. It runs on our own web server, logs the IP address and time of suspicious requests and may temporarily block access. Processing is based on Art. 6(1)(f) GDPR; log data is deleted automatically after a short period.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). An informal message to the contact details above is sufficient to exercise your rights.
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Brandenburg Commissioner for Data Protection and Access to Information (Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
10. Status
Last updated: October 2026. We will update this privacy policy whenever our processing or the legal situation changes.