Information on the data protection policy of our website and services
Data Protection on Our Websites
The following information relates to our data protection policy. Here, you will find information about the collection and use of personal data related to use of this webpage. We operate in compliance with German data protection law. You can access this policy from our webpage at any time.
We would like to draw attention to the fact that online data transfer (e.g. during email correspondence) is subject to security gaps and cannot be completely shielded from third-party access.
The use of the contact details in our masthead for commercial advertising purposes is expressly undesired, unless we have given previous written permission or in the context of an existing business relationship. The service provider and everyone named on this website hereby deny permission for any and all commercial use or circulation of their data.
You can visit our website without providing any personal data. Any personal data (such as name, address or email address) collected by our websites is done on a voluntary basis, whenever possible. This data will not be passed on to third parties without your express permission. Should you enter into, modify or amend a contractual relationship with us or submit an enquiry, we will collect and use your personal data as needed for these specific purposes (inventory data). We collect, process and use personal data as needed to permit you to use our online services (usage data). All personal data will only be stored while needed for these specified purposes (processing your enquiry or finalising a contract), in compliance with the maximum retention periods specified by tax and commercial law. In individual cases, we may share information about this data (inventory data) on the orders of the relevant authorities if needed for the purposes of criminal prosecution, hazard prevention, fulfilment of the legal obligations of the German Federal Office for the Protection of the Constitution or the military counterespionage service or to enforce intellectual property rights.
Right to Information
You have the right to receive information about your personal data promptly and free of charge at any time. You have the right to withdraw consent to the use of any personal data you have provided at any time, with future effect. For further enquiries, please contact the website provider, using the contact details in our masthead.
Data protection for our services
Below you can find out, among other things,
• what types of data we process from you,
• how and for what purposes we process the data you have transmitted, and
• what rights you have,
so that you can get an idea of the data processing of our services. If you have any questions about certain points in this information, we will be happy to assist you. The following information is based on the legal requirements of Art. 13 of the EU General Data Protection Regulation (hereinafter "GDPR"). The principle of data minimization applies in data protection law. This means that we only process the data that are really necessary to be able to carry out your order professionally via Typeform.
When you use our services, data is transferred to Typeform in the USA. The legal basis for this processing is in accordance with Art. 6 Paragraph 1 lit.
The European Court of Justice sees the USA as a country with an inadequate level of data protection. In particular, there is the possibility that US authorities process personal data in order to counter terrorism. A remedy against this may not be available. Further information can be found here: https://www.typeform.com/help/a/what-happens-to-my-data-360029581691/
We use Google Workspaces for e-mail communication, video calls, and calendar management.
This service is offered by Google, but the data remains within the EU in accordance with our agreement with Google. Further information can be found here: https://support.google.com/a/answer/9223653?amp;rd=1&product_name=UnuFlow&visit_id=637738698868816250-392496424&rd=2&src=supportwidget0
We have concluded an order processing contract with Google in accordance with Art. 28 GDPR.
We use Zoho for invoicing.
This service is offered by Zoho Corporation and the data is transferred to Amsterdam, the Netherlands. We have concluded an order processing contract in accordance with Art. 28 GDPR with Zoho. The legal basis is Article 6 Paragraph 1 Sentence 1 b) GDPR. Further information can be found here: https://www.zoho.com/privacy.html
We may use Acuity Scheduling to arrange an initial appointment.
By using this service, data is transmitted to Acuity Scheduling in the USA. In order to do justice to the European level of data protection, Acuity Scheduling offers its users the conclusion of an International Data Transfer Agreement, an agreement that was drawn up on the basis of the EU standard contractual clauses. To protect your data, we have entered into this agreement with Acuity Scheduling. We would like to point out, however, that we have no detailed knowledge of the content of the data transmitted or how it is used by Acuity Scheduling. The legal basis for this processing is in accordance with Art. 6 Paragraph 1 lit.
These functions are offered by Acuity Scheduling Inc., NY, USA.
The following data will be collected from you
- First and Last Name
- Street, postcode, city, country
Purpose of processing the data
- Invoicing / tax advisor forwarding the invoice
- Christmas cards
- E-mail, SMS, WhatsApp messages (depending on the agreement) / information (project-related)
- Advertising in the context of the newsletter
- Calendar entries for appointment management
Duration of data storage
As shown, we generally only process your data for the purpose of carrying out your order.
This means that, when this purpose has been achieved, we will delete your data again, unless you have consented to longer storage or there is a retention obligation due to tax, commercial or other laws.
Your rights as a so-called "data subject"
Since we process your data, as shown, you also have corresponding rights towards us as a data subject, unless these are restricted or excluded by law.
These are in particular the rights listed below:
• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In the event of a request for information that is not made in writing, we ask for your understanding that we may then request evidence from you that proves that you are the person you claim to be.
• to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR.
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR.
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR.
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.
• to revoke any consent given at any time in accordance with Art. 7 Para. 3 GDPR. However, this revocation only relates to future data processing. The legality of the processing based on this legal basis is not affected.
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or that of our company.
The supervisory authority responsible for data protection for our company is the Hamburg Commissioner for Data Protection and Freedom of Information
7th floor, 20459
It is very important to us to protect you and your data as well as possible. For this reason, we have taken measures to protect your data from unauthorized access as far as possible (see Art. 32 GDPR).
In this regard, we have taken what we believe to be appropriate technical and organizational security measures to prevent accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized third-party access to your data. Our security measures are continuously checked for their effectiveness in line with technological developments and improved if necessary.
Up-to-dateness and changes to this information
This information is currently valid and is as of December 2021. Due to changed legal or official requirements or due to changed processing circumstances, it may be necessary to change any of the information available. We will then inform you about it.