DATA PROTECTION POLICY

We, elativum GmbH, take the protection of your personal data very seriously, hold your personal data in confidence at all times, and handle these data in accordance with applicable data protection rules and regulations. Various personal data are collected whenever you use this website. That is to say, various data are collected with which you could be identified personally. This Data Protection Policy explains what data we collect. It also explains how and for what purpose we collect them. Should you have any questions after your review of this policy, please do not hesitate to contact us by using the contact information provided in our imprint.

1 DATA PROTECTION IN BRIEF

1.1 Some questions and answers

1.1.1 Who is responsible for the data collected through this website?
Answer: The data collected through this site are processed by elativum GmbH.

1.1.2 What rights do you have regarding your data?
Answer: You may, at any time and at no charge, request information detailing your stored data, their origin, their recipients, and the purpose of their collection. Alternatively, you may request that the accuracy of incorrect personal data be rectified, the processing of your personal data be restricted, or your personal data be erased. You may also file a complaint with the competent supervisory authority.

1.1.3 How do we collect your data?
Answer: On one hand, data are collected because you communicate them to us. This communication might include data you provided in our contact form. On the other hand, whenever you visit our website, data are collected automatically through our IT systems. These data are primarily technical data (e.g., the browser and operating system you are using or the time of your visit), which are collected automatically as soon as you visit our website.

1.1.4 What do we use your data for?
Answer: Some data are collected to ensure that our website functions properly. Other data can be used to analyze the behavior of the visitors to our website.

1.2 Analytics and third-party tools

During your visit to our website, statistical analyses may be made of your surfing behavior. This analysis is performed primarily through cookies and so-called analytics programs and, as a rule, in anonymous fashion; your surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by declining to using certain tools.

2 CONTROLLER

A controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.). The controller for the data processed through this website is elativum GmbH, having its seat at Am Speicher 17, 21337 Luneburg, Germany, telephone: +49 4131 99 55 00, email: kontakt@elativum.de.

3 YOUR RIGHTS

3.1 Right to revoke your consent to the processing of your data

Many data processing processes are possible only with your express consent. You have the right to revoke that consent at any time. You need only send us an informal email notifying us of your decision. Your revocation will be without prejudice to the lawfulness of the data we processed prior to receiving your notification.

3.2 Right to information, to rectification, to restriction, and to erasure

As permitted by law, you have the right to request, at any time and free of charge, of the information concerning your personal data stored by us, their origin, their recipient(s), and the purpose for which they have been processed. You also have the right to request that the accuracy of incorrect personal data be rectified, the processing of your personal data be restricted, or your personal data be erased.

3.3 Right to data portability

You have the right to have data, which are processed by us via automated means based upon your consent or in fulfillment of a contract, delivered to yourself or to a third party in a commonly used, machine-readable format. Insofar as you require the direct transfer of data to another controller, this transfer will be made only to the extent that it is technically feasible.

3.4 Right to file a complaint with the supervisory authorities

In the event there has been a breach of applicable data protection law, data subjects have the right to file a complaint with the competent supervisory authorities. The competent data protection supervisory authority is the data protection commissioner of the German state in which elativum GmbH has its seat. The competent supervisory authority for elativum GmbH is the Landesbeauftragte für den Datenschutz Niedersachsen, located at Prinzenstrasse 5, 30159 Hanover, Germany, telephone: +49 511 120 45 00, telefax: +49 511 120 45 99, email: poststelle@lfd.niedersachsen.de.

4 SIDE TRIP: EXERCISING A RIGHT OF OURS

We hereby object to any use of any contact information, which has been published in compliance with applicable imprint rules and regulations, for the purpose of sending promotional and informational materials which we have not expressly requested. We also hereby object to any use of our employees’ contact information, which has been published on our website, for the purpose of sending such promotional and informational materials. elativum GmbH expressly reserves the right to take legal action in the event that it or its employees receive any unsolicited advertising material such as spam.

5 YOUR ONLINE COMMUNICATION WITH US

5.1 SSL or TLS encryption

This site uses SSL or TLS encryption to secure and to protect transmissions containing confidential information such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar. Whenever SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

5.2 Disclaimer

As a matter of caution, however, please note that data transmitted via the internet (e.g. via email communication) may have security vulnerabilities. It is impossible to protect your data from third-party access which has been gained through the exploitation of such vulnerabilities.

6 DATA COLLECTED THROUGH OUR WEBSITE

6.1 Cookies

6.1.1 Some of our pages use cookies. Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

6.1.2 Most of the cookies we use are so-called “session cookies.” These are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser the next time you visit our site.

6.1.3 You can configure your browser to inform you whenever cookies are used, so that you can decide on a case-by-case basis whether to accept or to reject any given cookie. Alternatively, you can set your browser to accept cookies automatically under certain conditions, to reject them categorically, or to delete cookies automatically whenever you close your browser. Disabling cookies may limit the functionality of this website.

6.1.4 Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use are stored in accordance with Article 6(1)(f) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”). As the website operator, elativum GmbH has a legitimate interest in the storage of cookies to ensure that optimized service is provided free and clear of any technical faults.

6.2 Contact form

6.2.1 Whenever you send us inquiries via our contact form, we will collect the data given by you in the form, including any contact information you provide, in order to respond to your inquiry and to follow up with any questions we may have. We will never share this information without your consent.

6.2.2 Accordingly, we will process the data you provide in the contact form only with your consent as contemplated under Article 6(1)(a) of the General Data Protection Regulation, which consent you may revoke at any time.

6.2.3 We will retain the data you provide in the contact form until (1) you request that it be erased, (2) you revoke your consent for its storage, or (3) there no longer exists a reason that permits their storage. This section is without prejudice to mandatory statutory rules and regulations including, but not limited to, those governing mandatory retention periods.

6.3 Data processing (client and contract data)

6.3.1 We collect, process, and use personal data only to the extent that doing so is required to establish, to structure, or to modify legal relationships between us (master data). The basis of this collection, processing, and use is Article 6(1)(b) of the General Data Protection Regulation, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process, and use your personal data when you visit our website (usage data) only to the extent necessary for you to access our service.

6.3.2 The client data collected will be deleted after termination of our business relationship. This section is without prejudice to statutory retention periods.

7 ANALYTICS: GOOGLE ANALYTICS

7.1 General

7.1.1 This website uses Google Analytics, a web analytics service, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, United States of America.

7.1.2 Google Analytics also uses cookies. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the United States of America.

7.1.3 Google Analytics cookies are stored based on Article 6(1)(f) of the General Data Protection Regulation. As the website operator, elativum GmbH has a legitimate interest in analyzing user behavior to optimize both its website and its advertising efforts.

7.2 IP anonymization

We have activated the IP anonymization feature on this website. Prior to transmission to the United States, your IP address will be abbreviated by Google within the European Union or other parties to the Agreement on the European Economic Area. Only in cases of exception will the full IP address be sent to and abbreviated on a Google server in the United States of America. Google will use this information on behalf of elativum GmbH to analyze your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage for elativum GmbH. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

7.3 Preventing the storage of cookies

You can prevent cookies from being stored on your computer by setting your browser not to accept them. However, we wish to point out that doing so may mean that you will not be able to enjoy the full functionality of this website. (cf., Section 6.1.3 above).

7.4 Browser plugin

By downloading and installing the browser plugin available at this link, you can also prevent the data generated by cookies about your use of the website (including your IP address) from being shared with and processed by Google.

7.5 Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our site: Disable Google Analytics.

7.6 Outsourced data processing

We have entered into an agreement with Google governing the outsourcing of our data processing and are in full compliance with the German data protection authorities’ strict requirements governing the use of Google Analytics.

7.7 Demographic data collection by Google Analytics

This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of visitors to this website. These data come from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can prevent the collection of your data by Google Analytics as described in Section 7.5 above.

7.8 More information regarding Google Analytics

Please see Google’s privacy policy for more information regarding how Google Analytics handles user data.

8 FURTHER ANALYTICS: MATOMO (F/K/A PIWIK)

8.1 This website uses the open source web analytics service Matomo, which also uses cookies. In order to analyze your use of our website, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized prior to storage.

8.2 Matomo cookies remain on your device until you delete them. Matomo cookies are stored in accordance with Article 6(1)(f) of the General Data Protection Regulation, with the same legitimate interest specified in Section 6.1.4.

8.3 The information generated by the cookies about your use of this website will not be disclosed to third parties. You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website (cf., Section 6.1.3 above).

8.4 If you do not want your data to be stored and used, then you can disable this feature. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data. Deleting your cookies will entail the deletion of the opt-out cookie. You will need to reactivate it whenever you return to our site to ensure that your activity is not tracked.

9 GOOGLE WEB FONTS

This page uses web fonts provided by Google in order to ensure that our fonts are presented uniformly. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, your browser has to establish a direct connection to Google’s servers. Google is advised that our site was accessed via your IP address. Google Web fonts are used in furtherance of our interest in ensuring that this website has a uniform and attractive design. This interest constitutes a legitimate interest as contemplated under Article 6(1)(f) of the General Data Protection Regulation. If your browser does not support web fonts, then a standard font will be used by your computer. Further information about handling user data can be found at here and in Google’s privacy policy.