Privacy policy

Your rights as a data subject

Using the contact details of our data protection officer provided, you can exercise the following rights at any time:

• Information about the data we store about you and how it is processed (Art. 15 GDPR),
• Rectification of inaccurate personal data (Art. 16 GDPR),
• Erasure of your data stored with us (Art. 17 GDPR),
• Restriction of processing where we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR), and
• Data portability, provided you have consented to the processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you may withdraw it at any time with effect for the future.

You may lodge a complaint with a supervisory authority at any time, for example the competent supervisory authority of the federal state in which you reside, or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) including addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website

Nature and purpose of processing:

When you access our website — that is, if you do not register or otherwise submit information — information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.

It is processed in particular for the following purposes:

• ensuring a smooth connection to the website,
• ensuring trouble-free use of our website,
• evaluating system security and stability, and
• other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind may be evaluated statistically to optimise our website and the technology behind it.

Legal basis:

Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.

Retention period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

Provision required by law or contract:

The provision of the aforementioned personal data is required neither by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed, and individual services may be unavailable or restricted. For this reason, an objection is excluded.

Newsletter

Nature and purpose of processing:

Your data is used exclusively to deliver the subscribed newsletter to you by email. Your name is requested so that we can address you personally in the newsletter and, if necessary, identify you should you wish to exercise your rights as a data subject.

Providing your email address is sufficient to receive the newsletter. When you sign up for our newsletter, the data you provide is used exclusively for this purpose. Subscribers may also be informed by email about matters relevant to the service or registration (for example changes to the newsletter or technical circumstances).

A valid email address is required for effective registration. To verify that a registration is actually made by the owner of an email address, we use the double opt-in procedure. For this purpose we log the newsletter order, the dispatch of a confirmation email and the receipt of the requested reply. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.

Legal basis:

On the basis of your expressly granted consent (Art. 6 (1) (a) GDPR), we send you our newsletter or comparable information by email to the address you have provided on a regular basis.

You may withdraw your consent to the storage of your personal data and its use for the newsletter at any time with effect for the future. A corresponding link can be found in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your withdrawal via the contact option given at the end of this privacy notice.

Recipients:

Recipients of the data may be processors.

Retention period:

The data is only processed in this context as long as the corresponding consent exists. It is deleted thereafter.

Provision required by law or contract:

The provision of your personal data is voluntary and based solely on your consent. Without existing consent we unfortunately cannot send you our newsletter.

Contact form

Nature and purpose of processing:

The data you enter is stored for the purpose of individual communication with you. This requires a valid email address and your name, which are used to assign the enquiry and answer it. Providing further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR).

By providing the contact form we want to make it easy for you to get in touch. The information you provide is stored for the purpose of processing your enquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form is processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).

Recipients:

Recipients of the data may be processors.

Retention period:

Data is deleted no later than 6 months after the enquiry has been processed.

If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision required by law or contract:

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, your email address and the reason for the enquiry.

Use of Google Analytics

Nature and purpose of processing:

If you have given your consent, Google Analytics is used on this website — a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses "cookies", i.e. text files stored on your computer that enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Because IP anonymisation is activated on these pages, your IP address is truncated by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

The purposes of the data processing are the evaluation of website use and the compilation of reports on website activity. Further related services are then to be provided on the basis of website and internet use.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).

Recipients:

The recipient of the data is Google as a processor. We have concluded the corresponding data processing agreement with Google for this purpose.

Retention period:

The data is deleted as soon as it is no longer required for our recording purposes.

Third-country transfer:

Google processes your data in the USA and has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework

Provision required by law or contract:

The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Withdrawal of consent:

You can prevent the storage of cookies through a corresponding setting in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address) by Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: browser add-on to deactivate Google Analytics.

Session recordings

Nature and purpose of processing:

If you have given your consent, we use the integrated analytics and session recording function of our hosting platform Base44 on this website. Visitor interactions with our website (e.g. mouse movements, clicks, scrolling behaviour and pages visited) are recorded and replayed in anonymised or pseudonymised form.

Entries in form fields (e.g. name, email address, messages) are masked and are not recorded in plain text. The recordings serve exclusively to understand how our website is used, to identify usability problems and to improve our offering and user experience.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).

Recipients:

The recipient of the data is Base44 as a technical service provider and processor in the context of operating our website.

Retention period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected.

Provision required by law or contract:

The provision of your personal data is voluntary and based solely on your consent. You can withdraw your consent at any time via the cookie settings with effect for the future.

Embedded YouTube videos

Nature and purpose of processing:

We embed YouTube videos on some of our pages. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plugin, a connection to YouTube servers is established, telling YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can attribute your browsing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider sets cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider\u2019s privacy policy, where you will also find further information on your rights and setting options to protect your privacy (https://policies.google.com/privacy).

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).

Recipients:

The recipient of the data is YouTube as a processor.

Retention period:

The data is deleted as soon as it is no longer required for our recording purposes.

Third-country transfer:

Google processes your data in the USA and has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework

Provision required by law or contract:

The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Google Maps

Nature and purpose of processing:

If you have given your consent, the Google Maps API is used on this website to visually display geographical information. When Google Maps is used, Google also collects, processes and uses data about visitors\u2019 use of the Maps functions. Further information about data processing by Google can be found in the Google privacy notice.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).

Recipients:

The recipient of the data is Google as a processor.

Third-country transfer:

Google processes your data in the USA and has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework

Provision required by law or contract:

The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Vimeo

Nature and purpose of processing:

We use the provider Vimeo to embed videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011.

If you have given your consent, Vimeo is embedded on some of our pages. When you visit pages featuring a Vimeo video, a connection to Vimeo servers in the USA is established and the video is displayed. This tells the Vimeo server which of our pages you have visited. If you are logged in as a Vimeo member, Vimeo attributes this information to your personal user account. When using the plugin — for example clicking a video’s start button — this information is also attributed to your user account. You can prevent this by logging out of your Vimeo account before using our website and deleting the corresponding Vimeo cookies.

Further information on data processing and Vimeo\u2019s privacy notice can be found at: https://vimeo.com/privacy.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).

Recipients:

The recipient of the data is Vimeo as a processor.

Third-country transfer:

Vimeo processes your data in the USA.

Provision required by law or contract:

The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or to implement changes to our services in the privacy policy, for example when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have questions about data protection, please send us an email or contact the person responsible for data protection in our organisation directly:

info@envoii.de

This privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30). The German version of this privacy policy is authoritative.