Privacy Notice
Effective Date: 27.02.2024
Version: 2024.1
When you visit our website, we process personal data. We would like to inform you about this and your rights.
1. Data processing when using this website
We process your personal data as follows:
Technical provision of the websites
To provide you with the web pages technically, our web server automatically collects information from your browser each time it is called up, especially:
- IP address
- Files accessed
- Date and time of your request
- Address of the originating website (referrer)
- Cookies storage and access
- Activation of JavaScript
- Browser type and version
- Operating system in use
- Screen resolution
We need to store your IP address, at least temporarily, so that our website content can be delivered to your browser.
This data is stored separately from other data that you may transmit to us and is not merged with data from other sources.
The legal basis for the data processing is Art. 6 Para. 1 Letter f GDPR, which permits the processing of data on the basis of legitimate interest. The legitimate interests are the secure and uninhibited operation of the web server. To ensure this, the administration must be able to detect and track attacks and malfunctions of the system via server log files, and to recognise attack patterns, accesses to the server must be saved. As soon as this data is no longer needed it is deleted. For technical reasons, the data is available to the hosting service provider, who is, however, bound by our instructions and contractually obligated to us.
Cookies
The website uses cookies. These are data records that are stored on your computer and can be analysed. They are necessary to provide you with the web pages.
You find more details on the cookies used in the respective sections of this notice.
Hubspot (Analytics, Chat, Forms etc.)
HubSpot is a marketing and sales platform used on our websites. The operator is HubSpot, Inc. (25 First Street, Cambridge, MA 02141, USA).
Hubspot is used for, and may store cookies for, the following purposes:
User analysis
User profiles are created which serve to analyse visitor behavior and are evaluated for the purpose of improving content and design in line with requirements. Cookies are also used for this purpose. Only if you have consented will this analysis take place.
Consent management
Whether or not you consent to the use of user analysis and other non-mandatory services is stored in the consent manager. The storage period for this information is 180 days. The legal basis for this is our legitimate interests in a service that is easy to use and the fulfillment of legal obligations.
Customer Relationship Management (CRM)
Communication with users is stored in a CRM to support marketing, service and sales. This serves our legitimate interests.
Chat
To get in touch more easily, you can also use the chat function on our web pages. You can use the chat on a voluntary basis. Before using it, you will be asked whether you agree to the local storage of the chat history on your computer, which you can also refuse without further consequences.
Web Forms
The website uses forms that are managed by Hubspot. They are used to process your enquiries and for possible follow-up questions. Mandatory fields are marked accordingly. Completion of mandatory fields is necessary so that we can answer and process your enquiries. All other information you provide is voluntary.
The data entered in the contact forms is processed on the basis of your consent. You can revoke this consent at any time. A revocation is only valid for the future.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to process it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.
The personal data is primarily stored within the EU. However, it is not excluded that in individual cases they may be transferred outside the EU. If this should be the case, this is done on the legal basis of EU
Standard Contractual Clauses and (in the case of data transfers to the U.S.) on the basis of the Transatlantic Data Privacy Framework.
You can find more information about Hubspot's handling of personal data at https://legal.hubspot.com/privacy-policy
Google Meet
We use Google Meet, a video conferencing platform provided by Google LLC, to facilitate online meetings and access to our online programmes. By using Google Meet, you acknowledge and agree to Google's Terms of Service and Privacy Policy.
For information on how Google collects, uses, and protects your data, please review Google's Privacy Policy: https://policies.google.com/privacy?hl=en-GB
New Relic
We use the web analytics service of the provider New Relic, Inc. on our websites (188 Spear Street, Suite 1000, San Francisco, CA 94105, USA). EU representative is New Relic International Limited (31-36 Golden Lane, Dublin 8, Ireland).
The service collects and processes data from which usage profiles are created. These usage profiles are used to analyse visitor behaviour and are evaluated to improve our services and design. In addition, New
Relic serves as a tool to measure and monitor the technical performance of the website. Cookies may be used.
The legal basis for this data processing is your consent.
The transfer to third countries takes place on the basis of EU Standard Contractual Clauses and (for the USA) on the basis of the Transatlantic Data Privacy Framework.
Further information on data protection at New Relic can be found at https://newrelic.com/termsandconditions/privacy.
Cloudflare (CDN)
This website uses the Content Delivery Network (CDN) of Cloudflare, Inc. (101 Townsend Street, San Francisco, California 94107, USA).
The CDN provides duplicates of data from our websites on various servers distributed around the world.
This results in faster loading times for the web pages, greater reliability and increased protection against data loss. Some of the elements embedded on these web pages are retrieved from the Cloudflare CDN when the web page is accessed. Through this access, information about your use of the website (such as your IP address) can be transmitted to Cloudflare servers outside the EU and processed there. Cookies
may also be used.
We process your data to protect our above-mentioned legitimate interests, including for the high-performance provision of our websites. The possible transfer of data to the U.S. is based on the Transatlantic Data Privacy Framework.
You can find more information on data protection from and at Cloudflare at https://www.cloudflare.com/privacypolicy.
Google Fonts
Our website uses so-called web fonts, provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland), to uniformly display certain fonts. When you visit our page, your
browser downloads the required fonts directly from Google to display them correctly on your device.
Your browser establishes a connection to Google's servers in the USA. This allows Google to know that your IP address has been used to access our website.
The use of Google web fonts is necessary to achieve a consistent look and feel on our website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 Letter f GDPR. Google has submitted
to the EU-U.S. Transatlantic Data Privacy Framework.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy.
Google reCaptcha
We use the “reCAPTCHA” service from Google to check whether the data input on our websites (e.g., in a contact form) is made by a human being, is automated or done by a machine program. For this purpose,
reCAPTCHA analyses the behaviour of the website visitor based on different characteristics. This analysis starts automatically as soon as the visitor enters the site. For the analysis reCAPTCHA evaluates different information (e.g., IP address, duration of the visitor's stay on the website and the visitor’s mouse movements). The data collected during the analysis is forwarded to Google.
Data processing is carried out because it is absolutely necessary to protect our web offers from abusive automated spying and from spam.
According to Google, the collected data is also transferred to Google in the USA. The data transfer is based on the EU Commission's adequacy decision on the EU-U.S. Transatlantic Data Privacy Framework.
For further information on Google reCAPTCHA and Google's privacy policy please refer to the following links: https://policies.google.com/privacy and https://www.google.com/recaptcha
2. Further Data Processing
Internet presences on social networks
We are present in social networks and operate websites there. To communicate with the users active there and to offer information about us, we process data about the users of these networks.
We would like to point out that user data may be processed outside the European Union and the European Economic Area. This may result in risks for users, for example because it could be more
difficult for them to enforce their rights.
Usually, social networks also process user data for the purposes of market research and advertising. For example, user profiles can be created based on user behaviour. These can be used to place
advertisements within and outside the networks that correspond to the presumed interests of the users.
The usage profile can be stored in cookies that are stored in the user’s terminal device. Storage can also take place directly in the social network, especially if the users are members of the respective platforms and logged in there.
Types of data that are processed include, in particular, contact data (e.g., e-mail, telephone number), content data (e.g., information entered in forms), usage data (e.g., websites visited, interest in content,
access times), meta and communication data (e.g., device information, IP addresses).
The data subjects are the users of the websites and networks.
The purposes of the data processing are the handling of contact requests and communication, the collection of feedback and marketing.
The legal basis for the data processing is our legitimate interests in communication and marketing (Art. 6 para. 1 lit. f. DSGVO).
For a detailed presentation of the respective data processing and the possibilities to object (i.e., to opt-out), please refer to the data protection information of the operators of the respective networks.
Requests for information and the assertion of user rights can be asserted most effectively with the respective operator; we can provide support in this regard upon request.
Further information about social networks:
Service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. You can find data protection information from LinkedIn at https://www.linkedin.com/legal/privacy-policy. We
have concluded an order processing agreement with LinkedIn (https://legal.linkedin.com/dpa). Data transfer to third countries takes place on the basis of the EU Standard Contractual Clauses, which
you can view here: https://legal.linkedin.com/dpa. You can lodge your objection (opt-out) here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Xing is operated by the New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.
You can find data protection information of Xing at https://privacy.xing.com/en/privacy-policy.
You find a description of how to opt-out on this page: https://privacy.xing.com/en/privacy-policy/information-we-automatically-receive-through-your-use-of-xing/determination-of-statistics/tracking-in-embedded-external-content
Business partners and contact persons
We process data about business partners (interested parties, customers, suppliers, service providers, etc.) or about their contact persons. This includes names, contact details and job-related data (such as
employer details and professional position).
The personal data originates either directly from the data subjects themselves or from their employer. We need this data to protect our legitimate interests (Art. 6 Para. 1 Letter f GDPR), to be able to
communicate with our business partners and to be able to fulfil, prepare and terminate contracts with business partners. In addition, this data is also used to provide information on our products and services
and to carry out marketing activities. You may object to the use of personal data for direct marketing purposes at any time.
There are no plans to pass on the data to third parties. This data is stored for as long as it is required for the above-mentioned purposes and, if applicable, for as long as legal retention periods require.
3. Your Rights
As the data subject you have the following rights, provided the legal conditions are fulfilled:
- Right to information, Art. 15 GDPR
- Right to Rectification of incorrect data, Art. 16 GDPR
- Right to Erasure of Data, Art. 17 GDPR
- Right to Restriction of Processing, Art. 18 GDPR
- Right to Data Portability, Art 20. GDPR
- Right to Objection, Art. 21 GDPR
Provided the data processing is based on your consent, you may revoke it at any time, with effect on the future.
You also have the right to launch a complaint with the Data Protection Supervisory Authority about the data processing.
4. Controller
The controller for the processing of your personal data on this website is:
Milena-Mercedes May
Fritz-Schade-Weg 9
21037 Hamburg
milena@growing-excellence.tech