Data protection declaration This data protection declaration informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data”) within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles. (hereinafter collectively referred to as „online offer”). With regard to the terminology used, such as „personal data” or its „processing”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (DSGVO).
Person responsible: Envolved GmbH
Elsenheimerstrasse 59
80687 Munich
Germany
Phone: +49 (0) 89 3 56 47 12-00
Fax: +49 (0) 89 3 56 47 12-01
E-mail address: kontakt@envolved.de
Types of data processed: Inventory data, contact data, content data, usage data, meta/communication data.
Processing of special categories of data (Art. 9 para. 1 DSGVO): In principle, no special categories of data are processed, unless they are supplied to the processing by the users, e.g. entered in online forms.
Categories of data subjects: Customers, interested parties, visitors and users of the online offer.
In the following, we also refer to the data subjects collectively as „users”.
Purpose of the processing: provision of the online offer, its content and functions, answering contact requests and communication with users, marketing, advertising and market research.
Status: 10.02.2023
Relevant legal basis In accordance with Art. 13 DSGVO, we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 DSGVO, the legal basis for processing to fulfill our services and carry out contractual measures and respond to inquiries is Art. 6(1)(b) DSGVO, the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) DSGVO, and the legal basis for processing to protect our legitimate interests is Art. 6(1)(f) DSGVO. In the event that vital interests of the data subject or another natural person require processing of personal data, Art. 6 (1) lit. d DSGVO serves as the legal basis.
Changes and updates to the privacy policy We ask you to regularly inform yourself about the content of our privacy policy. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
Security measures We take security measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, appropriate technical and organizational measures to ensure a level of protection appropriate to the risk; the measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access concerning them, input, disclosure, ensuring availability and their separation. Furthermore, we have established procedures to ensure the exercise of data subjects’ rights, deletion of data and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 of the GDPR).
The security measures include in particular the encrypted transmission of data between your browser and our server.
Cooperation with processors and third parties If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e. g. For example, if a transfer of data to third parties, such as payment service providers, is required for the performance of a contract pursuant to Art. 6 para. 1 lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called „order processing agreement”, this is done on the basis of Art. 28 DSGVO.
Transfers to third countries If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only occur if it is done to fulfill our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or allow the processing of data in a third country only if the special requirements of Art. 44 et seq. DSGVO are met. I.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection that corresponds to the EU (e.g. for the USA by the „Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called „standard contractual clauses”).
Rights of data subjects You have the right to request confirmation as to whether data in question is being processed and to information about this data, as well as further information and a copy of the data in accordance with Art. 15 of the GDPR.
You have according to. Art. 16 DSGVO the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
You have the right, in accordance with Art. 17 DSGVO, to request that data concerning you be deleted without delay, or alternatively, in accordance with Art. 18 DSGVO, to request restriction of the processing of the data.
You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 DSGVO and to request that it be transferred to other data controllers.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO.
Right of revocation You have the right to revoke given consents pursuant to Art. 7 (3) DSGVO with effect for the future.
Right of objection You may object to the future processing of data relating to you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against processing for purposes of direct advertising.
Deletion of data The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements, data is stored in particular for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
Contact When contacting us (via contact form or e-mail), the user’s details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO.
We delete the requests if they are no longer necessary. We review the necessity every two years; we store requests from customers who have a customer account permanently and refer to the customer account details for deletion. In the case of legal archiving obligations, deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).
Provision of contractual services We process inventory data (e.g., names and addresses as well as contact data of users), contractual data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit b. DSGVO. The entries marked as mandatory in online forms are required for the conclusion of the contract.
The deletion takes place after the expiry of legal warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of legal archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation); information in the customer account remains until its deletion.
Collection of access data and log files We collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. for the clarification of abuse or fraud) for a maximum of seven days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.
Cookies & Reach Measurement Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. Cookies may be small files or other types of information storage.
We use „session cookies”, which are only stored for the duration of the current visit to our online presence (e.g. to enable the storage of your login status or the shopping cart function and thus the use of our online offer at all). In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close the browser, for example.
Users are informed about the use of cookies in the context of pseudonymous range measurement as part of this privacy policy.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
You can object to the use of cookies that are used for range measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Use of Vimeo components We use components of the provider Vimeo on our site. Vimeo is a service of Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. Each time you call up our website, which is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from Vimeo. If you call up our page and are logged in to Vimeo during this time, Vimeo recognizes which specific page you are visiting through the information collected by the component and assigns this information to your personal account with Vimeo. If, for example, you click on the „Play” button or make corresponding comments, this information is transmitted to your personal user account with Vimeo and stored there. In addition, the information that you have visited our site is passed on to Vimeo. This happens regardless of whether you click on the component/comment or not, for example. If you want to prevent this transmission and storage of data about you and your behavior on our website by Vimeo, you must log out of Vimeo before you visit our site. Vimeo’s privacy policy provides more detailed information on this, in particular on the collection and use of data by Vimeo: https://vimeo.com/privacy
Google Analytics We use Google Analytics, a web analytics service provided by Google LLC („Google”), on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. DSGVO) Google Analytics, a web analytics service provided by Google LLC („Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous usage profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser is not merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on data usage by Google, setting and objection options, please visit Google’s websites: https://www.google.com/intl/de/policies/privacy/partners („Data usage by Google when you use our partners’ websites or apps”), https://policies.google.com/technologies/ads („Data usage for advertising purposes”), https://adssettings.google.com/authenticated („Manage information Google uses to show you ads”).
Integration of third-party services and content We use content or service offers of third-party providers within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) to integrate content or services offered by third-party providers, such as videos or fonts (hereinafter uniformly referred to as „content”). This always requires that the third-party providers of this content are aware of the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as „web beacons”) for statistical or marketing purposes. The „pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be linked to such information from other sources.
The following presentation provides an overview of third-party providers and their content, along with links to their privacy statements, which contain further information on the processing of data and, in part already mentioned here, opt-out options:
External Fonts from Google, LLC., https://www.google.com/fonts („Google Fonts”). The integration of Google Fonts is done by a server call at Google (usually in the USA). Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
Maps of the service „Google Maps” of the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
Videos from the „YouTube” platform of the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
Videos of the platform of the third-party provider „Vimeo”: https://vimeo.com/terms and https://vimeo.com/privacy
External code of the JavaScript framework „jQuery”, provided by the third-party provider jQuery Foundation, https://jquery.org.
Cookies
Cookies & Reach Measurement Like most online services, our website uses cookies from us and third parties for a number of purposes. The third party cookies used on our websites are mainly used to understand how the website works, how you interact with our website, to keep our services secure and all in all to provide you with a better user experience and to help speed up and improve your future interactions with our website.
What are cookies? Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. Cookies may be small files or other types of information storage.
Cookie Preferences You can manage your cookie preferences by clicking the „Preferences” button within the cookie notice and enabling or disabling the cookie categories in the pop-up according to your preferences. If you decide to change your preferences later during your browsing session, you can click on the following button:
Revoke Cookie Consent
This will withdraw your consent and display the cookie notice again, allowing you to change your preferences.
Browser Settings In addition, different browsers offer different methods for blocking and deleting cookies used by websites. You can change your browser settings to block/delete cookies. To learn more about how to manage and delete cookies, visit www.allaboutcookies.org. The exclusion of cookies may lead to functional limitations of this online offer. You may opt out of the use of cookies used for reach measurement and advertising purposes by visiting the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Cookies on this website The cookies used by this website are divided into the following categories:
Necessary
Necessary cookies are absolutely essential for the proper functioning of this website. This category only includes cookies that ensure the basic functionality and security of this website. These cookies do not store any personal data.
Optional
Optioinal cookies are those that are designed to improve the user experience of this site. This allows us to perform user behavior analysis and provide third-party services. Disabling this category may result in an incorrect display of this website. These cookies may contain personal data.
The following table shows more details about the cookies used:
Cookie | Duration | Purpose |
---|---|---|
Necessary | ||
acceptedCookies | 6 Months | Used to store whether the user has agreed to the use of cookies. It does not store any personal data. |
acceptedNecessaryCookies | 6 Months | Used to store whether the user has agreed to the use of necessary cookies. It does not store any personal data. |
wordpress_test_cookie | 1 Minute | Occasionally set by WordPress and used to check if cookies are enabled in the browser. |
pll_language | 1 Year | This cookie is used to determine the visitor’s preferred language and set the language accordingly on the website, if possible. |
Optional | ||
acceptedVimeo | 6 Months | Used to record whether the user has agreed to Vimeo’s privacy policy before loading a Vimeo video. |
_ga | 2 Years | Used to distinguish users. |
_gid | 24 Hours | Used to distinguish users. |
_gat | 1 Minute | Used to throttle the request rate. When Google Analytics is deployed via Google Tag Manager, this cookie is named as follows: _dc_gtm_<property-id>. |
AMP_TOKEN | 1 Minute – 1 Jahr |
Contains a token that can be used to retrieve a client ID from the AMP Client ID service. Other possible values indicate opt-out, inflight request, or an error retrieving a client ID from the AMP Client ID service. |
_gac_<property-id> | 90 Days | Contains campaign-related information for the user. |
lidc | 1 Days | Registers which server cluster is serving the visitor. This is used in the context of load balancing to optimize the user experience. |
ln_or | 1 Day | Registers statistical data about visitors’ behavior on the website. Used by the webmaster for internal analysis. |
li_gc | 179 Days | Stores the user’s consent status for cookies on the current domain. |
li_mc | 2 Years | Used as temporary storage. Used to prevent database queries for a user’s consent to the use of non-essential cookies and to provide this information on the client side to be enforced there. |
bcookie | 1 Year | Used by the social networking service LinkedIn for tracking the use of embedded services. |
liap | 1 Year | Used by the social networking service LinkedIn for tracking the use of embedded services. |
lms_ads | 29 Days | Used to store information about the time when synchronization with the lms_analytics cookie took place for users in the designated countries. |
lms_analytics | 1 Month | Used for analysis to identify LinkedIn members in the mentioned countries |
UserMatchHistory | 29 Days | Ensures browsing security for visitors by preventing cross-page forgery of requests. This cookie is essential for the security of the website and the visitor. |
AnalyticsSyncHistory | 29 Day | Used in conjunction with data synchronization with third-party analytics service. |
*Session means that this cookie lasts only until the browser window is closed.