What personal data do we process, for what purpose, for how long and on which legal basis?
If you contact us, for example via the contact form on our website, by email or by phone, we will collect the following data from from you:
Email address or telephone number;
Any other personal data you might voluntarily share with us.
We will use this data as well as data and time of your contact exclusively to handle your request. If your request is recognisable as a business-related contact, we may also use your data for (potential) customer care, in particular in order to contact you (as far as this is legally permitted), to present you offers, clarify your need for our services and/or evaluate the possibility of a potential cooperation, as far as we might consider this to be in your interest. Your data will in general not be passed on to third parties. We will delete your data as soon as it is no longer needed for the respective purpose, i.e. usually six months after the last contact with you. However, for reasons of proportionality, we collectively delete all inquiries that are due for deletion only once in half a year. In case we process your data for the purpose of a (potential) customer care, we will delete your data as soon as you object to the processing or by 30 June of the second calendar year after your last business-related communication with us or expression of interest.
The legal basis for the data processing is Art. 6 para. 1 subpara. 1 lit. b and f GDPR.
Exceptions: We are required to retain business and commercial letters and other tax-relevant documents in order to fulfil our commercial and tax law archiving obligations; we will usually delete them as soon as all relevant data retention, legal archiving and limitation periods have ended.
The legal basis for tax law retention is Art. 6 Para. 1 Para. 1 Letter c GDPR.
Who receives your personal data?
Your personal data will remain in our area of responsibility. In some cases it may be necessary to pass on your data to external advisors, for example to lawyers (legal basis: Art. 6 para. 1 subpara. 1 lit. f GDPR; purpose and legitimate interest: establishment, exercise or defence of legal claims).
In certain areas, such as web hosting and email hosting, we use specialised service providers:
Web Hosting: Wix.com, 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, email@example.com.
Email Hosting: Zoho Mail, www.zoho.com/privacy/zoho-group.html, firstname.lastname@example.org.
These are bound to our instructions by an agreement on commissioned data processing and may not process any of your personal data for their own purposes. Processing by these data processors and their data processors usually takes place only in the EU. If the processing of your data by one of these providers takes place in an unsafe third country (countries without a corresponding data protection law), it will be ensured that this is done on the basis of appropriate protection measures according to Art. 44 et seq. GDPR, for example by agreeing on standard data protection clauses of the EU Commission, which are supplemented in individual cases by appropriate protective measures such as encryption of the data in accordance with Art. 46 para. 2 c) GDPR.
You have the right to access, to have rectified or erased, to restrict the processing and/or to object to the processing and to the data portability under the respective statutory conditions with regard to your personal data. In particular, you have the right to object to the processing of your data for advertising purposes at any time. If data processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent until the withdrawal or of the processing on another legal basis. If you want to exercise these rights, you can simply write to us.
To the extent that processing of your personal data is based on Art. 6 para. 1 subpara. 1 lit. e or f GDPR, you have the right to object to processing in accordance with Art. 21 GDPR. If your objection is made for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms of or for the establishment, exercise or defence of legal claims. If your objection is directed against direct marketing, including profiling, insofar as it is connected with such direct marketing, we will no longer process your personal data for these purposes.