Responsible person and contact:
Henning Strubelt
Sielstr. 2
27568 Bremerhaven
Phone: +49 (0)172 9057151
E-Mail: support[at]prozesselefant.de
Credits
background pictures: http://deathtothestockphoto.com and https://unsplash.com
elephant pictures/drawings: Jettarat Janmontree
technical support/implementation webdesign: triometrics UG
Privacy Notice
This privacy notice explains to you the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") on this website and the associated websites, functions and contents (hereinafter jointly referred to as "Service"). We use your data to provide and improve the Service. By using the Service, you consent to the collection and use of information in accordance with this privacy policy. With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR). We are committed to safeguarding the privacy of our users, to ensure the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection.
Controller
Henning Strubelt
Sielstr. 2
27568 Bremerhaven
Germany
Email: support[at]prozesselefant.de
Imprint: https://prozesselefant.de/imprint
Types of data collected
- Personal data (e.g. names, addresses).
- Contact data (e.g. email, telephone).
- Content data (e.g. text input, photographs, videos).
- Usage data (e.g. information about the individual web pages or products that you view, websites or search terms that referred you to the Service, and data on how you interact with the Service as well as access times).
- Log files, device information, derivative data (e.g. web browser type & version, IP address, time zone, unique device identifier).
- Tracking & cookies data (e.g. session cookies, preference cookies, security cookies)
Purpose of data processing / Use of data
Why are we using the data collected? Ultimately, we use your personal information to provide you with the best possible customer experience and we are constantly working to improve that experience. - provision of the Service, its functions and contents. More specifically, we use the data collected to do the following:
- response to contact requests and communication with users,
- range measurement and marketing,
- detection and prevention of technical issues,
- detection and prevention of risk or fraud, and
- provision of analysis to improve the Service.
Applicable legal bases
In accordance with Article 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not mentioned in this privacy notice, the following applies: The legal basis for obtaining consents is Article 6 para. 1 lit. a and Article 7 GDPR, the legal basis for processing for the fulfilment of our services and fulfilment of contractual measures as well as for answering inquiries is Article 6 para. 1 lit. b GDPR, the legal basis for processing to fulfil our legal obligations is Article 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Article 6 para. 1 lit. f GDPR. Article 6 para. 1 lit d GDPR serves as the legal basis, in the event that the vital interests of the person(s) concerned or another natural person require the processing of personal data.
Safety precautions
We ask you to inform yourself regularly about the contents of our privacy notice. We will adapt the provacy notice as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.
Cooperation with contract processors and third parties
If we disclose data to other persons and companies (contract processors or third parties) within the scope of our processing, transmit it to them or otherwise grant them access to the data, this shall only take place on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, in accordance with Article 6 para. 1 lit. b GDPR for contract fulfilment is necessary), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "commissioned data processing", this is done on the basis of Article 28 GDPR.
Transmittal to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this only takes place if it occurs for the fulfilment of our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process the data or let the data be processed in a third country only if the special requirements of Article 44 ff GDPR are met. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
Rights of the data subject
You have the right to request confirmation as to whether the data concerned are being processed and to request information about these data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
In accordance with Article 16 of the GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that relevant data be deleted immediately (‘right to be forgotten’) or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR.
You have the right to request the data concerning you (which you have provided to us in accordance with Art. 20 GDPR) and to request its transmission to other persons responsible.
In accordance with Art. 77 GDPR, you also have the right to file a complaint with the responsible supervisory authority.
Right to revoke / right to object
You have the right to revoke consents based on Art. 7 para. 3 GDPR with future effect
You can object to the future processing of the data concerning you in accordance with Art. 21 GDPR at any time. The objection may be lodged in particular against processing for direct marketing purposes.
Cookies and right of objection for direct mailings
"Cookies" are small files that are stored on the user's computer. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his or her visit to a website. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves a website and closes his or her browser. In such a cookie, for example, the content of a shopping basket in an online shop or a login status can be stored. Cookies referred to as "permanent" or "persistent" and remain stored even after the browser is closed. For example, the login status can be saved when users visit again after several days. Likewise, the interests of users used for range measurement or marketing purposes may be stored in such a cookie. Third-party cookies" are cookies that are offered by providers other than the person responsible for operating the website.
We may use temporary and permanent cookies and clarify this within the framework of our privacy notice.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this Service.
A general objection to the use of cookies used for online marketing purposes can be declared for many services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be switched off in the browser settings. Please note that this may not allow you to use all the functions of this Service.
Data erasure
The data processed by us will be deleted or their processing restricted in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any legal storage obligations. If the data are not deleted because they are necessary for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
In accordance with statutory requirements in Germany, the records are kept in particular for 6 years in accordance with § 257 (1) HGB (inventories, balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with § 147 (1) AO (records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
Business data processing
Additionally we process
- Contract data (for example, contract object, term, customer category).
- Payment data (e.g., bank details, payment history)
from our customers, prospects and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
Agency Services
We process our customers' data as part of our contractual services, which include conceptual and strategic consulting, campaign planning, software design, software development and consulting, implementation of campaigns and processes, server administration, data analysis, consulting services and training services.
For this purpose we process general data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text entries, photographs, videos), contract data (e.g., subject matter of the contract, term), payment data (e.g., bank details, payment history), usage and metadata (e.g. as part of the evaluation and performance measurement of marketing measures). We do not process special categories of personal data unless these are part of commissioned processing. This includes our customers, prospects, their customers, users, website visitors or employees, as well as third parties. The purpose of the processing is to provide contractual services, billing and our customer service. The legal basis for processing results from Art. 6 para. 1 lit. b GDPR (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimization, safety measures). We process data which are necessary to justify and fulfil the contractual services and point out the necessity of their disclosure. Disclosure to external parties only takes place if it is necessary within the framework of an order. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the client and the legal requirements for order processing pursuant to Art. 28 GDPR and process the data for no other purposes than those stipulated in the order.
We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of storing the data is checked every three years; in the case of statutory archiving obligations, the data is deleted after their expiry (6 years, in accordance with § 257 Paragraph 1 HGB, 10 years, in accordance with § 147 Paragraph 1 AO). In the case of data disclosed to us within the scope of an order by the customer, we delete the data in accordance with the specifications of the order, generally after the end of the order.
Contractual services
We process the data of our contractual partners and interested parties as well as other contractors, customers, clients or contractual partners (uniformly referred to as "contractual partners") in accordance with Art. 6 para. 1 lit. b. GDPR to provide our contractual or pre-contractual services to them. The data processed here, the type, scope and purpose and the necessity of their processing, are determined by the underlying contractual relationship.
The processed data includes the master data of our contractual partners (e.g., names and addresses), contact data (e.g. e-mail addresses and telephone numbers) as well as contract data (e.g., services used, contract contents, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history). We do not process special categories of personal data, unless these are part of a commissioned or contractual processing.
We process data which are necessary to justify and fulfil the contractual services and point out the necessity of their disclosure, unless this is evident for the contractual partners. Disclosure to external persons or companies is only made if it is required within the framework of a contract. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the customer and the legal requirements.
When using our Service, we may store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests as well as the users' interests in the protection against misuse and other unauthorized use. As a matter of principle, this data will not be passed on to third parties, unless it is necessary to pursue our claims pursuant to Art. 6 para. 1 lit. f. GDPR is required or there is a legal obligation in accordance with Art. 6 para. 1 lit. c. GDPR.
The data will be deleted if the data is no longer required for the fulfilment of contractual or statutory duties of care or for the handling of any warranty or comparable obligations, whereby the necessity of storing the data is checked every three years; in all other respects, the statutory storage obligations apply.
Administration, financial accounting, office organization, contact management
We process data within the framework of administrative tasks as well as the organization of our company, financial accounting and compliance with legal obligations, such as archiving. We process the same data that we process as part of the performance of our contractual services. The processing is based on Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, prospects, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, thus tasks which serve the maintenance of our business activities, perception of our tasks and provision of our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the information provided in these processing activities.
We disclose or transmit data to the financial administration, consultants, such as tax consultants or auditors, as well as payment service providers.
Furthermore, we store information on suppliers, event organisers and other business partners on the basis of our business interests, e.g. for the purpose of making contact at a later date. We store this data, which is mainly company-related, permanently.
Business analysis and market research
In order to operate our business economically and to identify market trends, customer and user requirements, we analyse the data available to us on business transactions, contracts, enquiries, etc., in order to ensure that we are able to offer our customers the best possible service. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include customers, interested parties, business partners, visitors and users of the Service.
The analyses are carried out for the purpose of economic evaluations, marketing and market research. In doing so, we can consider the profiles of registered users with information e.g. about their purchase processes. The analyses serve us to increase the user-friendliness, the optimization of our Service and the economic efficiency. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with aggregated values.
If these analyses or profiles are personal, they will be deleted or made anonymous upon termination of the user, otherwise after two years from the conclusion of the contract. For the rest, macroeconomic analyses and general trend determinations are prepared anonymously wherever possible.
Registration function
Users can optionally create a user account. During the registration process, users will be provided with the required information. The data entered during registration will be used for the purpose of using the Service. Users can be informed by e-mail about information relevant to services or registration, such as changes to the scope of services offered or technical circumstances. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its storage is necessary for commercial or tax reasons according to Art. 6 Para. 1 lit. c GDPR. It is up to the users to save their data before the end of the contract if they have given notice of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
As part of the use of our registration and login functions and the use of user accounts, we store the IP address and the time of the respective user action. The data is stored on the basis of our legitimate interests as well as the user's protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary to pursue our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR.
Contact
When contacting us (e.g. via contact form, e-mail or telephone), the user's details are used for processing the contact enquiry in accordance with Art. 6 para. 1 lit. b) GDPR. User information can be stored in a customer relationship management system ("CRM system") or comparable request organization. We delete the contact requests, if they are no longer relevant.
Hosting and Emailservice
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, email services, security services and technical maintenance services that we use for the purpose of operating this Service.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of this Service on the basis of our legitimate interests in an efficient and secure provision of this Service according to Art. 6 Para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR.
Collection of access data and log file
We, or our hosting provider, collect the following data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR data on each access to the server on which this Service is located (so-called server log files). Access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Google Analytics
We use Google Analytics, a web analysis service of Google LLC ("Google") based on our legitimate interests. Google uses cookies. The information generated by the cookie about the use of the Service by users is generally transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our Service by users, to compile reports on the activities within this Service and to provide us with further services associated with the use of this Service and the use of the Internet. Pseudonymous user profiles can be created from the processed data.
We use Google Analytics only with IP anonymization enabled. This means that Google will reduce the IP address of users within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the Service and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:http://tools.google.com/dlpage/gaoptout?hl=en.
Further information on data use by Google and possible settings can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the advertisement settings by Google (https://adssettings.google.com/authenticated).
Integration of third-party services and content
Within our Serive, We use content or services from third parties (i.e. interest in the analysis, optimization and economic operation of our Serive within the meaning of Article 6 para. 1 lit. f. GDPR) on the basis of our legitimate interests to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
This always presupposes that the third party providers of this content perceive the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the display of this content. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. "Pixel tags" allow information such as visitor traffic on the pages of this website to be evaluated. The pseudonymous information may also be stored in cookies on the user's device and may include technical information about the browser and operating system, referring websites, time stamps as well as further information about the use of our Service, and may also be linked to such information from other sources.
Google Fonts
We use the fonts ("Google Fonts") of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google ReCaptcha
We integrate the function for the recognition of bots, e.g. for entries in online forms ("ReCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.