+49 69 87 004 80 20 info@grewp.de

Data protection

 

0. foreword

Data protection is very important to us and we want you to feel safe when visiting our offers.
feel secure.
We reserve the right to change the data protection declaration at any time with effect for the future.
future. The current version of the data protection declaration can be found on our website at any time.
website at any time.
Below we inform you in detail about the type, scope and purpose of the personal data we collect, use and process,
and purpose of the personal data we collect, use and process and inform you of your rights as a data subject.
rights to which you are entitled as a data subject.

Data protection declaration

1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. His contact details can be found in the imprint of this website.

Your data is collected on the one hand by the fact that you communicate them to us. This can be data that you enter in a contact form, for example.

Other data is automatically collected by our IT systems when the website is visited. These are mainly technical data (e.g. Internet browser, operating system, or time of the page call). This data is automatically collected as soon as you enter this website.

What do we use your data for?

A part of the data is collected in order to guarantee an error-free provision of the website. Other data can be used to analyze your user behavior.

You have the right to receive information free of charge about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to demand the correction or deletion of this data. For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have a right of appeal to the responsible supervisory authority.

Furthermore, you have the right to request, under certain circumstances, the limitation of the processing of your personal data. For details, please refer to the Privacy Policy under “Right to limit processing”.

Analysis tools and third-party tools

When you visit this website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

You can contradict this analysis or prevent it by not using certain tools. Detailed information about these tools and your ability to opt-out can be found in the following privacy statement.

2. Hosting

External Hosting

This website is hosted by an external service provider (Hoster). Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, web page accesses, and other data generated by a website.

This website is hosted by an external service provider (hoster).

The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.

To ensure that the processing complies with data protection regulations, we have concluded a contract for order processing with our hoster.

3. general notes and compulsory information

data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This Privacy Policy explains what information we collect and how we use it. It also explains how this is done and for what purpose.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) may have security gaps. A complete protection of data against access by third parties is not possible.

Note on the responsible authority

The responsible party for data processing on this website is:

Angelika Vits
GREWP
Fichtestraße 18
60316 Frankfurt

E-Mail: info@grewp.de

Legally required data protection officer

We have appointed a data protection officer for our company.

Angelika Vits
GREWP
Fichtestraße 18
60316 Frankfurt

E-Mail: info@grewp.de

Cancellation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing that took place up to the revocation remains unaffected by the revocation.

if the data processing is based on ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR UNLESS THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 ABS. 1 DSGVO).

YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISEMENT, YOU HAVE THE RIGHT TO CONTRACT AT ANY TIME WITH THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISEMENT; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU DO NOT CONSIST, YOUR PERSONAL DATA SHALL NOT BE USED FOR THE PURPOSE OF DIRECT ADVERTISEMENT (CONTRARY TO ART. 21 para. 2 DSGVO).

Right of appeal to the competent supervisory authority

Right to data transferability

You have the right to have data, which we process automatically on the basis of your consent or in fulfillment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of your browser from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after the conclusion of a contract with costs, there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization), this data is required for payment processing.

The payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are exclusively carried out via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Information, deletion and correction

In accordance with the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, the right to correct or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address given in the imprint.

Right to restrict processing

You have the right to request the limitation of the processing of your personal data. To do so, you can contact us at any time at the address given in the imprint. The right to limit the processing is granted in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request that we limit the processing of your personal data.
  • If the processing of your personal data is/are carried out unlawfully, you can request the restriction of the data processing instead of the deletion.
  • If we no longer need your personal data, but you do need it to exercise, defend or assert legal claims, you have the right to request that we limit the processing of your personal data instead of deleting it.
  • If you have filed an objection according to Art. 21 para. 1 DSGVO, balancing between your and our interests must be made. As long as it is not yet clear whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the purpose of asserting, exercising, or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Contradiction against advertising e-mails

The use of contact data published within the scope of the imprint obligation for the transmission of not expressly requested advertisement and information materials is hereby contradicted. The operators of this website expressly reserve the right to take legal action in the event that unsolicited advertising information is sent, for example by spam e-mails.

4. Data collection on this website

Cookies

The internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit us.

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you request (e.g. shopping basket function) are stored on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of his services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.

Borlabs cookie does not process any personal data.

The borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

Further information: https://de.borlabs.io/datenschutz/

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • used operating system
  • Referrer URL
  • hostname of the accessing computer
  • time of the server request
  • IP address

A consolidation of these data with other data sources is not carried out.

The collection of these data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website – for this purpose the server log files must be recorded.

Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you entered there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of this data is carried out on the basis of art. 6 par. 1 letter b DSGVO, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO), provided that this has been requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for which it was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Inquiry by e-mail, phone or fax

If you contact us by e-mail, telephone, or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is carried out on the basis of art. 6 par. 1 letter b DSGVO, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the requests addressed to us.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent for storage, or the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Registration on this website

You can register on this website to use additional features on the site. We will use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory data requested during registration must be provided in full. Otherwise, we will refuse the registration.

For important changes, such as changes to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The data collected during registration is stored by us for as long as you are registered on this website and is then deleted. Legal retention periods remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only to the extent that they are necessary for the establishment, content, or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable or charge the user for the use of the service.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer upon conclusion of contract for online stores, dealers and dispatch of goods

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with the handling of payments. A further transmission of the data will not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

Newsletter

Our newsletter is published regularly and contains information about the Dreamteam marketplace. It also informs about events relevant for startups and founders.

To subscribe, you need to provide us with your email address. You can voluntarily provide us with additional information, such as your name. The registration takes place in a so-called double opt-in process. After registering on our website, you will receive a confirmation email from us in which you have to confirm the registration again. This entire process is documented and stored. This includes the storage of the registration and confirmation time as well as your IP address. The collection of this data is necessary so that we can trace the processes in the event of misuse of the e-mail address and therefore serves our legal protection. By subscribing to our newsletter, you agree to receive it.

The legal basis for the processing of your data after you have subscribed to the newsletter is Art. 6 Para. 1 lit. a DSGVO if you have given your consent.

You can revoke your consent to the storage and use of your personal data for the purpose of receiving the newsletter and the statistical collection described above at any time with effect for the future. For the purpose of revoking your consent, you can use the link provided for this purpose in the newsletter.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your email address will therefore be stored as long as the subscription to the newsletter is active.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both his website and his advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

IP Anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: Deactivate Google Analytics.

More information about the handling of user data at Google Analytics can be found in the privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Storage time

User and event-level data stored at Google that is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de

Salesforce

We use Salesforce to process customer data. Salesforce is a CRM tool provided by Salesforce, Inc. Salesforce provides CRM of Personal Data: Email, phone number, various types of data as described in the service’s notices. More info: www.salesforce.com/de/company/privacy

Meetergo

The purpose of the processing is the use of the software meetergo as a tool for simplified scheduling, project coordination &.

communication. The software is a software as a service.

 The legal basis (according to Art. 6 / 9 DSGVO) is the fulfilment of a contract or a pre-contractual obligation (Art. 6 Ib).

The personal data is passed on to third party companies if necessary in order to ensure the smooth running of the service.

to be able to guarantee the smooth running of the service. The cooperation with these subcontractors has been specified under data protection law with an AV contract.

A data transfer to a third country is not planned.

The personal data is collected with the use of meetergo, as a Software as a Service service, and is essential for the use of the software. The categories of personal data include personal master data, communication data, customer history or tracking of usage behaviour and contract billing & payment data.

Privacy Policy: https://meetergo.com/datenschutz/

6. Plugins and tools

 

Hotjar

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

7. Social Media

In addition to this website, we are also active on various social networks. As far as you can find a
such presence, personal data may be transmitted to the provider of the social
network. It is possible that, in addition to the storage of the information provided by your in this social
network, the provider of the social network may also request further information from you.
. So your data is generally used for market research and
advertising purposes, among other things, to create corresponding usage profiles and to provide you with
display personalized advertising. For this purpose, the provider of the social network stores in the
usually cookies on your terminal device, in which your usage behavior and interests are stored
Furthermore, the provider of the social network may process the most important data of the
computer system from which you are visiting this site – for example, your IP address, the
used processor type and browser version including plug-ins.
If you are logged into your respective account, you can link the content of this website to your profile by clicking on the social media buttons. This enables the provider to assign the visit to this website to your user account. We would like to point out that we as the provider of the pages
do not receive any knowledge of the content of the transmitted data or its use.
If you do not wish to be assigned to a social media site, you must log out before visiting our social media site.
to delete the cookies
The legal basis for the processing of personal data is Art. 6 para. 1 lit. f DSGVO. Insofar
as consent has been obtained, the above-mentioned service is used on the basis of
Art. 6 Para. 1 lit. a DSGVO and § 25 TTDSG. Consent is revocable at any time. Unless consent
has been obtained, the use of the service is based on our legitimate interest
in being as visible as possible in social media.
We maintain presences in the respective social networks in order to
communicate with you there and to be able to inform you about our services.. These purposes also include
our legitimate interest in processing the personal data pursuant to Art. 6 para. 1 lit. f
DSGVO.
Further information on the purpose and scope of data collection as well as further processing
and use of your data and the possibility of opt out can be found in the privacy policy of the respective network:

Instagram

Functions of the Instagram service are integrated on this website. These functions are
offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Irland.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875 und https://de-de.facebook.com/help/566994660333381.
Privacy of Instagram: https://instagram.com/about/legal/privacy/.

LinkedIn

Functions of the LinkedIn service are integrated on this website. LinkedIn is operated by
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland.
Privacy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing

Functions of the Xing service are integrated on this website. Xing is operated by XING.
AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Privacy and Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

8. Video conferences, online meetings

We transfer platforms and applications to third parties for the purposes of carrying out video and
audio conferences, workshops and other types of video and audio meetings. In the selection
of the third-party providers and their services, we observe the legal requirements.
In this context, data of the communication participants are processed and stored on the servers of the
third-party providers, insofar as these are part of communication processes with us. These
data may include, in particular, registration and contact data, visual and vocal contributions
as well as input into chats and shared screen content.
Where clients, in the course of communication, business or other dealings with us, refer to the
third party providers, or their software or platforms, the third party providers may not
Process usage data and metadata for security, service optimisation
or marketing purposes. We therefore ask you to observe the data protection notices of the respective third-party providers.

Data types processed

Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g.
entries in online forms), usage data (e.g. websites visited, interest in content,
access times), meta/communication data (e.g. device information, IP addresses).

Affected persons

Affected persons are our communication partners, users, clients (e.g. website visitors,
online service users).

Purposes of the processing

Provision of contractual services and customer service, contact requests and communication, office and organisational procedures, direct marketing (e.g. by e-mail).
Legal basis: consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), contract performance and pre-contractual
Requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Services used and service providers

  • Google Meet: Video conferencing, web conferencing ; webinar provider: Google LLC, 1600
    Amphitheatre Parkway, Mountain View, CA 94043, USA;
    Website: https://marketingplatform.google.com/intl/de/about/analytics/;
    Privacy statement: https://policies.google.com/privacy.
  • Zoom: Video conferencing, web conferencing ; Service provider: Zoom Video
    Communications, Inc., 55 Almaden Blvd., Suite 600, San Jose, CA 95113, USA;
    Website: https://zoom.us; privacy declaration: https://zoom.us/docs/de-de/privacy-and-
    legal.html; Standard contractual clauses (guaranteeing level of data protection for processing in
    third countries): https://zoom.us/docs/de-de/privacy-and-legal.html
  • Teams: Video conferencing, web conferencing ; webinar provider: Microsoft Corporation, One
    Microsoft Way. Redmond, WA 98052-6399, USA; privacy declaration:
    https://privacy.microsoft.com/de-de/privacystatement

9. Other

The German language text is legally binding. The English version is for convenience only.

 

Status: February 2023