Privacy Policy

Effective September 9, 2024
Translation of the original: Datenschutzerklärung

This privacy policy applies to the website elephouse.de and all its subdomains (the “Websites”), along with the Elephouse web applications and services (the “Services”), owned and operated by Daniel Schnee (Sole Proprietor Business, collectively, "Daniel Schnee", "we", "us" or "our"). This privacy policy describes how we collect, use, share, and protect the personal data you provide to us. It also outlines your choices regarding the use, access, correction, and deletion of your personal data.

1. Definitions

Personal data includes any information about you which can be used to identify you. This includes information about you as an individual (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

The Marketing Website refers to all public-facing informational pages on our website. This includes content such as the homepage, about us, contact information, product descriptions, blog posts, and support resources. Essentially, it is any part of the website accessible from the main domain elephouse.de that provides information about our products and services but does not require user login or interaction with the web application.

The Web Application consists of all functional pages that require user authentication and are part of Elephouse service delivery. This includes, but is not limited to, user dashboards and personal profile settings. The web application is primarily accessible via URLs beginning with /tasks/ and /user/. These pages provide the interactive components of Elephouse, where users can manage their accounts.

2. What Data We Collect

We collect both information that you knowingly and actively provide when using our services or participating in our services, as well as any information automatically sent by your devices when accessing our products and services.

We collect and use your personal data only for providing our services.

We do not sell your personal data or any data that you enter into our services in any way.

Third-Party Services and Sub-Processors

We share certain information with companies that may be considered our “sub-processors” under GDPR. This information is limited to the following:

Required for the Marketing Website

The following services are required for the operation of the Elephouse marketing website:

Company Purpose Information collected
Hetzner Hosting infrastructur IP addresse

Required for the Web Application

In addition to the services required for the marketing website, the following services are necessary for the Elephouse web application:

Company Purpose Information collected
Brevo Email delivery Email

Please note that Brevo only receives your personal data after a user account is created with Elephouse.

3. How We Collect Information

We collect the following personal data from you:

Information you provide about yourself

When you sign up for the services, we ask for information such as:

  • Contact information: such as name and email address.
  • Unique identifiers: such as email address or password.

We may collect, store, use, and disclose data to fulfill the following purposes, and personal data will not be processed further in a manner that is incompatible with providing the core services.

Please note that we may combine the information we collect about you with general information or research data we receive from other trusted sources.

Information Collected Automatically

When you visit our website, our servers automatically log standard data provided by your web browser. This may include your device’s Internet Protocol (IP) address, browser type, browser version, the pages you visit, the date and time of your visit, the time spent on each page, and other details of your visit, including referring/exit pages, files viewed (e.g., HTML pages, graphics), operating system, and/or clickstream data.

Additionally, we may automatically collect data about errors encountered during your visit. This data may include technical details about your device, what you were doing when the error occurred, and other technical information related to the problem. You may or may not receive a notification of such errors when they occur or what the error involves.

Please note that although this information cannot alone be used to identify you personally, it may be combined with other data to identify individuals.

You can control the use of cookies at the browser level. If you choose to disable cookies, it may limit your use of certain features or services on our website or our services. We do not use cookies or similar technologies in connection with your customer data. See our cookie policy.

4. Security

The security of your personal data is important to us. We take appropriate measures to protect the personal data transmitted to us, both during transmission and once received. We take steps to ensure that all source codes, files, and data remain private and confidential. Due to the sensitive nature of the source code, we take this very seriously and make it a priority for all customers. We limit access to personal data to our employees, contractors, and agents who need to know this information in order to operate, develop, or improve our service. If you have any questions regarding the security of your personal data, you can reach us using the contact information provided below.

5. Rights Regarding Your Information

You have the right to withhold personal data from us at any time, understanding that this may affect your experience on our website. We will not discriminate against you for exercising your rights regarding your personal data. If you provide us with personal data, you understand that we will collect, store, use, and disclose it in accordance with this privacy policy. You have the right to request details of the personal data we hold about you.

If we receive personal data about you from a third party, we will protect it as outlined in this privacy policy. If you are a third party providing personal data about another person, you confirm and guarantee that you have that person’s consent to share their personal data with us.

If you have previously agreed to our use of your personal data for direct marketing purposes, you can change your mind at any time. We provide you with the option to unsubscribe from our email database or opt out of communication. Please note that we may need to request specific information from you to confirm your identity.

If you believe that the information we hold about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us using the contact details provided in this privacy policy. We will take reasonable steps to correct any information deemed inaccurate, incomplete, misleading, or outdated.

If you believe we have violated a relevant data protection law and wish to file a complaint, please contact us at the contact details provided below and provide full details of the alleged breach. We will promptly investigate your complaint and provide you with a written response detailing the outcome of our investigation and the steps we will take to address your complaint. You also have the right to file a complaint with a supervisory or data protection authority.

Your Rights

  • Withdraw your consent at any time: You have the right to withdraw your consent at any time, provided that you have previously given consent for the processing of your personal data.
  • Object to the processing of your data: You have the right to object to the processing of your data if the processing is based on legal grounds other than your consent.
  • Access your data: You have the right to know whether your data is being processed, to receive information about certain aspects of the processing, and to obtain a copy of the data that is being processed.
  • Review and rectification: You have the right to verify the accuracy of your data and request its update or correction.
  • Restrict the processing of your data: You have the right to request the restriction of the processing of your data under certain circumstances. In such cases, we will not process your data for any purpose other than storage.
  • Deletion of your personal data: You have the right to request the deletion of your data. We will comply with your request within the legal retention obligations and timelines.
  • Receive and transfer your data to another controller: You have the right to receive your data in a structured, commonly used, and machine-readable format and, where technically feasible, transfer it to another controller without any hindrance. This applies provided the data is processed by automated means and the processing is based on your consent, a contract to which you are a party, or pre-contractual obligations.
  • File a complaint: You have the right to file a complaint with the relevant data protection authority.

How to Exercise These Rights

To exercise your rights, such as requesting or deleting your data, please contact us using the contact details provided below. Requests can be made free of charge and will be processed by us as soon as possible, but always within one month.

6. Data Retention

We may retain your information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. Under certain circumstances, we may be legally obligated to retain your personal data, or we may need to retain it in order to continue providing a service.

Even if you delete your account, please note that deletion by our third-party providers may not happen immediately, and the deleted information may remain in backup copies for a reasonable period. We have no control over when and if our third-party providers actually delete the information.

All data you enter into our service will be deleted from our databases within 30 days of deleting your account. Additionally, all remaining information will be removed from our backups within 3 months after the account deletion. If you wish for your personal data to be completely removed from our customer relationship platform and other third-party providers, please send us a specific request via email. Provide your user details and a brief description of your request to facilitate the quick processing of your data deletion. Please note that some data may be subject to legal retention requirements and therefore may not be deleted within the stated timeframes.

7. Limits of Our Policy

Our website may contain links to external sites that are not operated by us. Please note that we have no control over the content and policies of these sites, and we cannot assume any responsibility or liability for their respective privacy practices.

8. Changes to This Policy

We may change our privacy policy at our discretion to reflect updates to our business processes, current acceptable practices, or legal or regulatory changes. If we decide to amend this privacy policy, we will post the changes here at the same link through which you access this privacy policy.

If the changes are significant or legally required, we will notify you (based on your selected communication preferences with us) and all our registered users with the new details and links to the updated or modified policy.

If legally required, we will seek your permission or provide you with the opportunity to agree to or decline the new use of your personal data.

9. Contact

If you have any questions or concerns about this privacy policy, please contact us at privacy@elephouse.de.