We – (“ElbValley” or “we”) – would like to inform you about our processing of your personal data in accordance with the General Data Protection Regulation (“GDPR”).
Our privacy notice is modular in structure. It consists of general information for any processing of personal data and processing situations (I.) and specific information whose content applies only to the processing situation described therein (II. et seq.). To find the parts relevant to you, please refer to the following:
Structure:
I. General Information
II. Additional Information for the Website
III. Additional Information for Platform Use by Registered Users
IV. Additional Information for Communication with Us
V. Additional Information for Contract Partners
VI. Google Maps
The controller within the meaning of the GDPR and other national data protection laws of the Member States as well as other data protection provisions is:
Thobias Michel
together@elbvalley.com
We process some of your personal data based on the following legal bases:
Where we obtain your consent for specific purposes, Art. 6 (1) sentence 1 lit. a GDPR is the legal basis.
Where processing is necessary for the performance of a contract to which you are a party, Art. 6 (1) sentence 1 lit. b GDPR is the legal basis. This also applies to processing required for pre-contractual measures.
Where processing is necessary to fulfill a legal obligation to which we are subject, Art. 6 (1) sentence 1 lit. c GDPR is the legal basis.
Where processing is necessary to safeguard our legitimate interests or those of a third party, and your interests, fundamental rights, and freedoms do not override those interests, Art. 6 (1) sentence 1 lit. f GDPR is the legal basis.
Personal data will be deleted or blocked as soon as there is no longer a legal basis or purpose for processing.
Internally, only departments that require personal data to fulfill processing purposes will have access to it. This also applies to processors, service providers, and agents used by us. All persons handling personal data are obligated to maintain confidentiality and handle data sensitively.
Personal data is only disclosed to third parties in compliance with data protection regulations. In particular, service providers involved in our business operations (e.g., banks, tax advisors, IT service providers) and public authorities may receive personal data if required by law.
Some of our services may require the processing of personal data in countries outside the EU/EEA (“third countries”) by our processors.
Where personal data is processed in a country without an adequate level of data protection as confirmed by an adequacy decision of the European Commission pursuant to Art. 45 (3) GDPR, we have concluded EU Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure appropriate safeguards.
You can find a copy here:
https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32021D0914&from=DE
Where third-country processing occurs, we will indicate this accordingly below.
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights:
You have the right to request information about your personal data processed by us, including:
purposes of processing
categories of personal data
recipients or categories of recipients
whether data is transferred to third countries
planned storage duration
right to rectification, deletion, restriction, or objection
right to lodge a complaint
source of the data
existence of automated decision-making including profiling
You have the right to request correction of inaccurate or incomplete personal data.
You have the right to request restriction of processing under certain conditions.
You have the right to request deletion of your personal data, unless legal obligations or other valid grounds require retention.
We must inform recipients of any correction, deletion, or restriction of processing unless this is impossible or disproportionate.
You have the right to receive your data in a structured, commonly used, machine-readable format or request transfer to another controller.
You have the right to object to processing based on legitimate interests or public interest.
You may withdraw your consent at any time.
You have the right to lodge a complaint with a supervisory authority.
We are responsible for our website elbvalley.com and its subpages (“website”). By using our website, personal data is processed. Below we provide detailed information about the data processing that takes place.
When accessing our website, we automatically collect data and information from the user's end device (so-called log files).
The following information is processed:
The data is required to display the website on the user's end device, to ensure its functionality, and to analyze possible malfunctions. In addition, the data serves to optimize the website and to ensure the security of our information technology systems.
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The collection of log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
We use cookies on our website. These are text files that are stored in or by the internet browser on the user's end device when visiting the website.
Each cookie contains a characteristic string that makes it possible to uniquely identify the browser when the website is accessed again and thus the respective user's end device.
Some functions of our website cannot be provided without the use of cookies. These technically necessary cookies are not used to determine the identity of the user or to create user profiles.
The legal basis for storing essential cookies is § 25 para. 2 no. 2 TTDSG.
The legal basis for processing the resulting personal data is Art. 6 para. 1 sentence 1 lit. f GDPR.
The use of these cookies is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
We carry out analyses on our website using cookies.
The analysis tool enables us to analyze the type of use of our website. The processing is based on the consent of the respective user, which the user grants when first visiting the website. Consent is given via our consent manager.
Consent includes, on the one hand, the storage and retrieval of information on the user's end device in accordance with § 25 para. 1 TTDSG.
On the other hand, consent includes the processing of the resulting personal data for analysis purposes in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
Processing takes place until consent is withdrawn, unless the purpose of processing ceases earlier.
We use a consent button on our website to request and store the consents you have (or have not) given when using the website.
When using the consent manager, a cookie is stored on your end device with which your given (or not given) consents can be retrieved. The cookie is called “cookie-consent-allow”. In addition, the cookie “cookie-consent-shown” is used to record that the consent manager window has already been displayed.
The cookies and the given (or not given) consents are deleted after one month. After that, the consent process begins again.
The legal basis for storing essential cookies is § 25 para. 2 no. 2 TTDSG.
The legal basis for processing the resulting personal data is Art. 6 para. 1 sentence 1 lit. f GDPR.
The use of these cookies is absolutely necessary for storing your consent preferences. Consequently, there is no possibility of objection on the part of the user.
If you use the platform provided on our website as a user — meaning you are registered with us — the following additional information applies.
Registration for our platform takes place using social logins.
For this purpose, you will be redirected from our website to the website of the social media provider, where you can log in as usual. There you can release your basic data to us, which will then be transmitted directly from the social media provider to us and stored on our servers.
The basic data includes the following:
No further transfer of personal data from us to the social media provider takes place.
The data is stored as long as your user account exists. You can update your data in your respective social media account. The updated data will then be automatically transmitted to us.
The processing of the data takes place on the basis of the terms of use concluded with you and thus for the fulfillment of our contractual obligations (Art. 6 para. 1 sentence 1 lit. b GDPR).
If you are registered as a user on the platform, you can indicate your participation in existing trainings. By doing so, we transmit your participation information to the trainers of a training.
The data processing takes place on the basis of the terms of use concluded with you and thus for the fulfillment of our contractual obligations (Art. 6 para. 1 sentence 1 no. b GDPR).
This also applies to the transmission of participation information to the organizer.
The following information applies to any communication with us.
If you contact us, we process the personal data that you provide to us in the course of the contact (in addition to the communication content, this also includes, for example, the email address).
The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. This is the case when the respective conversation with you has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified.
The legal basis for processing data transmitted in the course of sending an email or via the contact form is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing of personal data serves us solely to process the contact request. If the contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
The following information additionally applies to you if we are in a contractual relationship with each other. This includes in particular users registered with us.
Which data is processed in detail depends on the tasks within the contractual relationship. We use personal information exclusively for the purpose for which it was provided to us. This includes, for example, personal details (name, address and other contact data, date and place of birth). In addition, this may also include order data (e.g., payment order), data from the fulfillment of our contractual obligations (e.g., sales data in payment transactions), information about your financial situation (e.g., creditworthiness data), advertising and sales data, as well as other data comparable to the categories mentioned.
Personal data will be deleted as soon as the contractual relationship with you has ended and provided that no other reason for processing exists.
Processing is carried out primarily for the purpose of establishing and executing the contractual relationship; the legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.
In addition, we also process your data partly on the basis of our legitimate interest, namely for the purposes of contact and communication management, efficiency controls, contract and project management, and ensuring the operation of information and telecommunications systems. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
Furthermore, as a company we are subject to various legal obligations that must be complied with due to applicable laws and regulations. The legal basis for processing to fulfill legal requirements and obligations is Art. 6 para. 1 sentence 1 lit. c GDPR. This includes, in particular, retention obligations under tax law.
Google Maps is an online map service provided by Google Inc. With Google Maps, you can search for exact locations of cities, places of interest, accommodations, or companies on the internet via a PC or via an app. If companies are represented on Google My Business, additional information about the company is displayed in addition to the location. To display directions, map sections of a location can be embedded into a website via HTML code. Google Maps displays the earth's surface as a street map or as an aerial or satellite image. Thanks to the Street View images and the high-quality satellite images, very precise representations are possible.
The following cookie is set in your browser due to the integration of Google Maps:
Note: We cannot guarantee the completeness of the information regarding stored data. Especially when using cookies, changes by Google can never be ruled out. To identify the NID cookie, a separate test page was created in which only Google Maps was integrated.