Privacy

Privacy Policy

I. Privacy Notice

II. Special Privacy Notice for elevaide.com

I. Privacy Notice

We all want to know how our personal data is being used. That’s why we explain here which of your data we process when you create an elevaide account or just visit our website.

1. Controller

The controller of the personal data collected on elevaide is elevaide GmbH, Schanzenstraße 6–8, 40549 Düsseldorf, Germany; phone: +49 (0) 160 968 674 64, e-mail: paperwork@elevaide.com

2. Data protection officer

You can contact our data protection officer by telephone on +49 (0) 160 968 674 64 or by e-mail at paperwork@elevaide.com.

3. Your rights as a data subject

You have the right:

  • to request information about your personal data that we process in accordance with Article 15 of the General Data Protection Regulation (GDPR). In particular, you may request information about the purposes of processing, the category of personal data concerned, the categories of recipient to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it has not been collected by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
  • to demand the immediate rectification of inaccurate personal data about you or the completion of your personal data stored by us in accordance with Article 16 GDPR.
  • to request the erasure of your personal data stored by us in accordance with Article 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
  • to request restriction of the processing of your personal data in accordance with Article 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse its erasure, and we no longer require the data but you need it for the establishment, exercise or defense of legal claims, or if you have objected to processing in accordance with Article 21 GDPR.
  • to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission of the data to another controller in accordance with Article 20 GDPR.
  • to withdraw your consent at any time in accordance with Article 7 (3) GDPR. This means that, in the future, we may no longer continue processing the data for which this consent was given.
  • make a complaint to a supervisory authority in accordance with Article 77 GDPR.

4. Right of objection

If your personal data is processed on the basis of Article 6 (1) sentence 1 point e or f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are grounds for doing so relating to your particular situation or you object to processing for direct advertising purposes. In the latter case, you have a general right to object, which we will implement without you specifying a particular situation. If you wish to make use of your right to withdraw your consent or to object, it is sufficient to send us a message.

5. Direct advertising

If we collect your name and address, we reserve the right to use this data for direct advertising purposes. Our legitimate interest in processing is to inform you about the services we offer in accordance with Article 6 (1) sentence 1 point f GDPR in conjunction with recital 47 sentence 7 of the preamble to the GDPR. If we use your personal data for direct advertising purposes, we may pass it on for this purpose to service providers who support us in direct advertising. The data will be deleted at the latest when the purpose for which it was originally collected ceases to exist.

6. Security and data encryption

We use technical and organisational security measures to protect the data we control against accidental or intentional manipulation, loss or destruction, and against access by unauthorized persons. Our security measures are continuously improved in line with technological advances.

Whenever you are asked to enter personal data on one of our websites, your data is protected for transmission using SSL (Secure Socket Layer) encryption so that it cannot be read by unauthorized persons.

II. Special Privacy Notice for elevaide.com

1. Technical data

When you visit our website, general data and information is stored in the server’s log files. We may collect information about the browser type and version you are using, the operating system you are using, the website from which you accessed elevaide, the date and time you accessed our website, your Internet Protocol (IP) address at the time of access, and your Internet service provider.

Data collection is necessary for technical reasons in order to correctly deliver the web page content you request and is mandatory when using the Internet. The server log file data is stored separately from all other personal data that may have been entered elsewhere by a data subject. When using this general data and information, we do not draw any conclusions about the data subject.

Processing takes place in accordance with Article 6 (1) point f GDPR. The legitimate interest derives from the fact that you would not be able to access our website without temporary storage of the data.

As soon as you leave the website, the technical data described above is erased. The only exception is if we inform you in this Privacy Policy that your data may be required for other purposes (such as analysis).

Provision of this technical data is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the personal data. If your system does not provide the required information or does not provide it in full, this may mean that you cannot access our website or cannot access all of it.

2. Use of cookies

Our website uses cookies. Cookies are text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. Your name is not transmitted.

You can choose whether or not to accept the use of cookies via your browser settings. You can either completely deactivate cookie storage in your browser, limit cookie storage to certain websites or configure your browser so that it automatically notifies you each time a cookie is to be used.

Cookies are used to track visitor behavior on a website. When cookies are used, data may be processed that allows identification of the user, even if the data is pseudonymized.

Processing takes place in accordance with Article 6 (1) point a GDPR.

Any cookies we use are deleted automatically when the browser session is ended or after a fixed period of time. You can find detailed information in your browser about the cookies we use. Cookies can also be removed manually from your device using your browser’s delete function.

The use of cookies is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not allow the use of cookies, this may result in some functions of the website not working or not working properly and/or certain content not being displayed or not being displayed properly.

3. Google Analytics

We use the technical data that you automatically transmit when you visit our website, including your IP address, to compile anonymous statistics about how our website is used. Your IP address will be abbreviated to anonymize it when you access our website from a member state of the European Union or from another contracting state of the European Economic Area.

The service uses cookies, i.e., text files that are stored on your terminal device. You have the option of preventing storage of this cookie on your device by adjusting the corresponding settings in your browser. There is no guarantee that you will have unrestricted access to all this website’s functions if your browser does not allow cookies.

You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being transmitted to and used by Google Analytics. For further information about the use of data by Google Analytics, please see its privacy policy.

The information collected by the cookies is usually transmitted to a Google Analytics server in the USA and processed there for the purposes of analysis. With regard to the USA, the European Commission has decided that there is no adequate level of data protection within the meaning of the GDPR. No adequacy decision has been taken in accordance with Article 45 GDPR.

Processing takes place in accordance with Article 6 (1) point a GDPR.

We erase the data as soon as it is no longer required for statistical purposes, at the latest after two months.

The provision of your data to Google Analytics is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. Objecting to processing has no consequences for you.

4. Hotjar

We use Hotjar to build a better understanding of our users’ needs as well as optimize the offering and experience provided on this website. Hotjar’s technology helps us develop a better picture of our users’ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and don’t like, etc.). This in turn helps us to tailor our offering in line with our users’ feedback. Hotjar uses cookies and other technologies to collect information about our users’ behavior and their devices, including but not limited to the device IP address (collected and stored anonymously while you are visiting the website), screen size, device type (unique device identifier), browser information, location (country only), and language preference for viewing our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data it collects on our behalf. For further information about Hotjar’s use of data, please see its privacy policy.

You have the option of preventing storage of this cookie on your device by adjusting the corresponding settings in your browser. There is no guarantee that you will have unrestricted access to all this website’s functions if your browser does not allow cookies.

Processing takes place in accordance with Article 6 (1) point a GDPR.

We erase the data as soon as it is no longer required for statistical purposes, at the latest after one month.

The provision of your data to Hotjar is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. Objecting to processing has no consequences for you.

5. Members’ area

Certain content on this website is only available to users who have created a user account. To create an account, you must send us your e-mail address. We may also need your first and last names and your full address in order to provide you with a donation receipt. We store this data for the purpose of creating your user account and to give you access to the members’ area services.

Processing takes place in accordance with Article 6 (1) points b and f GDPR. The legitimate interests we pursue by processing are to ensure the needs-based and user-friendly design of our website and to continuously motivate members to participate in activities via the gamification system.

We erase the data as soon as you delete your user account on our website.

The provision of your data to create a user account is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you object to processing, this will mean you can no longer access the content intended for registered users only.

6. Newsletter

You can subscribe to a newsletter with promotional content on our website. To this end, you can enter your e-mail address on a registration form. We collect and store this data for use in the future dispatch of newsletters. For the purpose of dispatch, the data you enter will be transferred to an external service provider with whom we have concluded a processing agreement.

When you register for the newsletter, we also store your IP address and the registration date. This serves as evidence in the event that a third party misuses an e-mail address and registers to receive the newsletter without your knowledge.

We also request the recipient’s express consent to receive promotional messages in electronic form. This is intended to fulfil the requirement for consent in accordance with section 7 (2) No. 3 of the German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb – UWG). In this context, we send an e-mail to the owner of the e-mail address provided to us requesting confirmation of the newsletter subscription by e-mail. We also store this e-mail response, the IP address and the time of sending for verification purposes (double opt-in process).

The data is processed in accordance with Article 6 (1) points a and f GDPR and recital 47 sentence 7 of the preamble to the GDPR. Our legitimate interests are to inform our customers about our offering by way of direct advertising, to prevent the misuse of e-mail addresses as well as to be able to prove that the recipient of the newsletter has expressly consented to being sent electronic advertising messages.

We store your data until you unsubscribe from the newsletter or withdraw your consent.

The provision of your data for dispatch of the newsletter is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. However, we will not be able to send you a newsletter if you do not provide your e-mail address.

7. Usage behavior

We use your personal data in accordance with clause 5 to track whether you have participated in individual activities on our website and how you have performed. For this purpose, we systematically collect the data for statistical evaluation and use in compiling overviews.

Processing takes place in accordance with Article 6 (1) point f GDPR. The legitimate interests we pursue by processing are to track the success of our gamification content as well as to ensure the needs-based modification and improvement of our website.

We erase the data as soon as you delete your user account on our website.

The provision of your data for tracking usage behavior on our website is neither mandatory nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you object to processing, this will mean you can no longer access the content intended for registered users only.

8. Integration of third-party content

We have integrated content into our website that is provided not by us but by third parties. When you access the elevaide website, this content is automatically loaded from a third-party server without you noticing. In order for your web browser to display this information, it must not only access our website but also the websites where the content originates. You necessarily make the technical data described in clause 1 available to the third-party supplier as well.

9. Abwicklung von Online-Spenden

On our website, we offer users the option of making online donations. If a user selects this option, the data entered in the relevant form will be transmitted to us and stored. The donation process is handled using the Donorbox tool provided by Rebel Idealist LLC, 5 3rd St, Suite 900, San Francisco, CA 94103, USA. You can find more information about the donation process and the company’s privacy policy on the Donorbox website.

To execute the donation request, the data entered is forwarded directly via an encrypted SSL connection to the technical service providers (such as PayPal or Mastercard) used by Donorbox to provide the form. The data will not be passed on to other third parties.

The following data is collected using the form:

Full name (first and last names); address (street, number, city, zip or postal code, country); e-mail address; bank details (IBAN); donation details (donation recipient, amount, donation purpose); browser information. Additionally, the following information is required for credit card donations: card type, card number, CVV/CVC number, expiration date.

You also have the option of using online payment services PayPal or Stripe to make your donation. These services allow online payments to third parties. PayPal’s European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22–24 Boulevard Royal, 2449 Luxemburg. Stripe is operated by Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. If you choose PayPal or Stripe to make your payment, the data required for the payment process will be transmitted automatically to PayPal or Stripe. This regularly involves the following data: name, address, company (if applicable), e-mail address, telephone and cellphone numbers, IP address.

Data submitted to PayPal or Stripe may be transmitted to credit agencies in order to verify your identity and creditworthiness. PayPal and Stripe may also share your data with third parties to the extent necessary to fulfill contractual obligations or if they use third-party data processing services. Please see the privacy policies of PayPal and Stripe for further information.

The data collected is required to execute the donation request. The user’s e-mail address is required to confirm receipt of the donation request. The data will not be used for any other purpose. The legal basis for processing the data is Article 6 (1) point b GDPR.

The user’s IP address is stored at the time the form is transmitted. We use the IP address to prevent misuse of the donation form. The IP address is used to prevent fraud as well as unauthorized transactions to the detriment of third parties. These are the grounds for our legitimate interest in accordance with Article 6 (1) point f GDPR, which is the legal basis for processing the data.

The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of bank details, this is done immediately after the donation has been collected. Like all the other data entered, address data is stored to ensure compliance with retention obligations under tax law. However, any other use of this data is blocked. The IP address collected during the transmission process is deleted after seven days at the latest.

You may object to the processing of your data at any time. It should be noted, however, that the donation request can no longer be executed in the event of an objection.

10. Links to other providers

Please note that our websites may contain links to other providers’ websites which are not covered by this privacy notice. You can see which website a link leads to by hovering your cursor over the link. The link target address will appear in an information area at the bottom of your browser window.