Privacy Policy
1. Introduction
We inform you below about the processing of personal data when using our website www.enhancely.ai.
Personal data is all data that can be related to a specific natural person, e.g. their name or IP address.
1.1 Contact Details
Data Controller according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR):
enhancely GmbH
Melanchthonstraße 31b
33615 Bielefeld
Germany
Email: info@enhancely.ai
Legally represented by: Bastian Sirvend
1.2 Scope of Data Processing, Processing Purposes and Legal Bases
The scope of data processing, processing purposes and legal bases are detailed below. The following legal bases for data processing are generally considered:
Art. 6 para. 1 lit. a GDPR serves as the legal basis for processing operations for which we obtain consent.
Art. 6 para. 1 lit. b GDPR is the legal basis if the processing of personal data is necessary for the performance of a contract.
Art. 6 para. 1 lit. c GDPR applies when we fulfill a legal obligation by processing personal data.
Art. 6 para. 1 lit. f GDPR serves as the legal basis when we can invoke legitimate interests for processing personal data.
1.3 Data Processing Outside the EEA
Where we transmit data to service providers or other third parties outside the EEA, adequacy decisions by the EU Commission pursuant to Art. 45 para. 3 GDPR guarantee the security of the data upon transfer, where these exist.
For data transfers to service providers in the USA, the legal basis for data transfer is an adequacy decision by the EU Commission if the service provider is additionally certified under the EU US Data Privacy Framework.
In other cases, the legal basis for data transfer is standard contractual clauses in accordance with Art. 46 para. 2 lit. b GDPR.
1.4 Storage Period
Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and deletion does not conflict with any statutory retention obligations.
1.5 Rights of Data Subjects
Data subjects have the following rights regarding their personal data:
Right to information
Right to rectification or deletion
Right to restriction of processing
Right to object to processing
Right to data portability
Right to withdraw consent at any time
Data subjects also have the right to lodge a complaint with a data protection supervisory authority about the processing of their personal data.
1.6 Obligation to Provide Data
Customers, interested parties or third parties only need to provide us with personal data that is necessary for establishing, conducting and terminating a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude a contract or provide a service.
Mandatory fields are marked as such.
1.7 No Automated Decision-Making
We generally do not use fully automated decision-making pursuant to Article 22 GDPR to establish and implement a business relationship. Should we use these procedures in individual cases, we will inform you separately if this is required by law.
1.8 Contact
When you contact us, e.g. by email, the data you provide (e.g. name and email address) will be stored by us to answer your questions. The legal basis for processing is our legitimate interest (Art. 6 para. 1 lit. f GDPR) in answering inquiries addressed to us. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.
2. Newsletter
We reserve the right to inform customers who have already used our services or purchased goods from us from time to time by email or other electronic means about our offers, unless they have objected to this. The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in direct marketing (recital 47 GDPR).
Customers can object to the use of their email address for advertising purposes at any time without additional costs, for example via the link at the end of each email or by email to our email address mentioned above.
Interested parties have the option to subscribe to a free newsletter. We process the data provided during registration exclusively for sending the newsletter. Registration is done by selecting the appropriate field on our website or through another clear action, whereby interested parties declare their consent to the processing of their data, so that the legal basis is Art. 6 para. 1 lit. a GDPR.
Consent can be withdrawn at any time, e.g. by clicking the appropriate link in the newsletter or by contacting our email address given above. The processing of data until withdrawal remains lawful even in the event of withdrawal.
3. Data Processing on Our Website
3.1 Notice for Website Visitors from Germany
Our website stores information in the end device of website visitors (e.g. cookies) or accesses information that is already stored in the end device (e.g. IP addresses). Details of what information this is can be found in the following sections.
This storage and access is based on the following provisions:
Where this storage or access is absolutely necessary for us to provide the service of our website expressly requested by website visitors, it is based on § 25 para. 2 no. 2 TTDSG.
Otherwise, this storage or access is based on the consent of website visitors (§ 25 para. 1 TTDSG).
3.2 Informational Use of the Website
During the purely informational use of the website, i.e. when site visitors do not separately transmit information to us, we collect the personal data that the browser transmits to our server to ensure the stability and security of our website. This is our legitimate interest, so the legal basis is Art. 6 para. 1 lit. f GDPR.
This data includes:
IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software
This data is also stored in log files. It is deleted when storage is no longer necessary, at the latest after 14 days.
3.3 Web Hosting and Website Provision
Web Hosting Provider
Our website is hosted by Amazon Web Services (AWS). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. AWS processes the personal data transmitted via the website, e.g. content, usage, meta/communication data or contact data, in secure data centers within the EU.
Further information can be found in AWS's privacy policy at https://aws.amazon.com/privacy/.
It is our legitimate interest to provide a website, so that the legal basis of the described data processing is Art. 6 para. 1 lit. f GDPR.
3.4 Contact Form
When contacting us via the contact form on our website, we store the data requested there and the content of the message. The legal basis for processing is our legitimate interest in answering inquiries addressed to us. The legal basis for processing is therefore Art. 6 para. 1 lit. f GDPR.
We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.
3.5 Third-Party Providers
3.5.1 Google Fonts
We use Google Fonts for fonts on the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The provider processes meta/communication data (e.g. device information, IP addresses) in the USA.
The legal basis for processing is Art. 6 para. 1 lit. a GDPR. Processing is based on consent. Data subjects can withdraw their consent at any time by contacting us at the contact details provided in our privacy policy. The withdrawal does not affect the lawfulness of processing until withdrawal.
The legal basis for transmission to a country outside the EEA is consent. Further information is available in the provider's privacy policy at https://policies.google.com/privacy.
3.5.2 FormCrafts
Form Processing
We use FormCrafts to collect contact information and manage our waitlist. FormCrafts is a service that allows us to create and manage forms on our website while ensuring GDPR compliance.
FormCrafts handles data strictly according to our instructions and ensures that all processing activities are in compliance with GDPR requirements, safeguarding the integrity and confidentiality of personal data. The provider acts as a data processor while we remain the data controller.
For accounts created after June 1, 2024, FormCrafts stores customer and account data in the EU. The data collected through FormCrafts includes:
Email addresses
Names (if provided)
Any additional information voluntarily provided in the form
The legal basis for processing is Art. 6 para. 1 lit. a GDPR (consent) when users actively submit the form. We ensure explicit consent through clear information about data processing at the point of collection.
In the unlikely event of a data breach, FormCrafts commits to notifying us without undue delay, enabling us to take the necessary steps to inform affected individuals and regulatory bodies as required by the GDPR.
Data collected through FormCrafts is deleted when it is no longer needed for the purpose for which it was collected, unless legal retention obligations apply.
3.5.3 Google Tag Manager
We use Google Tag Manager for analysis and advertising purposes. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The provider processes usage data (e.g., websites visited, interest in content, access times) in the USA.
The legal basis for processing is Art. 6 (1) (a) GDPR. Processing is based on consent. Data subjects can revoke their consent at any time by contacting us, e.g., using the contact details provided in our privacy policy. Revocation does not affect the lawfulness of processing prior to revocation.
The legal basis for the transfer to a country outside the EEA is standard contractual clauses. The security of the data transferred to the third country (i.e., a country outside the EEA) is guaranteed by standard data protection clauses (Art. 46 (2) (c) GDPR) issued in accordance with the examination procedure under Art. 93 (2) GDPR, which we have agreed with the provider.
We delete the data when the purpose for which it was collected no longer applies. Further information is available in the provider's privacy policy at Privacy Policy – Privacy Policy & Terms of Use – Google.
3.5.4. Google Analytics
We use Google Analytics for analysis. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland. The provider processes usage data (e.g., visited web pages, interest in content, access times) and meta/communication data (e.g., device information, IP addresses) in the USA.
The legal basis for processing is Art. 6 (1) (a) GDPR. Processing is based on consent. Data subjects can revoke their consent at any time by contacting us, e.g., using the contact details provided in our privacy policy. Revocation does not affect the lawfulness of processing prior to revocation.
The legal basis for the transfer to a country outside the EEA is standard contractual clauses. The security of the data transferred to the third country (i.e., a country outside the EEA) is ensured by standard data protection clauses (Art. 46 (2) (c) GDPR) issued in accordance with the examination procedure under Art. 93 (2) GDPR, which we have agreed with the provider.
The data will be deleted when the purpose for which it was collected no longer applies and there is no obligation to retain it. Further information is available in the provider's privacy policy at Privacy Policy – Privacy Policy & Terms of Use – Google.
4. Changes to This Privacy Policy
We reserve the right to change this privacy policy with effect for the future. A current version is always available here.
5. Questions and Comments
For questions or comments regarding this privacy policy, we are happy to be available at the contact details provided above.