Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on data protection can be found in our data protection declaration listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section “Notice of the Responsible Party” in this data protection declaration.

How do we collect your data?

Your data is collected on the one hand by you providing it to us. This may include, for example, data you enter in a contact form. Other data is collected automatically or after your consent when visiting the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure an error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders, or other service requests.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For this and further questions on data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools

When you visit this website, your surfing behavior may be statistically evaluated. This is done primarily with so-called analysis programs. Detailed information on these analysis programs can be found in the following data protection declaration.

2. Hosting

Webflow

We host the content of our website with the following provider: Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files including your IP addresses.

Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, for providing certain website functions, and for ensuring security (necessary cookies). For details, please refer to Webflow’s data protection declaration: https://webflow.com/legal/eu-privacy-policy

The use of Webflow is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy. The company has certification under the “EU-US Data Privacy Framework” (DPF). Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/6365

Order Processing:

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required under data protection law, which ensures that the service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration. When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission on the internet (e.g., when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Notice of the Responsible Party

The responsible party for data processing on this website is:

Calcutron digital solutions GmbH
Laubanger 21
96052 Bamberg
Phone: 0951 5192849
Email: team@calcutron.ai

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Insofar as no more specific storage period is mentioned within this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will take place after these reasons no longer apply.

General Information on the Legal Basis for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, if special data categories are processed according to Art. 9 Para. 1 GDPR. In the case of express consent to the transfer of personal data to third countries, data processing is also based on Art. 49 Para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access to information on your end device (e.g., via device fingerprinting), data processing is additionally based on § 25 Para. 1 TDDDG. Consent can be revoked at any time. If your data is necessary for contract fulfillment or for carrying out pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest according to Art. 6 Para. 1 lit. f GDPR.

Data Protection Officer

We have appointed a data protection officer:

Dr. Matthias Hundt
Calcutron digital solutions GmbH
Laubanger 21
96052 Bamberg
Phone: 0951 5192849
Email: datenschutz@calcutron.ai

Recipients of Personal Data

As part of our business activities, we work with various external parties. In some cases, it is also necessary to transfer personal data to these external parties. We only pass on personal data to external parties if this is necessary for contract fulfillment, if we are legally obliged to do so, if we have a legitimate interest according to Art. 6 Para. 1 lit. f GDPR, or if another legal basis permits data transfer. When using order processors, we only pass on personal data of our customers on the basis of a valid contract for order processing.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The legality of data processing carried out until revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS. IF YOUR DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.

Information, Correction, and Deletion

Within the framework of the applicable provisions, you have the right to free information about your stored personal data and a right to correction or deletion of this data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. This applies in cases of disputed accuracy, unlawful processing, for asserting legal claims, or during the examination of an objection.

SSL or TLS Encryption

This site uses SSL or TLS encryption to protect the transmission of confidential content.

Encrypted Payment Transactions on This Website

Payment transactions via common payment methods are carried out exclusively via an encrypted SSL or TLS connection.

Objection to Promotional Emails

We hereby object to the use of contact data published within the framework of imprint obligations for sending unsolicited advertising.

4. Data Collection on This Website

Usercentrics

This website uses the consent management platform Usercentrics. Provider is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. Usercentrics serves to obtain user consent for the storage of certain cookies in their browser and to document this in compliance with data protection regulations.

When you enter our website, a connection is established to Usercentrics servers to obtain your consents and other declarations regarding cookie use. Usercentrics stores a cookie in your browser to assign the consents granted or their revocation. The data collected in this way is stored until you request deletion, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

The use of Usercentrics is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 Para. 1 lit. c GDPR. Details can be found in Usercentrics’ data protection declaration at: https://usercentrics.com/privacy-policy/

Cookies

Our websites use so-called “cookies”. Cookies are small data packages and do not cause any damage to your end device. They are stored either temporarily (session cookies) or permanently (permanent cookies). Necessary cookies are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. If consent has been requested, processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG; consent can be revoked at any time.

Contact Form

If you send us inquiries via contact form, your details including the contact data will be stored with us for the purpose of processing the inquiry. Processing is based on Art. 6 Para. 1 lit. b GDPR (contract fulfillment/pre-contractual) or on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) or your consent (Art. 6 Para. 1 lit. a GDPR).

Inquiry by Email, Telephone, or Fax

If you contact us, your inquiry including all resulting data will be stored with us for the purpose of processing. Processing is based on Art. 6 Para. 1 lit. b GDPR or on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR).

Odoo CRM, Support, and Live Chat

We use Odoo software for managing customer data (CRM), for ticket processing in support, and for a live chat function. Provider is Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium. Data such as name, email address, and message content is processed. The legal basis is Art. 6 Para. 1 lit. b GDPR (contract fulfillment/pre-contractual) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in efficient communication). Data protection declaration: https://www.odoo.com/gdpr. An AVV has been concluded.

ClickUp Forms

For structured data collection, we use forms from ClickUp. Provider is Mango Technologies, Inc., 350 Tenth Ave, Suite 500, San Diego, CA 92101, USA. Data processing is based on Art. 6 Para. 1 lit. b GDPR. ClickUp is DPF-certified. Data protection declaration: https://clickup.com/privacy. An AVV has been concluded.

AI-Powered Analysis (Google Gemini & Claude AI)

We use artificial intelligence to automatically analyze and categorize customer inquiries. Providers are Google Ireland Limited (Gemini) and Anthropic PBC (Claude AI). The purpose is to increase service efficiency according to Art. 6 Para. 1 lit. f GDPR. We use enterprise interfaces that, according to providers, do not train models with user data.

Google: https://policies.google.com/privacy

Anthropic: https://www.anthropic.com/legal/privacy

Google Calendar

For appointment scheduling, we use Google Calendar. Provider is Google Ireland Limited. The legal basis is Art. 6 Para. 1 lit. f GDPR or Art. 6 Para. 1 lit. a GDPR. The company is DPF-certified. Further information at: https://policies.google.com/privacy. An AVV has been concluded.

5. Social Media

Instagram

Provider is Meta Platforms Ireland Limited. Use is based on your consent (Art. 6 Para. 1 lit. a GDPR). We are jointly responsible with Meta for data collection. Further information at: https://privacycenter.instagram.com/policy/

LinkedIn

Provider is LinkedIn Ireland Unlimited Company. Use is based on your consent. Data protection declaration: https://www.linkedin.com/legal/privacy-policy. The company is DPF-certified.

6. Analysis Tools and Advertising

Google Tag Manager

Provider is Google Ireland Limited. Serves to manage tools on the website. The legal basis is Art. 6 Para. 1 lit. f GDPR or Art. 6 Para. 1 lit. a GDPR. Data protection declaration: https://policies.google.com/privacy

Google Analytics

Provider is Google Ireland Limited. Enables analysis of user behavior. IP anonymization is activated. Use is based on your consent (Art. 6 Para. 1 lit. a GDPR). Data protection declaration: https://support.google.com/analytics/answer/6004245?hl=en

Microsoft Clarity

Provider is Microsoft Ireland Operations Limited. Creates heatmaps and session recordings. Use is based on your consent or Art. 6 Para. 1 lit. f GDPR. Data protection declaration: https://privacy.microsoft.com/privacystatement

Google Ads & Conversion Tracking

Provider is Google Ireland Limited. Enables keyword and audience targeting as well as action measurement. Use is based on your consent. Data protection declaration: https://policies.google.com/privacy?hl=de

Meta Pixel

Provider is Meta Platforms Ireland Limited. Serves to measure the effectiveness of advertisements. Use is based on your consent. Data protection declaration: https://de-de.facebook.com/about/privacy/

7. Newsletter

Mailchimp

Provider is The Rocket Science Group LLC. Enables sending and analyzing newsletters. Use is based on your consent. Data protection declaration: https://mailchimp.com/legal/terms/. An AVV has been concluded.

8. Plugins and Tools

YouTube with Enhanced Data Protection

Provider is Google Ireland Limited. Use in enhanced data protection mode (no cookies for personalization). The legal basis is Art. 6 Para. 1 lit. f GDPR. Data protection declaration: https://policies.google.com/privacy?hl=de

Google Maps

Provider is Google Ireland Limited. Storage of IP address is required. The legal basis is Art. 6 Para. 1 lit. f GDPR. Data protection declaration: https://policies.google.com/privacy?hl=de

Make.com

Provider is Celonis SE. Serves to automate workflows. The legal basis is Art. 6 Para. 1 lit. f GDPR. Data protection declaration: https://www.make.com/en/privacy-notice. An AVV has been concluded.

9. eCommerce and Payment Service Providers

We process customer and contract data on the basis of Art. 6 Para. 1 lit. b GDPR. Data transfer only takes place if necessary for contract processing.

10. Audio and Video Conferences

We use Google Meet. Provider is Google Ireland Limited. The legal basis is Art. 6 Para. 1 lit. b GDPR or Art. 6 Para. 1 lit. f GDPR. Data protection declaration: https://policies.google.com/privacy?hl=de. An AVV has been concluded.

11. Own Services

Google Drive

Provider is Google Ireland Limited. Serves as upload area. The legal basis is Art. 6 Para. 1 lit. f GDPR. Data protection declaration: https://policies.google.com/privacy. An AVV has been concluded.