Privacy policy

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. You can find detailed information on the subject of data protection in our privacy policy listed under this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

We collect some of your data when you share it with us, like when you fill out a contact form.

Other data is automatically collected by our IT systems when you visit our website, or with your permission. This mainly includes technical data (e.g., your internet browser, operating system, or the time you accessed the page). This data is collected automatically as soon as you visit this website.

What do we use your data for?

Some of the data is collected to ensure the website runs smoothly. Other data can be used to analyze how you use the site.

What rights do you have regarding your data?

You have the right to get information about the origin, recipients, and purpose of your stored personal data for free at any time. You also have the right to have this data corrected or deleted. If you've agreed to let us process your data, you can revoke this agreement at any time for the future. Plus, under certain circumstances, you have the right to limit the processing of your personal data. You also have the right to file a complaint with the relevant supervisory authority.

If you have any questions about data protection, feel free to contact us at the address listed in the legal notice.

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed, mainly through cookies and analysis programs.

You'll find detailed information about these analysis programs in the following privacy policy.

Data Collection in the oneVcard Web Application

What types of information do we collect?

We collect info on how you're using our products, like the settings you tweak in your profile, how often you share your digital business card, and how long and often you use our app. We use this info to develop, test, and improve our products. And don't worry, we don't sell your data to anyone.

Creation of digital backgrounds

We don't save the link destination or your name. For evaluation and product improvement purposes, we only save the following data:

  • Your browser
  • The time of creation
  • Time spent
  • Sharing activity
  • Download (yes/no)
  • Which fields were selected
  • Link description
Retrieval and use of digital business cards

Our application lets you share your personal data with selected people over the internet. You get to choose what info you share. There are no required fields when setting up a new digital business card, so you're free to decide whether to share your email address and/or phone number, for example. To keep things secure, we assign a 20-character ID to each digital business card. This ID uses upper and lower case letters from the English alphabet, plus the numbers 0-9, resulting in 62^20 possible combinations. That's 704423425546998022968330264616370176. According to probability theory, the chance of guessing your ID or another user's ID is close to 1/62^20, which is near zero. However, randomly guessing it can't be completely ruled out. Plus, our software is protected against brute-force attacks. Just remember that by using our service, you're making your data accessible to others online, based on your profile settings. No password is required to view or save your data when someone accesses your profile. Just like sharing physical business cards, we can't control whether someone you've shared your contact info with passes it on to others. If you link your oneVcard on your own website, search engines like Google might index that link, which could make your digital business card discoverable through Google, especially if someone searches for "oneVcard". If you don't want this to happen, adjust the settings (noIndex) in your web hosting or avoid including the link on your website. Alternatively, you can put your personal QR code on your website to offer a similar service.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact information, names, website access, and other data generated by a website.

We use the host to fulfill contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and to ensure our online services are provided securely, quickly, and efficiently by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill their service obligations and will follow our instructions regarding this data.

3. General Information and Mandatory Information

Data Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the Internet (e.g. when communicating by e-mail) may have security vulnerabilities. It is not possible to completely protect data from access by third parties.

Note on the responsible party

The responsible party for data processing on this website and the oneVcard application is:

oneVcard GmbH
Babenhäuser Straße 37
63762 Großostheim

Phone: +49 174 3425745
E-mail: support@onevcard.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

The data protection officer is Prof. Dr. Eberhard Schott, support@onevcard.de

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal notification by e-mail to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 ABS. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 ABS. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place if it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correction or deletion of this data. For this as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Right to restriction of processing

You have the right to request that we limit the processing of your personal data. You can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request that we restrict the processing of your personal data.
  • If your personal data was/is being processed unlawfully, you can request that the data processing be restricted instead of being deleted.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of being deleted.
  • If you have lodged an objection pursuant to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and our interests. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state, with the exception of its storage.

Objection to advertising emails

We hereby object to the use of contact data published as part of the legal notice requirements for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam e-mails.

4. Data collection on this website

Translation service

This website uses the Weglot translation service, registered at 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France. Weglot is registered in the Nanterre Trade Register, company register no. 818 164 964.
Weglot is loaded when the website is accessed, so that you can use the language icon on our website to change the language to one other than German. When you visit this website, a direct connection can be established between your browser and the Weglot server. Weglot receives the information that you have visited this website with your IP address.
The data is stored and analyzed on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in presenting a significant portion of its website in common languages for non-German-speaking visitors. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time. You can find further information on this in Weglot's privacy policy: https://weglot.com/privacy/.

Cookies

Our website uses cookies. Cookies are small text files that don't do any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have different functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the scope of this data protection declaration and, if necessary, obtain your consent.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

This data is collected based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website; for this purpose, the server log files must be recorded.

Customer account, User Login

When you place an order on this website, we automatically create a customer account at oneVcard.app for you so that you can use your digital business card. We collect personal data to improve our payment process and customer service. This may include the following information:
* Your billing and delivery address(es)
* Details of your orders
* Email address
* Name
* Phone number
We share this information with Versoly and ECWID so that they can provide us with website services. We may send you emails with messages about your order or account activity. For example, we may send you an email to let you know that:
* You have created a customer account
* The password for your customer account has been reset, created or updated
* You have made a purchase
* Your order has been shipped
* Guides for the initial setup of your purchased product
It is not possible to unsubscribe from these messages. We pass on your contact information to Make and Mailjet so that Mailjet can send you these emails on our behalf.

Inquiry by email, phone or fax

If you contact us by email, phone or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.

The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions, in particular legal retention periods, remain unaffected.

5. Plugins and Tools

Google Web Fonts

This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that this website has been accessed via your IP address. The use of Google WebFonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the font on their website. If corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Analytics

We use Google Analytics to analyse website usage. The data obtained from this is used to optimise our website and advertising measures. Google Analytics is a web analysis service operated and provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes the data on website usage on our behalf and contractually commits to measures to ensure the confidentiality of the processed data. The following data is recorded during your website visit, among other things:

    - Pages viewed
    - Orders, including revenue and products ordered
    - Achievement of "website goals" (e.g., contact requests and newsletter sign-ups)
    - Your behavior on the pages (e.g., clicks, scrolling, and time spent)
    - Your approximate location (country and city)
    - Your IP address (in shortened form, so no clear identification is possible)
    - Technical information like browser, internet provider, device, and screen resolution
    - Source of your visit (i.e., which website or ad brought you to us)

This data is transferred to a Google server in the USA. Google complies with the data protection regulations of the “EU-US Privacy Shield” agreement. Google Analytics stores cookies in your web browser for two years since your last visit. These cookies contain a randomly generated user ID that allows you to be recognized on future website visits. The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored indefinitely in aggregated form. If you do not agree with the collection, you can prevent it by installing the browser add-on to deactivate Google Analytics.

Cookiebot

Our website reloads a web service from the company Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: cookiebot.com). We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to cookiebot.com. The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. The legitimate interest lies in the error-free functioning of the website. The data will be deleted as soon as the purpose of your survey has been fulfilled. Further information on the handling of the transferred data can be found in cookiebot.com's privacy policy: https://www.cookiebot.com/de/privacy-policy/ You can prevent the collection and processing of your data by cookiebot.com by deactivating the execution of script code in your browser or installing a script blocker in your browser.

Facebook Pixel, Facebook Custom Audiences and Facebook Conversion

Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used.

With the help of the Facebook pixel, Facebook is able to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads placed by us to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that are determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads meet the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

- Facebook's privacy policy
The data is processed by Facebook in accordance with Facebook's data usage policy. Accordingly, general information on the display of Facebook ads can be found in Facebook's data usage policy. You can find special information and details about the Facebook pixel and how it works in the Facebook help section.

- Basis
The use of the Facebook pixel and the storage of "conversion cookies" is based on Art. 6 Para. 1 lit. a GDPR.

- Order data processing agreement
For the processing of data in which Facebook acts as an order data processor, we have concluded an order data processing agreement with Facebook in which we commit Facebook to protect the data of our customers and not to pass it on to third parties.

- Objection
You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To set which types of advertisements are displayed to you within Facebook, you can access the page set up by Facebook and follow the instructions on settings for usage-based advertising. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. You can also object to the use of cookies that serve to measure reach and for advertising purposes via the deactivation page of the network advertising initiative and additionally the US website aboutads.info or the European website youronlinechoices.com.
You can find another opt-out option in our cookie declaration.

6. Payment processing

Chargebee

We offer payment via Chargebee on our website. The provider of this payment service is Chargebee Inc. 340 S Lemon Avenue, #1537 Walnut, California 91789, USA (hereinafter "ChargeBee"). If you select payment via ChargeBee, the payment details you enter will be transmitted to ChargeBee. Your data is transmitted to ChargeBee on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfil a contract). You have the option of withdrawing your consent to data processing at any time. A withdrawal does not affect the effectiveness of data processing operations carried out in the past.

ECWID

Our website uses the SAAS e-commerce plugins from ECWID to implement the shopping cart and checkout. The plugin is operated by ECWID Inc., 144 West D Street, Suite103, Encinitas, CA92024 USA (hereinafter ECWID). If you place orders or use services via the ECWID shopping cart, the order data and personal data are stored on the servers of our partner ECWID. ECWID's data protection regulations apply. You can find these here: https://www.ecwid.com/eu-privacy-policy

PayPal

We offer payment via PayPal on our website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you select payment via PayPal, the payment details you enter will be transmitted to PayPal. Your data is transmitted to PayPal on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfil a contract). You have the option of withdrawing your consent to data processing at any time. A withdrawal does not affect the effectiveness of data processing operations carried out in the past.

Stripe

We offer payment via Stripe on our website. The provider of this payment service is Stripe Payments Europe, Ltd., a private limited company organized under the laws of Ireland with company number 513174 and offices at The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland (hereinafter "Stripe"). If you select payment via Stripe, the payment details you enter will be transmitted to Stripe. Your data is transmitted to Stripe on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfil a contract). You have the option of withdrawing your consent to data processing at any time. A withdrawal does not affect the effectiveness of data processing operations carried out in the past.

7. Newsletter

If you want to receive our newsletter, we'll need your email address and some info confirming that you own the email and agree to receive the newsletter. We don't collect any other data, unless you provide it voluntarily. We use newsletter service providers to manage our newsletter, as described below. Mailjet This website uses Mailjet to send newsletters. The provider is Mailjet SAS (Global HQ). Office and mailing address Paris: 13-13 bis, rue de l'Aubrac, 75012 Paris, France. Mailjet GmbH. Mailjet is a service that helps us organize and analyze our newsletter distribution. The data you enter to subscribe to the newsletter is stored on Mailjet's servers. Data analysis by Mailjet Mailjet helps us analyze our newsletter campaigns. For example, we can see if a newsletter was opened and which links were clicked. This helps us identify which links are most popular. We can also see if certain pre-defined actions were taken after opening/clicking (conversion rate). For example, we can see if you made a purchase after clicking on the newsletter. Mailjet also allows us to categorize newsletter recipients (i.e. "cluster"). Recipients can be grouped by age, gender, or location, which helps us tailor the newsletters to specific audiences. If you don't want Mailjet to analyze your data, you'll need to unsubscribe from the newsletter. There's a link for this in every newsletter. You can find detailed information about Mailjet's features here: https://www.mailjet.de/funktion/. Mailjet's privacy policy can be found here: https://www.mailjet.de/sicherheit-datenschutz/. Legal basis Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. Data stored for other purposes remains unaffected. After you unsubscribe from the newsletter, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be combined with other data. This is in both your and our interest to comply with legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest. Data processing agreement We have a data processing agreement (DPA) with the provider mentioned above. This is a contract required by data protection law that ensures that they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

8. Process automation

We use "Make", a service provided by Celonis SE, Theresienstr. 680333, Munich, Germany, to integrate different databases and web tools. We have a contract with Celonis for order processing in accordance with Art. 28 GDPR. Further information on data protection at Make can be found at https://www.make.com/en/privacy-notice.

When you contact us via a contact form on our website, the data is entered by you in an input mask, transmitted to us and saved. The following data is collected as part of the process of requesting the documents:
1. First name
2. Last name
3. Email address
4. Concern

As soon as the data is no longer required to achieve the purpose for which it was collected, the data will be deleted. For the download of reports, the e-mail address is compared with the data of the newsletter subscribers. This information is stored in the cookies for up to 30 days.

9. Ticketing system

We use HubSpot for ticketing and marketing activities. HubSpot is a software company from the USA with a branch HubSpot Ireland Limited at 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. We use this integrated software solution for our own marketing, lead generation and customer service. This includes email marketing, which regulates the sending of newsletters and automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages and contact forms. HubSpot uses cookies, small text files that are stored locally in the cache of your web browser on your device and enable us to analyze your use of the website. The information collected (e.g. IP address, geographical location, type of browser, duration of visit and pages accessed) is evaluated by HubSpot on our behalf so that we can generate reports about the visit and the pages visited. Information collected via HubSpot and the content of our website are stored on servers of HubSpot's service providers. If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, processing on this website takes place for the purpose of website analysis. Since personal data is transferred to the USA, additional protection mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain further regulations and promises from the recipient in the USA. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies by your browser settings accordingly. You can object to the processing of your personal data at any time with effect for the future.

10. Data protection information according to Art. 13 GDPR Messenger service WhatsApp Business

1. General

We would like to inform you below about the processing of personal data in connection with the use of the WhatsApp Business messenger service.

1.1 Responsible party
oneVcard GmbH
Babenhäuser Str. 37
63762 Großostheim
E-mail: support (at) onevcard (DOT) de

1.2 Data Protection Officer

We have appointed a data protection officer: Prof. Dr. Eberhard Schott
E-mail: support@onevcard.de
Note:

If you use the messaging service on the web or have downloaded it to your mobile device, WhatsApp Business is responsible for data processing. However, accessing this app is only necessary if you want to contact or communicate with us using their service.

Basically, we would like to point out that the security of individual services depends on the user's account settings. Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from gaining access to the communication content. However, WhatsApp does gain access to metadata that arises in the course of the communication process (e.g. sender, recipient and time). We would also like to point out that, according to its own statements, WhatsApp shares the personal data of its users with its US-based parent company Facebook.

At this point, we would like to expressly point out that, in addition to the WhatsApp messaging service, other communication channels such as e-mail, telephone or a contact form on the homepage are available for you to contact us.

You can find further information on data processing by the WhatsApp messaging service provider via the following link: https://www.whatsapp.com/privacy

2. Processing of personal data

2.1 Purposes of processing

Due to the rapidly changing communication channels and opportunities to reach target groups, we have expanded our offering to increase our reach and intensify the flow of communication. This includes a straightforward exchange of information with our customers.

For these purposes, we use the WhatsApp Business messaging service, among other things. In doing so, we process your personal data.

2.2 Legal basis for the processing of personal data

The messaging service is used to communicate with our customers and users of our services in a straightforward and direct manner. This communication ensures faster and easier coordination between the parties and supplements the usual communication channels.

Using the messenger service is voluntary for customers/users and is based on our legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR.

If you contact us via the messenger service, we process your data to the extent necessary to fulfill the purpose of your request. This is done on the basis of your consent in accordance with Art. 6 Para. 1 S.1 lit. a) GDPR and, in the case of a contractual or pre-contractual initiation, in accordance with Art. 6 Para. 1 lit. b) GDPR.

If personal data of an employee is processed for operational purposes using the messenger service, this is also done on the basis of consent in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR.

2.3 Categories of personal data

When using the messenger service, different data categories are processed. The scope of this data depends largely on your information in the message. This can be, for example, the following data categories: Name/address data: Name, first name, address Contact details: Email address, telephone number, mobile phone number Content data: Texts, photographs, videos, files In addition, the following data categories are processed or collected directly by the WhatsApp Business messenger service: Usage data (access times, interests) Meta and communication data (device information, IP address) You can find detailed information on this in the WhatsApp-Business data protection declaration: https://www.whatsapp.com/privacy

2.3.1 Automated decision-making and profiling.

No automated decision-making processes are used in accordance with Art. 22 GDPR.

2.4 Recipients of the data

Your data will be forwarded within our company to the departments that are necessary to fulfill the above-mentioned purposes. Personal data that is related to the processing of your request will generally not be passed on to third parties, unless it is intended for disclosure.

The provider of the WhatsApp Business messenger service necessarily receives knowledge of the above-mentioned data.

2.5 Data processing outside the European Union

WhatsApp Business is a service provided by a US company, meaning personal data is processed in a third country. We have a data processing agreement with WhatsApp Business that meets the requirements of Art. 28 GDPR. An adequate level of data protection according to Art. 44 ff. GDPR is ensured by the EU-U.S. Privacy Shield and by the conclusion of the so-called EU standard data protection clauses. You can find details here: https://www.whatsapp.com/legal/business-data-transfer-addendum

2.6 Deletion periods

Your personal data will be deleted as soon as it is no longer required for the purpose of processing and no statutory retention periods need to be considered. A need for further storage exists if the data is still required for contractual fulfillment, warranty and guarantee claims.

2.7 Rights of data subjects

You have the right to information about your data processed by us at any time. You can contact us at any time with a written request. For information requests that are not in writing, we require the presentation of an identification document (identity card, passport) for identification. Furthermore, you have the right to correction, deletion or restriction of processing, insofar as you are legally entitled to do so. You can make use of your right to object to the processing within the framework of the legal requirements at any time. Please send such an objection to the data protection officer at support@onevcard.de. The right to data portability also exists within the framework of data protection regulations. You have the right to complain to a supervisory authority. The data protection authority responsible for us is:

The Bavarian Commissioner for Data Protection and Freedom of Information
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach