Privacy Policy

The data controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We have appointed an external Data Protection Officer (DPO) to oversee data protection matters.

For questions concerning the processing of your personal data or the exercise of your data protection rights, please contact:

We take the protection of personal data seriously and process personal information in accordance with the GDPR, the German Federal Data Protection Act (BDSG) and other applicable data protection legislation.

Personal data refers to any information relating to an identified or identifiable natural person

We process personal data only where necessary for the operation of our website, communication with customers and business partners, provision of our services or compliance with applicable legal obligations.

When you visit our website, certain technical information may be automatically collected by our hosting provider.
This information may include:

Our website provides a contact form through which visitors can submit inquiries.
When you use the contact form, we process the information you provide, which may include:Our website provides a contact form through which visitors can submit inquiries.

When you use the contact form, we process the information you provide, which may include

• Name
• Email address
• Company name, if provided
• Telephone number, if provided
• Message content

We use this information to respond to your inquiry, communicate with you and, where relevant, establish or manage a business relationship.

**Legal basis:**

Article 6(1)(b) GDPR, where processing is necessary for pre-contractual measures or the performance of a contract.

Article 6(1)(f) GDPR, where processing is based on our legitimate interest in responding to general business inquiries.

We retain contact form submissions only for as long as necessary to process the inquiry, unless statutory retention obligations or other lawful grounds require longer storage.

Information marked as mandatory in the contact form is required to process the inquiry through that form

The contact form provider, storage location and any additional processing services will be confirmed before publication.

If you contact us by email or telephone, we may process your contact details and the information you provide.

This processing is carried out for the purpose of responding to your request and maintaining business communication.

**Legal basis:** Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the nature of your inquiry.

The information is deleted when it is no longer required, subject to applicable statutory retention obligations.

Our website is operated using services provided by an external hosting provider.

During website operation, the hosting provider may process personal data, including technical access information and server log files.

Where the hosting provider processes personal data on our behalf, the processing is governed by a data processing agreement in accordance with Article 28 GDPR.

The identity of the hosting provider, server location, applicable recipients and any international transfer arrangements will be added following confirmation.

Our website may use technically necessary cookies or similar technologies to ensure its proper operation and functionality.

Where cookies or similar technologies are not strictly necessary, they are used only in accordance with applicable legal requirements and, where required, after obtaining the visitor’s consent.

The storage of information on users’ devices and access to such information are governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Any associated processing of personal data is carried out in accordance with the GDPR.

The specific cookies, third-party scripts, storage technologies and consent requirements will be documented following technical verification.

Personal data may be disclosed to service providers where necessary for the operation of our website or the processing of inquiries.

Such recipients may include:

• Website hosting providers
• Technical support and maintenance providers
• Email and communication service providers

Personal data is disclosed only where a valid legal basis exists.

Where third parties process personal data on our behalf, we enter into appropriate data processing agreements in accordance with Article 28 GDPR.

If personal data is transferred to recipients located outside the European Union (EU) or European Economic Area (EEA), we ensure that the requirements of Articles 44–49 GDPR are satisfied.

International transfers may take place on the basis of an adequacy decision by the European Commission or appropriate safeguards, such as Standard Contractual Clauses.

Details of actual international transfers, affected countries, recipients and safeguards will be added where applicable.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

Longer retention periods may apply where required by law or justified by another lawful basis.

Personal data is deleted once the relevant purpose has been fulfilled and applicable retention obligations have expired.

Subject to the applicable legal conditions, you have the following rights:

• Right of access under Article 15 GDPR
• Right to rectification under Article 16 GDPR
• Right to erasure under Article 17 GDPR
• Right to restriction of processing under Article 18 GDPR
• Right to data portability under Article 20 GDPR
• Right to object under Article 21 GDPR
• Right to withdraw consent under Article 7(3) GDPR

You may withdraw your consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

Where processing is based on our legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

To exercise your rights, please contact:

dpo@renew-analytics.com

You have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates the GDPR.

The supervisory authority responsible for our registered office is:

Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)

Website: https://datenschutz-hamburg.de

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure and unlawful processing.

These measures include appropriate access controls, security procedures and encrypted data transmission where implemented.

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with the website processing activities described in this policy.

We reserve the right to update this Privacy Policy when legal requirements, technical features or our data processing activities change.

The current version will be available on our website.

—

Please let me know once the pages are created and share the hosting, cookie and contact-form details. I will then have our external DPO review the final Privacy Policy before we publish it.

Thanks a lot for your help!

Best regards,
Anish
Renew Analytics GmbH