Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to personal data when this website is visited. Personal data is any data that can be used to personally identify a person. Detailed information on the subject of data protection can be found in this privacy policy, listed below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator's contact details can be found in the "Information on the Controller" section of this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us. This may, for example, be data you enter into a contact form. Other data is collected automatically, or after you give consent, when you visit the website, by our IT systems. This is primarily technical data (e.g. internet browser, operating system, or the time the page was accessed).

What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze user behavior, provided consent has been given for this.

What rights do you have regarding your data?

You have the right to receive information, free of charge, at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. Under certain circumstances, you also have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

The content of this website is hosted by the following provider:

The provider is Framer B.V., Singel 258, 1016 AB Amsterdam, Netherlands (hereinafter "Framer"). When this website is visited, Framer records various log files, including IP addresses.

Framer is a tool for creating and hosting websites. Framer stores cookies or other recognition technologies that are necessary to display the page, provide certain website functions, and ensure security (necessary cookies).

Details can be found in Framer's privacy policy.

The use of Framer is based on Art. 6(1)(f) GDPR. There is a legitimate interest in the most reliable possible presentation of the website. Insofar as corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG), to the extent the consent covers the storage of cookies or access to information on the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. The company is also certified under the "EU-US Data Privacy Framework" (DPF).

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of personal data very seriously. Personal data is treated confidentially and in accordance with statutory data protection regulations and this privacy policy.

Please note that data transmitted over the internet (e.g. via email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:

enmit GmbH
Böttgerstraße 14
20148 Hamburg, Germany

Phone: +49 175 7455775
Email: hello@enmit.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, or similar).

Storage Duration

Unless a more specific storage period is stated elsewhere in this privacy policy, personal data will remain with the controller until the purpose for the data processing no longer applies. If a legitimate request for deletion is made, or consent to data processing is revoked, the data will be deleted, unless there are other legally permissible grounds for storage (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds cease to apply.

General Information on the Legal Basis for Data Processing on This Website

Where consent to data processing has been given, personal data is processed on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is additionally based on Art. 49(1)(a) GDPR. Where consent has been given to the storage of cookies or to access to information on the end device, data processing is additionally based on Section 25(1) TTDSG. Consent can be revoked at any time. Where data is required for the performance of a contract or the implementation of pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. Data is further processed where required to fulfill a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on a legitimate interest under Art. 6(1)(f) GDPR.

Recipients of Personal Data

In the course of business operations, we work together with various external parties. This sometimes requires the transfer of personal data to these external parties. Personal data is only passed on to external parties where this is necessary for the performance of a contract, where there is a legal obligation to do so, where there is a legitimate interest in the disclosure under Art. 6(1)(f) GDPR, or where another legal basis permits the disclosure. Where processors are engaged, personal data is only passed on the basis of a valid data processing agreement.

Withdrawal of Consent to Data Processing

Many data processing operations are only possible with express consent. Consent already given can be revoked at any time. The lawfulness of any data processing carried out prior to the revocation remains unaffected.

Right to Object to the Collection of Data in Special Cases and to Direct Marketing (Art. 21 GDPR)

WHERE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF AN OBJECTION IS RAISED, THE PERSONAL DATA CONCERNED WILL NO LONGER BE PROCESSED, UNLESS COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING CAN BE DEMONSTRATED WHICH OVERRIDE THE INTERESTS, RIGHTS, AND FREEDOMS OF THE DATA SUBJECT, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

WHERE PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, THERE IS A RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING. IF AN OBJECTION IS RAISED, THE PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation. This right exists without prejudice to any other administrative or judicial remedy.

Right to Data Portability

There is a right to have data that is processed automatically on the basis of consent or in performance of a contract handed over, either to the data subject or to a third party, in a common, machine-readable format. Where the direct transfer of data to another controller is requested, this will only be carried out to the extent technically feasible.

Right to Access, Rectification, and Erasure

Within the framework of applicable statutory provisions, there is a right at any time to free information about stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or deletion of this data.

Right to Restriction of Processing

There is a right to request the restriction of the processing of personal data. The right to restriction of processing exists in the cases set out in Art. 18 GDPR.

SSL / TLS Encryption

For security reasons, and to protect the transmission of confidential content, this site uses SSL or TLS encryption. An encrypted connection can be recognized by the fact that the browser's address bar changes from "http://" to "https://", and by the lock symbol in the browser bar.

Objection to Promotional Emails

The use of contact data published within the scope of the legal notice (Impressum) obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited promotional material being sent, such as spam emails.

4. Cookies and Consent Management

Cookies

This website partly uses so-called "cookies." Cookies are small data packages and cause no damage to the end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on the end device.

Cookies that are necessary to carry out the electronic communication process, to provide certain functions, or to optimize the website (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. Where consent has been requested for the storage of cookies and comparable recognition technologies, processing takes place exclusively on the basis of that consent (Art. 6(1)(a) GDPR and Section 25(1) TTDSG); consent can be revoked at any time.

Consent Management / Cookie Banner

This website uses the cookie banner integrated into the Framer hosting platform to obtain, manage, and document consent to the storage of cookies and comparable recognition technologies. The banner is connected to Framer's consent management mechanism (Google Consent Mode).

When this website is accessed, a consent banner is displayed, through which consent to the use of cookies and services requiring consent can be given or declined. Services requiring consent — in particular the embedded Calendly booking widget — are only loaded once express consent has been given via the banner. The choice made can be changed at any time via the cookie settings on the website, or revoked with effect for the future.

Processing within the framework of consent management is based on Art. 6(1)(c) GDPR, in order to comply with the legal obligation to obtain consent. The consent decision is stored so that it can be retrieved on subsequent visits to the page; to that extent, it is necessary to fulfil statutory documentation obligations.

5. Data Collection on This Website

Contact Form

For inquiries submitted via the contact form, the details provided in the inquiry form, including the contact data given there, are stored for the purpose of processing the inquiry and in case of follow-up questions. This data is not passed on without consent.

This data is processed on the basis of Art. 6(1)(b) GDPR, where the inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on the legitimate interest in the effective handling of inquiries received (Art. 6(1)(f) GDPR) or on consent (Art. 6(1)(a) GDPR), where this has been requested.

Data entered in the contact form remains with the controller until deletion is requested, consent to storage is revoked, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

Inquiry by Email or Telephone

Where contact is made by email or telephone, the inquiry, including all resulting personal data (name, inquiry), is stored and processed for the purpose of handling the request. This data is not passed on without consent. Processing is based on Art. 6(1)(b) GDPR, where the inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures; in all other cases, on Art. 6(1)(f) GDPR or on consent (Art. 6(1)(a) GDPR).

6. Newsletter

Newsletter Distribution via HubSpot

The HubSpot service is used to send the newsletter. The provider is HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA. Newsletter recipients' data is stored on the provider's servers.

Anyone wishing to subscribe to the newsletter offered on the website must provide an email address, as well as information allowing verification that the email address provided belongs to the person subscribing and that they agree to receive the newsletter. No further data is collected, or only on a voluntary basis. This data is used exclusively for sending the requested information.

Subscription to the newsletter takes place using a double opt-in procedure. This means that after subscribing, an email is sent asking for confirmation of the subscription. This confirmation is necessary so that no one can subscribe using someone else's email address.

Data entered into the newsletter subscription form is processed exclusively on the basis of consent (Art. 6(1)(a) GDPR). Consent given to the storage of the data, the email address, and its use for sending the newsletter can be revoked at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the revocation.

Data stored for the purpose of the newsletter subscription is stored until unsubscription from the newsletter, and is deleted both by the controller and by the newsletter service provider after the newsletter is cancelled.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. HubSpot is also certified under the EU-US Data Privacy Framework (DPF). Details can be found in HubSpot's privacy policy.

7. Appointment Booking

Calendly

This website offers the option of booking appointments via the Calendly service. The provider is Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA.

For the purpose of scheduling an appointment, the data entered in the booking form (e.g. name, email address, requested appointment, and any further information provided) is transmitted to and processed by Calendly. When the booking function is accessed, Calendly also collects technical access data.

Processing is based on Art. 6(1)(b) GDPR, as the data processing is necessary for the implementation of pre-contractual measures or the performance of a contract (appointment scheduling). Where consent has been requested, processing is additionally based on Art. 6(1)(a) GDPR and Section 25(1) TTDSG; consent can be revoked at any time.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Further information can be found in Calendly's privacy policy at https://calendly.com/privacy.

8. Embedded Third-Party Content

YouTube

This website may embed videos from the YouTube platform. The provider of the platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When a page with an embedded YouTube video is accessed, a connection to YouTube's servers is established. This tells the YouTube server which of the website's pages have been visited. If logged into a YouTube account, YouTube can associate browsing behavior with the personal profile. This can be prevented by logging out of the YouTube account beforehand. After a video is started, YouTube may store cookies on the end device or use comparable recognition technologies to collect information about visitors.

The use of YouTube serves the interest of an appealing presentation of the online offering. Where consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Embedded YouTube videos are only loaded once consent has been given via the cookie banner. Consent can be revoked at any time.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Further information on the handling of user data can be found in YouTube's privacy policy at https://policies.google.com/privacy.