Privacy and Data Processing Statement 8vance.com

Data Processing and Privacy Statement for our Website

We are pleased that you are visiting our website. Protecting and securing your personal data when using our website is very important to us. Therefore, we are informing you which of your personal data we collect when you visit our website and for what purposes it is used.

This statement applies to the 8vance website, which can be reached under the domain www.8vance.com as well as its various subdomains (“our website”).

N.B. This page specifically shows the policy for our website, and the associated processing of personal data through the use of, for example, cookies. The privacy policy for our matching service can be found here. This privacy policy will apply when you create a user account.

Who is responsible and how do I contact you?

For the processing of personal data within the meaning of the EU’s General Data Protection Regulation (GDPR), 8vance is the data controller. Contact details can be found here:

8vance Matching Technologies BV

Kazernestraat 15a

5928 NL Venlo

Netherlands

privacy@8vance.com

Data protection officer

Jasmin Lieffering – LITC

Bärenmarsch 3

31623 Drakenburg

Germany

info@litc.de

What is this statement about?

This statement provides a clear and transparent overview of the processing of personal data when you visit the 8vance website. Personal data refers to any information that can be used to identify you. This includes, for example, your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or user behaviour when visiting a website. Data that does not allow us to identify you directly or only with considerable effort, such as anonymised data, does not count as personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a well-defined purpose. This will be specified below for each processing activity.

How does 8vance handle your data with care?

In any processing of your personal data, we adhere to strict rules. Two core principles are central to this:

Legal basis: We only process your data if we have a valid legal reason to do so. This could be, for example, because you have given your consent, because it is necessary for the performance of a contract, or because we have to fulfil a legal obligation.

Defined purpose: We always collect and use your data for a clearly defined purpose.

Stored personal data will be deleted once the purpose of the processing has been completed and there are no longer any legitimate reasons to keep the data. We will inform you of the specific retention periods and criteria for storage in individual processing operations below. However, we may keep your personal data for longer in specific cases. This happens when we need the data for legal purposes, such as filing or defending claims, or when the law requires us to retain certain information.

Who receives my personal data?

We share your personal data processed through our website with third parties only when necessary to fulfil the intended purposes and there is a legal basis for doing so (such as consent or protecting legitimate interests). In addition, we may disclose personal data to third parties in specific cases to assert, exercise, or defend legal claims. In such cases, possible recipients include, for example, law enforcement agencies, state supervisory authorities, auditors, courts, etc.

To the extent that we employ service providers for the operation of our website who process personal data on our behalf as part of order processing under Article 28 of the GDPR, they may receive your personal data. More information on the use of processors and web services can be found in the overview of individual processing operations below.

Does 8vance use cookies?

Cookies are small text files that we send to your device’s browser and store as part of your visit to our website. As an alternative to using cookies, information can also be stored in your browser’s local storage. Some functions of our website cannot be provided without the use of cookies or local storage (technically necessary cookies). In contrast, other cookies enable us to perform various analyses, such as recognising the browser you are using when you revisit our website, and sending different types of information to us (the marketing, statistical and preference cookies).

Cookies help to make our website more user-friendly and effective. They allow us to track your interactions with our site and remember your preferences, such as country and language settings. When third parties process information through cookies, they collect the information directly through your browser. Cookies do not harm your device; they cannot run programmes or contain viruses.

We have integrated Cybot A/S’s Cookiebot consent solution to obtain and document your consent to storing cookies. The specific storage period of processed data cannot be influenced by us but is determined by Cybot A/S. More information can be found in the privacy policy for Cookiebot.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or the consent manager of this website.

What rights do I have?

As a data subject, you have specific rights regarding your personal data, as set out in the General Data Protection Regulation (GDPR). The table below shows your rights and what they entail. You can exercise your rights by contacting 8vance or its data protection officer using the contact information at the top.

How will my data be processed in detail?

In the following section, we will provide you with information on individual processing, the scope and purpose of data processing, the legal basis, and the corresponding storage time. An automated decision in individual cases, including profiling, does not take place.

Providing our Website

When you visit and use our website, we collect the personal data that your browser automatically sends to our server. The following information is temporarily stored in a so-called log file:

IP address of requesting computer

Date and time of access

Name and URL of the retrieved file

Website from which the access was made (reference URL)

Browser used and, if applicable, your computer’s operating system, as well as the name of your access provider

Our website is not hosted by us, but by a service provider in the European Economic Area who processes the above data on our behalf per Article 28 of the GDPR.

Storage Period
The said data will be stored for as long as the website is displayed and, for technical reasons, kept for up to 7 days.

Purpose and legal basis
We process data to keep our website functioning properly, secure and stable. We do this on the basis of our legitimate interest, as described in Article 6(1)(f) of the GDPR. Data collection and storage in log files are necessary for the operation of the website. There is no right to object to the processing due to the exception under Article 21(1) of the GDPR. Insofar as further storage of the log files is legally required, the processing is carried out on the basis of Article 6(1)(c) of the GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.

Third Parties
We have integrated services from the parties listed below into our website. The specific retention period of the data processed cannot be influenced by us but is determined by respective companies. More information can be found in the privacy policy linked to the company.

AddToAny: Places share buttons on our website so that website visitors can share and share content on social networks & apps (privacy statement).

Google CDN: acts as a content delivery network (CDN) on our website and helps to make the content of our online offerings available faster using regionally or internationally distributed servers. (privacy statement).

Google Tag Manager: This is used to manage website tags through an interface and allows us to control the precise integration of services on our website. This allows us to flexibly integrate additional services to analyse users’ access to our website (privacy statement).

The use of these services is based on our legitimate interest or your consent (Article 6(1)(a) and (f) of the GDPR). Data can be transferred to the US through the EU-VS Data Privacy Framework of EU-model contracts. In other cases, we ask for your explicit consent (Article 49(1)(a) of the GDPR). Despite our legal safeguards, risks exist for data transfers outside the EU.

Contact Form

We offer the possibility to contact us via a form on our website. Here you need to enter your details (first name, last name, E-mail address, and optionally your phone number) for the purpose of processing the request and in case there are follow-up questions. You can also optionally provide additional information that you consider relevant for handling your contact request. The data you provide via the contact form will be processed and stored by us.

When using the contact form, your personal data will not be passed on to third parties.

Storage Period
If you use the contact form based on your consent, we will store the data collected from each request for three years from the time of completion, or until you withdraw your consent.

If you use the contact form as part of a contractual relationship, we keep the data collected for each query for three years from the end of the contractual relationship.

Purpose and legal basis
Your data will be processed when you use our contact form to communicate and process your enquiry based on your consent in accordance with Article 6(1)(a) of the GDPR. You can revoke this consent at any time. You can easily indicate this by sending an e-mail message to privacy@8vance.com

If your request relates to an existing contractual relationship with us, the processing is carried out on the basis of Article 6(1)(b) of the GDPR, or in the performance of the contract. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the required areas. If you do not wish to provide this data then you can contact us by other means, for example by telephone.

Through our website, you can subscribe to our newsletter. For this purpose, we process your E-mail address via service provider Zoho, which processes your personal data on our behalf in accordance with Article 28 of the GDPR. Your data will not be passed on to third parties.

Storage Period
After successful confirmation of your registration, we will store your data for an indefinite amount of time until your consent is withdrawn. You can withdraw your consent at any time via the unsubscribe link in the newsletter or by sending us an email at privacy@8vance.com (This is essentially a request for data erasure, which will always be accepted without you needing to provide a reason).

Purpose and legal basis

We process your data for the purpose of sending the newsletter based on your consent in accordance with Article 6(1)(a) of the GDPR.

By unsubscribing to the newsletter, you can indicate your withdrawal at any time with effect from that time (in accordance with Article 7(3) of the GDPR). There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Clarity

We have integrated Clarity, a service of the Microsoft Corporation, on our website. Clarity provides optimisation tools that analyse the behaviour and feedback of users of our website using cookies and analysis and feedback tools.

Among other things, the information obtained is used to compile reports on website activity and analyse visitor data statistically. Furthermore, Clarity records clicks, mouse movements and scroll heights to create so-called heat maps and session replays. In this case, your data is passed on to Clarity’s administrator, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Storage Period
The specific storage period of the data processed cannot be influenced by us, but is determined by Microsoft Corporation. More information can be found in the privacy policy for Clarity: https://clarity.microsoft.com/privacy

Purpose and legal basis
The use of Clarity is based on your consent (Article 6(1)(a) of the GDPR) and § 25 para. 1 TDDDG (German law). Data can be transferred to the US through the EU-VS Data Privacy Framework of EU-model contracts. For other situations, we seek your explicit consent (Article 49(1)(a) of the GDPR). Despite our legal safeguards, risks exist when transferring data outside the EU.

Google Analytics

We use Google Analytics (Google Ireland Limited) as an analytics service for the statistical evaluation of our online offerings. Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

Google Analytics hereby collects information with regard to website activity, for example, the number of visits to our website, subpages visited, and time spent by visitors.

Storage Period
The specific storage period of the data processed cannot be influenced by us, but is determined by Google Ireland Limited. More information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy

Purpose and legal basis
The use of Google Analytics is based on your consent (Article 6(1)(a) of the GDPR) and § 25 para. 1 TDDDG (German law). Data can be transferred to the US through the EU-VS Data Privacy Framework of EU-model contracts. For other situations, we seek your explicit consent (Article 49(1)(a) of the GDPR). Despite our legal safeguards, risks exist when transferring data outside the EU.

Google reCAPTCHA

We use Google reCAPTCHA on our website to safeguard us from spam and abuse. This service helps us distinguish between human visitors and automated bots. Google reCAPTCHA, a service of Google Ireland Limited, collects your IP address, mouse movements, and possibly browser data to assess whether the contact request comes from a real user or an automated system (bot).

Storage Period
The specific storage period of the data processed cannot be influenced by us but is determined by Google Ireland Limited. More information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US

Purpose and legal basis
The use of Google reCAPTCHA is based on your consent (Article 6(1)(a) of the GDPR) and § 25 para. 1 TDDDG (German law). Data can be transferred to the US through the EU-VS Data Privacy Framework of EU-model contracts. For other situations, we seek your explicit consent (Article 49(1)(a) of the GDPR). Despite our legal safeguards, risks exist when transferring data outside the EU.

Presence on social media platforms

We maintain so-called fan page accounts or channels on the networks listed below. These are intended to provide you with information and offers within social networks and to offer you other ways to contact us and obtain information about our offers. Below, we inform you what data we, or the relevant social network, process in connection with your access to and use of our fan pages/accounts.

Data processed by 8vance
If you want to contact us via the chat function of the relevant social network, we generally process your username (which you use to contact us) and may store other data provided by you to the extent necessary to process/answer your request. The legal basis of this processing is the legitimate interests of 8vance (Article 6(1)(f) of the GDPR).

(Static) usage data we receive from the social network
We receive automated statistics on our accounts through Insights functionalities. The statistics include the total number of page views, likes, information on page activity and post interactions, reach, videos viewed and information on the male/female ratio among our fans/followers.

The statistics contain only aggregated data that cannot be related to individual persons. They are not identifiable to any person.

What data the social networks process
To view the content of our fan pages or accounts, you do not need to be a member of the respective social network and therefore no user account is required for the respective social network.

However, please note that social networks also collect and store data from website visitors without a user account when the respective social network is visited (e.g. technical data to be able to display the website to you) and use cookies and similar technologies, over which we have no control. Details can be found in the privacy policy of the relevant social network (see the relevant links below).

Primary responsibility for the processing lies with the relevant social media platform. We have no influence on the data processing by the social networks in the context of your use. As far as we are aware, your data is stored and processed in particular in connection with the services of the respective social network, as well as for the analysis of user behaviour (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed within and outside the respective social network. It cannot be excluded that your data may also be stored by social networks outside the EU/EEA and passed on to third parties.

If you would like to know what the social media platforms do with your personal data, please read the relevant privacy statement: