Effective from: 13.07.24

Privacy Policy

Version 2.0; Date: [10.06.2024]

1. Introduction

The following privacy policy informs you which personal data Senken GmbH, Zehdenicker Straße 8a, 10119 Berlin (‘Senken’) processes in the context of your use of the website and our platform at ‘https://www.Senken.io/’ (together the ‘Platform’) and your use of other means of communication (e-mail, telephone) to contact us. We will inform you about the respective legal basis, the purpose and the way in which we process your personal data. In addition, we will inform you of your rights in this regard and the duration of data storage.

2. Definitions

Personal data:

Personal data is all data with which you are personally identified or can be identified. This includes, for example, data such as your name, your address or your telephone number, but also an online identifier.

Cookies:

Cookies are small text files that are stored by a website on your computer or mobile device when you visit the website. These files allow the website to remember information about your visit, such as your preferred language and other settings. Cookies help to improve the user-friendliness of the website by making browsing more efficient and providing certain functions. There are different types of cookies, including session cookies, which are deleted when you close your browser, and persistent cookies, which remain on your device for a set period of time.

Most browsers allow you to manage or delete cookies through their settings. By default, many browsers accept cookies unless you adjust your settings otherwise. Be aware that disabling cookies might affect the functionality of our Service. For detailed information on cookies, including how to view, manage, and delete them in your browser, you can visit www.allaboutcookies.org.

Opt-out:

The opt-out process allows users to opt-out of certain data collection or processing activities. By opting out, users can revoke or restrict their consent to the use of their personal data. This may include, for example, unsubscribing from marketing emails or deactivating targeted advertising.

3. Data collection

We generally collect our data in three ways:

Through forms and direct messages that people who visit our website enter themselves.
Through services that use cookies.
Through log-files

This section describes all relevant information on data collection through forms.

We use five different types of forms. Two different contact forms, a registration form for creating an account, an enquiry form for purchasing CO2 certificates (enquiry form), a form for registering for webinars, a form for registering for the Senken Academy and one form each for using our products: Scorecard and Net Zero Planner. The following data is requested. All data that is not included in all forms is marked as optional below:

First name, surname
Telephone number
Company name (optional)
Job title (optional)
Company e-mail address
Content of the message
City (optional)
Country (optional)
Free text field (optional)
Emissions (optional)
Reduction targets (optional)

We use the data from various forms for different purposes. The data from the enquiry form and the data from one of the contact forms are automatically transferred to Hubspot if you have accepted the ‘Hubspot Analytics’ cookie. If this is not the case, this is done manually. For more information, read the HubSpot Pixel and HubSpot CRM sections.

We use the data we collect from the registration form to send invitations to the respective webinars or to our Senken Academy. There is also an optional box on this form. If you tick this box, you give your consent to receive event-related messages or 5-day lessons from us via your email. Within these notifications you will find links to unsubscribe from these services. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

If you send us enquiries via the contact form or contact us by e-mail, your message, including the contact details you provide there, will be stored and processed by us for the purpose of processing and answering the enquiry, in the event of follow-up questions or for customer/partner relations. In addition, your other personal data transmitted in the content of the message will be stored. Only you can influence which data this is in detail.

The following data is also stored at the time the message is sent:

Date and time of contact

The data transmitted by you will remain with us until the purpose for the data processing no longer applies.

When you use one of our digital products (Scorecard and Planner), we process the data you enter there to fulfil our contractual obligations to you and to manage our customer relationships. Additionally, we use the data to collect information about emissions and reduction targets. The data is stored for the duration of your use of our digital products and beyond, as long as necessary to achieve the mentioned purposes or as required by statutory retention periods.

If you contact us as part of an existing contractual relationship or contact us in advance for information about our website and our services, the data and information you provide will be processed for the purpose of processing and responding to your contact enquiry in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. In addition, the processing is carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO for the purpose of the above described reasons.

In addition, we create server log files when the website is accessed. When you visit our website, your browser automatically sends certain information to our website's server. This information is automatically recorded each time you access our website and stored in so-called ‘server log files’ or ‘log files’. These are:

the IP address of your computer
the operating system of your computer, if applicable
the type of browser you are using (Firefox, Google Chrome, etc.) and its version
the request from your browser,
the time of this request,
the status of the enquiry,
the amount of data transferred as part of this enquiry,
the date and time of access,
the URL of the website from which you accessed our website (so-called referrer URL)
the URL of the website that you access via our website.

The temporary storage of IP addresses by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The log files are stored in order to ensure the functionality of the website: This data is processed in order to detect and eliminate errors on the website, to determine the utilisation of the website or to make improvements and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DSGVO. This is also the legal basis for data processing. This data is not merged with other data sources, nor is it analysed for marketing purposes.

The access data collected as part of the use of our website is only stored for the period for which this data is required to fulfil the above purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.

3.1 Use of services by Senken

All services that we additionally use to collect or store data are described below. With regard to the individual services, we will first describe which service we use and which company provides it. The user rights and the opt-out procedure are then described. Finally, we describe which types of data are collected with the respective service, what this data is collected for and how long this data is stored.

3.1.1 Hosting

In the context of hosting, we use the services of Amazon Web Services Europe Sarl (‘AWS’), which is based in Luxembourg. AWS acts for us as a processor in accordance with Art. 28 DSGVO. Personal data is only processed for our purposes and on our instructions. In addition, data hosted by AWS is encrypted. In this context, information is transmitted exclusively to servers in the Frankfurt am Main region and stored there. The above-mentioned processing of your data serves the purpose of using the storage service to provide the technical infrastructure necessary to offer our services. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

Information about the processing of personal data by AWS can be found here:

[https://aws.amazon.com/privacy/]

The remaining data we collect is stored on the servers of the services we use to collect the data. These servers are located either in Europe or in the USA.

3.1.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to collect data.

User rights and opt-out:

Data processing is based on your consent in accordance with Art. 6 para. 1 a) DSGVO. You give your consent by agreeing to the setting of cookies when you enter our website. You can revoke your consent at any time by getting in contact with us via e-mail (contact@senken.io), the contact form on our website or using www.allaboutcookies.org to block cookies on your browser. The message to revoke consent should say the following “I would like to opt-out from *please insert all the services you would like to opt-out from here*”. You can also prevent Google from processing this data by downloading and installing the browser plugin available at the following link [https://tools.google.com/dlpage/gaoptout]

Data types, purpose and storage:

We use the following features of Google Analytics: Remarketing, Google Display Network Impression Rating, Google Analytics Demographics and Interest Reporting. The data collected and stored by these features include:

Remarketing: Allows you to target adverts to users who have already visited your website based on their interactions.
Google Display Network Impression Reporting: Measures how often adverts are shown on the Google Display Network.
Google Analytics Demographics and Interest Reporting: Provides insights into the demographics and interests of website visitors to optimise marketing strategies.

Google uses the data collected to analyse your use of our website and to create and deliver reports on your website activities. We use the data to:

Analyse user behaviour and improve the user-friendliness of our website.
Optimise marketing campaigns and measure the effectiveness of our advertising.
Identify and resolve technical issues.

The data is stored for a period of 26 months before it is automatically deleted.

You can find more information about Google's data protection practices at [https://policies.google.com/privacy]

3.1.3 Smartlook session recorder

We use Smartlook, a web analytics service from Smartlook.com. Smartlook uses various technologies to create session recordings and cookies to assign these recordings to an ID across different sessions.

User rights and opt-out:

Data types, purpose, retention:

The data collected and stored by Smartlook includes:

Device information
Geographical information
Interaction data
Screen recordings

Screen recordings are used to record user interactions with our website. Smartlook stores this information in a pseudonymised user profile. Neither Senken nor Smartlook use this information to identify individual users or to match it with other data about individual users. We use the data to:

Understand user behaviour and improve the usability and functionality of our website.
Identify and fix technical issues to improve usability.
Analyse user interactions to optimise the design and content of our website.

The data will not be retained by Smartlook for longer than 13 months.

You can find more information about Smartlook's data protection practices at [https://help.smartlook.com/docs/privacy-policy]

3.1.4 LinkedIn Insight Tag

We use LinkedIn Insight Tag, a web analytics and advertising service provided by LinkedIn Corporation (‘LinkedIn’). LinkedIn Insight Tag uses cookies and similar technologies to establish a connection between our LinkedIn page and visits to our website. It provides us with additional information about visitors so that we can better understand their behaviour and target our marketing strategies.

User rights and opt-out:

Data types, purpose, storage:

The data collected and stored by LindeIn Insight Tag includes:

the visits of members to our website
including URL
referrer, IP address
Device and browser characteristics (user agent)
time stamp

IP addresses are truncated or hashed (when used to reach members across devices), and members' direct identifiers are removed within seven days to pseudonymise the data.

We use this data to:

Measure the effectiveness of our LinkedIn advertising campaigns.
understand user behaviour and improve the performance of our website
optimise our marketing strategies and address relevant target groups.

This remaining pseudonymised data is then deleted within 180 days.

You can find more information about LinkedIn's data protection practices at [https://www.linkedin.com/legal/privacy-policy]

3.1.5 Hubspot CRM

We use HubSpot CRM, a customer relationship management service provided by HubSpot, Inc (‘HubSpot’).

User rights and opt-out:

Data processing is based on our legitimate interests in accordance with Art. 6 (1) lit. f DSGVO. The purpose this interest is based on will be described in the following. You can object to this type of data processing by using a contact form or by sending an email to our service (see chapter 5. User Rights).

Data types, purpose, storage:

The data collected and stored by HubSpot includes:

First name, surname
telephone number
company name
Job title
Company e-mail address
Content of exchanged messages
City
Country
Free text field

We use this data to manage the following areas:

Marketing
Sales
Service
Operations

The data you provide will remain with HubSpot until the purpose for data processing no longer applies.

You can find more information about Hubspot's data protection practices at [https://legal.hubspot.com/de/privacy-policy]

3.1.6 HubSpot Tracking Code

We use HubSpot Tracking Code, a web analytics service provided by HubSpot, Inc. HubSpot Pixel uses cookies to collect data.

User rights and opt-out:

Data types, purpose, storage:

The data collected and stored by HubSpot Pixel includes:

User token
Page views
Events (e.g., clicks, form submissions)
IP address
Browser type and version
Operating system
Referring URLs
Original source of visit
Engagement metrics (e.g., time on site, interactions)

HubSpot uses the collected data to analyse your use of our website and to create and deliver reports about your website activities. By collecting the data, we pursue the following goals:

Measure the effectiveness of advertising campaigns
Understand user behaviour on the website and improve website performance
Optimise marketing strategies and target specific audiences

The data collected by Hubspot Insight is stored until the purpose for data processing no longer applies.

You can find more information about HubSpot's data protection practices at [https://legal.hubspot.com/de/privacy-policy].

3.1.7 Zapier

We use Zapier, an integration service from Zapier, Inc. to connect and automate various applications, including HubSpot. Zapier uses so-called ‘webhooks’ and API integrations to exchange data between the applications.

User rights and opt-out:

Data types, purpose, storage:

We use the following features of Zapier: Automated data transfers and workflow automations. As a result, Zapier processes the following data:

Contact details: Information you provide to us, such as name, email address, phone number and other contact details.
Form data: Information collected via form submissions on our website, such as enquiries or feedback.
Usage data: Information about your interactions with our services that is required for automation.

Zapier processes the collected data to enable the integration and automation of our services and to streamline workflows. The purposes of data collection are:

To improve the efficiency of our workflows
To ensure seamless connection between various applications

The data is stored as long as necessary to fulfill the respective purposes or as required by law.

For more information about Zapier's privacy practices, please visit: [https://zapier.com/privacy]

3.1.8 Airtable

We use Airtable, a cloud-based service by Airtable, Inc., to link your email address with the results of services already used on our website (e.g., Senken Planner) and to manage scorecard data.

User rights and opt-out:

Data types, purpose, storage:

We use the following features of Airtable: storage and management of email addresses and related information and scorecard data. As a result, Airtable processes the following data:

Contact details: Email addresses, name, phone number and other contact information you provide to us.

Airtable uses the data collected to enable the storage and management of our email data and scorecards and to create and deliver reports on activity and interactions. The purpose of collecting the data is to:

Improve the efficiency of our data management
Ensure a seamless connection between different applications

The data is stored for as long as necessary to fulfil the respective purposes or as required by law.

For more information about Airtable's privacy practices, please visit: [https://airtable.com/privacy]

3.1.9 ConvertKit

We use ConvertKit, an email marketing service by ConvertKit LLC, to send and manage marketing emails.

User Rights and Opt-Out:

Data Types, Purpose, Retention:

We use the following features of ConvertKit: sending marketing emails, managing email subscriptions, and analysing user behaviour. Thus, ConvertKit processes the following data:

Contact Data: Email addresses, names, and other contact details you provide to us.
Interaction Data: Information about your interactions with our emails, such as open rates, click behaviour, and unsubscribes.
IP Address: For geographic location and analysis.

ConvertKit uses the collected data to enable the sending and management of our marketing emails and to create and deliver reports on activities and interactions. The purposes of collecting the data are:

To improve the effectiveness of our marketing campaigns.
To optimise our communication strategies.

The data is stored as long as necessary to fulfil the respective purposes or as required by law.

For more information about ConvertKit's privacy practices, please visit: [https://convertkit.com/privacy].

3.1.10 Slack

We use Slack, a communication service by Slack Technologies, Inc., to enhance internal communication and collaboration within our company.

User Rights and Opt-Out:

Data Types, Purpose, Retention:

We use the following features of Slack: messaging, file sharing, and management of communication channels. Therefore, Slack processes the following data:

Contact Data: Name, email address, and other contact details you provide to us.
Message Content: Information about your messages and files shared within the website.

Slack uses the collected data to enable communication and collaboration within our company. The purposes of processing the data are:

To improve the efficiency of our internal communication.

The data is stored as long as necessary to fulfil the respective purposes or as required by law.

For more information about Slack's privacy practices, please visit: [https://slack.com/intl/en-de/trust/privacy/privacy-policy]

4. Social Media Presence

We are present on various social media websites, which are individually described below. We use our social media presences to inform about our services and to communicate with (potential) users. When you visit these presences, we are jointly responsible with the operator for data processing. However, we have only partial influence on the respective data processing operations. Personal data that you publish on social media websites can be used for market research and advertising purposes.

a. Twitter

The following information applies to data processing in the context of using the Senken Twitter page, accessible at [https://twitter.com/Senken_io] (hereinafter referred to as the "Twitter Page"). Please note, in addition to this information, the privacy policy of Twitter. In particular, information about the processing of data by Twitter during interactions with the Twitter Page, information on the legal basis and purposes of the processing of personal data, as well as information on data deletion and retention periods at Twitter, can be found here: [https://twitter.com/en/privacy] Twitter fulfils all obligations under the DSGVO with regard to the processing of analytics data. We do not make any decisions regarding the processing of analytics data and all other information arising from Art. 13 DSGVO. This information is provided solely by Twitter Analytics.

The contact details for Twitter are:

Twitter International Company

One Cumberland Place

Fenian Street

Dublin 2

D02 AX07

Ireland

Contact details of the Data Protection Officer of Twitter International Company: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

The data protection supervisory authority for Twitter is:

Data Protection Commission

21 Fitzwilliam Square South

Dublin 2, D02 RD28 Ireland

+353 578 684 800

+353 761 104 800

Online form: https://forms.dataprotection.ie/contact https://www.dataprotection.ie/

To exercise your rights as a data subject with Twitter, users should follow this link: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

Senken processes the following personal data of users during interactions with the Twitter page:

Public profile information of the user;
Personal data contained in tweets and retweets;
Personal data contained in replies to tweets;
Tagging of people in photos.

Through Twitter Analytics (analytics services for the use and interaction with Twitter pages), further statistical data of users are processed by Twitter. Senken does not receive any personal data from Twitter. We only receive numerical evaluations from Twitter regarding the use and interaction of users with the Twitter page.

We process users' personal data to safeguard our legitimate interests in accordance with Art. 6 (1) lit. f DSGVO. These purposes are:

Evaluation of the analyses and statistics created and provided by Twitter regarding user interaction with the Twitter page.
Communication and interaction via the Twitter page initiated by users.

We do not have access to the personal data processed by Twitter as part of Analytics.

b. LinkedIn

The following information applies to data processing in the context of using the Senken LinkedIn page, accessible at [https://vc.linkedin.com/company/Senken] (hereinafter referred to as the "LinkedIn Page").

Please also note the privacy policy of LinkedIn. Information about data processing by LinkedIn during interactions with the LinkedIn Page, information on the legal basis and purposes of processing personal data, as well as information on data deletion and retention periods at LinkedIn, can be found here: https://de.linkedin.com/legal/privacy-policy

If Senken and LinkedIn are joint controllers pursuant to Art. 26 (1) DSGVO, the agreement concluded between Senken and LinkedIn can be accessed via the following link: https://legal.linkedin.com/pages-joint-controller-addendum

The contact details for LinkedIn are:

Ireland

Unlimited Company

Wilton Place

Dublin 2

Ireland

Contact details of the Data Protection Officer of LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

The data protection supervisory authority for LinkedIn is:

Data Protection Commission

21 Fitzwilliam Square South

Dublin 2,

D02 RD28

Ireland

+353 578 684 800

+353 761 104 800

Online form: https://forms.dataprotection.ie/contact

To exercise your rights as a data subject with LinkedIn, users should follow this link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

Senken processes the following personal data of users during interactions with the LinkedIn page:

Public profile information of the user;
Personal data contained in posts;
Personal data contained in comments;
Personal data provided when contacting Senken via LinkedIn messages.

Through LinkedIn Insights (analytics services for the use and interaction with LinkedIn pages), further user data is processed. Senken does not receive any personal data from LinkedIn. Senken only receives numerical evaluations from LinkedIn regarding the use and interaction of users with the LinkedIn page. More information on the processing of Insights data during interactions with the LinkedIn page can be found here: https://legal.linkedin.com/pages-joint-controller-addendum

We process users' personal data for the purpose of fulfilling contracts concluded with users or for carrying out pre-contractual measures (Art. 6 (1) lit. b DSGVO). Personal data is provided to us when users

Ask questions about Senken's services and offerings via the LinkedIn page, or
Request other information about Senken through the LinkedIn page.

The type of data processed depends on what data the user provides to Senken. Typically, this includes the following data:

First name, last name
Salutation
Employer
Position
City, country
Personal data provided by the user in the context of contacting us.

We also process users' personal data to safeguard our legitimate interests (Art. 6 (1) lit. f DSGVO). These purposes are:

Evaluation of the analyses and statistics created and provided by LinkedIn regarding user interaction with the LinkedIn page
Improvement of the LinkedIn page in terms of user-friendliness and attractiveness, as well as the implementation of marketing measures
Communication and interaction via the LinkedIn page initiated by users.

We have no access to the personal data processed by LinkedIn as part of Insights, but only to those within the framework of aggregated Page Insights. These include the following evaluations, each within a certain period:

Current followers of the LinkedIn page (with current employer, date followed, location, job function, tenure, industry, company size)
Breakdown of visitors by time of website visit, job function, location, tenure, industry, and company size

Further statistical data of LinkedIn members and visitors are processed. LinkedIn does not provide us with any further personal data. We only receive numerical evaluations from LinkedIn regarding the use and interaction of users with the LinkedIn page.

LinkedIn fulfills all obligations under the DSGVO with regard to the processing of Insights data. We do not make any decisions regarding the processing of Insights data and all other information arising from Art. 13 DSGVO. This information is provided solely by LinkedIn. Information on the legal bases and purposes of the processing of personal data by LinkedIn, as well as the essence of the Insights Addendum, can be found here: LinkedIn's Privacy Policy: https://de.linkedin.com/legal/privacy-policy Information on Page Insights: https://legal.linkedin.com/pages-joint-controller-addendum

c. YouTube

The following notes apply to data processing in the context of using the accessible YouTube page (hereinafter referred to as the "YouTube page").

Please also note YouTube's privacy policy. The processing of data by YouTube during interactions with the YouTube page, information on the legal bases and purposes of processing personal data, as well as information on data deletion and storage duration at YouTube, can be found here: [https://www.youtube.com/intl/ALL_ca/howyoutubeworks/our-commitments/protecting-user-data/]

The contact details of YouTube are:

YouTube, LLC

901 Cherry Ave.

San Bruno, CA 94066 USA

Contact details of the Data Protection Officer of YouTube: Data Protection Officer Contact

The data protection supervisory authority for YouTube in Europe is:

Rue Wiertz 60

B-1047 Brussels

Belgium

+32 2 283 19 00

edpb@edpb.europa.eu

To exercise data subject rights with YouTube, users can follow this link: [https://support.google.com/youtube/answer/7585465?hl=en&visit_id=638531779376358100-3575632506&rd=1&sjid=11206400299803718745-EU]

Senken processes the following personal data of users when they interact with the YouTube page:

Public profile information of the user
Personal data provided in posts
Personal data provided in comments
Personal data provided when contacting Senken through YouTube messages

Additional user data is processed through YouTube Analytics (analysis services for the use and interaction with YouTube pages). YouTube does not provide Senken with any personal data. Senken only receives aggregated statistics from YouTube on the use and interaction of users with the YouTube page.

We process personal data of users for the purpose of fulfilling contracts concluded with users or to carry out pre-contractual measures (Art. 6 Para. 1 lit. b DSGVO). Personal data is provided to us when users:

Ask questions about Senken's services and offerings through the YouTube page
Request other information about Senken's YouTube page

The type of data processed depends on the data users provide to Senken. Generally, this includes the following data:

First name, last name
Salutation
Employer
Position
City, country
Personal data provided by the user during contact

We also process personal data of users to protect our legitimate interests (Art. 6 Para. 1 lit. f DSGVO). These purposes include:

Evaluation of analyses and statistics created and provided by YouTube regarding user interaction with the YouTube page
Improvement of the YouTube page concerning its user-friendliness and attractiveness, as well as conducting marketing measures
Communication and interaction initiated by users through the YouTube page

We have no access to the personal data processed by YouTube under Insights, only to aggregated Insights data. These evaluations include, for a specific period:

Current subscribers of the YouTube channel (with current job position, date of subscription, location, job function, tenure, industry, company size)
Breakdown of visitors with the time of website visit, job function, location, tenure, industry, and company size

Further statistical data of YouTube members and visitors are processed. YouTube does not provide us with any other personal data. We only receive aggregated evaluations from YouTube on user interaction with the YouTube page.

YouTube fulfills all DSGVO obligations regarding the processing of Insights data. We do not make any decisions regarding the processing of Insights data, and all further information resulting from Art. 13 DSGVO is provided solely by YouTube. Information on the legal bases and purposes of processing personal data by YouTube, as well as the essentials of the Insights Addendum, can be found here: [https://www.youtube.com/intl/ALL_ca/howyoutubeworks/our-commitments/protecting-user-data/]

5. User Rights

You have the following rights regarding your personal data, which you can assert against Senken:

Right of Access:

You can request information in accordance with Art. 15 DSGVO about your personal data processed by Senken.

Right to Rectification:

If the information concerning you is not (or no longer) correct, you can request rectification in accordance with Art. 16 DSGVO. If your data is incomplete, you can request completion.

Right to Erasure:

You can request the deletion of your personal data in accordance with Art. 17 DSGVO. An exception to this right is if, for example, the processing of your data is necessary to fulfil a legal obligation.

Right to Restriction of Processing:

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, especially if the accuracy of the data is disputed or the processing is unlawful.

Right to Object to Processing:

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, which is based on Art. 6 (1) sentence 1 lit. e or lit. f DSGVO, in accordance with Art. 21 (1) DSGVO. Senken will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defence of legal claims (Art. 21 (1) DSGVO). Additionally, in accordance with Art. 21 (2) DSGVO, you have the right to object at any time to the processing of your personal data for direct marketing purposes; this also applies to profiling, insofar as it is associated with such direct marketing. Senken points out this right to object in this privacy policy in connection with the respective processing. Senken does not conduct profiling.

Right to Withdraw Consent:

If you have given consent for processing, you have the right to withdraw your consent at any time for the future. This means that your withdrawal does not affect the data processing that occurred between the time you gave consent and the time you withdrew it. You do not need to justify your withdrawal. A simple informal communication via email to contact@Senken.io is sufficient.

Right to Data Portability:

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format ("data portability"), as well as the right to transmit this data to another controller if the conditions of Art. 20 (1) lit. a, b DSGVO are met (Art. 20 DSGVO).

You can assert your rights by communicating to the contact details mentioned in Section 15.

If data subjects believe that the processing of their personal data violates data protection law, they also have the right to lodge a complaint with a supervisory authority of their choice in accordance with Art. 77 DSGVO. This includes the data protection supervisory authority responsible for Senken: The Hessian Commissioner for Data Protection and Freedom of Information

P.O. Box 3163

65021 Wiesbaden

Germany

+49 611 1408 – 0

poststelle@datenschutz.hessen.de

6. Updating the Privacy Policy

Procedure for Updating the Privacy Policy

Our privacy policy is regularly reviewed and updated as necessary to ensure that it always complies with current legal requirements and our data protection practices. Changes to this privacy policy can be made at any time. Therefore, we recommend that you visit this page regularly to stay informed about any changes.

Notification Methods for Changes to the Privacy Policy

If significant changes are made to this privacy policy, we will inform you in an appropriate manner. This may include:

A notification via email to the email address you have provided
An announcement on our website

7. Data Security

As the data processed subject to this privacy policy does nor include sensitive data our data security measures, in addition to complying with the DSGVO, include the following steps:

Standard Practices by AWS: Our data is hosted on servers of Amazon Web Services (AWS), a leading provider of cloud infrastructure services. AWS implements stringent security standards and procedures to protect the confidentiality, integrity, and availability of stored data.

Data Encryption:

Encryption at Rest: All personal data is encrypted in our database. This means that the data is stored in an unreadable format to prevent unauthorised access.
Encryption in Transit: We use encryption technologies such as TLS (Transport Layer Security) to ensure that personal data is securely transmitted over the internet. This protects the data from eavesdropping and tampering during transmission between your browser and our servers.

These measures help ensure that your personal data is secure with us. If you have any questions or concerns regarding the security of your data, you can contact us at any time using the contact information provided in this privacy policy. Please also contact us at this contact information if you become aware of a data breach involving the data we process.

In the event of a data breach that results in a risk to the rights and freedoms of the affected individuals, Senken will notify the competent supervisory authority without delay and no later than 72 hours after becoming aware of the breach. If the data breach is likely to result in a high risk to the rights and freedoms of the affected individuals, Senken will also notify the affected individuals without delay.

8. Child Protection

Our services are intended exclusively for individuals who are at least 18 years old. We do not knowingly collect or process personal data from children under 18 years old. If we become aware that we have inadvertently collected personal data from children under 18 years old, we will promptly delete such data.

Age Verification Policies

To ensure that users of our platform (marketplace) have reached the minimum age of 18, we take certain measures for age verification. We only allow registration with company email addresses and assume that entrepreneurs who use the platform will independently acknowledge the terms and conditions (T&Cs). Our T&Cs specify that the minimum age for using our platform is 18 years.

Measures in Case of Violations

If we become aware that a person under 18 years old is using our services, we will take appropriate steps to suspend that person's account and delete all collected data.

Contact Information

If you have any concerns or questions regarding our child protection policies or believe that we have inadvertently collected information from a child under 18 years old, please contact us immediately using the contact details provided in Kapitel 9. Controller and Contact Information.