Data protection

With this privacy policy, we inform you about the extent of the processing of your personal data (hereinafter “data”).

Topics

• 1. Contact details of our data protection officer
• 2. General information on data processing and joint processing
• 3. Data processing
• 4. Duration of data storage
• 5. Your rights as a data subject
• 6. What are cookies?
• 7. How do you manage cookies?
• 8. Privacy policies of other websites
• 9. Changes to our privacy policy

1. Contact details of our data protection officer

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

Perelyn GmbH

Goethestraße 68
D-80336 Munich
Email: info@perelyn.com

2. General information on data processing and joint processing

As part of our business and website operations, we process data.

This also includes disclosure through transfer to third parties and, if applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Insofar as we transfer data to countries outside the EU or the EEA, we have marked this accordingly below.

The processes described below fall under joint processing, unless otherwise stated.

3. Data processing

The details of the data concerned, processing purposes, legal bases, recipients and, if applicable, transfers to third countries are listed below:

a) No log files of our own

We do not log your visit to our website and keep no log files. When you open our pages, our hosting provider processes the technical data of your request, including your IP address, in order to deliver the pages to you (see b).

b) Hosting with Amazon Web Services

Our website is hosted by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg ("AWS"). The pages are stored in a data centre in Frankfurt am Main and delivered through the Amazon CloudFront network. To deliver them, AWS processes your IP address and the other technical data of your request.

We have concluded a data processing agreement with AWS. Where data is transferred to the USA, this is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses.

The legal basis is our legitimate interest in providing our website securely and quickly in accordance with Art. 6 para. 1 f) GDPR.

c) Contact

If you contact us, we will process the following data from you for the purpose of processing and processing your request:
Name, contact details (if provided by you) and your message.

The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations in accordance with Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request in accordance with Art. 6 para. 1 f) GDPR.

Through the contact form you send us your topic, your name, your e-mail address, your message and, if you give them, your company and how you found us, together with the language and the page from which you sent the form. The form sends these details through Amazon Web Services (Amazon Simple Email Service, data centre in Frankfurt am Main, see b) as an e-mail to contact@perelyn.com. They are not stored on the web server.

d) Contact when applying

If you contact us to send us your application as an employee, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired place of employment, etc.), your message and the submitted application documents will be processed exclusively for the purpose of processing and processing your application request.

The legal basis for data processing is primarily Section 26 BDSG. Accordingly, the processing of data necessary in connection with the decision to establish an employment relationship is permitted.

Should the data be necessary for legal prosecution after completion of the application process, data may be processed to pursue our legitimate interests in accordance with Article 6 (1) f) GDPR, namely to assert and/or defend claims.

e) Contract performance and data management as part of service provision

As part of the provision of our services and to initiate and process the existing contractual relationship between you and us, we process various data. If you have commissioned us to provide a service, we process your data (if provided: name, contact details, address) and all information necessary in the context of fulfilling the order exclusively for the purpose of processing and processing the contract relationship. This includes in particular our appropriate advice and support, correspondence with you, invoicing, fulfilling our accounting and tax obligations.

The data is processed accordingly on the basis of Art. 6 para. 1 b) GDPR and to fulfill our legal obligations in accordance with Art. 6 para. 1 c) GDPR. If this is necessary to process the order, your data will be passed on to third parties.

In particular, this includes disclosure to supervisory authorities for the purpose of correspondence and to assert and defend your rights. In addition, the group companies cooperate in providing various services. In this case, the data is shared with the subsidiaries as part of processing on behalf of the subsidiary.

f) Newsletter

In order to provide you with regular information about our company and offers, we offer to send you an e-mail newsletter. When you subscribe to the newsletter, we process the data you entered when you signed up (e-mail address and other voluntary information). To prevent misuse, we will send you an email after you register asking you to confirm your subscription (double opt-in procedure). In order to be able to prove the registration process in accordance with the law, your registration will be logged. The time of registration and confirmation as well as your IP address are affected.

The legal basis for sending the newsletter is your consent in accordance with Article 6 (1) a) GDPR. Data processing in connection with sending the confirmation email for your registration and the associated data logging is carried out in accordance with Art. 6 (1) f) GDPR on the basis of our legitimate interest in proving your proper registration.

If you give us your consent, we will also evaluate in the newsletters whether you have opened the newsletter and the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for analysing the newsletter is your consent in accordance with Article 6 (1) a) GDPR.

To send the newsletter, we use service providers to whom we transfer the specified data.

g) Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and stored by your browser.

On your first visit, a banner asks whether you consent to analytics with PostHog (section h). We store your choice for six months in the cookie "cc_cookie". It contains only your choice, when you made it and a random identifier of the consent. You can change or withdraw your choice at any time via the "Cookie settings" link at the bottom of every page. Without your consent, we set no other cookies.

Storing this cookie is strictly necessary to ask for and record your consent (Section 25 (2) no. 2 TDDDG). Data processing is carried out to fulfil our legal obligations in accordance with Art. 6 para. 1 c) GDPR.

h) Analytics with PostHog

If you consent, we use PostHog, an analytics service of PostHog Inc., USA. We use PostHog's EU instance; the data is stored on servers in Frankfurt am Main. It shows us which pages are visited, which links and buttons are clicked and how visitors move through the pages, and we use this to improve the content and structure of our website. Without your consent, PostHog is not loaded.

The following data is processed:

• the pages you visit and the page you came from (referrer),
• the time and duration of your visit,
• the links and buttons you click, with their labels,
• a recording of your visit: how you scroll, move the mouse and click, together with the page content shown at the time; anything typed into form fields is not recorded,
• browser, operating system, device type, screen size and language setting,
• your approximate location (country and region), derived from your IP address,
• a random identifier, stored in the cookie "ph_…_posthog", that recognises returning visits.

Your IP address is not stored by PostHog. We do not combine this data with other data about you and do not try to identify you. We do not use surveys or advertising. The cookie lasts one year; the data collected is deleted after twelve months at the latest.

We have concluded a data processing agreement with PostHog. As PostHog Inc. is based in the USA, access from the USA cannot be ruled out; the European Commission's standard contractual clauses apply to it (Art. 46 para. 2 c) GDPR). More information: https://posthog.com/privacy

The legal basis is your consent in accordance with Art. 6 para. 1 a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page; this deletes PostHog's cookie.

4. Duration of data storage

We only store personal data for as long as is necessary for the purposes for which it is processed or as long as you have withdrawn your consent. Insofar as legal storage obligations must be observed, the storage period for certain data may be up to 10 years regardless of the processing purposes.

5. Your rights as a data subject

a) Information

On request, you will receive information about all personal data that we have stored about you free of charge at any time.

b) Correction, deletion, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if it has become incorrect, we will delete or block your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are only to process data restrictively in the future. In particular, you have the right to object in cases where your data is required due to the performance of a task that is in the public interest or data processing is carried out on the basis of our legitimate interest, as well as profiling based on this.

c) Right of withdrawal in case of consent with effect for the future

You can withdraw your consent at any time with effect for the future. Your revocation does not affect the lawfulness of processing up to the time of revocation.

d) Data portability

If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or using automated procedures, you have the right to data portability. On request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another person responsible upon request.

e) Restriction of processing

Data for which we are unable to identify the data subject, for example if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.

f) Exercising your rights as a data subject and right to lodge a complaint

If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data, or if you wish to transfer the data to another company, please contact info@perelyn.com

You also have the option to complain to a supervisory authority about your rights as a data subject.

6. What are cookies?

Cookies are text files that are placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may automatically collect information from you using cookies or similar technologies. For more information, see:

allaboutcookies.org

7. How do you manage cookies?

You can set your browser not to accept cookies, and the following website will tell you how to remove cookies from your browser. However, in a few cases, some of our website features may not work.

8. Privacy policies of other websites

The Perelyn GmbH website contains links to other websites. Our privacy policy only applies to our website. So if you click on a link to another website, you should read their privacy policy.

9. Changes to our privacy policy

Perelyn GmbH regularly reviews its privacy policy and publishes any updates on this website. This privacy statement was last updated on February 16, 2023.