Skip to main content
Book Call

Privacy Policy

At a Glance

The following gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally. For full details, see the sections below.

We collect data you provide directly, for example through the contact form. Other data is collected automatically when you visit the site, mainly technical data such as browser, operating system, or the time of the page request.

You have the right to request, free of charge, information about the origin, recipients, and purpose of your stored personal data, plus a right to correction, deletion, or restriction of processing. You also have the right to lodge a complaint with the competent supervisory authority.

We do not currently use any analytics or tracking tools on this website.

Data Protection

We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Please note that data transmitted over the internet (for example, by email) may be subject to security gaps. Complete protection of data from access by third parties is not possible.

Data Controller

The data controller for this website is:

Fleck & Dubs Pariveo GbR

Kollwitzstr. 76, 10435 Berlin, Germany

Email: kontakt@pariveo.eu

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Data Protection Officer

We are not legally required to appoint a data protection officer. Under § 38 BDSG, this obligation only applies once at least 20 people are continuously engaged in the automated processing of personal data. For any data protection questions, please contact the data controller listed above.

Data Retention

Unless a more specific retention period is stated elsewhere in this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you assert a valid right to erasure or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for retaining it (for example, tax or commercial record-keeping obligations); in that case, deletion follows once those grounds no longer apply.

Legal Basis for Processing

Where you have given consent, we process your personal data under Art. 6(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your device, processing additionally relies on § 25(1) TDDDG. Consent can be withdrawn at any time. Where processing is necessary for contract performance or pre-contractual measures, we rely on Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, we rely on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The applicable legal basis for each case is stated in the relevant section below.

Recipients of Personal Data

As part of our business activities, we work with various external parties. We only share personal data with external parties where necessary for contract performance, where legally required, where we have a legitimate interest under Art. 6(1)(f) GDPR in doing so, or where another legal basis permits it. Where we use processors, we share personal data only under a valid data processing agreement.

We currently use the following processors:

  • Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA — hosting, content delivery, bot protection (Turnstile), and storage of contact-form data (Cloudflare D1). Processing relies on Standard Contractual Clauses (cloudflare.com/cloudflare-customer-scc) and a certification under the EU-US Data Privacy Framework (dataprivacyframework.gov/participant/5666).
  • INWX GmbH & Co. KG, Prinzessinnenstr. 30, 10969 Berlin, Germany — mailbox hosting for kontakt@pariveo.eu. Services are provided exclusively within the EU/EEA, so no third-country transfer applies.

Withdrawing Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on those provisions. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. If you object, we will no longer use your personal data for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged violation. This right exists without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format. Where you request direct transfer of the data to another controller, this will only be done to the extent technically feasible.

Access, Correction, and Deletion

Under applicable law, you have the right at any time to request, free of charge, information about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, a right to correction or deletion of that data. You may contact us at any time regarding this or any other data protection question.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of that verification, you have the right to request restriction of processing.
  • If the processing of your personal data was unlawful, you may request restriction of processing instead of erasure.
  • If we no longer need your personal data, but you need it to establish, exercise, or defend legal claims, you have the right to request restriction of processing instead of erasure.
  • If you have objected under Art. 21(1) GDPR, a balancing of your interests and ours must take place. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing.

Where you have restricted the processing of your personal data, such data may, with the exception of its storage, only be processed with your consent, or to establish, exercise, or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the address bar switching from "http://" to "https://" and by the padlock icon in your browser bar.

When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

Objection to Marketing Emails

We hereby object to the use of contact data published under our legal notice obligation for sending unsolicited advertising and information materials. The operators of this site expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam email.

External Hosting

This website is hosted by an external provider. The personal data collected on this website is processed on the host's servers. The host is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare provides the infrastructure (Cloudflare Workers with static assets) that delivers this website.

Processing relies on Art. 6(1)(f) GDPR (legitimate interest in a reliable presentation of this website). Cloudflare also processes data in the United States. This processing relies on Standard Contractual Clauses (cloudflare.com/cloudflare-customer-scc); the company also holds a certification under the EU-US Data Privacy Framework (dataprivacyframework.gov/participant/5666). Further information: cloudflare.com/cloudflare-customer-dpa.

Cookies

This website uses a single cookie: it stores your language choice (German or English) so you do not have to select it again on your next visit. It is a first-party cookie with no connection to third parties, advertising, or user analytics.

This cookie is technically necessary within the meaning of § 25(2) no. 2 TDDDG and is stored on the basis of Art. 6(1)(f) GDPR (legitimate interest in a functional, language-appropriate presentation of the website). No consent is required for it.

You can configure your browser to reject cookies generally or to delete them automatically when you close the browser. In that case, the default language will be used again on each visit.

Server-Side Processing by Our Hosting Provider

When you access this website, our hosting provider Cloudflare processes technical connection data (including IP address, browser type, operating system, and time of access) to technically deliver the website and to protect it against abuse, such as DDoS attacks. This processing takes place automatically at the infrastructure level at Cloudflare; we ourselves do not maintain our own, persistent storage of server log files. The legal basis is Art. 6(1)(f) GDPR. For more on Cloudflare as a processor, see "External Hosting" above.

Contact Form

When you send us inquiries via the contact form, we store the details you provide, including the contact data you enter, in order to process your inquiry and in case of follow-up questions. The data is stored in a Cloudflare D1 database. We do not share this data without your consent.

Processing relies on Art. 6(1)(b) GDPR where your inquiry relates to fulfilling a contract or to pre-contractual measures; otherwise, it relies on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR).

Data you enter in the contact form remains with us for 12 months after our last contact with you, after which it is deleted. Where your inquiry results in a contractual relationship, the independent, longer commercial and tax record-keeping periods apply from that point (for example, § 147 AO, the German Fiscal Code). You may request earlier deletion of your data at any time, unless a statutory retention obligation applies.

Inquiries by Email

When you contact us by email, your inquiry, including all personal data arising from it (name, inquiry content), is stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

Processing relies on Art. 6(1)(b) GDPR where your inquiry relates to fulfilling a contract or to pre-contractual measures; otherwise, it relies on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR).

Data you send us by email remains with us until you ask us to delete it or the purpose for storing it no longer applies. Mandatory statutory retention periods remain unaffected.

Google Fonts (Local Hosting)

This site uses so-called Google Fonts, provided by Google, for a consistent display of typefaces. The Google Fonts are hosted locally. No connection to Google's servers is made.

Cloudflare Turnstile

We use Cloudflare Turnstile on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether data entry on this website, such as in the contact form, is made by a human or by an automated program. To do so, Turnstile analyzes visitor behavior based on various characteristics.

This analysis starts automatically as soon as a visitor loads a page with Turnstile enabled. Turnstile evaluates data such as IP address, time spent on the page, and mouse movements. The data collected during this analysis is forwarded to Cloudflare.

Storage and analysis of this data relies on Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our web services from abusive automated scraping and spam. This processing relies on Standard Contractual Clauses (cloudflare.com/cloudflare-customer-scc). The company also holds a certification under the EU-US Data Privacy Framework (dataprivacyframework.gov/participant/5666).