Privacy Policy

Privacy Policy

1. Controller

The controller responsible for data processing is:

ELIDERE
Astrid Kumpan
Sonninstraße 2
20097 Hamburg
Germany
Email: hello@elidere.de

2. Types of Data Processed

When using ELIDERE, the following types of data may be processed in particular:

text-based communication records submitted by the customer

communication metadata, where contained in the submitted material

optional contextual information provided by the customer

name and email address, where required for ordering, communication or delivery

payment and invoice references, where required for payment processing

technical usage data, in particular server logs

voluntary information for product and target group analysis, where requested

The submitted communication records may also contain personal data relating to third parties.

3. Purposes of Processing

Data is processed for the following purposes:

performing the commissioned analysis

creating and providing the analysis report

contract processing and customer communication

payment processing

handling support requests

technical provision, security and stability of the service

internal, aggregated evaluation of product use and booking behaviour to improve the service

Chat content and analysis materials are not used for advertising, profiling or AI training.

4. Legal Bases

Processing is carried out, where applicable, on the basis of:

Art. 6(1)(b) GDPR for the performance of a contract

Art. 6(1)(c) GDPR for compliance with legal obligations

Art. 6(1)(f) GDPR for legitimate interests, in particular IT security, system operation, abuse prevention and service improvement

Where voluntary information for target group or marketing evaluation is collected, this is done only to the extent specified at the time of collection.

5. Third-Party Data in Submitted Communication Records

The communication records submitted by the customer may contain personal data relating to third parties.

Such data is used exclusively to perform the commissioned analysis. It is not used to contact third parties, for advertising or for AI training.

The customer is responsible for submitting only content that the customer is legally permitted to use and share. Sensitive data that is not required should be removed or redacted before submission.

6. Hosting and Technical Provision

IONOS is used for domain, hosting, website operation and technical provision.

As part of the technical provision, server logs may be processed. These may include, in particular, the date and time of access, pages accessed, technical browser and device information, and IP addresses.

Processing is carried out to provide, secure and stabilise the website.

7. Payment Processing

Where used during checkout, payment processing is handled by Stripe.

In this context, payment, transaction, invoice and reference data may be processed where this is necessary for contract conclusion, payment processing, documentation, fraud prevention and accounting allocation.

Analysis and delivery begin only once payment status has been confirmed.

8. Contact and Support

If you contact us by email or contact form, we process the information you provide in order to handle your request.

Processing is carried out for communication, handling the request and, where applicable, taking pre-contractual or contractual measures.

9. Business Analytics and Service Improvement

ELIDERE may carry out internal, aggregated evaluations of product use and booking development.

In particular, the following information may be processed:

booked product

booking time

language

country or region

voluntary age group

voluntary gender information

marketing source or campaign, where available

Chat content, analysis materials and uploaded communication records are not used for marketing evaluations.

Evaluation is carried out separately from analysis content and serves exclusively to improve the service, product structure and marketing management.

10. Storage Period and Deletion

Personal data is stored only for as long as necessary for the respective purpose.

Raw chat data and submitted communication records are not permanently archived and are not used for training purposes.

Unless statutory retention obligations prevent deletion, raw chat data is deleted no later than 7 days after delivery of the report.

Payment, invoice and business-related documentation data may be stored for longer due to statutory retention obligations.

Technical log data is stored only temporarily where required for security, error analysis and system operation.

11. Recipients and Service Providers

Personal data may be transferred to technical service providers where necessary, in particular to:

hosting and infrastructure providers

payment service providers

email and communication service providers

IT and maintenance service providers

Data is not disclosed to third parties for their own advertising purposes.

12. Transfers to Third Countries

Processing outside the European Union or the European Economic Area may take place if service providers used by ELIDERE process data outside the EU or EEA.

In such cases, processing takes place only where the legal requirements are met, in particular on the basis of an adequacy decision, appropriate safeguards or other legally provided mechanisms.

13. Technical and Organisational Measures

Appropriate technical and organisational measures are used to protect personal data.

These include in particular:

encrypted transmission

access restrictions

data minimisation

separate processing of analysis content and business analytics data

protection against unauthorised access

system-related security measures

14. Rights of Data Subjects

Data subjects have the following rights, subject to the legal requirements:

right of access under Art. 15 GDPR

right to rectification under Art. 16 GDPR

right to erasure under Art. 17 GDPR

right to restriction of processing under Art. 18 GDPR

right to data portability under Art. 20 GDPR

right to object under Art. 21 GDPR

right to withdraw consent with effect for the future

Requests may be sent to: hello@elidere.de

15. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority.

16. Automated Decisions

No automated decision-making within the meaning of Art. 22 GDPR with legal effect takes place.

The analysis serves the structured evaluation of submitted communication data and does not replace legal, psychological, medical or therapeutic advice.

17. Changes to this Privacy Policy

This Privacy Policy may be amended if technical, legal or organisational changes occur.

The current version published on this website applies.