We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:
Nestventure, Inh. Rita Kilacsko
Schüttgrabenstraße 2
60439 Frankfurt am Main
Phone: +49 155 634 67 498
E-mail: kontakt@nestventure.de
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user.
This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment).
Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.
When you access our website, usage data is generated that is technically necessary to deliver the site, as well as usage data that we collect to evaluate the use of our website. This may include: details of the access (e.g. pages opened, time and duration of the visit), content data (e.g. data, text or images you enter or upload) and technical details (e.g. browser, device, IP address).
We only compile usage data for evaluation pseudonymously.
Insofar as information is stored on or read from your device for this purpose (e.g. by cookies or analytics scripts), this is done only with your consent pursuant to Art. 6 para. 1 (a) GDPR, which you may withdraw at any time with effect for the future, for example via the cookie settings if our website offers them.
Otherwise, the legal basis is our legitimate interest pursuant to Art. 6 para. 1 (f) GDPR in evaluating and improving our website; you may object to this processing at any time.
Details of the services used can be found in the respective sections of this policy.
Our Website is presented in the Internet by a service provider. We use the service Rackhost Zrt., Tisza Lajos körut 41.
6722 Szeged, Ungarn.
We have concluded a data processing agreement with our provider.
With this contract, our provider is obliged to process the data according to our instructions.
You can find more information on data processing at our provider in his privacy policy at https://www.rackhost.hu/privacy-policy.
The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.
Each time this website is used, our provider processes information in so-called server log files, which your browser transmits automatically whenever a website is accessed. This data consists of:
This data is processed in order to deliver the website, to ensure its secure and trouble-free operation and to analyse errors; this includes detecting and warding off attacks and abusive access. We do not evaluate the log files in order to identify you personally; they are attributed to a person only where this is necessary to investigate an attack or a malfunction. The log files are deleted as soon as they are no longer required for these purposes; they are retained for longer only insofar as a security incident needs to be investigated.
Insofar as we send you advertising by email, we do so only with your consent or – for our own similar offers to existing customers – insofar as the law permits this without consent. You may object to the use of your email address for advertising at any time.
Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.
For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the statutory limitation periods plus an adequate extra time for potential interruptions of the limitation period.
For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality and the security of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.
Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular commercial and tax-law retention obligations; in this respect, we store your data for their duration.
Our website uses exclusively technically necessary cookies. These are required for the website to function (for example, to store your entries during a visit). No consent is required for this, and your behaviour is not evaluated for advertising or statistical purposes. These cookies are automatically deleted at the end of your visit or once their technical function has expired.
Independently of this, you can also control the storage of cookies through your browser: you can block cookies entirely or in individual cases and delete cookies that have already been stored at any time. The manufacturers of common browsers explain how to do this:
If you block cookies completely, this may limit the functionality of our website and other websites. Information on advertising cookies from third-party providers and how you can manage them can be found at www.youronlinechoices.eu.
We do not transfer your data to third parties unless permitted by law.
Transfer of customer data may either
If your data are transferred to third parties, this is mentioned in this privacy policy.
Insofar as we transfer personal data to countries outside the European Union, in particular the USA, in accordance with the provisions set out below, we will only carry out such a transfer where an adequate level of data protection, appropriate safeguards or your consent, and thus a transfer permitted under the GDPR, is in place.
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
The right to object to advertisement is governed by our text regarding consent:
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time.
You just need to contact us without any particular formal requirement, for example by e-mail to the address given in our legal notice or – where we offer this – via a contact form or an unsubscribe link.
Your withdrawal has no effect on the legality of the data processing carried out up to that point.
Subject to the conditions of Art. 20 GDPR, you may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format or – where technically feasible – transmit it to another controller.
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).
Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary.
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example by e-mail to the address given in our legal notice or – where we offer this – via a contact form or an unsubscribe link. Your withdrawal has no effect on the legality of the data processing carried out up to that point.
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.
When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.
Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.
Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.
Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).
If you register on our website, we will ask for compulsory and potentially also non-compulsory data in accordance with our registration form for the purposes listed hereinafter.
Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.
The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR in case of contracts, including non-remunerated ones.
Your data will remain stored for as long as you remain registered, particularly as long as the storage is still required to perform the contract, to pursue our rights or for our other legitimate interests or for as long as we are required by law to store your data (for example pursuant to tax-law requirements to store documents).
If you register for a webinar, we will ask for your e-mail address and your first name, because we like to address you personally. We will only use your data to inform you about the implementation of the webinar as well as possibly about information which is necessary for the webinar to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information). Your data will be deleted after the completion of the webinar.
If you register for a course, we will ask for your data according to the registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the course as well as possibly about information which is necessary for the course to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).
If you register for a webinar, we will ask for your data according to our registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the webinar as well as possibly about information which is necessary for the webinar to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).
When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “legal notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.
If you register for a course, we will ask for your data according to the registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the course as well as possibly about information which is necessary for the course to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).
When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “Legal Notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.
If you subscribe to the newsletter offered on our page, we will inform you in detail about the information we will send you, which of your data will be stored and for what it will be used. We will not pass on your data to third parties and we will only use it for mailing the newsletter.
We will only mail you the newsletter if you have provided us with prior consent. To that purpose, you will receive an e-mail from us with a link and further details and we will ask for your consent. By confirming that link, you declare your consent to receive the newsletter and advertisement from us.
The basis for the storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant us when you register for the newsletter. You may withdraw that consent at any time, for which any notice to us, without any formal requirement, is sufficient (for example through the contact form or by e-mail or by using the link to unsubscribe, which is included in each e-mail). This withdrawal has no effect on the legality of the data processing carried out up to that point.
Because we are legally required to record your consent as part of the double opt-in, your subscription to the newsletter, the mailing of our consent e-mail and your consent by clicking on the link will be recorded and stored with location and time as well as with your IP address.
When mailing the newsletter, we use (as part of our legitimate interest in a technologically perfect processing of our customer data and analysis) the provider MailerLite of the MailerLite UAB, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania.
MailerLite is storing your data in the EC. We have also concluded a data processing agreement with MailerLite, according to which MailerLite processes the data in accordance with our instructions.
Regarding the handling of your data by our newsletter provider, we refer you to the privacy policy of MailerLite
Our newsletter provider will only use your data for mailing the newsletter, and will analyse that mailing on our behalf. In addition, our newsletter provider will only use your data to improve its own service. Our newsletter provider will not use the data to contact you directly or to pass on your data to third parties.
The mails used by our newsletter provider includes a „web-beacon“, which will inform our newsletter provider about the opening of the newsletter and/or the clicking on a link contained therein by you. As part of that process, information regarding your browser, your location and your IP address will be transmitted to our newsletter provider. This information will be used to optimise our communication with you.
Our newsletter provider will also use this data for purposes of analysis and optimisation of their own service, but only in pseudonymised form (meaning that your identification is not possible). But your data will not be used by the provider to contact you directly.
Your data remains stored, as long as it is part of our mailing list, as long as the storing is necessary to protect our rights or for other legitimate interests or if we are bound by law to keep your data longer.
If you subscribe to the newsletter offered on our page, we will inform you in detail about the information we will send you, which of your data will be stored and for what it will be used. We will not pass on your data to third parties and we will only use it for mailing the newsletter.
We will only mail you the newsletter if you have provided us with prior consent.
To that purpose, you will receive an e-mail from us with a link and further details and we will ask for your consent.
By confirming that link, you declare your consent to receive the newsletter and advertisement from us. Because we are legally required to record your consent as part of the double opt-in, your subscription to the newsletter, the mailing of our consent e-mail and your consent by clicking on the link will be recorded and stored with location and time as well as with your IP address.
The basis for the storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant us when you register for the newsletter. You may withdraw that consent at any time, for which any notice to us, without any formal requirement, is sufficient (for example through the contact form or by e-mail or by using the link to unsubscribe, which is included in each e-mail). This withdrawal has no effect on the legality of the data processing carried out up to that point.
When mailing the newsletter, we do not use an external provider, but send all mails with our own mailing system. Therefore none of your data or your behavior will be forwarded to a third party. Our mailing system can inform us about the opening of the newsletter and/or the clicking on a link contained therein by you, but this information is just stored with us internally.
Your data remains stored, as long as it is part of our mailing list, as long as the storing is necessary to protect our rights or for other legitimate interests or if we are bound by law to keep your data longer.
We refer with links to our social media presences.
When you follow any such link to the social media site, your data will be broadcasted to that site.
The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site.
The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests.
That can lead to ads being shown to you when browsing in- and outside of the social media site.
Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time.
We have added links to all the privacy policies of the social media site for your information.
Our website uses links to our presence in the social network of Facebook by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. It is just a normal link. Thus, when you open our site, Facebook will not learn of your visit to our website. But once you click on the link, you will be led to Facebook, allowing Facebook to learn that you have visited out site.
Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
The collection and use of your data which is possibly carried out by Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Facebook’s privacy policy at https://en-gb.facebook.com/policy.php.
Our website uses links to our presence in the social network of Instagram by Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.
It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram / Facebook to learn that you have visited out site.
Your data will be forwarded by Meta Platforms Ireland on the base of the standard contractual clauses to Meta Platforms USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
The collection and use of your data which is possibly carried out by Instagram/Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at
https://privacycenter.instagram.com/policy.
Our page uses links to our presence on the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.
It is just a normal link, which means that upon opening our page, LinkedIn won't learn anything of your visit to our website. But when you click on the link, you will be taken to LinkedIn, and then LinkedIn will also learn that you visited our page.
Thus, your data may be forwarded to the USA.
We have neither knowledge of, nor any influence on the possible collection and processing of your data by LinkedIn after clicking on the link. Further information can be found in LinkedIn's privacy policy at https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE.
We maintain a presence on the social media platform TikTok.
Joint Controller: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
We have concluded a data processing agreement with this provider, under which the provider processes your data solely on our behalf, within the scope of the GDPR, and according to our instructions.
You can find further details in the privacy policy of our social media provider at:
https://www.tiktok.com/legal/page/eea/privacy-policy/de
Our social media provider stores information on your device in the form of cookies, pixels, and local storage in order to analyze your interactions with the page and to recognize you again at a later time. TikTok uses this information for analytics and advertising purposes.
Our social media provider also provides us with statistics. These statistics are generated without our involvement and then made available to us. Such data may include interaction data and various statistical evaluations.
If you are logged in, you can significantly influence how your data is processed by our social media provider in various ways. For information on the available personalization and privacy settings, please see (with further references): https://support.tiktok.com/de/account-and-privacy/account-privacy-settings
For our communication with interested parties, users and customers, we use the WhatsApp messenger. It is provided by WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The legal basis for our use of WhatsApp depends on your way of using it.
Questions regarding our services will be processed based on the permission for contractual data in accordance with Art. 6 para. 1 (b). If we have used WhatsApp to ask you to consent to communication with us via WhatsApp, we will process your data based on that consent pursuant to Art. 6 para. 1 (a) GDPR.
We also use WhatsApp based on our legitimate interest in a technologically perfect online offering and its design and optimisation in a fast and technologically always available user and customer communication in accordance with Art. 6 para. 1 (f) GDPR.
The whole communication via WhatsApp is peer-to-peer encrypted. Hence, third parties cannot access the communication. We don't know what access WhatsApp has itself, but WhatsApp does collect and store so-called metadata, like information about who sent a message to whom at what time.
WhatsApp will only use your data for sending messages and for analyzing the messenger on our behalf.
Beyond that, WhatsApp will only use your data in order to improve their own services.
WhatsApp will however not use the data to contact you directly, nor pass on your information to third parties.
Your data may however be forwarded by WhatsApp to the USA and to Facebook, which owns WhatsApp.
For the details of how your data will be handled by WhatsApp, we refer you to the privacy policy of WhatsApp.
When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
To ensure the best possible data protection when using WhatsApp, we only use the business version of WhatsApp and have configured WhatsApp in such a way that it does not apply its automatic data matching with the phone book of the mobile device used. We have also concluded a data-processing agreement with WhatsApp, according to which WhatsApp will only process your information in accordance with our instructions.
Your messages will remain stored as long as required by the processing of the communication, in particular as long as required for the performance of the contract, for pursuing our rights or for our other legitimate interests or if we are bound by law to keep your data longer (for example pursuant to tax-law requirements to keep documents).
In the context of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization in accordance with. Article 6 (1) (f) GDPR we use Google Cloud Services(Google Workspace) from Google Cloud EMEA Ltd., 70 Sir John Rogerson's Quay, D02 R296, Dublin 2, Irland
(„Google“).
Google Cloud and associated software services in the GDPR-compliant GSuite relate to the storage and management of data in the cloud, calendar functions, e-mail software, document creation, spreadsheets and presentations, the exchange of documents with specific recipients, the publication of forms or other content and information, as well as chats and participation in video and audio conferences.
All data you enter in the Google cloud solutions will be entered or displayed (in particular inventory data such as name and email, usage data such as the browser used, websites visited, length of stay, previously visited website and your IP address, content data such as documents, files, contracts, audio and video communication and / or recording, chat history, shared screen content) to Google and saved by Google.
We ourselves use settings that are as privacy-friendly as possible, you can also take such precautions.
When communicating, you can use aliases or unique email addresses to log in or deactivate your audio and video transmission (in part).
Your data may be transferred to the USA here.
However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.
According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.
This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
Your data will remain stored insofar as it is still necessary for the purposes of your consent, for contract fulfillment / processing, for legal prosecution by us or for our other legitimate interests or if we are legally required to keep your data.
For more information on the use of your data by Google, please refer to Google's privacy policy
[https://policies.google.com/privacy?hl=de&gl=de] as well as the further security information on Google's cloud services [https://cloud.google.com/privacy?hl=de].
Based on our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the calendar of Calendly https://calendly.com/de, a service offered by Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA, to make appointments.
Thus, the data you enter while making an appointment will be passed to Calendly. Your data will be transmitted to the USA in that process.
You can find more information about the privacy policy of Calendly at https://calendly.com/legal/privacy-notice.
We have entered into a contract on data processing with Calendly, according to which Calendly will only process your data according to our instructions.
Additionally we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.
According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.
This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
In order to arrange an appointment, we ask for the data requested in the Calendly form and we collect your IP address at the time of entry.
This data will not be passed to third parties by us or by Calendly and only serves statistical purposes and for arranging appointments.
Data entry will be encrypted, preventing third parties from reading your data while you enter it. You will find more information about the data collected by Calendly and how they process your data in the privacy policy of Calendly .
Your data will remain stored as long as the reason for the appointment is still relevant, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for other legitimate interests of ours or as long as we are required by law to keep your data stored (for example by tax-law requirements on the keeping of records). If the appointment passes without any consequences, your data will be deleted.
We use external communication providers (third-party providers or platforms for our video conferences, audio conferences, webinars or other online meetings and online communications), here Microsoft Teams, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.
This is done either
- within the framework of our contractual or pre-contractual legal relationships according to Art. 6 para. 1 lit. b GDPR,
- within the scope of your consent, provided that we have obtained this in advance (such as for a recording) in accordance with Art. 6 para. 1 lit. a GDPR or otherwise
- in the context of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization acc. Article 6 (1) lit. f GDPR.
Every time you use our external communication provider, you enter or display all the data that you provide during communication (in particular inventory data such as name and email, usage data such as the browser used, websites visited, length of stay, referrer URL and your IP address, content data such as audio and video communication and / or recording, chat history, shared screen contents) to the external communication provider and saved by it. We ourselves use settings that are as privacy-friendly as possible, you can also take such precautions.
You can register with alias names or unique email addresses, for example, or deactivate your audio and video transmission (in part).
This will forward your data to the United States.
However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.
According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.
This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
Your data will remain stored insofar as it is still necessary for the purposes of your consent, for contract fulfillment / processing, for legal prosecution by us or for our other legitimate interests or if we are legally required to keep your data.
We and the external communication provider will not pass on your data to third parties. An exception can be an evaluation of the usage data for service and backup purposes as well as for marketing purposes by the external communication provider. For further use of your data by the external communication provider, we refer to their privacy policy
https://privacy.microsoft.com/de-de/privacystatement
and the associated additional safety information
https://www.microsoft.com/de-de/trust-center.
If the external communication provider stores cookies or other trackers for you, we also refer to our general presentation in this data protection declaration for the general handling and deactivation of cookies.
For video conferences, webinars and online meetings we use the service "Zoom". The provider is Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
When you take part in a meeting or webinar, Zoom processes the data required for this purpose — in particular your (display) name, your email address, information about your device and your connection and, depending on your selection and the features of the meeting, audio, video and chat content.
This processing serves to enable the meeting you wish to attend.
Where we ask you separately for your consent — for example for a recording — we process the data concerned solely on that basis; you may withdraw any consent given at any time with effect for the future.
In this context, data may be transferred to Zoom in the USA. An appropriate basis for this exists: the European Commission has determined that accordingly certified companies in the USA ensure an adequate level of data protection; Zoom is certified accordingly. In addition, contractual safeguards are in place to protect your data.
Further information on how Zoom handles your data can be found in Zoom's privacy statement at https://www.zoom.com/en/trust/privacy/privacy-statement/.
If you choose a payment method offered by our partner Klarna during the ordering process, we transmit the data required for processing the payment to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
This includes in particular your name, address, e-mail address, telephone number, IP address, your date of birth where Klarna requests it, and the data relating to your order.
The legal basis is the performance of the contract with you, including the payment method you have chosen (Art. 6 para. 1 (b) GDPR).
Klarna processes these data as an independent controller.
Depending on the payment method, for example when paying by invoice or in instalments, Klarna checks your identity and creditworthiness and may obtain information from credit reference agencies for this purpose.
Mathematical-statistical methods and automated decisions may be used, which influence which payment methods Klarna offers you. Details, including the credit reference agencies used and your rights vis-à-vis Klarna, can be found in Klarna's privacy notice: https://www.klarna.com/international/privacy-policy/
Where Klarna uses cookies or similar technologies on our website that are not required for processing the payment, this only takes place with your consent via our cookie notice (Art. 6 para. 1 (a) GDPR). You can withdraw your consent at any time with effect for the future by opening the cookie settings on our website and adjusting your selection. The lawfulness of the processing carried out until the withdrawal remains unaffected.
If you choose one of the payment options of our partner PayPal, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, the data entered by you when ordering will be sent to PayPal in order to facilitate the contractual payment.
Detailed information about this can be found in the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
The legal basis for passing on your data to PayPal is primarily the processing of your contractual data according to Art. 6 para. 1 (b) GDPR as well as our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR.
For data processing, we use the cloud solution Microsoft 365, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter „Microsoft“).
The legal basis for this data processing is
- our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 lit. b GDPR, as well as
- our legitimate interest in a technologically flawless online presence and its economically efficient design and optimization according to Art. 6 para. 1 lit. f GDPR.
As we use Microsoft 365 as a cloud solution, it is possible for Microsoft to learn of our data. This includes data that can identify a person with a manageable amount of effort ("personal data"). In principle, this personal data is all data that you share with us on the occasion of the use of the website and in connection with our general communication and which we then process, or enter, using Microsoft 365.
This may include contact information (such as email address or phone number), billing information (name, billing address, payment method, and bank account information), information about related third-party accounts (such as the email address or username for a related PayPal, Google, or Facebook account), scanned identification documents provided to us (such as an ID card, driver's license, passport, or official company registration documents), and any other personal information (if you have provided it to us). However, Microsoft will not evaluate or use this data under the terms of the contract for data processing.
This may result in data being transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.
According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.
This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
We have also set Microsoft 365 to store your data exclusively on servers in Germany or the EU. More information about the location of the stored data can be seen here: https://www.microsoft.com/licensing/terms/product/PrivacyandSecurityTerms/all
If you would like to learn more about Microsoft's privacy precautions, please use the following link: https://privacy.microsoft.com/de-de/privacystatement.
Based on our legitimate interest in a flawlessly functioning online offer and its economic and efficient design and optimization according to Article 6 para. 1 (f) GDPR, as well as – insofar as it concerns the storage of your contractual data – based on the permission to process contractual data in accordance with Art. 6 para. 1 (b) GDPR, we use the software of HubSpot Ireland Limited, 2nd Floor 30, North Wall Quay, Dublin 1, Ireland.
HubSpot Ireland Limited is a subsidiary of a company registered in the USA. But the Irish company is the data processor in the EU.
More information about the data processing carried out by HubSpot can be found in the privacy policy of HubSpot: https://legal.hubspot.com/de/privacy-policy
A transparent list of the cookies potentially placed by HubSpot can be found here and here
We have also concluded a data processing contract with HubSpot, according to which HubSpot will only process your data on our behalf: https://legal.hubspot.com/de/dpa
HubSpot offers the following features:
Of these, we use the following features:
Based on our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner, we use HubSpot for hosting our website. As any other hosting service, HubSpot collects usage data. These are identified and non-identifiable data on the occasion of you accessing our website. These will either be made available to HubSpot or automatically collected when you use HubSpot services (“non-personal data”).
Non-personal data does not allow HubSpot to find out the origin of the data. Non-personal data are technical information and usage information, for example the browsing and click stream behavior of visitors and users of services, session heat maps and scrolls as well as non-identifiable data about the user's or visitor's used device, operating system, browser, screen resolution, language and keyboard settings, internet provider, referral and exit pages, date/time stamp, etc.
As a hosting service, HubSpot also collects data that can identify a person with manageable effort (“personal data”).
This personal data generally consists of all data that you enter when using the website.
These can be contact data (for example e-mail address or phone number), invoice data (name, billing address, payment method and bank connection), data regarding a browser or user session (IP address, geographic location and/or unique identification of the user's device), data regarding connected accounts of third parties (for example e-mail address or user name for a connected PayPal, Google or Facebook account), scanned identity papers sent to us (for example ID card, driving license, passport or company registration documents), and any other personal data.
HubSpot also undertakes physical, electronic and procedural security measures to protect your personal data.
HubSpot has more information about this here: https://legal.hubspot.com/data-privacy?__hstc=230861184.05b1c26761c5da0b5d0ce9ba8c0bc3af.1496406325284.1496406325284.1496406325284.1&__hssc=230861184.1.1496406325285&__hsfp=80863953
Based on contractual data, we use HubSpot for our Customer Relation Management System.
Here, we store all data, which you have conveyed to us when entering into a contract, in particular your name, your contact information, payment information and products purchased, if applicable.
We will keep this data stored as long as required for the performance of the contract (in particular the warranty period) or as long as we are required by law to keep your data stored (for example the data required for taxation).
If you have consented through our cookie notice, we use HubSpot to analyse our website on the basis of your consent pursuant to Art. 6 para. 1 (a) GDPR.
HubSpot uses certain technologies for analysis, especially cookies, which will be stored on your computer. These store information about the use of our page, which we use to improve our offers. The data are processed pseudonymously, i.e. via an identifier instead of your name. Pseudonymous data are also personal data.
You can withdraw your consent at any time with effect for the future by opening the cookie settings on our website and adjusting your selection. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use Google Fonts, online font libraries provided by Adobe Systems Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA, to display fonts on our website. External font libraries especially capable of an even, fast and secure presentation.
For the use of the online fonts, no cookies or other trackers are stored in your browser. The font files (CSS, fonts) are requested from the provider of the font libraries. But, as with any data transfer on the internet, your usage data like your IP address, the browser used, the website visited previously as well as your user behaviour will be transmitted to the provider of the fonts.
Please find detailed information about Adobe Fonts at https://www.adobe.com/de/privacy/policies/adobe-fonts.html.
By using Adobe Fonts, your data will be sent to Adobe servers in the USA and will be stored there. You can find more information about the use of your data by Adobe in the privacy policy of Adobe.
Beside our website, we also use fan page(s) on social media platforms.
Above, we have already informed you about the data processing on our website and we have in particular made sure that the fact alone that you access our website is not yet forwarded to the social media platform.
Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our social media fan page(s):
On the basis of our legitimate interest in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as well as for advertising and public relations purposes, we present ourselves and our offers on social media fan page(s).
Our social media fan page(s) usually can be accessed online independently of you having a user account with the relevant platform or not. But in either case, your data will be processed by the social media platform.
Each time the social media platform is accessed, your IP address will be collected and stored. Usually, a cookie will also be placed on your page, which will save your visit and further data about your visit to the social media platform.
If you are logged in with the social media platform, your visit will also be spotted by a cookie or through other technological means and will be attributed to your user account.
Thus, the social media platform is usually able to analyse your user behaviour.
In this process, a user profile with your interests is generated, which the social media platform will use to provide you with a user experience tailored to your interests, in particular advertisement tailored to your interests within and outside of the social media platform – even across different devices, if applicable.
Your data may also be used for market research.
For the details, we refer you to the following privacy policies of the social media platform(s) used by us.
We can usually also use the data of the social media platform in order to allow you to use our fan page in accordance with your interests or to approach you with advertising.
When you interact with our fan page and if you are logged in with the relevant social media platform, according to the social media page's terms of use, we can usually also recognise your user profile and see your content.
If you do not want this, we point you to our explanations about cookies above, with general information about cookies and their deactivation. There, we have laid out in general terms how you can prevent or limit cookies being stored on your devices. Further information about the respective social media platform can be found hereinafter.
According to the aforementioned ECJ ruling dated 5 June 2018, we are always jointly responsible for our social media fan page(s) together with the relevant social media platform.
This means that you may also exercise your general rights, which we have listed in detail above under the heading “Users' Rights”, against us. To that purpose, we refer you to our contact details at the beginning of this Privacy Policy.
Please keep in mind, though, that we have no conclusive knowledge of the exact scope of the processing of your data by the social media platform and have even less influence on it. Therefore, we kindly ask you to contact the relevant social media platform in the first place regarding your rights.
We generally leave your data on the social media platform and do not import it onto our server. But if that should occur, our general information regarding the storage period will apply.
Further information about the processing of your data and the storage period on the social media platform can be found in the respective privacy policy of the social media platform, which we have listed hereinafter.
Last updated: 2026-10-19
NestVenture 2025. All rights reserved.