Privacy Policy

a) Contact Forms
When you send us an inquiry via our contact form, we process the data you provide (such as name, email address, and subject) solely for the purpose of handling your request.

• Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in effective communication).
• Storage: Data is stored only as long as required to respond to your inquiry, unless statutory retention periods apply.

b) Surveys (SurveyLegend)
We use the service SurveyLegend (SurveyLegend AB, Stora Varvsgatan 6A, 211 19 Malmö, Sweden) to conduct online surveys.

• When you participate, your responses and any data you provide voluntarily (e.g., demographic details) are processed by SurveyLegend on our behalf.
• Legal basis: Art. 6(1)(a) GDPR (consent). Participation is voluntary, and you can withdraw your consent at any time by contacting us at info@elsa-und-co.de.
• SurveyLegend processes data on servers within the EU and complies with GDPR.
• For more information, see SurveyLegend’s Privacy Policy: https://www.surveylegend.com/privacy-policy/.

c) Server Log Files
When you visit our website, certain technical information is automatically collected by our hosting provider: IP address, browser type, date/time, and accessed pages.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation).
• Storage: Log files are automatically deleted after 14 days unless needed for security or legal reasons.

This site uses Google reCAPTCHA v3 to protect our forms against spam and abuse.
When reCAPTCHA is active, Google collects information about your interaction with the website, including:

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Time spent on the page
• Mouse movements, clicks, and scrolling behavior
• Google account information (if you are logged in to your Google account)

Google may set cookies (e.g., _GRECAPTCHA) to distinguish humans from bots. These cookies and data are used exclusively to protect our site from malicious activity. Data may be transferred to Google servers in the USA.

For details, please see Google Privacy Policy and Terms of Service.

We use “Google reCAPTCHA v3” (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to protect our forms from abuse and spam. reCAPTCHA analyzes interactions on our website (e.g., IP address, time spent, user behavior) and may set cookies to distinguish between humans and bots. This information is transmitted to Google and may also be processed in the USA.
The use of reCAPTCHA is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in protecting our website from automated misuse.
For more information, see Google’s Privacy Policy: https://policies.google.com/privacy and Terms of Use: https://policies.google.com/terms.

Our hosting provider processes data under a Data Processing Agreement (Art. 28 GDPR).
Personal data is not shared with third parties, except when legally required or explicitly consented to by you.
No transfer of personal data to third countries takes place unless explicitly stated.

Our website may contain links to external third-party websites. We have no influence over their content or privacy practices. Please review the privacy policies of these providers when you visit their sites.

We retain personal data only as long as necessary for the purposes described, or as required by law. After that, data will be deleted or anonymized.

We implement technical and organizational measures (TOMs) to protect personal data against unauthorized access, loss, or misuse. All form submissions and survey responses are transmitted via SSL encryption.

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, please contact us at info@elsa-und-co.de.

You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your habitual residence, workplace, or the place of the alleged infringement (Art. 77 GDPR).

We may update this Privacy Policy to reflect changes in our services or legal requirements. The current version is always available on this page.