A. The controller for data processing purposes

In accordance with the provisions of the General Data Protection Regulation (GDPR), the entity responsible for processing personal data in connection with this website is:

CREATHOR VENTURE Management GmbH
Schwedenpfad 24D-61348
Bad Homburg
Phone: +49 (0) 6172 1 39 72-0
Web: http://www.creathor.com/en/
E-mail: creathor@creathor.com

This Privacy Policy informs you of the extent to which we process your personal data (hereinafter referred to as “data”).

B. Data processing
We process data as part of the operation of our website. Data processing also includes disclosure by means of transmission.

In the case of data transmissions to the United States, an EU Commission adequacy decision is in place regarding the EU-US Privacy Shield. In this decision, the Commission certified that the guarantees for the transfer of data to the United States on the basis of the EU-US Privacy Shield comply with data protection standards in the EU. In the event that we transmit data to the United States, we have noted the participation of our service providers in the EU-US Privacy Shield.

Details regarding the data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:

Webflow (Webflow, Inc.)
Webflow is a platform provided by Webflow, Inc. that allows the Owner to build, run and host this Application. Webflow is highly customizable and can host websites from simple blogs to complex e-commerce platforms.Personal Data processed: Usage Data.

Place of processing: United States –  Privacy PolicyOpt out.

Cloudflare (Cloudflare Inc.)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Application, i.e., communication between this Application and the User's browser, while also allowing analytical data from this Application to be collected.Personal Data processed: Trackers.

Place of processing: United States –  Privacy Policy.

a) Log file

We log your visit to our website. The following data are processed in this context: Name of the website accessed, date and time of access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process this data on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. The log file is deleted after seven days unless it is required for clarification or verification of specific violations of the law of which we have become aware within the retention period.

b) Hosting

All data to be processed in connection with the operation of the website is stored within the scope of hosting. This is necessary to enable the operation of the website. We process this data on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. We use the services of web hosting providers to whom we transmit the data referred to above in order to make our website available.

c) Contacting us

If you contact us, your data (name and contact details – if you have provided them) and your communication will be processed exclusively for the purpose of responding to your inquiry. We process this data on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) in order to respond to your inquiry.

d) Newsletter

To receive regular information about our company and our offers, you have the option to sign up for our newsletter. By subscribing to the newsletter, we process the data you provide (email address and other information provided voluntarily). Sending newsletters by subscription is done on the basis of our legitimate interest in verifying your proper registration under Art. 6(1)(f) GDPR and your consent pursuant to Article 6(1)(a) GDPR.

A double opt-in procedure is used to subscribe to the newsletter. To prevent abuse of your data, we will send you an email after your registration asking you to confirm your registration. To verify the subscription process according to the legal requirements, your subscription will be logged. The data stored here includes the date and time of your subscription and confirmation as well as your IP address. We use service providers to whom we submit the above data in order to send the newsletter.

Data is transmitted to the servers in the United States operated by the following service provider:

Mailchimp: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308

Certification at:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Further information on data protection can be found at:
https://mailchimp.com/legal/privacy/

e) Business plan

We use Typeform as an external provider for our business plan submission form. If you send us enquiries using the contact/business plan submission form, you agree that your details from the enquiry form, including the contact data you provided there, will be stored on Typeform’s and our own servers for the purpose of processing the enquiry and in the event of follow-up questions. Data from this enquiry form are only shared with Creathor affiliates and partners.

If you decide to send us your business plan, we will collect the following data from you: Name, company name, e-mail address, URL of the company website, information provided by you as part of the elevator pitch, information on the company division and market, year of opening, city and country of the head office, information on the financing round and volume as well as the information from the files you uploaded. This data is processed in accordance with Art. 6(1)(b) GDPR.You can take a look at Typeform’s terms & conditions and privacy policy at https://admin.typeform.com/to/dwk6gt.

C. Duration of data storage

We only store personal data for as long as it is necessary for the purposes for which they are processed or until you revoke your consent. The retention period for certain data can be up to 10 years irrespective of the processing purposes in the event we must comply with statutory retention obligations.

D. Your rights as a data subject

a) Information

Upon request, you may receive information about all personal data that we have stored about you at any time and free of charge.

b) Rectification, erasure, restriction of processing (blocking), objection

Should you no longer agree to the storage of your personal data or should such data have since become incorrect, we will arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law) upon instruction from you. The same applies if we should only process data to a limited extent in future.

c) Data portability

Upon request, we will provide you with your data in a standard, structured and machine-readable format so that you can, if you wish, transmit your data to another controller.

d) Right to lodge a complaint

You have a right to lodge a complaint with a supervisory authority:
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

e) Right to revoke consent with prospective effect

You can revoke your consent at any time with prospective effect. Your revocation does not affect the legality of processing conducted before your revocation.

f) Limitations

The rights described above do not apply to data for which we are not able to identify the data subject, e.g. if anonymised for analysis purposes. Information, erasure, blocking, rectification or transfer to another company with regard to this data may be possible if you provide us with additional information that enables us to make such an identification.

g) Exercising your rights as a data subject

If you have any questions regarding the processing of your personal data, or if you would like to request information, rectification, blocking, if you would like to object or have your data erased, or if you wish to transfer your data to another company, please contact creathor@creathor.com.