1
Controller
The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
- Company
- CLIENI.de Dienstleistungen GmbH, Kolonnenstraße 8, 10827 Berlin
- Managing directors
- Dennis Lipprandt, Deniz Yesil
- Phone
- 030 70016542
- hallo@clieni.de
- Clieni Media
- media@clieni.de
Clieni Media is the digital and marketing division of CLIENI.de Dienstleistungen GmbH.
2
Overview
We process personal data only where it is needed for a working website, for our services and for communicating with you, or where you have given consent. This website does not track you unless you agree to statistics or ad measurement.
Data we process:
- Technical access data when you visit the website (server log files)
- Your choice in the cookie banner, stored in your browser
- Information you give us via the contact form, email or phone
3
Legal bases
- Art. 6(1)(a) GDPR: your consent
- Art. 6(1)(b) GDPR: contract or pre-contractual measures, for example an enquiry
- Art. 6(1)(c) GDPR: legal obligations, for example retention periods
- Art. 6(1)(f) GDPR: legitimate interests, for example the secure operation of this website
- § 25(1) and (2) TDDDG: storing information on your device with consent or where strictly necessary
4
Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, and delivered via its global network. Each time a page is requested, Vercel automatically processes technical data sent by your browser:
- IP address
- Date and time of access
- Page requested and amount of data transferred
- Referrer URL
- Browser, operating system and device type
This is necessary to deliver the website, keep it stable and secure and fend off attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log data is kept only as long as needed for these purposes and is not combined with other data.
We have a data processing agreement with Vercel under Art. 28 GDPR. Transfers to the USA rely on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and additionally on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
5
Cookie banner and browser storage
On your first visit we ask whether you agree to statistics and marketing services. “Reject” and “Accept” are equal, nothing is preselected. We store your decision in your browser's local storage (key “cm-consent”, content: your choice and the time) so the banner does not appear on every visit.
This storage is strictly necessary to respect your decision (§ 25(2) no. 2 TDDDG). The data does not leave your device. You can change your choice at any time via “Cookie settings” in the footer or delete it in your browser.
6
Fonts
All fonts are hosted on our own server. No connection to Google Fonts or other font providers is made when you visit the site.
7
Contact by email and phone
If you contact us by email or phone, we process your details (such as name, contact details, content of the enquiry) to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contract or quote is concerned, otherwise our legitimate interest in answering under Art. 6(1)(f) GDPR.
8
Contact form
You can send us an enquiry using the contact form. We process the chosen topic, your name, your email address and, optionally, company, phone number and message. Required fields are name, email and topic. By sending, you confirm that we may use the details to handle your enquiry.
The enquiry is delivered as an email to media@clieni.de. For sending we use Resend (Plus Five Five, Inc., USA) as a processor. Transfers to the USA rely on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and additionally on standard contractual clauses.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and otherwise Art. 6(1)(f) GDPR (answering enquiries).
9
Links to other websites
We link to our Instagram profile (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) and to the websites of businesses we have worked for. These are plain links: data is only transferred when you click one. The operators of the linked sites are responsible for processing there.
10
Statistics and ad measurement
Only if you agree in the cookie banner do we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for reach measurement and the Meta Pixel (Meta Platforms Ireland Limited) to measure our ads. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time via “Cookie settings”.
11
Retention
We store personal data only as long as needed for the respective purpose. Enquiries that do not lead to an order are deleted once they are dealt with and no follow-up questions are expected. Data from orders is kept for as long as statutory retention obligations apply, up to ten years for business letters and accounting records (§ 257 HGB, § 147 AO).
12
Recipients and transfers to third countries
We only pass on your data where needed for the purposes named, to service providers acting on our behalf and bound by our instructions (hosting, email delivery), or where we are legally obliged to. We do not sell data.
Where data is transferred to countries outside the EU, we ensure an adequate level of protection, for example through an adequacy decision of the European Commission or standard contractual clauses.
13
Your rights
You have the right at any time to:
- access your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
A short message to hallo@clieni.de is enough.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.
14
Right to object
Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing at any time without giving reasons.
15
Obligation to provide data, no automated decisions
You are not obliged to give us any data. Without contact details, however, we cannot answer an enquiry. There is no automated decision-making including profiling under Art. 22 GDPR.
16
Data security
The connection to this website is encrypted with TLS, shown by “https://” in the address bar. We take technical and organisational measures to protect your data against loss, misuse and unauthorised access.
17
Changes
We update this privacy policy when the website or the law changes, for example when we add new services. The version published here applies.