Privacy policy
Privacy Policy
The translation is for the purpose of easy comprehension. In the event of a conflict with the German version, the German version shall prevail.
Preamble
In this Privacy Policy, Goldener Schlüssel eG ("we", "our") sets out its data processing with respect to data collected from users who access our website at www.leadershiplemonade.com ("Website") or otherwise provide us with personal data (collectively: "User", "you", "your").
To improve readability, we do not use gender-specific language. The terms used apply equally to all genders, without any judgment.
1. Controller within the meaning of the GDPR
Goldener Schlüssel eG
CEO Christina Vasiliadis
Berliner Straße 33
03046 Cottbus
Phone: +49 (0) 1512 9519755
E-Mail: vasiliadis.christina@gmail.com
2. Provision of the Website and Logfiles
Each time you visit our website, our web server automatically collects information from the system of your accessing computer or end device.
The following data is collected by us:
Date and time of access,
the IP address of the User,
Information about the browser and version used,
the operating system of the User's device,
the internet service provider of the User,
URL of the website from which the User accessed our website.
The legal basis for the temporary storage and collection of this data is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the responsible website operator). We have a legitimate interest in offering you our website, which is optimally adapted to your browser and to enable communication between our server and your end device. In particular, this requires the processing of your IP address.
i. Purpose of the data processing
The purpose of data processing is to make our website accessible from your device and to enable you to view it correctly on this device or in your browser. In addition, we use the data to optimize our website and to ensure system security. The data is not analyzed for marketing purposes.
ii. Duration of storage
The above-mentioned data is deleted as soon as it is no longer required for the purpose for which it was collected. As a rule, this is the case when the respective session has ended.
iii. Recipient(s)
The recipient of the data is our server host, which acts as a processor for us.
iv. Right of objection
You have the right to object to data processing at any time (e.g. by sending an e-mail to vasiliadis.christina@gmail.com). All personal data stored in the course of contacting us will be deleted in this case.
3. Establishing Contact
You can contact us via the communication channels provided and named by us. In this case, the personal data transmitted with the request will be stored.
The legal basis for the processing of this data, which is transmitted in the course of sending an inquiry, is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the Controller). We have a legitimate interest in processing your inquiry sent to us and being able to contact you.
If the inquiry is aimed at the conclusion of a lawyer's contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR (fulfillment of a contract).
i. Purpose of the data processing
The processing of this personal data serves us solely to process the contact or your request.
ii. Duration of storage
The above-mentioned data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent to us by email, this is the case when the conversation or contact has ended. We assume that the conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
iii. Recipient(s)
The recipient of the data is the respective provider of the communication channel, who acts as a processor for us.
iv. Right of objection
You have the right to object to data processing at any time (e.g. by sending an email to vasiliadis.christina@gmail.com). All personal data stored in the course of contacting us will be deleted in this case.
4. Application for Our Program via Typeform and Google Sheets
We offer you the opportunity to apply for participation in our program using the Typeform tool. The provider of the tool is TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain (www.typeform.com). If you use Typeform, we will process the personal data you provide in this context.
To organize and manage the data collected through Typeform, we use Google Sheets, a cloud-based spreadsheet service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (or Google LLC in the USA). The data you provide via Typeform is automatically transferred to and stored in Google Sheets.
Your application documents may contain special categories of personal data. According to Art. 9 of the GDPR, this includes information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric data (e.g., photos), health data, or information about your sexual orientation or sex life.
We expressly request that you do not send us any special personal data.
The legal basis for the processing of this data is Art. 6 para. 1 lit. b), Art. 88 para. 1 GDPR, § 26 para. 1 BDSG and for the processing of your contact information Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the controller).
We have a legitimate interest in processing your application submitted to us and being able to contact you. If you voluntarily and contrary to our express request provide special categories of personal data in accordance with Art. 9 para. 1 GDPR as part of your application (e.g. your photo or details of your religious affiliation/denomination), we will store these on the basis of your consent in accordance with Art. 88 para. 1 GDPR in conjunction with Section 26 para. 3 sentence 2.
Processing by Typeform and Google Sheets
Typeform acts as a data processor within the meaning of Art. 28 GDPR. The data is stored on Typeform's servers, which comply with the requirements of the GDPR. Typeform has implemented technical and organizational measures to ensure the security and confidentiality of your data.
Google Sheets also acts as a data processor on our behalf. The data transferred to Google Sheets is stored on Google’s servers, which may be located in third countries (e.g., the USA). Google ensures an adequate level of data protection by complying with the EU Standard Contractual Clauses.
For more information about Typeform's and Google’s data processing practices, please refer to their respective privacy policies:
i. Purpose of Data Processing
We process your data to review your application, contact you during the application process, and make a decision regarding your participation in our program. The use of Google Sheets allows us to efficiently organize and manage the data collected through Typeform.
ii. Storage Period
Your application data will only be stored for as long as necessary to process your application. After the application process is completed, your data will be deleted unless statutory retention obligations apply. If you participate in our program, we will store your data for the duration of the program and beyond, to the extent required by legal retention obligations.
iii. Recipients of the Data
The recipients of the data are:
Typeform, the provider of the application tool, which acts as a data processor on our behalf.
Google Sheets, which we use to organize and manage the data collected through Typeform. Google Sheets also acts as a data processor on our behalf.
In addition, internal staff or external service providers involved in processing your application may have access to your data.
iv. Right to Object
You have the right to object at any time to the processing of your personal data that is based on legitimate interests (Art. 6 (1) lit. f) GDPR). In this case, we will delete your data immediately unless there are compelling legitimate grounds for further processing.
v. Revocation of Consent
You have the right to withdraw your consent to the processing of your personal data at any time (e.g. by sending an email to hello@leadershiplemonade.com). This does not affect the lawfulness of processing based on consent before its withdrawal. All data that we process on the legal basis of your consent will be deleted in this case.
5. Email Marketing and Newsletter via Kit, Inc.
We use the Kit, Inc. service (Kit, Inc., 750 W Bannock Street #761, Boise, ID 83701, USA) to send our newsletter and analyze user behavior in our emails. When you sign up for our newsletter, your personal data (e.g., name, email address, IP address) is stored and processed on Kit, Inc.’s servers.
i. Purpose of Data Processing
The processing of your data serves the following purposes:
Sending our newsletter and communicating with you.
Analyzing open and click rates to optimize content and tailor it to recipients’ interests.
ii. Legal Basis
The processing of your data is based on your consent (Art. 6 para. 1 lit. a) GDPR).
iii. Data Transfer to Third Countries (USA)
Kit, Inc. is based in the USA, meaning your personal data may be processed outside the EU. The transfer is based on Standard Contractual Clauses (SCCs) issued by the European Commission to ensure an adequate level of data protection.
Please note: When transferring your data to Kit, Inc. in the USA, it cannot be completely ruled out that US authorities may access your data. The transfer takes place on the basis of the Standard Contractual Clauses (SCCs) of the EU Commission.
iv. Duration of Storage
Your personal data will be stored as long as you remain subscribed to the newsletter. Once you unsubscribe, your data will be deleted within 30 days unless legal retention obligations require otherwise.
v. Recipients of the Data
The recipient of the data is Kit, Inc., which acts as our data processor pursuant to Art. 28 GDPR. For more information on Kit, Inc.’s data processing, please refer to their privacy policy:https://kit.com/imprint.
vi. Right to Withdraw Consent
You can withdraw your consent to receive the newsletter at any time by clicking the “unsubscribe” link in the email or by sending a message to hello@leadershiplemonade.com. The lawfulness of processing based on consent before its withdrawal remains unaffected.
6. Appointments via Savvycal
We offer you the opportunity to coordinate appointments with us digitally and easily using the "Savvycal" tool. The provider is Savvycall Inc., USA, www.savvycal.com. If you use the tool, we will process the personal data you provide in this context.
The provider may also process this or other personal data as part of your use. It is also possible that personal data may be transferred to a third country. The data transfer is based on the standard contractual clauses of the EU Commission.
The legal basis for the processing of your data in the course of your use of Savvycal is your consent pursuant to Art. 6 para. 1 lit. a) GDPR.
With regard to the details of data processing by the provider and your rights vis-à-vis the provider, please refer to the provider's provisions: https://savvycal.com/privacy/ as well as https://savvycal.com/dpa
i. Purpose of the data processing
We process your personal data solely for the purpose of coordinating appointments with you.
ii. Duration of storage
We will retain the information you provide to us in connection with your application until a decision has been made for or against you. It will then be deleted.
iii. Recipients
The recipient of the data is the respective provider of the communication channel, who acts as a processor for us.
iv. Revocation of consent
You have the right to withdraw your consent to the processing of your personal data at any time (e.g. by sending an email to hello@leadershiplemonade.com). This does not affect the lawfulness of processing based on consent before its withdrawal. All data that we process on the legal basis of your consent will be deleted in this case.
7. Social Media and Professional Networks
In addition to our website, we also offer you presences in social media and professional networks. If you visit our presence there via links provided by us, personal data may be transmitted to the respective provider. In this context, it is also possible that personal data may be transferred to a third country. It is also possible that the provider may process other data in addition to the data you entered in the medium (e.g. information about your IP, your device, (if you are logged in) assignment to your profile).
With regard to the details of data processing, in particular the purpose and scope, by the respective medium and with regard to your rights vis-à-vis the providers, we ask you to refer to the provisions of the respective provider, in each case as the responsible party:
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland)
Privacy Policy: https://www.linkedin.com/legal/privacy-policy,
Cookie Policy: https://www.linkedin.com/legal/cookie-policy,
Facebook (Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA):
For fan pages: Agreement on joint processing of personal data (Art. 26 (1) GDPR)
https://www.facebook.com/legal/terms/page_controller_addendum
Privacy Policy Facebook: https://www.facebook.com/about/privacy/,
Opt-Out Option: https://www.facebook.com/settings?tab=ads und
Google und YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA):
Privacy Policy: https://policies.google.com/privacy,
Opt-Out Option: https://adssettings.google.com/authenticated.
8. Data Subject Rights
If a User's personal data is processed, the User is a "Data Subject" within the meaning of the GDPR. The data subject has the following rights:
Right to information,
Right to rectification,
Right to restriction of processing,
right to erasure,
Right to information,
Right to data portability,
Right to object,
Right to revoke the declaration of consent under data protection law,
Right to lodge a complaint with a data protection supervisory authority.
i. Note to the revocation of consent
A Data Subject has the right to revoke their declaration of consent under data protection law at any time. This does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
ii. Information on lodging a complaint with a supervisor authority
Without prejudice to any other administrative or judicial remedy, a Data Subject shall have the right to lodge a complaint with a supervisory authority - in particular in the Member State of the user's habitual residence, place of work or place of the alleged infringement - if the user considers that the processing of his or her personal data by us infringes the GDPR.
iii. Automated decision-making
We do not use automated decision-making on our website.
