Privacy policy
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy listed below this text.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser’s address bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Please note that data transmission over the internet (e.g., when communicating via email) can have security vulnerabilities. A complete protection of data from access by third parties is not possible.
1. Responsible Entity
The responsible party for data processing on this website is:
Narravero GmbH
Am Mittelhafen 10
48155 Münster
Phone: +49 (0) 251 – 928 737 00
Email: office@narravero.com
The Data Protection Officer is:
Mr. Stephan Hartinger
Coseco GmbH
Phone: +49 (0) 8232 80988 70
Email: datenschutz@coseco.de
2. Hosting
We host the contents of our website with the following provider:
WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter “WIX”).
WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies on your browser that are necessary for displaying the website and ensuring security (necessary cookies).
The data collected by WIX may be stored on servers worldwide. The servers of WIX are located, among other places, in the USA.
For details, refer to WIX’s privacy policy: https://de.wix.com/about/privacy.
Data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees pursuant to Art. 46 GDPR, according to WIX. For details, see here: https://de.wix.com/about/privacy-dpa-users.
The use of WIX is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring reliable representation of our website. If consent has been requested, the processing is solely based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG if the consent includes storing cookies or accessing information on the user's device (e.g., device fingerprinting) according to the TTDSG. Consent can be withdrawn at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnbGAAS&status=Active.
We have concluded a Data Processing Agreement (DPA) to use the service mentioned above. This legally required contract ensures that the service provider processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.
The page provider automatically collects and stores information in so-called server log files that your browser transmits to us automatically. These include:
-
Browser type and version
-
Operating system used
-
Referrer URL
-
Hostname of the accessing computer
-
Time of server request
-
IP address
3.1 Contact Form
If you contact us via the contact form, the information you provide in the form, including the contact details you provide there, will be stored for processing the request and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to fulfilling a contract or necessary for pre-contractual measures. In other cases, the processing is based on our legitimate interest in effectively processing the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR) if requested. The consent can be withdrawn at any time.
The data you enter in the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose of data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions, particularly retention periods, remain unaffected.
3.2 Inquiry via Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry, including any personal data (name, inquiry), will be stored and processed for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to fulfilling a contract or necessary for pre-contractual measures. In other cases, the processing is based on our legitimate interest in effectively processing the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR) if requested. The consent can be withdrawn at any time.
The data you send us via contact inquiries will remain with us until you request deletion, withdraw your consent to storage, or the purpose of data storage no longer applies (e.g., after processing your request). Mandatory legal provisions, especially statutory retention periods, remain unaffected.
3.3 Online Appointment Booking – Microsoft Bookings
Narravero GmbH collects and processes personal data for online booking of meetings via the "Microsoft Bookings" service by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The connection to the service is only established when you click the “DEMO-book” button on our website.
For more information on how user data is handled, see Microsoft’s privacy statement: https://www.microsoft.com/de-de/privacy/privacystatement.
We have concluded a Data Processing Agreement with Microsoft to use the service. This legally required contract ensures that Microsoft processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Please note that you are not required to use Microsoft Bookings for scheduling an appointment. If you do not wish to use the service, please use another contact method for scheduling an appointment.
The legal basis for data transmission, storage, and processing is your consent (Art. 6 para. 1 lit. a) GDPR.
The data will be deleted once it is no longer needed to achieve the purpose of its collection.
You can withdraw your consent to data processing or object to the use of your data at any time. In this case, intended communication with the user will no longer be possible, or already initiated communication cannot continue.
3.4 Newsletter
If you wish to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No additional data is collected unless voluntarily provided. We will use this data solely for sending the requested information and will not share it with third parties.
The processing of data entered in the newsletter registration form is solely based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent to the storage of the data, email address, and its use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The lawfulness of the processing that has already occurred remains unaffected by the withdrawal.
The data stored for the purpose of receiving the newsletter will be stored until you unsubscribe from the newsletter with us or the newsletter service provider and deleted after you unsubscribe or the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our discretion within the framework of our legitimate interest under Art. 6 para. 1 lit. f GDPR.
3.5 eCommerce and Payment Providers
We collect, process, and use personal customer and contract data to establish, design, and modify our contractual relationships. Personal data related to the use of this website (usage data) is collected, processed, and used only to the extent necessary to allow the user to utilize the service or for billing purposes. The legal basis for this is Art. 6 para. 1 lit. b GDPR.
Customer data collected will be deleted after the completion of the order or termination of the business relationship and after the expiration of any applicable statutory retention periods. Statutory retention periods remain unaffected.
3.6 Audio and Video Conferences
For communication with our clients, we use online conference tools. The specific tools we use are listed below. When you communicate with us via video or audio conference via the internet, your personal data is collected and processed by us and the provider of the respective conference tool.
Conference tools collect all data you provide to use the tools (email address and/or your phone number). The tools also process the duration of the conference, the start and end time of participation, the number of participants, and other “contextual” information related to the communication (metadata).
Additionally, the tool provider processes all technical data required for online communication. This includes IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.
If content is exchanged, uploaded, or otherwise provided within the tool, it is also stored on the tool provider's servers. This includes cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the service use.
Please note that we do not have full control over the data processing activities of the tools used. Our influence is mainly governed by the policies of the respective service providers. For further information on the data processing by the conference tools, please refer to the privacy policies of the respective tools listed below this text.
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Additionally, using the tools simplifies and accelerates communication with us or our company (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR). If consent is requested, the use of the tools is based on this consent; the consent can be withdrawn at any time with future effect.
The data collected directly by us via the video and conference tools will be deleted from our systems once you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence over the retention period of your data stored by the conference tool operators for their own purposes. For details, please refer to the privacy policies of the respective tool providers.
We use the following conference tools:
3.6.1 Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details regarding data processing can be found in Microsoft Teams’ privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active.
4. Cookies
Our websites use so-called “cookies.” Cookies are small data packets and do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored (permanent cookies). Session cookies are automatically deleted after the session ends. Permanent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser.
Cookies may be first-party cookies (set by us) or third-party cookies (set by external companies). Third-party cookies allow the integration of certain services within websites (e.g., cookies for processing payments).
Cookies serve various functions. Many cookies are technically necessary as certain website features would not work without them (e.g., shopping cart functionality or video display). Other cookies may be used to evaluate user behavior or for advertising purposes.
Cookies that are necessary for conducting the electronic communication process, providing specific functions you request (e.g., shopping cart functionality), or optimizing the website (e.g., cookies to measure web audience) are stored based on Art. 6 para. 1 lit. f GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of services. If consent for storing cookies and similar recognition technologies has been requested, processing occurs solely based on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be withdrawn at any time.
You can set your browser to notify you when cookies are being set and allow cookies only in specific cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
The cookies and services used on this website can be found in this privacy policy.
5. Analysis Tools and Advertising
5.1 Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, duration of stay, operating systems used, and the origin of users. These data are assigned to the respective end device. There is no assignment to a user ID.
Furthermore, with Google Analytics, we can track mouse movements, scrolling, and clicks. Google Analytics uses various modeling approaches to complement the captured data and applies machine learning technologies to data analysis.
Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, see here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.
Google Analytics IP anonymization is enabled. This means your IP address is shortened by Google within EU member states or other signatories to the European Economic Area agreement before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how user data is handled in Google Analytics, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
5.2 Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms (keyword targeting). Additionally, targeted ads can be shown based on user data available at Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate these data by analyzing which search terms triggered our ads and how many ads led to clicks.
The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, see here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.
5.3 Leadinfo
We use the Lead-generation service from Leadinfo B.V., Rotterdam, Netherlands. This service detects company visits to our website based on IP addresses and shows us publicly available information, such as company names or addresses. Leadinfo also uses two first-party cookies to analyze user behavior on our website and processes domains from form entries (e.g., “leadinfo.com”) to correlate IP addresses with companies and improve the service. Further information is available at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out, you can opt-out. If you opt out, Leadinfo will no longer capture your data.
5.4 Pipedrive
We use Pipedrive as our CRM tool for processing and storing contact data. Pipedrive is a service of Pipedrive OÜ, Paldiski mnt 80, Tallinn, 10617, Estonia. Pipedrive is a subsidiary of Pipedrive US and serves the efficient management and processing of customer inquiries as well as optimizing our existing and new customer business.
The integration of Pipedrive is used to process and manage inquiries received through our contact form or via email. The data transmitted when using the contact form is forwarded to Pipedrive and stored on their servers. This includes personal data such as name, email address, and the content of the inquiry.
Processing of this data occurs based on Art. 6 para. 1 lit. b GDPR if the inquiry relates to fulfilling a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently processing the inquiries (Art. 6 para. 1 lit. f GDPR).
To ensure an appropriate level of data protection, we have concluded a Data Processing Agreement with Pipedrive in accordance with Art. 28 GDPR. This ensures that Pipedrive processes personal data only according to our instructions and in compliance with the EU data protection requirements. Pipedrive also uses standard contractual clauses according to Art. 46 GDPR for data transfer to ensure an adequate level of data protection.
For more information on Pipedrive’s data processing, please refer to Pipedrive’s privacy policy: https://www.pipedrive.com/en/privacy.
Your data will be deleted from our CRM tool Pipedrive once the storage purpose no longer applies, e.g., after the inquiry has been fully processed, unless statutory retention periods apply. You can request information on the data stored about you or request its deletion at any time.
6. Deletion, Blocking, and Duration of Storage of Personal Data
We process and store your personal data only for as long as necessary to achieve the respective storage purpose or as required by the various retention periods prescribed by law.
Once the storage purpose no longer applies or once the retention period prescribed by law has expired, personal data will be routinely blocked or deleted in accordance with legal regulations for further processing.
7. Data Protection Rights of the Affected Person
If you have any questions regarding your personal data, you can contact us in writing at any time.
You have the following rights under the GDPR:
• The right to access (Article 15 GDPR)
• The right to rectification (Article 16 GDPR)
• The right to erasure (Article 17 GDPR)
• The right to restriction of processing (Article 18 GDPR)
• The right to data portability (Article 20 GDPR)
• The right to object (Article 21 GDPR)
• The right to lodge a complaint with the supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG)
• The right to withdraw consent for data processing (Article 7(3) GDPR)
8. Existence of Automated Decision-Making
As a responsible company, we do not engage in automated decision-making or profiling in our business relationships.
9. Additional Information
In addition to these web-specific data protection notices, you have the opportunity to view our transparent information.