ePrivacy GmbH Privacy Policy


With this privacy policy we would like to inform you about how we process personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal stipulations on data protection.

Name and Contact Details of the Responsible Party

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg


Personal Data

Personal data is all information about an identified or identifiable persons. This includes the following categories of personal data that we process:

  • Your contact details and address information (such as first and last name, address, e-mail address, phone number) if you have provided us with your contact information
  • Your correspondence with us
  • Log files with information about your visit to our website
  • Application data (such as diplomas and certificates)
  • company data, namely when you use the "ePrivacyaudit"
  • online identifiers (e.g. your IP address - anonymized), approximate location of the user based on the anonymized IP address, as far as technically possible
  • the referrer URL, the file name, the amount of data transferred, the date and time of the server request, web pages accessed and time of access, time spent on the website, browser type and browser version with which plug-ins, which operating system and which screen resolution is used

Use of Cookies

General Information About Cookies

A cookie is a text file containing an identification number which, when the website is used, is transmitted to the user's computer together with the other data actually requested and stored there. The file is kept there for later access and serves to authenticate the user. Since cookies are only simple files and not executable programs, they do not pose any danger to the computer.

Depending on the settings selected by the user in their internet browser, the latter automatically accepts cookies. This setting can, however, be changed and the storage of cookies deactivated or set in such a way that the user is informed as soon as a cookie is set. If the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies.

Cookies that are already active can be deleted at any time via the settings of your internet browser or other software programs. We may work together with advertising partners who help us to make our online offer more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (cookies from third parties).

Session Cookies

Session cookies are used for the duration of a session and are automatically deleted when the executing browser is closed. They ensure, for example, that video and audio files can be played, that your user input is temporarily stored during the time of entry and thus the user-friendliness is improved.

Persistent Cookies

Persistent cookies remain on your end device after closing the browser. These cookies can, for example, save your user preferences, such as language settings, and analyse user behaviour on our website. Storage duration of persistent cookies corresponds to the respective duration of the individual cookie. Afterwards they are automatically deleted.

Revocation of consent for cookies

The change of consent or revocation of consent for the setting of cookies can be made at the following link:


Purpose of Processing

  • We process your data for the following purposes:
  • For corresponding with you
  • For processing contracts with you
  • For advertising purposes such as the dispatch of our newsletter
  • On quality assurance and statistics
  • In order to provide our service
  • For your participation in our events
  • To consider your application
  • In order to improve our service

Legal Basis

  • We base the processing of your data on the following legal bases: 
  • Your consent, if you have given us such consent (Art. 6 para. 1 lit. a) GDPR)
  • The initiation or execution of a contract with you (Art. 6 para. 1 lit. b) GDPR)
  • The fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR)
  • The implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR) 

Legitimate Interests

  • When processing your data, we pursue the following legitimate interests:
  • The improvement of our offer
  • Protection of our systems against misuse
  • On the production of statistics 

Requirement or Obligation to Provide Data

Unless this is expressly stated, the provision of your data is not required or obligatory.

Storage Period

We store your data,

  • if you have consented to the processing, at most until you revoke your consent;
  • if we need the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
  • if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh the data;
  • insofar as statutory storage obligations exist, until the end of the storage periods. 

Data Recipient

When processing your data, we work together with the following service providers who have access to your data:

  • Web hosting and web development providers
  • Conference and Webinar Software

In addition, when processing your data, we work together with the following service providers who have access to your data:


For our newsletter distribution we use the service rapidmail, Augustinerplatz 2, 79098 Freiburg, Germany. This allows us to analyse the newsletter usage, e.g. the number of actually opened newsletters or if and how often a link in the newsletter was clicked. The data you enter for newsletter reception is transmitted to rapidmail.

Privacy policy of rapidmail: https://www.rapidmail.de/datenschutz

In order to object to the provision of data, you must unsubscribe from the newsletter using the link in the e-mail.


We use the service "Matomo Cloud" of InnoCraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand for the web analysis of our website in order to improve the quality of our website and to constantly optimize our offer. For this purpose, InnoCraft Ltd. processes cookies (a text file) from you. There is no forwarding of data abroad.

When you call up our web pages, the function duration of the cookies amounts to a maximum of 12 months. For more information, please visit the privacy policy of InnoCraft Ltd. at https://matomo.org/matomo-cloud-privacy-policy/.

If you wish to revoke the use of cookies, please go to our cookie tool via the following link. You may also refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

LinkedIn Page

We operate a LinkedIn page on LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

LinkedIn collects and uses data to provide analytics services, known as "page insights", to site operators to help them understand how people interact with their pages and with the content associated with them. This data includes information about the types of content that users view or interact with, or the actions they take, as well as information about the devices used by users, such as IP addresses, operating system, browser type, language settings, cookie data.

We are jointly responsible with the LinkedIn Ireland Unlimited Company for the collection and processing of information about visitors to our page. The legal basis is our legitimate interest in this information for advertising purposes, Art. 6 para. 1 p. 1 lit. f. GDPR. We have therefore concluded an agreement with LinkedIn on joint responsibility with regard to the processing of your data in accordance with Art. 26 GDPR. In particular, the agreement with LinkedIn also regulates which security measures LinkedIn must observe and that LinkedIn must comply with the rights of data subjects.

You can find further information on the Page-Insights as well as instructions on how to assert your data subject rights in the privacy policy (https://www.linkedin.com/legal/privacy-policy#choices). The terms of the agreement concluded with LinkedIn can be viewed here (https://legal.linkedin.com/pages-joint-controller-addendum).

Transfer to Third Countries

Data is being transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data by means of contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards.

  • USA (Standard contractual clauses) 

Your Rights

As a data subject, you have the following rights:

  • To request information about the processing of your data, as well as to receive a copy of your personal data. You may request information on, among other things, the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
  • To receive personal data relating to you in a structured, common and machine-readable format or to transfer it to another person in charge;
  • To correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
  • To have your data deleted or blocked.
  • To have the processing restricted;
  • To object to the processing of your data;
  • To revoke your consent to the processing of your data for the future and
  • To complain to the responsible supervisory authority about unauthorised data processing. 

Version of the Privacy Policy

If our processes change, we adjust the information in this privacy policy.

Status of this privacy policy: May 2021

Do you have questions or recommendations for us?

We are glad to receive your comments.