Privacy Policy

As of

1. Subject Matter and Scope

We take the protection of your personal data very seriously. With this privacy policy, we would like to inform you about what personal data we collect and how and for what purposes it is processed.

On the one hand, this privacy policy applies to the use of the ENLYZE platform and explains what data we process in connection with your use of the ENLYZE platform.

In addition, this privacy policy also applies to visits to our website and to various other data processing operations, for example when you visit our social media pages, when you contact us, when we work with you as a customer or supplier, or when you apply for a job with us.

We always treat your personal data in accordance with statutory data protection regulations and this privacy policy.

2. Controller

The controller is
ENLYZE GmbH
Benesisstraße 61,
50672 Cologne
Germany
Email: hello@enlyze.com

3. Use of the ENLYZE Platform

3.1 Creating an Account

When you set up an account to use the ENLYZE platform, have one set up by us, or register as an invited user, we, as the controller, will collect and process your data to enable you to use the ENLYZE platform.

In this context, we process your data as part of providing the ENLYZE platform or to perform the services offered by us. This may include the processing of the first and last name of the users of the ENLYZE platform, address(es), contact details (e.g. email address, telephone number), contract data (e.g. subject matter of the contract, term), payment data, and data collected in connection with the provision of our services and/or required for the provision of our services.

The legal basis for this storage and processing is contract performance or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

3.2 Hosting of the ENLYZE Platform

For hosting our platform, we use the Google Cloud Platform (GCP) provided by Google Ireland Limited in Ireland (“Google”). The hosting of the ENLYZE platform takes place within the EU. Google acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.

3.3 No Data Processing on Behalf by the ENLYZE Platform

The processing of personal data by us as a processor is not the subject of the use of the ENLYZE platform by users.

3.4 Usage Analytics

To better understand how users use the ENLYZE platform and to continuously improve the ENLYZE platform and our services, we collect and analyze the usage of the ENLYZE platform by users. In particular, information regarding the use of the platform (browser history), information about the device (device ID, but not, for example, the Apple ID), the operating system, and the IP address are processed. Unless stated otherwise below, the legal basis for such usage analytics is our legitimate interest pursuant to Art. 6(1)(f) GDPR in improving and further developing our software and our services.

3.4.1 PostHog
For usage analytics, we use PostHog, an analytics service provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (“PostHog”). This involves processing usage events (for example, pages viewed and features used), a pseudonymous user ID, the IP address, and information about the device and browser. We use PostHog Cloud EU: the data is processed and stored on servers in the EU (Frankfurt am Main).

Usage analytics with PostHog only take place with your consent, which you give when registering or when your account is created. In this respect, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by contacting us using the contact details provided above.

PostHog acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.

As PostHog is based in the USA, a transfer of personal data to the USA cannot be ruled out. PostHog participates in the EU-US Data Privacy Framework. Further information can be found in PostHog's Privacy Policy.

3.4.2 Sentry
To improve the stability of the ENLYZE platform and to identify code errors, we use the service Sentry from the service provider Functional Software, Inc., USA. Sentry collects, particularly in the context of analyzing technical incidents, technical information as well as data regarding individual users of the ENLYZE platform. This data is used exclusively for technical analysis to improve the stability of the ENLYZE platform and to determine code errors. Furthermore, this data is immediately anonymized and erased promptly after the analysis is complete.

Functional Software, Inc. acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.

The data processed using Sentry is processed and stored on servers in the USA. Appropriate safeguards pursuant to Art. 46 GDPR are in place for this transfer of personal data to a third country. Proof of appropriate safeguards (EU Standard Contractual Clauses) is available upon request at any time.

Further information can be found in Sentry's Privacy Policy.

3.5 Chat Function and Ticketing (Intercom)

When creating support tickets and during live chats, the contact details and other content you provide are collected and processed. In addition, information about the browser, IP address, and location of the respective user are processed. This processing is carried out to manage and handle your support or contact request. The legal basis for this storage and processing is Art. 6(1)(f) GDPR. Our overriding legitimate interest is communicating with users of the ENLYZE platform and providing optimal support to users. For the ticketing system and live chat, we use Intercom, a service provided by Intercom R&D Unlimited Company in Ireland (“Intercom”). Intercom acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. The data processed using Intercom is transferred to Intercom servers in the USA and stored there. Appropriate safeguards pursuant to Art. 46 GDPR are in place for this transfer of personal data to a third country. Proof of appropriate safeguards (EU Standard Contractual Clauses) is available upon request at any time. Further information can be found in Intercom's Privacy Policy.

3.6 Transactional Messages

For transactional messages via email, messenger, notifications, etc., which are sent in connection with your use of the ENLYZE platform, we use an external service provider who carries out the email dispatch for us and ensures the deliverability of the messages. This service provider acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. In doing so, personal data may be transferred to a third country outside the EU. Appropriate safeguards are in place for the data transfer pursuant to Art. 46 GDPR. Proof of appropriate safeguards (EU Standard Contractual Clauses) is available upon request at any time.

4. Visiting Our Websites

Ensuring the confidentiality and integrity of the personal data processed with our IT systems is of great importance to us. The data is also used to resolve website errors.

For these purposes, the following data is logged:

  • IP address of the requesting computer

  • Operating system of the requesting computer

  • Browser version of the requesting computer

  • Name of the retrieved file

  • Date and time of retrieval

  • Volume of data transferred

  • Referrer URL

This data is regularly erased after a few days. Our websites are hosted by a service provider on the basis of data processing pursuant to Art. 28 GDPR. The legal basis for this data processing is Art. 6(1)(f) GDPR. Our overriding legitimate interest is the operation of this website and the implementation of the protective goals of confidentiality, integrity, and availability of the data.

5. Contact, CRM, and Direct Marketing

If you contact us, for example by email or live chat, to request information or documents, the information you provide will be stored for the purpose of processing the inquiry.

We require the details requested in a contact form or chat function on the website to process your inquiry, address you correctly, and send you a response.

The legal basis for this data processing is Art. 6(1)(f) GDPR. Our overriding legitimate interest is communicating with our prospects, visitors, and customers.

If the contact aims at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

Inquiries, customer contacts, and orders are generally stored in our CRM system. The data processed in this context (last name, first name, title, postal address, date of birth if applicable, your specific interest in our products and services, and your interactions with us) may also be used by us for direct marketing purposes, in particular for postal advertising, in compliance with statutory requirements.

The legal basis for this storage and processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our overriding legitimate interest is the marketing of our products and services as well as maintaining our relationships with prospective and existing customers.

For our CRM system and the contact forms on our website, we use HubSpot, a service provided by HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson's Quay, Dublin 2, Ireland (“HubSpot”). HubSpot acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. Further information can be found in HubSpot's Privacy Policy.

In doing so, personal data may be transferred to a third country outside the EU. Appropriate safeguards are in place for the data transfer pursuant to Art. 46 GDPR. Proof of appropriate safeguards (EU Standard Contractual Clauses) is available upon request at any time. Please contact us using the contact details provided above.

5.1 n8n

To exchange data between different providers, we use the automation service n8n Cloud of n8n GmbH (Novalisstr. 10, 10115 Berlin, Germany). When you fill out and submit a form to provide us with data, this information (including your contact information) is also transmitted to n8n. n8n processes the data on servers in the European Union.

For more information, please visit the Privacy Policy of n8n GmbH: https://n8n.io/legal/privacy/.

6. Customer and Supplier Data

We process the data of our prospective customers, customers, service providers, and suppliers in the context of providing our contractual services. Here, we may process master data (e.g. name, address), contact details (e.g. email address, telephone number), content data (e.g. photos, videos), contract data (e.g. subject matter of the contract, term), payment data, and data collected during the provision of services and/or processed to provide the services. This data is regularly stored in our CRM system (see above).

The legal basis for this storage and processing is contract performance or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

7. Newsletter

7.1 Registration for the Newsletter

On our website, you can register to receive a newsletter by email. When you register, the data from the input mask, the IP address of the requesting computer, and the date and time of registration are transmitted to us. For the processing of the data, your consent is obtained during registration and reference is made to this privacy policy.

To verify that a registration for the newsletter is made by the actual owner of an email address, we use the so-called "double opt-in" procedure. In this procedure, after an email address is registered, a confirmation email is sent to the registered email address. Registration for the newsletter is only completed once a confirmation link contained in the confirmation email is activated. In doing so, the IP address of the requesting computer and the date and time of activation of the confirmation link are also transmitted to us.

Registration for the newsletter can be terminated at any time by using the unsubscribe link included in each newsletter or by contacting us at the contact details provided above.

The legal basis for processing data after registering for the newsletter is your consent pursuant to Art. 6(1)(a) GDPR.

7.2 Email Newsletter in the Context of an Existing Customer Relationship

If you register as a user of our app and provide your email address in the process, it may subsequently be used by us to send an email newsletter, provided you have not objected to such use. In such a case, the email newsletter will only send direct marketing for our own similar goods or services. You can object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic rates by using the unsubscribe link included in each newsletter or by contacting us at the contact details provided above. The legal basis for sending the newsletter as a result of the sale of goods or services is Art. 6(1)(f) GDPR.

7.3 Newsletter Service Provider

To send and analyze our newsletter, we use HubSpot (see Section 5). This includes recording whether a newsletter was opened and which links in it were clicked. HubSpot acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.

In doing so, personal data may be transferred to a third country outside the EU. Appropriate safeguards are in place for the data transfer pursuant to Art. 46 GDPR. Proof of appropriate safeguards (copy of the EU Standard Contractual Clauses) is available upon request at any time. Please contact us using the contact details provided above.

8. Cookies

Cookies are used on our website. Cookies are pieces of information that are transferred from our web server or third-party web servers to your browser and stored there for later retrieval. Cookies may be small files or other types of information storage. Cookies store information that arises in connection with the specific end device used. Cookies contain a characteristic string of characters that enables unique identification of the browser when the website is called up again. A cookie also contains information about its origin and storage period. However, this does not mean that we immediately gain knowledge of your identity.

8.1 Technically Necessary or Essential Cookies

When visiting our website and using the platform, cookies are set that are strictly necessary for the operation of the website or platform. These essential cookies can be, for example, cookies that are required to display the website with a content management system, through which language settings are recognized, or which document whether you have consented to or rejected the setting of further (non-essential) cookies.

Technically necessary cookies, including their purpose and storage duration or deletion period, are explained to you in our cookie banner, which is displayed to you when you access the website.

The legal basis for the processing of personal data using essential cookies is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our overriding legitimate interests are the operation and provision of our website.

8.2 Non-essential Cookies

We also use non-essential cookies, for example to collect additional information about the interests of visitors to our website or their usage behavior, in order to analyze and optimize our website and customer interactions in general on this basis.

Non-essential cookies, including their purpose and storage duration or deletion period, are also explained to you in our cookie banner, which is displayed to you when you access the website.

Non-essential cookies are only set if you have expressly consented to the setting of non-essential cookies. You can also select different categories of non-essential cookies that you wish to allow in the cookie banner.

The legal basis for processing personal data using such non-essential cookies is your explicit consent pursuant to Art. 6(1)(a) GDPR.

9. Web Analytics

We use web analytics services on our website or parts of the website to record how our website is used by its visitors and to optimize the website.

9.1 Google Analytics

We use the web analytics service Google Analytics with IP anonymization. Google Analytics is a web analytics service provided by Google Ireland Limited in Ireland (“Google”).

Via JavaScript tags, we can collect information about your use of the website and the platform. Google Analytics also regularly uses cookies to collect information about a user's interactions with the website or platform.

As part of the use of Google Analytics, your IP address and information about your use of the website or platform, browser type and browser version, operating system used, the previously visited page, and the time of the server request are transmitted to Google servers and processed there.

Within the scope of IP anonymization, the collected IP addresses of users within the European Economic Area are truncated prior to transmission to the USA. Only in exceptional cases, in the event of technical malfunctions in Europe, will the full IP address be transmitted to Google in the USA and truncated there. The transmitted IP addresses will not be merged with other data from Google.

Google acts as a processor on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.

As explained, this may involve a transfer of personal data to a third country without an adequate level of data protection. In this case, we ensure that appropriate safeguards pursuant to Art. 46 GDPR are provided for the transfer. Proof of appropriate safeguards (EU Standard Contractual Clauses) is available upon request at any time.

The legal basis for this data processing is your explicit consent pursuant to Art. 6(1)(a) GDPR.

9.2 PostHog

We also use PostHog on our website (for the provider, data processing on our behalf, storage location and third-country transfer, see Section 3.4.1) to record how visitors use our website. This involves processing pages viewed, a pseudonymous identifier, the IP address, and information about the device and browser. For this purpose, PostHog stores a cookie in your browser. The data is transmitted to PostHog via the address insights.enlyze.com.

The legal basis for this data processing is your explicit consent pursuant to Art. 6(1)(a) GDPR.

10. Social Media

10.1 Social Media Buttons

Social media buttons of various social media networks (e.g. LinkedIn, Instagram, Twitter, Facebook and/or YouTube and/or LinkedIn) are integrated on our website.

If you click on one of these social media buttons, you will be redirected to our pages on the respective social media network. In this case, the provider of the respective social media network receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective social media network or are not logged in there. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider. If you click on a social media button and are either logged into the respective social media network or subsequently log into the page of the respective social media network, the transmitted information can be associated with your account on the social media network.

For information on the purpose and scope of data collection and processing by the providers of the respective social media network, the provider identification, contact options, and your rights and setting options regarding data protection, please refer to the respective privacy policies of the social media network providers.

The legal basis for the integration and use of social media buttons is Art. 6(1)(f) GDPR. Our overriding legitimate interest is the marketing of our offers and our website.

10.2 Social Media Pages

We maintain a publicly accessible profile on various social media networks, e.g. LinkedIn, Instagram, Twitter, Facebook and/or YouTube and/or LinkedIn (“Social Media Pages” or “Fan Pages”).

When you visit our social media pages and are logged into the respective social media network, the provider of the respective social media network can analyze your usage behavior and associate the collected information with your account on the social media network and enrich it there. Even if you are not logged in or do not have an account with the respective social media network, personal data concerning you can be collected by the provider of the respective social media network, such as your IP address or data collected via a cookie.

The operators of the social media networks can use this data to create user profiles. Based on your user profile, interest-based advertisements can then be displayed to you both on the websites of the social media network and on other websites.

When you visit one of our social media pages, we, together with the provider of the social media network, are joint controllers for the collection and processing of your personal data that takes place there. With regard to information about the collection and processing of your personal data taking place there, we refer you to the privacy policy of the respective social media network. We do not have any further information on this.

Information on appropriate safeguards for data transfers to third countries pursuant to Art. 46 GDPR is available upon request at any time.

You can assert your data subject rights pursuant to Chapter III of the GDPR (right of access, rectification, erasure, restriction of processing, data portability, etc.) both against us and against the provider of the respective social media network. In this context, we point out that we can only influence the processing of personal data and the implementation of data subject rights within the scope of our social media pages within the parameters provided to us by the respective provider.

The legal basis for our use of social media pages is Art. 6(1)(f) GDPR. Our overriding legitimate interest is the presence and marketing of our products and services on the Internet.

11. Job Applications

We collect and process personal data of applicants for the purpose of managing the application process. If an applicant submits their application documents to us electronically, this processing is carried out electronically.

If we enter into an employment contract with an applicant, the transmitted data will be processed for the purpose of carrying out the employment relationship in compliance with statutory provisions. If no employment contract is concluded with the applicant, the application documents will be erased promptly after completion of the application procedure, provided that erasure does not conflict with any overriding legitimate interest, such as defense against claims or an evidentiary burden under the German General Act on Equal Treatment (AGG).

The legal basis for this storage and processing is contract performance or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, and in Germany also Section 26 of the German Federal Data Protection Act (BDSG).

12. Video Conferences and Webinars

If you participate in a video conference, webinar, or online meeting, etc. organized by us (hereinafter “Video Conferences”), we process your personal data in connection with your participation.

When participating in a video conference, various categories of data are processed. The scope of data also depends on what data you provide before or during participation in a video conference.

If you participate in a video conference hosted by us, you must usually provide at least a name when registering. However, you can also use a pseudonym. Your IP address is also processed to enable your participation, and login information and device/hardware information are stored. In addition, if provided, your email address and profile picture are processed. If you dial in by phone, your telephone number and, if applicable, IP address will be processed.

To enable participation in the video conference, data from your device's microphone as well as from any video camera on the device and, if you share your screen, information from this “screen share” are processed. You can turn off the camera or mute the microphone yourself at any time. You always decide for yourself whether and which parts of your screen are shared.

Audio and video recordings of the video conference may be created. In this case, MP4 files of all video, audio, and presentation recordings will be processed. Notice of recording is always given if one is taking place, and, where required, the explicit consent of the participants to the recording is always obtained.

You may have the option of using chat, question, or survey functions in a video conference. In this respect, the text entries made by you are processed in order to display them in the video conference and, if applicable, log them.

Insofar as personal data of our employees is processed, Section 26 BDSG serves as the legal basis for data processing, provided that German law applies to the processing of employee data.

If German law should not apply to the processing of employee data, or if, in connection with participation in video conferences, the processing of personal data is not necessary for the establishment, implementation, or termination of the employment relationship, but is nevertheless an elementary component of participating in a video conference, our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR is the legal basis for data processing. In these cases, our legitimate interest lies in the effective execution of video conferences.

Furthermore, the legal basis for data processing when conducting video conferences is Art. 6(1)(b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships or with a view to initiating a contractual relationship (for example, in video conferences with our clients in the context of executing a project or when participating in a webinar).

In all other cases, the legal basis for data processing in the context of your participation in a video conference hosted by us is our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR. In these cases, our legitimate interest lies in the effective execution of video conferences.

For conducting video conferences, we use Google Meet provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Microsoft Teams provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Both providers act as processors on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. Further information can be found in Google's Privacy Policy and the Microsoft Privacy Statement.

In doing so, personal data may be transferred to a third country outside the EU. In this case, we ensure that appropriate safeguards pursuant to Art. 46 GDPR are provided for the transfer. Proof of appropriate safeguards (standard contractual clauses) is available upon request at any time.

13. Mergers and Acquisitions (M&A)

If we are involved in a reorganization, acquisition, asset sale, merger, financing, transfer of services to another provider, due diligence review, bankruptcy, or receivership, your personal data may be transferred to third parties to the legally permissible extent and as necessary in connection with and as part of the legal transaction in question, subject to compliance with fundamental data protection principles.

14. Age Restriction

This website is not intended or designed for use by children under the age of 16. We do not knowingly collect personal data from or about individuals under the age of 16.

15. Recipients of Data

Within our company, your data is received by those internal departments or organizational units that require it to perform their tasks, if applicable to fulfill contracts with you, to process data with your consent, or to safeguard our overriding legitimate interests.

Data is only transferred to third parties within the framework of legal requirements. We only share your data with third parties if, for example, this is necessary for contractual purposes on the basis of Art. 6(1)(b) GDPR or to safeguard our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR in conducting our business operations effectively.

Insofar as we use service providers or third-party providers in the context of providing the website and/or providing our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of your personal data.

Insofar as we use content or tools from service providers or third-party providers in the context of providing the website and/or providing our services whose stated registered office is located in a third country, a data transfer to a third country regularly takes place. Third countries are understood to be countries in which the GDPR is not directly applicable law, i.e. countries outside the EU or the European Economic Area. Data is only transferred to third countries if an adequate level of data protection, consent, or another legal authorization, in particular an appropriate safeguard pursuant to Art. 46 GDPR, is in place.

16. Your Rights

You have the rights explained below with regard to the personal data concerning you that is processed by us:

16.1 Right of Access

You can request access pursuant to Art. 15 GDPR to your personal data that we process.

16.2 Right to Rectification

If the data concerning you is no longer accurate, you can request rectification pursuant to Art. 16 GDPR. If your data is incomplete, you can request completion.

16.3 Right to Erasure

You can request the erasure of your personal data pursuant to Art. 17 GDPR.

16.4 Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data pursuant to Art. 18 GDPR.

16.5 Right to Object to Processing

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR, pursuant to Art. 21(1) GDPR. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims (Art. 21(1) GDPR). In addition, under Art. 21(2) GDPR, you have the right to object at any time to the processing of personal data concerning you for direct marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

16.6 Right to Withdraw Consent

Insofar as you have given your consent for processing, you have the right to withdraw your consent pursuant to Art. 7(3) GDPR.

16.7 Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (“data portability”) and the right to transmit that data to another controller if the requirements of Art. 20(1)(a) and (b) GDPR are met.

16.8 Exercise of Rights

You can exercise your rights by sending a notification to the contact details provided above for the controller or data protection officer.

16.9 Right to Lodge a Complaint with the Data Protection Supervisory Authorities

If you believe that our processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority of your choice pursuant to Art. 77 GDPR.

17. Mandatory Information and Profiling

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide personal data; however, the provision of personal information is necessary for entering into a contract to the extent that certain information is strictly required in order to conclude (and execute) a contract.

Automated decision-making, including profiling, is not carried out by us.

18. Information Security and Storage Period

We take appropriate state-of-the-art technical and organizational measures to ensure a level of protection appropriate to the risk of the respective processing for the personal data processed by us and to protect the data processed by us against accidental or intentional manipulation, loss, destruction, or against access by unauthorized persons.

For security reasons and to protect the transmission of confidential content, such as orders, inquiries, or payment data that you send to us, our website uses SSL encryption.
Our employees are regularly trained in data protection and information security and are bound to confidentiality and data protection.

As part of a restrictive role and rights concept based on a “need-to-know” principle, it is ensured that employees only have access to the personal data they strictly require to perform their duties.

We adhere to the principles of data avoidance and data economy and only store your personal data for as long as is necessary to achieve the respective purpose of data processing or as provided for by statutory retention periods. If the purpose of storage no longer applies or if a retention period prescribed by law expires, personal data is routinely anonymized or erased in accordance with statutory provisions.

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide personal data; however, the provision of personal information is necessary for entering into a contract to the extent that certain information is strictly required in order to conclude (and execute) a contract.

19. Changes to the Privacy Policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.