Privacy policy

Below is our most recent privacy policy. Reach out to us if you have any questions. Data protection is incredibly important to us.

Privacy policy

The protection of information relating to you, such as your name, your telephone number and your
email or IP address ("personal data"), is important to us. Therefore, we operate this website and our services in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG").

You will find below an explanation of how we handle your personal data in this context.

1. Who is the controller?

Valuecase GmbH
c/o WeWork
Axel-Springer-Platz 3, 20355 Hamburg, Germany
E-mail: lennart@valuecase.de 

2. What do we do with your personal data?

(a) When you use our website or contact us

The provision of this website requires the processing of personal data, such as your IP address. This processing is necessary for the retrieval of the content displayed on this website (including its functions) and due to IT security measures.

You also have the option of contacting us, for example, via our contact form. For this purpose, we process the personal data that you provide to us.

1. Legal basis

The processing of your personal data to provide this website and to communicate with you is based on our overriding legitimate interest. For the provision of this website it is technically necessary that we process certain personal data (e.g. the IP address). For your communication with us, it is necessary that we process your respective personal data.

2. Weighing of interests

Within the framework of the necessary balancing of interests, we have weighed up your interest in confidentiality and our interests in providing this website and contacting you. In each case, your interest in confidentiality takes a back seat. Otherwise, we would not be able to provide you with this website or respond to your contact request.

3. Recipient categories

We use service providers to provide our website. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers that we use also process your personal data outside the EU/EEA (see the section "Data transfer to third countries" below).

(b) If you use our online service Valuecase

You can arrange a product demo for our online service Valuecase ("Valuecase") via our website. For this purpose, we collect the personal data that you provide to us.

If you wish to use Valuecase and enter into a usage agreement with us, we process the personal data that is required for the initiation, execution and settlement of the corresponding usage agreement. 

1. Legal basis

We process your personal data for the initiation, execution and settlement of the corresponding user contract.

2. Recipient categories

We use service providers to provide Valuecase. We transfer personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers we use also process your personal data outside the EU/EEA (see the section "Data transfer to third countries" below).

(c) If you are invited to use Valuecase by one of our Valuecase customers

Our Valuecase customers can use our personalized online customer area ("Customer Area") to cover the entire procurement process. 

For this purpose, we process on behalf of the respective Valuecase customer the personal data required for the technical provision (incl. the functions and IT security) and the use of Valuecase (e.g. the respective IP address).

We also process the personal data that a Valuecase customer and/or a third party authorized by the customer provides to us.

Valuecase customers may also invite third parties to use their respective customer area. In these cases, we are a processor for the respective Valuecase customer.

1. Legal basis and balancing of interests

If we are responsible for a corresponding data processing, we process the corresponding personal data for the initiation, implementation and execution of the corresponding contract with you.

We also process personal data of our customers and of third parties for the provision of the respective Customer Area and for communication via this Customer Area based on our overriding legitimate interest. For the provision of the respective customer area and for the corresponding communication, it is technically necessary that we process certain personal data (e.g. the respective IP address). 

As part of the necessary balancing of interests, we have weighed up your confidentiality interest and the confidentiality interest of the respective authorized third party and our interests in providing the corresponding customer area and contacting you. The confidentiality interests of you and the respective authorized third party take a back seat in each case. Otherwise, we would not be able to provide you with this customer area and/or communicate with you and/or authorized third parties about it.

2. Recipient categories

We use service providers to provide the respective customer area. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers that we use also process your personal data outside the EU/EEA (see the section "Data transfer to third countries" below).

(d) If you follow us on Facebook and other third-party social media platforms

You have the option of following us on LinkedIn and/or on other social media platforms of third party service providers (e.g. Facebook, XING). For this purpose, we handle the personal data that you provide to us in each case or which is provided to us by the respective platform operator about you, insofar as it is provided to us. You can control the privacy settings yourself within the framework of a social media platform.

1. Legal basis

We process your personal data within the scope of our social media offerings on the basis of our overriding legitimate interest. For the provision of our social media offers, it is technically necessary that we process certain personal data (e.g., the IP address; personal data that you have provided to the respective platform operator or to us).

As part of the necessary balancing of interests, we have weighed up your interest in confidentiality against our interests in providing our social media offerings. Your interest in confidentiality takes a back seat. Otherwise, we would not be able to offer you our social media services.

2. Recipient categories

We use service providers to provide our social media offerings (e.g. Facebook, LinkedIn, XING). The data you transmit to us as part of our social media offerings is also automatically transmitted to the respective social media platform operators (see the section "Data transmission to third countries" below).

(e) If you give us advertising consent

If you give us your advertising consent, we will handle your personal data for our own advertising purposes.

Your declaration of consent is the legal basis for our handling of your personal data in this regard. You can revoke your consent at any time with effect for the future. Previous corresponding data processing remains unaffected.

(f) If you have not objected to the use of your e-mail address for your own advertising purposes

If we receive your e-mail address in connection with the provision of our services, we will process it in order to send you advertising for our own similar goods or services, unless you have objected to this use.

You have the option to object to this use at any time without incurring any costs other than the transmission costs according to the prime rates. Please send your objection to our contact details above. You can also use the opt-out link in one of our advertising emails.

1. Legal basis

The legal basis is our legitimate interest in connection with a statutory provision (Section 7 (3) UWG).

2. Recipient categories

We use service providers for our e-mail marketing. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.

(g) When you apply to us

You can apply for a job with us. For this purpose, we process the personal data that you provide to us as part of your application. 

We process your personal data for the initiation, implementation and execution of the corresponding contract.

(h) If we sell our company and/or a service

We reserve the right to sell our company and/or a service in whole or in part. In doing so, we may transfer your personal data to a third party in the future, in compliance with the respective data protection requirements. We will inform you about this with a notice period of at least 30 days with reference to the consequences for further use of our services.

1. Legal basis

The processing of your personal data in the context of such a sale is based on our overriding legitimate interest. For the processing of a corporate transaction, it may be necessary for us to transfer your respective personal data to a third party.

2. Weighing of interests

As part of the necessary balancing of interests, we have weighed up your confidentiality interests against our interests in a corresponding sale. In each case, your confidentiality interests take a back seat. Otherwise we would not be able to carry out such a sale.

(i) When we anonymize your personal data 

We anonymize your personal data in order to evaluate it for statistical purposes.

1. Legal basis

The processing of your personal data in the context of such anonymization is based on our overriding legitimate interest.

2. Weighing of interests

As part of the necessary balancing of interests, we have weighed up your interest in confidentiality against our interest in anonymization. Your interest in confidentiality takes a back seat. We would otherwise not be able to achieve such anonymization. The GDPR and the BDSG do not apply to anonymous data.

3. Recipient categories

We use service providers for the anonymization process. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.

(j) If you allow the use of cookies/identifiers and analytics tools in your browser

We use cookies/identifiers and analytics tools to provide our website and Valuecase. Some providers we use also process your personal data outside the EU/EEA (see the section "Data transfer to third countries" below).

So-called "cookies" are used on our websites, including within Valuecase.

Cookies are data records that are stored by a web server on the end device (e.g. computer, smartphone, tablet) of the user. When our website is called up again with the same end device, these are sent back either to our website ("first party cookie") or to another website to which the cookie belongs ("third party cookie"). 

1. Legal basis

The legal basis for the use of technically necessary cookies/identifiers is our legitimate interest. The storage of information in your terminal equipment or the access to information already stored in your terminal equipment is absolutely necessary so that we can provide the telemedia service expressly requested by you as a user (Section 25 para. 2 No. 2 TTDSG).

Otherwise, the legal basis in each case is generally your consent (Art. 6 para. 1 lit. a) GDPR; § 25 para. 1 TTDSG), if no specific legal basis is mentioned below.

2. Withdrawal of consent and "Do Not Track" function

You can revoke your consent at any time with effect for the future, e.g. by deleting cookies set via the browser settings of your end device. Please note that for technical reasons, this procedure only applies to the specific end device used.

You can also prevent the collection as well as the processing of your personal data by preventing third-party cookies from being stored on your terminal device, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Turning off the cookie function in your browser does not restrict the use of our websites and Valuecase in principle.

3. Use of tracking cookies for advertising purposes

This website works together with external performance advertising networks to display and optimize its own advertisements. As part of the tracking services, cookies are stored for the documentation of transactions on end devices of users who visit or use websites or other online offers of its customers. These cookies are used solely for the purpose of correctly assigning the success of an advertising medium and the corresponding billing within the advertising network. Personal data is not collected, processed or used in this context. Only the information about when a particular advertising medium was clicked on by an end device is placed in a cookie. The external partners used are listed below with a link to their data protection information.

4. Use of Google Analytics

We use Google Analytics on our websites, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). 

Google Analytics uses "cookies", which are text files placed on your end device, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the websites, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website: Disable Google Analytics

We continue to use Google Analytics to analyze data from Double-Click-Cookie and also AdWords for statistical purposes. If you do not wish to do this, you can disable

this via the Ads Preferences Manager

http://www.google.com/settings/ads/onweb/?hl=de

An overview of what data Google collects can be found here:

https://privacy.google.com/businesses/adsservices/

5. Use of Google Tag Manager

We use the Google Tag Manager of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google Tag Manager allows tags from Google and third-party services to be managed and embedded in a bundle on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behavior, to track the impact of online advertising and social channels, to use remarketing and targeting, and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags to trigger. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Information on this can be found in the passages on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

For more information about Google Tag Manager, visit https://www.google.com/intl/de/tagmanager/faq.html and Google's privacy policy at https://policies.google.com/privacy?hl=de.

You can prevent the collection of the data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

For more information on objection and removal options vis-à-vis Google, please visit: https://policies.google.com/privacy?gl=DE&hl=de

6. Use of Mixpanel

We use the web analytics service Mixpanel provided by Mixpanel Inc, One Front Street, 28th Floor, San Francisco, CA 94111, USA. 

Among other things, Mixpanel uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your terminal device and that enable an analysis of your use of our online presence. This allows personal data to be stored and analyzed, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information and a tracking code (pseudonymized user ID). The information collected in this way is transmitted by Mixpanel to a server within the EU and stored there anonymously.

For more information about the processing of data by Mixpanel, click here:

https://mixpanel.com/legal/privacy-hub/ 

7. Use of Intercom Services

We use the customer service platform Intercom provided by Intercom, Inc., a Delaware corporation with offices at 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA. 

We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as sign-up date and some personal information like your email address) to Intercom, Inc. (“Intercom”) and utilize Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyzes your use of our website and/or product and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. For more information on Intercom's use of cookies, please visit https://www.intercom.com/terms-and-policies#cookie-policy. We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). As part of our service agreements, Intercom collects publicly available contact and social information related to you, such as your email address, gender, company, job title, photos, website URLs, social network handles and physical addresses, to enhance your user experience. For more information on the privacy practices of Intercom, please visit https://www.intercom.com/terms-and-policies#privacy

Intercom’s services are governed by Intercom’s terms of use which can be found at https://www.intercom.com/terms-and-policies#terms

If you would like to opt out of having this information collected by or submitted to Intercom, please contact us.

8. Use of Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

3. How long do we store your personal data?

We delete your personal data if the respective purpose of storage no longer applies and no statutory provision requires retention (e.g. a retention obligation under the German Fiscal Code and/or the German Commercial Code). If deletion is not possible in an individual case, processing will be restricted.

A storage period may be based in particular on the statutory limitation periods, e.g. according to the German Civil Code.

4. What are your data subject rights?

Please contact us at the above contact details to exercise your rights and to withdraw your consent.

a) You have the right to request information about all personal data we process about you at any time.

b) If your personal data is incorrect or incomplete, you have the right to have it corrected and completed.

c) You may request the deletion of your personal data at any time, unless we are legally obliged or entitled to continue processing your data.

d) If the legal requirements are met, you may request restriction of the processing of your personal data.

e) You have the right to object to processing insofar as the data processing is carried out for the purpose of direct marketing or profiling. If the processing is carried out on the basis of a balancing of interests, you may object to the processing by stating the reasons arising from your particular situation.

f) If the data processing is carried out on the basis of your consent or within the framework of a contract, you have a right to the transfer of the data provided by you, provided that this does not affect the rights and freedoms of other persons.

g) If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with effect for the future. The processing carried out before a revocation remains unaffected by the revocation.

h) You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data processing has been carried out in breach of applicable law.

5. In what context do we create automatic profiles?

No automatic profiles are created.

6. Data transfer to third countries

In some cases, personal data will be transferred to recipients in third countries (see the respective note within our privacy notices). Third countries are countries outside the EU and outside the EEA. These third countries also include the USA.

In the USA, there is no comparable level of data protection as in Europe. In particular, it is possible that government agencies may access personal data without us or you knowing about it. Legal prosecution may not be promising.

The legal basis for such data transfer is generally your consent (Art. 49 para. 1 sentence 1 lit. a) GDPR) or a respective contract performance (Art. 49 para. 1 sentence 1 lit. b) GDPR).

7. Data security

We take appropriate technical and organizational security measures to protect the personal data we process against accidental or intentional manipulation, loss, destruction or against unauthorized access.

We use encryption methods, for example. You can see this, for example, in the address bar of your Internet browser ("https://").

Want to learn more about Valuecase? Let's talk today!

(We will help you set it up too)
Book your demo ->
Setup & training included
Preview of your sales process in Valuecase
100% personalised