Privacy Policy
This English version is a translation for convenience. In case of doubt, the German version applies.
1. Privacy at a glance
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR and the German TDDDG) and this privacy policy.
2. Controller
The controller responsible for data processing on this website is:
credbl.ai
c/o SGC GmbH
Pastorenstraße 16
20459 Hamburg
Represented by: Juliane Bross, Dr. Markus Wuebben
Email: juliane@credbl.ai
3. Server log files
When you visit our website, our host STRATO automatically stores information your browser transmits: IP address, date and time of the visit, the page requested, the previously visited page (referrer), and browser and operating system. This data is not combined with other data sources.
Legal basis: Our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). The storage period is determined by STRATO as our processor.
4. Data collected on this website (waitlist)
Purpose of processing: When you sign up for our waitlist, we use your email address and the details listed below to confirm your sign-up, add you to the waitlist, and inform you by email as soon as a place is available for you. After confirming, you also receive a welcome email.
Newsletter (optional): If you also tick the newsletter box in the form, we occasionally send news about credbl.ai and its products to your email address. This consent is voluntary and not a condition for joining the waitlist. It is also confirmed through the double opt-in procedure. You can unsubscribe from the newsletter at any time by an informal message to us by email; the unsubscribe link in our welcome email removes you from the waitlist entirely.
Name: Everyone who signs up gives their first and last name. We use it to address you personally in our emails.
LinkedIn and Instagram profile (optional): If you sign up as an individual, you can voluntarily provide your LinkedIn and your Instagram profile. We use this information to check whether credbl.ai is applicable to your profile. It is deleted as soon as your waitlist entry is deleted.
Details from agencies: If you sign up as an agency, we also collect the name and website of the agency; the name you give is that of the contact person. We use this information so that we can invite your agency to credbl.ai.
Legal basis: The data entered in the waitlist form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR).
Double opt-in: To make sure that it was you who signed up, we use the double opt-in procedure. After signing up, you receive an email with a confirmation link. You are only added to the waitlist once you click it. As proof of your consent, we store the time of your sign-up and whether you confirmed it.
Recipients: Our team is notified by email about a confirmed sign-up. We do not pass your details on beyond that; STRATO processes them technically as our processor (see section 7).
Storage period: We store the data you provided until you withdraw your consent. After a withdrawal, your data is deleted unless statutory retention periods prevent this.
5. Spam protection (Google reCAPTCHA)
To protect the waitlist form from automated submissions (spam), we use Google reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). reCAPTCHA is loaded on the pages with the form and checks in the background whether a submission comes from a human. To do so, Google evaluates information such as your IP address, details about your browser and device, and your behaviour on the page. The data may be transferred to Google servers in the USA (see section 11).
Legal basis: Our legitimate interest in protecting our form from abuse and spam (Art. 6(1)(f) GDPR). More information: Google's privacy policy and terms of service.
6. Withdrawal of consent
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time: via the unsubscribe link in our welcome email, or by an informal message to us by email. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
7. Hosting and backend infrastructure
STRATO GmbH: We host our website and email services with STRATO GmbH, Pascalstraße 10, 10587 Berlin, Germany. The data generated by visiting the platform is processed on Strato's servers in Germany. This ensures a high level of data security in accordance with the European GDPR. You can find more information on data protection at Strato here: https://www.strato.de/datenschutz/. We have concluded a data processing agreement (DPA) with STRATO GmbH.
Sending emails: Emails are also sent automatically and SSL/TLS-encrypted via Strato's mail servers. Data transmitted in contact and waitlist forms is secured via HTTPS SSL/TLS.
8. Fonts
The fonts used on this website are stored on our own server and loaded from there. Opening a page does not connect to third-party servers for this, such as Google's.
9. Cookies and storage in your browser
Consent cookie: We store your choice in the cookie banner in the cookie "klaro_consent" in your browser, so that we do not ask you again on every visit. The cookie is valid for 365 days. It is strictly necessary for the function you requested (§ 25(2) no. 2 TDDDG; Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, proof of consent).
Language choice: If you explicitly switch between German and English on this page or in the imprint, we store this choice in your browser's local storage ("credbl-lang") so that you get the chosen language again. This is strictly necessary for the function you requested (§ 25(2) no. 2 TDDDG). You can delete the entry in your browser at any time.
10. Web analytics (Google Analytics)
Where you have given your consent (via our cookie banner), we use Google Analytics (GA4) on this website, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
We use Google Analytics for the statistical analysis of how this website is used, in order to improve our offering. The information generated by cookies about your use of this website may be transferred to and stored on Google servers, including in the USA (see section 11). According to Google, Google Analytics 4 does not log or store IP addresses.
Legal basis and withdrawal: Processing takes place exclusively on the basis of your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw this consent at any time with effect for the future by clicking "Change cookie settings" below and adjusting your preferences.
11. Transfers to the USA
With Google reCAPTCHA and Google Analytics, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. The transfer is based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).
12. Your rights (data subject rights)
Within the scope of the applicable statutory provisions, you have the right at any time to:
- Information about your stored personal data, its origin and recipients, and the purpose of the data processing (Art. 15 GDPR).
- Rectification of inaccurate data (Art. 16 GDPR).
- Erasure of your data (Art. 17 GDPR).
- Restriction of data processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Object to processing based on our legitimate interest (Art. 21 GDPR).
- Withdraw consent you have given, with effect for the future (Art. 7(3) GDPR).
For this, and for any other questions about data protection, you can contact us at any time at the address given above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.