… then why not have a coffee with Paul? You decide whether it’s virtual or in person. You’ll get an insight into how we work, and Paul will help you find the right solution for your needs—either from our proven formats or tailored specifically to your requirements.
.svg){kind=icon}
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the following sections of this Privacy Policy.
Data Collection on This Website
Who Is Responsible for Data Collection on This Website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information About the Controller” of this Privacy Policy.
How Do We Collect Your Data?
Some of your data is collected when you provide it to us, for example by entering information into a contact form or newsletter form.
Other data is collected automatically or after you have given your consent when you visit the website. This primarily includes technical data, such as your browser, operating system, time of access, referrer or IP address.
What Do We Use Your Data For?
Some of the data is collected to ensure that the website is provided without technical errors.
Other data may be used to process enquiries, send newsletters, provide downloads, analyse user behaviour, and measure and optimise advertising activities.
What Rights Do You Have Regarding Your Data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted.
If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. Under certain circumstances, you also have the right to request that the processing of your personal data be restricted. In addition, you have the right to lodge a complaint with the competent supervisory authority.
2. Hosting and Technical Provision
Hosting With STRATO
This website is hosted by STRATO. As part of the hosting service, technical access data and server log files are processed, in particular IP addresses, time of access, browser type, operating system, and files accessed, insofar as this is necessary to ensure the availability, stability, and security of the website.
The legal basis for this processing is Art. 6(1)(f) GDPR.
Use of Webflow as the Website Platform
This website was created using Webflow. Where technical resources, content, or other Webflow components are loaded through the website, Webflow may process technical connection data.
The legal basis for this processing is Art. 6(1)(f) GDPR, insofar as the use of Webflow is necessary for the technical provision and design of the website.
3. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.
Information About the Controller
The controller responsible for data processing on this website is:
H
Chili and Change GmbH
Löwengasse 27k
60385 Frankfurt am Main
Germany
E-Mail: hendrik@chili-and-change.de
Verantwortliche Stelle ist die natürliche oder juristische Person, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personenbezogenen Daten entscheidet.
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Data Retention
Unless a more specific retention period is stated elsewhere in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies.
If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless there are legally permissible retention obligations or other legal grounds requiring us to retain the data.
Hier würde ich wieder eng am juristischen Sinn bleiben und die etablierten GDPR-Begriffe verwenden:
Legal Bases for Processing
If you have consented to the processing of your personal data, we process your data on the basis of Art. 6(1)(a) GDPR.
Where the processing of your data is necessary for the performance of a contract or in order to take steps prior to entering into a contract, the processing is based on Art. 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, it is based on Art. 6(1)(c) GDPR.
In all other cases, processing is based on Art. 6(1)(f) GDPR.
Recipients of Personal Data
As part of our business activities, we work with external service providers. Personal data is disclosed only where this is necessary for the performance of a contract, where we are legally required to do so, where you have given your consent, or where we have a legitimate interest in the disclosure.
Where we use processors, this is done only on the basis of a valid data processing agreement.
Withdrawal of Your Consent
Many data processing activities are only possible with your explicit consent. You may withdraw consent you have already given at any time with effect for the future.
Right to Object Under Art. 21 GDPR
Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.
Right to Lodge a Complaint With the Competent Supervisory Authority
In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.
Right of Access, Rectification, Erasure, Restriction of Processing and Data Portability
Within the scope of the applicable legal provisions, you have the right at any time to obtain information about your stored personal data, its origin and recipients, and the purpose of the data processing. Where applicable, you also have the right to rectification, erasure, restriction of processing and data portability.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
4. Data Collection on This Website
Cookies and Consent Management
Our website uses cookies and similar technologies. Technically necessary cookies may be used on the basis of Art. 6(1)(f) GDPR. Analytics, marketing and advertising cookies, as well as similar technologies, are used only on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
To manage the cookies and similar technologies used on our website, as well as the related consent choices, we use Cookiebot CMP. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot is used to obtain, manage and document consent for the use of cookies and tracking technologies.
When you visit our website, Cookiebot may process information about your consent status, device, browser and technical log data insofar as this is necessary to provide and document your consent choices. This data is stored and processed to comply with our legal obligations and on the basis of our legitimate interest in privacy-compliant consent management pursuant to Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
You can change or withdraw your consent at any time with effect for the future using the consent management tool provided on this website.
Contact Form
If you send us an enquiry via our contact form, the information you provide in the form, including your contact details, will be stored and processed for the purpose of handling your enquiry and any follow-up questions.
We use Brevo to provide and process our contact forms. Depending on the nature of your enquiry, the processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
Enquiries by Email or Phone
If you contact us by email or phone, your enquiry, including any personal data arising from it, will be stored and processed for the purpose of handling your request. The processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
Newsletter
If you would like to subscribe to the newsletter offered on this website, we require at least your email address, as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.
The newsletter is sent via Brevo. Newsletter data is processed exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time, for example by using the unsubscribe link included in the newsletter.
Downloading PDF Files
This website allows you to download content created by Chili and Change, in particular PDF files. When such files are accessed, technically necessary access data is processed, including in particular your IP address, time of access, file accessed, referrer and browser information. The processing is based on Art. 6(1)(f) GDPR for the purpose of providing the content securely and reliably.
Where a download is made available only after personal data has been entered or in connection with a newsletter subscription, any additional processing is governed by the respective form used and the consent described there.
Processing in CRM and Marketing Systems
Data collected as part of email communications is stored and processed in our CRM and marketing systems, Brevo and Rapidmail. This includes, in particular, the management of contact profiles, the analysis of interactions such as email opens and clicks, as well as lead qualification and sales support.
5. Social Media and LinkedIn
Links to LinkedIn
This website may contain links to our LinkedIn profile or company pages. If you click on such a link, you will leave this website. LinkedIn is responsible for any subsequent processing of your personal data. LinkedIn’s privacy policy applies.
LinkedIn Ads / LinkedIn Insight Tag
Where the LinkedIn Insight Tag is used on this website, we use it to measure conversions, create remarketing audiences, and analyse and optimise our LinkedIn advertising campaigns.
The LinkedIn Insight Tag is used only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
6. Analytics and Advertising Tools
Google Tag Manager
We use Google Tag Manager. Google Tag Manager is used to manage and deploy website tags through a central interface. The Tag Manager itself is a technical management system; however, the tags integrated through it may process personal data.
The legal basis for its use is Art. 6(1)(f) GDPR for the technical and organisational management of tags. Where tags requiring consent are loaded via Google Tag Manager, they are executed only on the basis of your consent.
Google Analytics
This website uses Google Analytics to analyse user behaviour. The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Google Ads
We use Google Ads and, where configured, Google Ads conversion tracking and remarketing features. These services are used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
7. Plugins and Tools
YouTube
This website may embed videos from YouTube. Where possible, we use YouTube’s privacy-enhanced mode. However, when you access embedded content, a connection to Google or YouTube servers may still be established.
YouTube is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Google Fonts
This website may use Google Fonts to ensure a consistent display of fonts. When the fonts are loaded, at least the technically necessary connection to Google is established.
Google Fonts is used on the basis of Art. 6(1)(f) GDPR or, where required by the specific setup, on the basis of your consent.
Google Maps
This website may embed Google Maps to display maps and locations. When you use Google Maps, data is transmitted to Google.
Google Maps is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Google reCAPTCHA
We use Google reCAPTCHA to determine whether entries made on this website are submitted by a human or by automated software. In this context, technical and usage-related data may be processed and transmitted to Google.
Google reCAPTCHA is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG or, in exceptional cases, on the basis of Art. 6(1)(f) GDPR where reCAPTCHA is used as a strictly necessary security measure and this legal basis is appropriate in the specific circumstances.
Brevo (CRM, Marketing, Sales and Service Platform)
We use the Brevo platform provided by Sendinblue GmbH, trading under the brand name “Brevo”, Köpenicker Str. 126, 10179 Berlin, Germany, registered in the Commercial Register of the Local Court of Charlottenburg (Berlin) under HRB 133191.
Brevo is an integrated software platform that we use in particular for marketing, sales, customer service and operational processes. We use the platform for functions including:
- managing contact and customer profiles,
- providing forms, for example for enquiries, content requests or registrations,
- sending and analysing email communications,
- analysing interactions with our website and content,
- supporting sales and service processes.
Scope of Data Processing
When using Brevo, we process personal data including, in particular:
- contact details, such as name and email address,
- content and communication data,
- technical usage data and metadata, such as interactions with emails or forms.
If you use forms or communicate with us by email, the data you provide is stored in a contact profile and, where legally permitted, combined with information from further interactions.
Tracking and Cookies
Where Brevo uses features to analyse user behaviour, these are used only on the basis of your consent. The use of relevant cookies and tracking technologies is managed through our consent management tool.
Further information can be found in the sections “Cookies” and “Web Analytics” of this Privacy Policy.
Legal Basis
Personal data processed in connection with our use of Brevo is processed:
- on the basis of your consent pursuant to Art. 6(1)(a) GDPR, where such consent has been requested,
- for the performance of a contract or to take steps prior to entering into a contract pursuant to Art. 6(1)(b) GDPR,
- or on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in efficiently organising our marketing, sales and service processes.
Recipients and Transfers to Third Countries
Brevo processes personal data on our behalf as a processor. Brevo is certified under the EU Data Privacy Framework, meaning that an adequacy decision pursuant to Art. 45 GDPR applies. We have entered into a data processing agreement with Brevo pursuant to Art. 28 GDPR.
Further information on data protection can be found in Brevo’s Privacy Policy:
https://www.brevo.com/de/legal/privacypolicy/
8. Data Processing on Behalf and Transfers to Third Countries
We use service providers that process personal data on our behalf, in particular STRATO, Brevo and Cookiebot.
Where providers process personal data outside the European Union or the European Economic Area, or transfer data to such countries, this is done only in accordance with the applicable legal requirements.
9. Updates and Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy to ensure that it remains compliant with current legal requirements or to reflect changes to our website and the services offered through it.