Privacy policy
The German version is authoritative.
Last updated:
Our principles
This website sets no cookies, uses no tracking or advertising services and loads no content from third parties. Fonts and images are hosted on our own server in the European Union.
Controller
ELVIAS Holding GmbH, Fasanenstraße 12, 10623 Berlin
Email for privacy requests: datenschutz@elvias.de
Visiting the website
When you visit the website, our server automatically processes your IP address, date and time, the requested address, the previously visited page (referrer) and your browser identification (user agent). We need this data to deliver the website and to keep it running securely.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website. Server logs are deleted after 7 days.
When you open our start address, our server derives your country from your IP address to show you the matching language. We use a country database on our own server for this. The IP address is neither stored nor passed on to third parties. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a website in your language. A language you choose yourself takes precedence.
Contact form and email
If you write to us via the contact form or by email, we process your name, your email address, optionally your company, and your message to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR.
The form stores nothing on our web server. Your details are sent directly by email to the responsible person. We delete the data once your request has been dealt with, at the latest after 6 months, unless a statutory retention obligation applies.
To protect against spam, your browser solves a small computing task (ALTCHA) when you send the form. No data is transferred to third parties and no cookies are set. To limit abuse, we count requests per IP address; the address is held in memory for at most ten minutes and is not stored permanently.
Confidential enquiries from founders and advisers
We treat enquiries about a possible sale of a company or an investment as confidential. We only pass them on to Elvaston Capital where this is necessary for the assessment.
Recipients and processors
We use the following service providers. They process data only on our behalf and according to our instructions.
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| IONOS SE, Montabaur | Website hosting | Spain (EU) | Data processing agreement under Art. 28 GDPR |
| Microsoft Ireland Operations Limited, Dublin | Sending and receiving email, including messages from the contact form (Microsoft 365) | EU (EU Data Boundary); access from the USA possible in individual cases | Data processing agreement under Art. 28 GDPR; for access from third countries EU standard contractual clauses and the EU-US Data Privacy Framework |
| Anthropic Ireland, Limited, Dublin | AI-assisted handling of emails and enquiries (Claude) | USA (processing by Anthropic, PBC) | Data processing agreement under Art. 28 GDPR (Data Processing Addendum); EU standard contractual clauses for the transfer to the USA |
Transfers to third countries
Visiting this website does not involve any transfer of personal data to countries outside the European Union or the European Economic Area.
Our email, including messages from the contact form, is processed by Microsoft (Microsoft 365) in the EU. Access by Microsoft Corporation from the USA is possible in individual cases, for example for support and security; it is safeguarded by EU standard contractual clauses and the EU-US Data Privacy Framework.
We use Claude by Anthropic for AI-assisted handling of emails and enquiries. In the process, the content of your message may be transferred to the USA. The transfer is safeguarded by EU standard contractual clauses.
Storage on your device
This website sets no cookies. So that your choice of colour mode (light or dark) and your language apply on every page, your browser stores these two settings in local storage. The settings never leave your device and are not transmitted to us or to third parties.
The legal basis is Section 25(2) No. 2 TDDDG: storage is strictly necessary to keep the display and language you have chosen. You can delete the entries at any time in your browser settings.
Fonts, maps and videos
Fonts are hosted on our server. We do not embed maps or videos from third parties; locations are given as text.
Audience measurement
We do not measure audiences or analyse user behaviour.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit.