Privacy

This is an English overview for convenience. The legally binding version is the German Datenschutzerklärung, which always takes precedence.

Controller

Collective Brain GmbH, Kattrepelsbrücke 1, 20095 Hamburg, Germany.
Email: [email protected] · Phone: +49 40 46 89 67 68 0.

What we process and why

When you visit this site

Our server and content delivery network (Cloudflare) process technical data such as your IP address, browser and the pages you request, to deliver the site securely and reliably. The legal basis is our legitimate interest under Art. 6 (1)(f) GDPR.

When you contact us

We send our forms through the service Web3Forms. When you submit a form, your details go directly from your browser to api.web3forms.com. Web3Forms forwards them to us by email and, for technical reasons, also receives your IP address and information about your browser. According to Web3Forms, it does not store submissions and deletes its server logs every two months. Web3Forms belongs to Web3Creative, based in Kerala, India. According to the provider, its servers are in the USA. Your details are therefore transferred to countries outside the EU.

These details go to Web3Forms:

• Contact form (/en/contact/): your name, email address, a topic from a fixed list and your message. Phone number and company are optional.
• Redesign audit (/en/website-redesign/): the address of your website, your name, email address and your agreement to the processing. A message is optional.

The contact form also sends where the enquiry came from. The field "Source" contains the identifier from the link you followed (?source=) and UTM parameters such as utm_source, or the value "direct" if there are none. The field "Referrer" contains the page you came from before the form. For another website this is usually just its domain. Both forms also send a subject line, a sender name, the address of the thank-you page and an empty field that keeps out spam.

We use your details to answer your enquiry. Source and referrer show us how enquiries reach us. We keep enquiries only as long as needed to handle them and meet legal retention duties.

The legal basis for enquiries is Art. 6 (1)(b) GDPR, because they serve to prepare a contract. For source and referrer we rely on our legitimate interest in seeing how enquiries reach us (Art. 6 (1)(f) GDPR).

Audience measurement with Umami

To see which pages are read and how enquiries come about, we use Umami. Umami runs as our own installation at analytics.collectivebrain.de on a server at Mittwald. Like the rest of this site, it is reached through Cloudflare. Only we analyse the measurement data.

When you open a page, your browser sends Umami the address of the page including parameters such as ?source= or utm_source, the page you came from, the page title, your screen size and your language setting. Umami derives your country from your IP address, and your browser type, operating system and device type from the information your browser sends.

Umami also counts clicks on links to our offers, for example on /en/claude-for-teams/ and in the skills catalog. For a click it records which link it was and on which page it sits. It also counts when someone submits the contact form. In that case it records only the chosen topic and the source from the link (see the section on contacting us). Names, email addresses and messages do not go to Umami.

Umami sets no cookies and stores nothing in your browser. The legal basis is our legitimate interest in improving the site and our offers based on how they are used (Art. 6 (1)(f) GDPR).

Google Analytics and Microsoft Clarity

The English pages under /en/ do not load Google Analytics, Google Tag Manager or Microsoft Clarity. Some German pages from our previous WordPress site, such as case studies and some articles, contain the consent tool Borlabs Cookie. It loads Google Analytics and Microsoft Clarity only if you have agreed to statistics in it. The legal basis for this is your consent (Art. 6 (1)(a) GDPR).

Your rights

• Access to the data we hold about you (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent at any time, with effect for the future
• Complaint to a supervisory authority (Art. 77 GDPR)

To exercise any of these, email [email protected]. For the full detail on recipients, retention periods, third parties and cookies, please see the German privacy policy.