Privacy Policy

1. Introduction

We take the protection of your personal data very seriously.

This Privacy Policy explains how Elephant Blue eG processes personal data in accordance with the General Data Protection Regulation (GDPR).

Personal data is processed only to the extent necessary to ensure the secure and functional operation of this website and to handle inquiries.

This website does not use tracking tools, analytics services, or marketing technologies.


2. Controller


The controller responsible for data processing on this website is:
Elephant Blue eG
Drosselstr. 1
D-84155 Bodenkirchen
Germany

Email: controller@elephantblue.com


3. Hosting and Server Log Files


This website is hosted by Framer.

The hosting provider automatically collects and stores information in server log files that your browser transmits. This may include:

  • IP address

  • Browser type and version

  • Operating system

  • Referrer URL

  • Date and time of access

This data is processed to ensure the secure and reliable operation of the website.

The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

Hosting may involve data processing on servers located within the European Union or, where applicable, in third countries. In such cases, appropriate safeguards such as Standard Contractual Clauses pursuant to Art. 46 GDPR are applied.

Server log data is stored only for as long as necessary to ensure system security and stability.


4. Contact


If you contact us by email or via the contact form, the personal data you provide (such as name, email address and message) will be processed solely for the purpose of handling your inquiry.

The legal basis for this processing is:

  • Article 6(1)(b) GDPR (pre-contractual measures), or

  • Article 6(1)(f) GDPR (legitimate interest in responding to inquiries).

The provision of personal data is voluntary. However, without providing contact information, it may not be possible to respond to your inquiry.

Your data will not be shared with third parties and will be deleted after completion of your request, unless statutory retention obligations require longer storage.


5. No Automated Decision-Making


No automated decision-making or profiling takes place.

Personal data is not used for marketing purposes.


6. Data Subject Rights


You have the right to:

  • request access to your personal data (Art. 15 GDPR)

  • request rectification of inaccurate or incomplete data (Art. 16 GDPR)

  • request erasure of your personal data (Art. 17 GDPR)

  • request restriction of processing (Art. 18 GDPR)

  • request data portability (Art. 20 GDPR)

  • object to the processing of your personal data (Art. 21 GDPR)

You also have the right to lodge a complaint with a competent supervisory authority.


7. SSL Encryption


This website uses SSL encryption to protect the transmission of confidential information.

Encrypted connections can be recognized by the “https://” prefix in the browser address bar.


8. Updates to this Privacy Policy


We reserve the right to update this Privacy Policy to reflect changes in legal requirements or changes to our services.

The version published on this website shall apply.