Privacy Policy

Compliance with all data protection regulations is very important to us. We would therefore like to inform you in detail below about the collection and processing of your personal data when using our website.
This privacy policy applies to the following websites:
    
- https://www.livebuy.io (hereinafter: "website")

I. Responsible party Responsible for the collection and processing of your personal data is the

LIVEBUY UG (limited liability)
Urban Street 116 
10967 Berlin
Germany
E-mail: hello@livebuy.io

II. Contact person for data protection

You can reach LIVEBUY's contact person for data protection under the following data:
KANZLEI.ONLINE - Online. Technology. Law.
Website: www.kanzlei.online 
E-mail: info@kanzlei.online 

III. General information on the handling of your personal data

1. Collection and processing of your personal data
In principle, we collect and process personal data directly from you. 
Personal data is all data that can be related to you personally, e.g. name, address, e-mail address, user behaviour.
The collection and processing of personal data is generally based on the following legal grounds:

    - on the basis of consent (Art. 6 para. 1 lit. a DSGVO)
    - for the purpose of fulfilling the contract (Art. 6 para. 1 lit. b DSGVO)
    - for the purpose of safeguarding legitimate interests (Art. 6 para. 1 lit. f DSGVO)

In the relevant section of this data protection declaration, we explain in detail which personal data we specifically collect from you and process, the legal basis for this and how long we store the data in each case.


2. Storage period of the data
We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to retention obligations under commercial or tax law. If there are no further retention obligations, the data will be routinely deleted once the purpose has been achieved. 


3. Transmission of your data 
a. Data transmission to third parties within the country

If necessary, personal data will be passed on to external companies (hereinafter: "
third parties").

We transfer your data either to third parties, provided that a data protection-related transfer authorisation exists. In addition, we also transfer your data to third parties within the scope of commissioned processing pursuant to Art. 28 DSGVO. Our service providers are strictly bound by instructions and contractually obligated to us accordingly. We use the following service providers: 

   - Hosting service provider
   - CRM service provider
   - Web analytics service provider

b. Data transfer to third parties in third countries

In some cases, we transfer your data to service providers abroad as part of commissioned processing. As a suitable guarantee for the lawfulness of the data transfer, we have concluded corresponding order processing contracts and - where necessary - EU standard contracts in accordance with Art. 46 (2) lit. c DSGVO with the order processors.

In the case of purely informational use of our websites, we only collect the following personal data which your browser transmits to our server and which is technically necessary for us to be able to display our websites to you and to ensure stability and security:


1. Storage of the IP address
We store the IP address transmitted by your web browser strictly for the purpose of recognising, limiting and eliminating attacks on our websites for a period of 24 hours. After this period, we delete or anonymise the IP address. The legal basis is Art. 6 para. 1 lit. f DSGVO.


2. Usage data
When you visit our websites, so-called usage data is temporarily stored on our web server as a log for statistical purposes in order to improve the quality of our websites. This data record consists of

   - of the page from which the URL/file was requested,
   - the name of the queried URL/file,
   - the date and time of the query,
   - the amount of data transferred,
   - the access status/http status code (URL/file transferred, URL/file not found),
   - the description of the type of web browser used,
   - the IP address of the requesting computer

 If you contact us via a form (e.g. the "Request a demo" form), we require certain information from you in order to process your request. The respective mandatory details (e.g. name, e-mail address) are marked with an asterisk. All other information (e.g. telephone number) is voluntary.

By sending the respective contact form, you give us your consent to electronically record and store the data you provide. We will only use your data to process your enquiry.

The legal basis of the processing is Art. 6 para. 1 lit. a DSGVO. 

Your consent can be revoked at any time, e.g. by e-mail to: hello@livebuy.io .

When you enter into a contract with us to order our product, we process your personal data to the extent that we need it to process your order. In doing so, the personal data is used for the invoice data, among other things. 

We store and use your personal data, which you transmit to us in the course of an order process, in accordance with Art. 6 Para. 1 lit. b DSGVO, exclusively for the processing of your orders. We use your email address for messages regarding the status of your order. 

Our websites use so-called cookies in several places. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive).

Cookies can basically be divided into technically necessary cookies and technically non-necessary cookies.


1. Technically necessary cookies
We use technically necessary cookies that are required for the operation of the websites and to ensure their functionality. A distinction can be made between technically necessary cookies as follows:
   
   - Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies.
      These store a so-called session ID, with which various requests from your browser can be assigned to the joint session.
      This enables your computer to be recognised when you return to our website. The session cookies are deleted when
      you log out or close the browser.
   - Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the
      cookie. You can delete the cookies at any time in the security settings of your browser.

The legal basis for setting this type of cookie is our legitimate interest (Art. 6 para. 1 lit. f DS-GVO).


Cookiebot

On our website we integrate a web service of the company Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: "Cookiebot"). 

We use Cookiebot to ensure the full functionality of our website and to provide you with our Cookie Banner.

The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO.

The legitimate interest consists in the error-free functioning of the website and the fulfilment of legal obligations.

The data is deleted as soon as the purpose of its collection has been fulfilled.

Further information on the handling of personal data can be found in the privacy policy of cookiebot.com: https://www.cookiebot.com/de/privacy-policy/. 

You can prevent the collection and processing of your data by cookiebot.com, for example, by deactivating the execution of script code in your browser.


2. Technically non-essential cookies
With your consent (Art. 6 para. 1 lit. a EU-DS-GVO), we also use technically non-essential cookies. These cookies serve to make our offer more user-friendly, effective and secure.

These cookies allow us to analyse how users use our websites. This enables us to design the website content according to visitor needs. 

If you have given your consent here, you can of course revoke this at any time without giving reasons in our cookie banner. 


a) Google Analytics

On our website we use the tracking tool Google Analytics from Google Ireland Limited. 

Through this, interactions with our website by you as a user are recorded and systematically evaluated. Since we have activated IP anonymisation on this website, your IP address will, however, be shortened by Google beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there.

The following data will be stored from you:

   
- The first three bytes of your IP address- Google Analytics ID assigned to you.
   - The accessed web page The referrer (the website from which you arrived at the accessed website)
   - The further subpages called up
   - The length of stay on the website
   - The frequency of the web page view
   - Browser type used
   - Language settings used Device and operating system used

The legal basis for the processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a. EU-DS-GVO. You can revoke your consent at any time here.

The purpose of processing your personal data through the Google Analytics service is to analyse how our website visitors interact with our website. By evaluating the data obtained here, we can optimise our offer and increase user-friendliness.

We delete or anonymise the data collected by Google Analytics as soon as it is no longer required for our purposes.

Information of the third party provider: Google Dublin, Google Ireland Ltd. , Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, Privacy policy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and Privacy policy: http://www.google.de/intl/de/policies/privacy .


b) Hotjar

This website uses the web analytics service Hotjar provided by Hotjar Ltd.

With this tool, movements on the website can be tracked (so-called heat maps). For example, it is possible to see how far users scroll and how often they click on which buttons. Furthermore, with the help of the tool it is also possible to collect feedback directly from the users of the website. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. The above analysis is carried out on the basis of your consent pursuant to Art. 6 para. 1 lit. a. EU-DS-GVO, which you can revoke in our cookie banner or at any time here https://www.hotjar.com/legal/compliance/opt-out/.

We pay special attention to the protection of your personal data when using this tool. We can only track which buttons you click and how far you scroll. Areas of the websites in which personal data of you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable at any time. 

Information from the third-party provider:

Hotjar Ltd is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel: +1 (855) 464-6788). For more information about Hotjar Ltd and about the Hotjar tool, please visit: https://www.hotjar.com . The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy 


c) Hubspot

On our website and in our emails, we use HubSpot for the service. 

HubSpot is a US company with a branch in Ireland: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

Hubspot is a software solution that we use to cover various aspects of our online marketing, including contact management (e.g. CRM) and reporting.

Tracking

We use a tracking mechanism in the context of communication with our customers to measure the success of our marketing measures if the user has given us their consent to do so. The same applies in connection with the use of our Typeform contact forms.

The information is stored on servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which LIVEBUY services are of interest to users. We use all collected information exclusively to optimise and evaluate our marketing measures.

You can find more information in HubSpot's privacy policy

As part of the optimisation of our marketing measures, the following data may be collected and processed via Hubspot:

   - Pages viewed
   - Operating system version
   - Internet service provider
   - IP address- Device model and version
   - Duration of the visit
   - Geographical position'
   - Browser type
   - Reference URL
   - access times
   - Clicked links
   - Clickstream data

Messages

Furthermore, to improve the user experience on our website, we use HubSpot's live chat service "Messages" (round chat icon at the bottom right of the screen) for sending and receiving messages on some subpages. If you agree to and use this function, the following data will be transmitted to HubSpot's servers:
   
   - Content of all sent and received chat messages
   - Context information (e.g. page on which the chat was used)

The legal basis for the processing of your personal data is your consent pursuant to Art. 6 (1) lit. a DSGVO. If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.

1. Google tag manager
Our website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags that are implemented with the Google Tag Manager.

For further information, please visit http://www.google.de/tagmanager/use-policy.html 


2. Typeform
We use the tool "Typeform" for the collection of personal data within the scope of our contact form. By submitting the form, the user declares his consent to the collection and processing of the data provided by him in the Typeform contact form.

Further information on data processing in connection with Typeform can be found in Typeform's data protection information: https://admin.typeform.com/to/dwk6gt 

Information on the third-party provider: 
Typeform is provided by TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona. 


3. Plausible.io
We use the provider Plausible (https://plausible.io) to collect statistics about the use of our website. Among other things, we read from this which content is well received by our readership. The legal basis is the user's consent (Art. 6 para. 1 p. 1 lit. a DSGVO).

Information on what data is processed can be found here: https://plausible.io/data-policy

The purpose of the processing is range measurement (e.g. access statistics, recognition of returning visitors), tracking (e.g. interest/behaviour-related profiling, use of cookies), visit action evaluation and profiling (creation of user profiles). 

LIVEBUY maintains a LinkedIn presence.


1. Name and address of the person responsible for the operation
The person responsible for the company's presence within the meaning of the EU General Data Protection Regulation (GDPR) and other data protection regulations is:

   - LinkedIn - LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland)

You use these platforms and their functions at your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).


2. Purpose and legal basis
We ourselves maintain a company presence on LinkedIn in order to communicate with LinkedIn users and to inform them about our offers in this way.

In addition, we collect data for statistical purposes in order to be able to further develop and optimise the content and to make our offer more attractive. The data required for this purpose (e.g. total number of page views, page activities and data provided by visitors, interactions) are processed and made available by LinkedIn ks. We have no influence on the generation and presentation of this data.

The processing of your personal data by LIVEBUY is based on our legitimate interests in effective information and communication pursuant to Art. 6 para. 1 sentence 1 lit. f. DSGVO.


3. Your rights / objection options
If you are a member of LinkedIn and do not want the network to collect data about you via our presence and link it to your stored membership data with the respective network, you must

   - log out of the respective network before visiting our company website
   - delete the cookies present on the device and
   - Exit and restart your browser.

After logging in again, however, you will once more be recognisable to the network as a specific user.

For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:

   - LinkedInPrivacy Statement: https://www.linkedin.com/legal/privacy-policy
   - Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

However, since LIVEBUY does not have complete access to your personal data, you should contact the providers of LinkedIn directly if you wish to assert your rights, as they each have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact hello@livebuy.io .

When processing your personal data, the GDPR grants you the following rights:


1. Right of access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you are being processed; if this is the case, you have the right to be informed about these personal data and to receive the information listed in detail in Article 15 of the GDPR.

2. Right to rectification and erasure (Art. 16 and 17 GDPR)
You have the right to request the correction of inaccurate personal data concerning you and the deletion of your personal data without delay.

3. Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of any review.

4. Right to data portability (Art. 20 GDPR)#
In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

5. Right to object (Art. 21 GDPR)
If data is collected on the basis of Art. 6 (1) (f) EU-DS-GVO (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

6. Right of appeal to a supervisory authority (Art. 77 DSGVO)
You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint may in particular be asserted before a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. 

The supervisory authority responsible for LIVEBUY in Berlin is the

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin

In order to protect your data from access by unauthorised persons as comprehensively as possible, we take various technical and organisational measures. We use encryption procedures on our pages.

The data exchange from your computer to our website and vice versa is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. There is also the option of using alternative communication channels (e.g. by post).

We reserve the right to revise this Privacy Policy from time to time.

Status: February 2021