This Privacy Policy outlines how the Assessimus Group ("we", "us" or "our") collects, uses, and protects personal data collected from our website visitors ("you", "your"). This policy applies to our website, located at www.assessimus.com. We are committed to safeguarding your privacy and ensuring that your data is protected.

1. Personal Data We Collect

Given the nature of our website, we do not collect personal data automatically. However, when you contact us via email or telephone, you may provide us with certain information voluntarily. This may include:

• Your name
• Contact information, such as your email address and telephone number
• Any other personal data that you voluntarily provide to us

2. How We Use Your Personal Data

The personal data you provide us with is used for the following purposes:

• To respond to your enquiries or provide the services you have requested
• To maintain a record of correspondence with you

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

3. Sharing Your Personal Data

We do not sell or rent your personal data to third parties. However, we may disclose your personal data to the following categories of recipients:

• Service Providers: This includes Webflow, our website hosting provider, and Google Fonts, a service we use to provide fonts on our website. These service providers may collect and process certain personal data as follows:
  • Webflow: As our website hosting provider, Webflow may collect IP addresses, device information, and usage data for security, performance, and analytics purposes.
  • Google Fonts: When fonts are served, Google Fonts may collect IP addresses, referrer URLs, and device information to ensure the fonts are delivered correctly and efficiently.

3.1 WebFlow

We utilize Webflow, a website construction tool, for our website. This service is provided by the U.S.-based company Webflow, Inc., located at 398 11th St., Floor 2, San Francisco, CA 94103, USA.

Webflow processes your data, including within the USA. It's important to note that, as per the judgement of the European Court of Justice, there currently isn't a satisfactory level of data protection for the transfer of data to the USA. This circumstance might potentially involve certain risks for the legitimacy and security of data processing.

Webflow employs so-called Standard Contractual Clauses (SCCs) (= Art. 46 sections 2 and 3 GDPR) as the foundation for processing data at recipients located in third countries (those outside of the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for transferring data to these countries. SCCs are model contracts issued by the EU Commission, intended to ensure that your data aligns with European data protection standards even when transmitted and stored in third countries, such as the USA.

These clauses bind Webflow to adhere to the European level of data protection when handling your pertinent data, even when this data is stored, processed, and managed in the USA. These clauses are predicated on a decision implemented by the EU Commission. You can find this decision and the related standard contractual clauses at this location: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oi?locale=en

Additional details on the standard contractual clauses and the data processed by utilizing Webflow can be found in the Privacy Policy at https://webflow.com/legal/privacy.

3.2 Google Fonts

We utilize Google Fonts, a webfont hosting service, for our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website, your browser loads the required fonts directly from Google’s servers. This involves the transmission of your IP address and other technical information to Google. Google may process your data on servers located in the United States and other countries.

It is important to note that, as per the judgment of the European Court of Justice, there currently isn’t a satisfactory level of data protection for the transfer of data to the USA. This circumstance might potentially involve certain risks for the legitimacy and security of data processing.

Google employs so-called Standard Contractual Clauses (SCCs) (= Art. 46 sections 2 and 3 GDPR) as the foundation for processing data at recipients located in third countries (those outside of the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for transferring data to these countries. SCCs are model contracts issued by the EU Commission, intended to ensure that your data aligns with European data protection standards even when transmitted and stored in third countries, such as the USA.

These clauses bind Google to adhere to the European level of data protection when handling your pertinent data, even when this data is stored, processed, and managed in the USA. These clauses are predicated on a decision implemented by the EU Commission. You can find this decision and the related Standard Contractual Clauses at this location: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oi?locale=en.

Additional details on the standard contractual clauses and the data processed by utilizing Google Fonts can be found in the Google Privacy Policy at https://policies.google.com/privacy.

3.3 Google Analytics (GA4)

We use Google Analytics 4 (“GA4”) to understand how visitors use our website (e.g., which pages are visited, how users navigate, and how the site performs) and to improve our content and user experience. GA4 is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  

Consent / legal basis. GA4 is only used if you give your consent via our cookie banner (Statistics). The corresponding cookies and their storage durations are listed in the Cookie Declaration in Section 4. You can withdraw or change your consent at any time via the “Change your consent” link in the Cookie Declaration.  

IP addresses. According to Google, GA4 does not log or store IP addresses. For EU users, Google drops IP addresses before logging the data.  

Retention. We use Google Analytics’ retention controls. Data is deleted automatically after the configured retention period.  

Further information on Google’s data processing can be found in the Google Privacy Policy at https://policies.google.com/privacy.

4. Cookies

5. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed.

6. Your Rights

As a data subject, you have several rights under the General Data Protection Regulation (GDPR), including:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us.

7. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

8. Contact Us

For any questions or requests relating to your personal data or this Privacy Policy, please contact us at:

Assessimus Group GmbH
Robert-Koch-Str. 2
82152 Planegg
Germany
Email: Hello@assessimus.com