Legal
Privacy & Data Protection
Clevver GmbH · Last updated: 2025
Any collection, processing and use (hereinafter "use") of data is solely for the purpose of providing our services. The services of Clevver have been designed to use as little personal information as possible. For that matter, "personal data" is understood as all individual details about a person or factual circumstances of an identifiable natural person (so-called "affected person").
The following statements on data protection describe what types of data are collected when accessing our website, what happens with these data and how you may object to data usage.
Person Responsible (controller)
Responsible within the meaning of the EU General Data Protection Regulation (GDPR) is:
Clevver GmbH
Friedrichstraße 155
10117 Berlin
Phone: +49 30 467 260 777
Email: [email protected]
Data Security Officer
Clevver has a data security officer. If you have any questions about data protection, you can contact us at the following email address:
or by mail:
Clevver GmbH
Friedrichstraße 155
10117 Berlin
Technical provision of transaction data
For the technical provision of transaction data as part of our services Clevver GmbH is bound by instruction supported by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe and Amazon Web Services Inc. (AWS), 410 Terry Avenue North, Seattle, WA 98109-5210. Regarding the collection, use and processing of data in the context of our services, there is a written agreement between Clevver (purchaser) and netcup GmbH (contractor) as well as between Clevver (purchaser) and AWS Inc. regarding the processing of order data according to Art. 28 GDPR.
Which data will be used
When visiting our website, our web servers temporarily store every access in a log file. The following data is collected and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Transmitted amount of data
- Message if the retrieval was successful
· Detection data of the browser and operating system used
- Website from which access is made
- Name of your Internet access provider
- Other data may be retrieved by our partners. You will find information about this below.
This data is processed on the basis of Art. 6 Para. 1 S.1 lit. f) GDPR for the purpose of enabling the use of the website (connection establishment), system security, technical administration of the network infrastructure and optimization of the Internet offering. The IP address is evaluated only in case of attacks on our network infrastructure or the network infrastructure of our Internet provider.
Furthermore, no input of your personal data is required to use our website.
Protection of your data
We have taken technical and organizational measures to ensure that the requirements of the EU General Data Protection Regulation (GDPR) are met by us, as well as, by external service providers working for us.
If we work with other companies to provide our services, such as email and server providers, this will only be done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in terms of technical and organizational data protection skills. This selection procedure will be documented in writing and an agreement on the order processing of data (order processing contract) will only be concluded if the third party complies with the requirements of Art. 28 GDPR.
Your information will be stored on specially protected servers. Access to it is only possible for a few specially authorized persons. Our website is SSL/TLS encrypted, as can be seen by the https:// at the start of our URL.
Use of cookies
In addition to the aforementioned data, cookies are stored on your computer while you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you use. Through this the stored information flows to Clevver or the party that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. Cookies are used to analyze the use of www.clevver.io in anonymized or pseudonymized form. Also, cookies enable personalized advertisements on this website.
This website uses the following types of cookies. The extend and function of which are explained below:
- Transient cookies (see a)
- Persistent cookies (see b)
a) Transient cookies are automatically deleted when you close the browser. These include session cookies. Transient cookies store your session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or closed the browser.
b) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.
Cookies may also be third party cookies.
You can delete the cookies in the security settings of your browser at any time. Please be aware that you may not be able to use all features of this site, when deleting the cookies from your browser history. The setting of cookies can be prevented by appropriate settings in the user's Internet browser at any time.
The cookies set on this website are used to track user behavior on this website. We can recognize how long you have been on our site and which links you click. In addition, we recognize whether you have been referred to us by a search engine.
This processing is legally based on Art. 6 para. 1 s. 1 lit. f) GDPR. Our legitimate interests are to provide a stable connection and an easy, uninterrupted user experience for the visitors of our website. Also, we evaluate all visits of our website. This happens for safety, improvement and stability reasons.
Deletion of personal data
We process personal data only if necessary. As soon as the purpose of the data processing is fulfilled, deletion of the data is carried out according to the standards of the deletion concept, unless legal regulations oppose this.
How Can I Exercise My Data Subject Rights? If you would like to access, review, update, rectify, and delete any Personal Information we hold about you, or exercise any other data subject right available to you under the EU General Data Protection Regulation (GDPR), please write us an email at [email protected]. Our privacy team will examine your request and respond to you as quickly as possible. Please note that we may still use any aggregated and de-identified Personal Information that does not identify any individual and may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We remind you that you are also entitled to lodge a complaint with a supervisory authority. For more information, you can visit the website of the Berlin Commissioner for Data Protection and Freedom of Information at https://www.datenschutz-berlin.de/buergerinnen-und-buerger/ihre-beschwerde-bei-uns/beschwerdeformularContact
Via the website www.clevver.io it is possible to contact us via email or via contact form. This will require different data to answer the request, which will be automatically saved for processing. The following data will at least be collected within the contact form (marked as mandatory field): email address, first name, surname and company name. Your data will not be passed on to third parties, unless you have given your consent.
The legal basis depends on what the reason for your request is: Therefor data processing will be based on Art. 6 para. 1 s. 1 lit. a) GDPR or Art. 6 para. 1 s. 1 lit.b) GDPR.
Registration on the website
The data subject can register on our website. This requires the data subject to enter personal data in the registration form. The following data is at least collected for: email address, first and last name. The information provided by the data subject in the registration mask will be used exclusively for processing and will not be disclosed to third parties. In order to use the services offered by Clevver, the identity of the data subject is verified by at least one valid identification document when ordering a product and personal data of the identification documents are stored. We work with Sumsub (Sum and Substance Ltd., 30 St. Mary Axe, London EC3A 8BF, United Kingdom) for verification. The verification process includes a so-called liveness check, in which a short video sequence and biometric facial features are recorded to confirm that the person presenting the identity document is physically present and matches the document. At least the following data is collected: first name, surname, date of birth, place of birth, sex, nationality, registration address, additional postal addresses, photograph and biometric facial features (liveness data), type of identity document, date of issue, ID number, issuing authority, details in the extract from the commercial register/business registration if the person concerned is a company. The data is processed by Sumsub on the basis of an order processing agreement according to Art. 28 GDPR. Where data is transferred outside the EU/EEA, this is safeguarded by Standard Contractual Clauses (Art. 46 GDPR). The Sumsub privacy policy can be found at https://sumsub.com/privacy-notice/.
During and after the registration, the data subject is free to change, correct or delete their personal data.
If the user provides personal data that belong to the mandatory field entry masks or those of the ID document or other uploaded documents, the legal basis for data processing is based on Art. 6 para. 1 s. 1 lit. b) GDPR.
However, if the user also enters personal data in the optional input field or if the uploaded documents contain such data, the data processing is based on Art. 6 para. 1 s. 1 lit. a) GDPR.
Data processing for applications
It is possible to apply for a job via email at [email protected] on our website. For this purpose, personal data is processed and stored for further processing during the respective application process.
In case of successful application and employment, the personal data is stored in accordance with the legal requirements. In case of unsuccessful application, the data will be deleted in accordance with the rules of the local deletion concept. In doing so the provisions of the AGG (German Employment Law), in particular the existing evidence pursuant to § 22 AGG, are taken into account.
Data processing will be based on Art. 6 para. 1 s. 1 lit. a) GDPR and Art. 6 para. 1 s. 1 lit. b) GDPR.
NewsletterOn our website www.clevver.io we offer the opportunity to subscribe to our newsletter. Our newsletter will only be sent if you expressly agree to it when opening a customer account. We will check whether you are the owner of the email address provided or whether the owner agrees to receive the email newsletter. When subscribing to the newsletter, personal data is requested for the purpose of processing the newsletter entry form. Input fields marked with a "*" are mandatory fields. These mandatory fields are necessary in order to send the affected person the newsletter. All other fields are to be filled voluntarily by the data subject, whereby it is expressly pointed out that these fields are not mandatory.
The newsletter has the function of informing the affected parties about offers, news, new functions of existing products and, in particular about blog posts, publications, trade fair appearances, events, services or online appearances of Clevver at regular intervals. The newsletter will be sent via e-mail. The newsletter is only received after registration for the newsletter. In order to meet the requirements of the GDPR, we use DOI (Double Opt-In). If the person concerned signs up for our newsletter, he will receive a confirmation email on the electronic mailbox which he has named in the entry field. This email contains a confirmation link that the data subject must click on. Following this procedure, the affected person has successfully registered for the newsletter. To perform the procedure, the IP address, date and time of login are stored. This is done in order to prevent abuses. A transfer of the data to third parties does not take place, unless the affected person has given his/her consent.
The consent to processing personal data in order to receive the newsletter can be terminated at any time. For this purpose, the data subject can click on the integrated link in each newsletter to unsubscribe. It is also possible to inform Clevver about the revocation of the consent in any other way, e.g. via post or e-mail.
The legal basis Art. 6 para. 1 lit. a) GDPR. Existing customers can also receive newsletters from us which have not given their explicit consent. However, this only takes place within the narrow limits of § 7 para. 3 Unfair Competition Act, which is to be understood in the light of Art. 95 GDPR mirroring Art. 6 para. 1 sentence 1 lit. f) GDPR.
Clevver uses Mailchimp and Zoho for the newsletters. Mailchimp is an online marketing platform operated by The Rocket Science Group LLC, a company headquartered in the State of Georgia in the United States
https://mailchimp.com/legal/privacy
For the newsletter signup, only the email address is transferred to Mailchimp.
Blog
Clevver runs a blog. The user can comment on the blog. These posts can also be commented on by third-party users. If the user publishes a comment on the blog, in addition to the comment content, time of publication and the username (or account) are stored and published. The IP address of the user is also saved. The collection of the aforementioned data serves to ensure the stability and user-friendliness as well as the prevention of abuses of the commentary function, which is why the legal basis is Art. 6 para. 1 sentence 1 lit. f) DS-GVO.
Ordering a product / service
When you order a product/service from Clevver on www.clevver.io, we process your name, address, telephone number and email address in order to conclude the purchase contract with you, to process it, including invoicing in the Clevver system and receipt of payment, to ensure punctual delivery and/or to inform you of changes in delivery. In the case of parcel deliveries, we also pass on your name, address, telephone number and email address to our contracted processors and service providers so that they can process the delivery and, if necessary, communicate with you to announce and coordinate the delivery of your ordered goods.
For all mail/parcel forwarding, we also pass on your name, address, telephone number and email address to our contractually bound processors and service providers so that they can process the mail/parcel forwarding and communicate with you if necessary.
The legal basis for this data processing is Art. 6 para. 1 s.1 lit. b) GDPR. We are processing your data for the fulfilment of purchase contracts and supply agreements.
Credit card and external payment services
If you would like to pay for your order with your credit card, we need data to process your payment. We will ask for your first name, surname address, email address, credit card number, name of the credit card holder and the validity period of the credit card. We check this personal data with the data of your order to detect an abusive use of the credit card or the payment possibility with credit card. Hereafter we will use the data to settle the agreed payment by credit card.
Credit card payments are made via an external payment service provider.
Responsible for this is:
Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA
Stripe is certified according to the Payment Card Industry Data Security Standard (PCI DSS). To use this service, Stripe collects, stores and processes your name, address, telephone number and e-mail address as well as your credit card or bank account information. Stripe is solely responsible for the protection and handling of the data collected by Stripe. The Stripe Terms of Use and Privacy Policy, which you can access at
The legal basis for the data processing is Art. 6 para. 1 s. 1 lit. b) GDPR, i.e. the processing of your data is necessary for the fulfilment of the agreement on payment by credit card.
Your credit card and payment details will be passed on to a credit card acquirer in order to verify the credit card details you have provided and to process payments in the credit card procedure. By choosing to pay by credit card, you consent to the transfer of your credit card and payment details to the credit card acquirer for the purpose of verifying your credit card details and processing credit card payments is given.
PayPal
Clevver offers PayPal as a possible payment service. PayPal is a virtual means of payment. In order to use the payment service via PayPal, you must first register with PayPal.
Responsible Person is:
PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the user uses PayPal as a means of payment, personal data of the user will be transmitted to PayPal, to which he ultimately agrees. The personal data includes name, surname, address, email address, IP address, telephone number, if necessary mobile number and other data, which are necessary for the final payment transaction.
The transmission of the data is necessary to prevent any possible misuse. We inform you that PayPal may transfer your personal information to credit bureaus. This is because PayPal reserves its right to verify the identity and creditworthiness of the user.
In addition to the transfer of data to credit bureaus, it is also possible that PayPal may transfer the personal data to affiliated companies, including subcontractors, as far as this is necessary to fulfill the contractual obligations. The same applies to order processing (see above for more detail)
The data subject may object to processing personal data by PayPal at any time.
For the privacy policy of PayPal, please refer to the following link:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
The legal basis is Art. 6 para. 1 lit. b) GDPR.
The use of social media on our website
We integrated social media platforms on our website via "plug-ins", which may result in social media providers receiving data from you if necessary. We itemised for you in the following.
Clevver has integrated Facebook on the website. The Facebook button can be found on the website at the bottom right.
Responsible for Facebook is:
Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
If an affected person lives outside the US or Canada and Facebook processes data, the person responsible is:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
If the user clicks on the Facebook button, the website is accessed by Facebook. By accessing Facebook through the website of Clevver, Facebook will receive the respective reference data of Clevver. Through this Facebook receives the information that the user has visited the website of Clevver. The plug-ins used by Facebook can be accessed at:
https://developers.facebook.com/docs/plugins/?locale=en_US
If, at the time of visiting Clevver's website, the user is logged in on Facebook (it does not matter if it is their own Facebook account), Facebook receives further information, such as which pages the user has visited on Clevver's website. Facebook collects this information, so theoretically it is possible to assign this information to the Facebook account. The same applies to the "Like" button or when using the comment field; Facebook can also assign this information to the respective logged-in Facebook account.
To prevent this, the user has to visit www.clevver.io after logging off from Facebook. For this the user has to log out via the website Facebook.com.
For more information on the topic of data protection on Facebook, we refer to the following data policy of Facebook:
https://www.facebook.com/about/privacy/
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. We use social media to make our company better known.
Clevver has integrated the services of Instagram on this website Instagram can be reached via the button in the blog at the bottom center of the website of Clevver.
Responsible Person is:
Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
If the user clicks on the Instagram button, the website is entered by Instagram. By accessing the Instagram website via Clevver website ("through clicking the button"), the relevant reference data of Clevver will be transmitted to Instagram. Instagram receives the information that the user has visited the website of Clevver.
If, at the time of visiting Clevver's website, the user is simultaneously logged in via an Instagram account (it does not matter which Instagram account is logged in), Instagram will receive further information, such as which pages of the user visited. Instagram collects this information, so theoretically there is the possibility to assign this information to the Instagram account.
In order to prevent this, the user has the option of logging out of Instagram before accessing the www.clevver.io website. To do this, the user must log off from the Instagram website.
For more information on privacy, we refer to the following data policy from Instagram:
https://help.instagram.com/155833707900388
and
https://www.instagram.com/about/legal/privacy .
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. We use social media to make our company better known.
Clevver has integrated LinkedIn components into its website. LinkedIn can be reached via the button in the blog at the bottom center of the Clevver website.
Responsible Person is:
LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, United States.
If an affected person lives outside of the United States or Canada and LinkedIn processes personal data, the responsible person is:
LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
If the user clicks on the LinkedIn button, LinkedIn will visit the website. By accessing the LinkedIn website through the Clevver website, LinkedIn is provided with the relevant Clevver reference information. LinkedIn receives the information that the user has visited the website of Clevver. The plug-ins used by LinkedIn can be found at:
https://developer.linkedin.com/plugins .
If, at the time of visiting Clevver's website, the user is logged in through a LinkedIn account at the same time (no matter if it's their own LinkedIn account), LinkedIn will receive further information such as which pages the user visits on the Clevver website. LinkedIn collects this information, so there is a theoretical possibility to associate that information to the LinkedIn account.
In order to prevent this, the user has the option of logging out of LinkedIn before accessing the www.clevver.io website. To do this, the user must log out via the LinkedIn website.
For more information about privacy at LinkedIn, we refer to the following LinkedIn data policy:
https://www.linkedin.com/legal/privacy-policy
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. We use social media to make our company better known.
Tracking and analytics
For the continuous improvement of our website www.clevver.io we use the following tracking and analysis tools. Which personal data is processed in each case and how you can reach the respective service providers, you will find below:
Facebook Custom Audience / Facebook-Pixel
Our website uses Facebook's "visitor action pixel" for conversion measurement. The legal basis for the use of the application is Art. 6 Para. 1 S. 1 lit. f) DS-GVO. Our legitimate interest lies in the optimisation of our advertising presence and the monitoring of the use of our website.
Responsible person is:
Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
The Facebook-Pixel can be used to track the behaviour of page visitors after they visit our website. This allows us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and to optimize future advertising measures. Facebook receives the following categories of data: the referral URL, browser information, and the Facebook User ID of the person, if they have a Facebook account and are logged on to Facebook.
The data is stored and processed by Facebook so that it can be linked to the respective user profile and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines. This may allow Facebook to serve advertisements on Facebook pages and pages outside of Facebook. This use of data cannot be influenced by us as the site operator.
https://www.facebook.com/about/privacy/
you will find Facebook's privacy policy.
You can also deactivate the remarketing function "Custom Audiences" in the section Advertisement Settings under
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged in to Facebook.
If you do not have a Facebook account, you can disable Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/ .
Alternatively, you can prevent Facebook Pixel from collecting your information on our site by clicking on the following link. An opt-out cookie will be set in your browser to prevent your information from being collected on future visits to this site with your current browser: Disable Facebook Pixel
Google Analytics
The website www.clevver.io uses Google Analytics for the purpose of needs-based and continuous optimization of our website on the basis of Art. 6 Para. 1 S.1 lit. f) GDPR. This is a service for analyzing access to websites of Google Inc. ("Google") and allows us to improve our website.
Responsible Person is:
Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Cookies enable us to analyze your use of our website. The information collected by a cookie (IP address, access time, access duration) is transmitted to a Google server in the USA and stored there. The evaluation of your activities on our website is transmitted to us in the form of reports. Google may pass on the collected information to third parties, if required by law or if third parties process this data on behalf of Google.
You can also prevent the installation of cookies from Google Analytics by setting your browser software accordingly. In this case, however, it may happen that you cannot fully use all the features of our website. Even through browser extensions e.g. http://tools.google.com/dlpage/gaoptout?hl=en Google Analytics can be disabled and controlled.
At https://www.google.com/intl/en/policies/
As well as under
https://www.google.com/analytics/terms/de.html .
you can find out more about the terms of use and privacy of Google Analytics.
Google Tag Manager
Google Tag Manager is a solution that allows us to manage web site tags through one interface (including Google Analytics and other Google marketing services in our website). The tag manager itself (which implements the tags) does not process users' personal data. Regarding the processing of users' personal data, reference is made to the details of the Google services. Google Tag Manager usage policies can be viewed here:
https://www.google.com/intl/de/tagmanager/use-policy.html .
Tools for advertisement and marketing
Tools are also included on our website to ensure that our website is displayed to you during an internet search, as a relevant search result or as an advertisement. Below, the programs used in connection with our website have been itemised for you:
Bing Ads
Clevver uses Clevver technologies from Bing Ads (bingads.microsoft.com).
Responsible person is:
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA („Microsoft“)
Microsoft will set a cookie on your device if you have reached our website via a Microsoft Bing advertisement. In this way, Microsoft Bing and Clevver can recognize that someone clicked on an ad that was forwarded to the website and reached a previously determined target page (conversion page). Clevver only learns the total number of users who clicked on a Bing ad and were then redirected to the Conversion page. Microsoft collects, processes and uses the cookie information to create user profiles using pseudonyms. These user profiles are used to analyse visitor behaviour and to play out advertisements. No personal information about the identity of the user is processed.
If you do not want information about your behaviour to be used by Microsoft as explained above, you can refuse to set a cookie as required for this - for example, by setting your browser to generally deactivate the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link:
www.choice.microsoft.com/de-DE/opt-out
explain your contradiction.
For more information about privacy and the use of cookies by Microsoft and Bing Ads, visit the Microsoft Web site at
https://privacy.microsoft.com/de-de/privacystatement .
The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR, since there is a mutual interest to become better known through advertising and to enter into co-operations with other companies.
LinkedIn Insight Tag
Our website uses the LinkedIn Insight Tag for conversion tracking, retargeting and analysis of website visitors. The Insight Tag enables LinkedIn to collect data about the visit on our website (including the URL, referrer URL, IP address, device and browser characteristics as well as the time of access).
Responsible person is:
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The IP address is shortened or hashed by LinkedIn so that no direct conclusions can be drawn about the user. We use the data to evaluate the effectiveness of our advertising campaigns on LinkedIn and to optimize them. Insofar as users have logged into a LinkedIn account, LinkedIn can also assign the data to the relevant user account.
Further information on data protection at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy. Members can manage the use of their personal data for advertising purposes in their account settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. Our legitimate interest lies in the optimization of our advertising activities and the analysis of the effectiveness of our LinkedIn campaigns.
Google Ad Manager (former Double Click)We use Google Ad Manager. Legal basis is Art. 6 para 1 s. 1 lit. f) GDPR. Our interest is to cooperate with other companies to reach a broader audience.
Responsible Person is:
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use Google Ad Manager to generate advertisements for our website visitors. Google Ad Manager uses information of your visits of this and other websites to generate advertisements of products and services that might interest you. For further information on the methods used or what you can do to prevent Google Ad Manager from using this information, please refer to the link below:
https://www.google.de/policies/technologies/ads/ .
Google Remarketing
We use Google Remarketing. By using Google Remarketing, we may display advertisements to users (including visiting other websites) that have previously logged into our website. Google Remarketing ultimately enables user-directed personalized advertising. The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR, since here too there is a mutual interest in becoming better known through advertising.
Responsible Person is:
The Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Google Remarketing works by setting a cookie on the user. This use of the cookie gives Google the opportunity to recognize the user if they visit a website that also uses Google Remarketing.
As a result, Google will be notified of the user's IP address or browsing behavior.
The prevention (as well as the deletion) of the cookie setting can be achieved under the appropriate settings in the Internet browser.
The user can object to user-related advertising by Google at any time. For this we refer to:
For more information about Google's privacy policy, please refer to:
https://policies.google.com/?hl=en .
Google-Ads
Clevver has integrated the services of Google-Ads (before Google-AdWords) on its website. Google-Ads is an internet advertising service. The legal basis is Art. 6 para. 1 s.1 lit. f) GDPR. We use Google Ads to promote our company through targeted advertising in Google's search engine results.
Responsible Person is:
Google LLC., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
If the user accesses the Clevver website through a Google ad, Google will set a so-called conversion cookie on the user's system. For the explanation of the cookies, please refer to the passage to the cookies. The conversion cookie is used to create and analyze web-use statistics. 30 days after setting the conversion cookie the cookie loses its validity. This means that the user can no longer be identified. Within these 30 days both Clevver and Google can track which subpages have been accessed. The conversion cookie stores the IP-address when visiting the website. This data is stored in the USA. It is possible that Google will share this information with third parties.
The setting of cookies can be prevented by appropriate settings in the user's Internet browser at any time. The already set cookies can also be deleted in the settings of the Internet browser. We express our concern that preventing cookies from being set may mean that not all features are fully available.
The user may separately object to interest-based personalized advertising by Google. Please refer to the following link:
https:// www.google.de/settings/ads
For further privacy notices of Google refer to:
https://www.google.de/intl/de/policies/privacy/
Other tools of third-party providers
We also use third-party providers to help us with the site's appearance and functionality. These are listed below:
Auth0
Clevver uses the services of Auth0 to manage the logins in the Clevver system.
Responsible person is:
Auth0, 10900 NE 8th Street, Bellevue, WA 98004, USA
Data will be transferred to the USA and processed there. Please also note Auth0's privacy policy at
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. Because it is in our interest to manage our website logins clearly and thus to counter any misuse.
Cloudflare
Clevver's Internet presence is supported by our technology partner CloudFlare Inc.,
Responsible person is:
CloudFlare Inc., 101 Townsend St, San Francisco, CA 94107, USA
All data transmitted to or from this website passes through the CloudFlare, Inc. worldwide network. The data is cached and access is logged. The nearest data center is used on a regular basis. CloudFlare also operates data centres outside the European Union. According to CloudFlare, the temporarily stored data will be deleted within 4 hours, at the latest after 3 days. Further information can be found in CloudFlare's privacy policy:
www.cloudflare.com/security-policy/ .
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. It is in our interest to make our website available to you and to make our website offerings vivid and user-friendly.
Freshworks
Clevver uses the web-based ticket system "Freshdesk".
Responsible person is:
Freshworks Inc., 1250 Bayhill Drive, Suite 315 San Bruno, CA 94066, USA.
The service is used to manage requests made through the contact form on our website, through our email ([email protected] and [email protected]) and within the app through the support form. If you do not agree with the data processing by Freshdesk, you can contact Clevver by telephone or post, for example.
Clevver also uses the application "Freshchat". This is a live chat software from Freshworks. The chat is integrated in the source code of clevver.io via a script. With the use of the chat you automatically use the services of "FreshChat". The data collected includes: chat history, IP- address at the time of the chat and country of origin. This information is not shared with third parties and is used for protection and internal statistics only. The data thus collected will not be used to personally identify the visitor to this website. The purpose and scope of the data collection and the further processing and use of the data by freshchat.io as well as your related rights and setting options for the protection of your privacy can be found in FreshChat's data protection information:
The legal basis used on this side depends essentially on the reason for the user request, which is why it is based either on Art. 6 para. 1 sentence 1 lit. a) GDPR or Art. 6 para. 1 sentence 1 lit. b) GDPR.
Google Maps
This website uses the product Google Maps from Google LLC.
Responsible person is:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using this website, you consent to the collection, processing and use of automated data by Google, its agents and third parties. The provider of this site has no influence on this data transfer.
You can find the Google Maps Terms of Use at
https://www.google.com/intl/de_de/help/terms_maps.html .
The legal basis is Art. 6 para. 1 s.1 lit. f) GDPR. The use of Google Maps is in the interest of making our website appealing and to facilitate the locations of places specified by us on the website.
Google Web Fonts
Clevver uses web fonts provided by Google for uniform representation of fonts on the website.
Responsible Person is:
Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
When you invocate a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. The legal basis is Art. 6 para. 1 s.1 lit. f) GDPR. The reason for us using Google web fonts is our interest to make our website vivid and user-friendly.
If your browser does not support web fonts, a default font will be used by your computer.
For more information about Google Web Fonts, see
https://developers.google.com/fonts/faq
and in Google's privacy policy:
https://www.google.com/policies/privacy/ .
Zoho CRM
Clevver uses Zoho CRM to manage prospect and customer relationships, including lead tracking, sales pipeline and follow-up communication.
Responsible person is:
Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, The Netherlands (with affiliated processors of Zoho Corporation Pvt. Ltd., headquartered in India and the United States).
When you contact us via our website, our forms or directly via email/phone, the information you provide (such as name, email address, telephone number, company name and the content of your enquiry) may be stored and processed in Zoho CRM. Zoho may also use cookies or similar technologies to track interactions on our website that are linked to your contact record.
Zoho is GDPR-compliant and offers EU-based data centers. Data transfers outside the EU/EEA are safeguarded by Standard Contractual Clauses according to Art. 46 GDPR. The Zoho privacy policy is available at https://www.zoho.com/privacy.html.
The legal basis is Art. 6 Para. 1 S.1 lit. b) GDPR (performance of contract or pre-contractual measures) and Art. 6 Para. 1 S.1 lit. f) GDPR (legitimate interest in efficient sales and customer support processes).
TrustpilotYour opinion about our products and our service is important to us. We want to know where we are already good and where we can improve. Customer evaluations are particularly productive for transparency and optimisation, therefore we offer you the possibility to make an evaluation about our service through the evaluation service offered by Trustpilot www.trustpilot.de. For the purpose of your participation, Clevver will forward your email address, your first and last name and the customer number generated by Clevver to Trustpilot.
Responsible person is:
Trustpilot A / S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.
The submission of a rating is free for you as a customer. The creation / opening of a user profile at Trustpilot is required for the submission of a rating or the acquisition of a customer feedback. If a review is made by clicking on the link contained in the invitation, after entering the personal data, e.g. name and email address for verification, a user profile automatically will be created at Truspilot. However, in the case of an evaluation without a prior invitation, a unique customer ID is required for a contractual relationship with the assessed company. By participating in this feedback system your rating will be published on our website as well as on the website of Trustpilot.
Herewith, the consent to the privacy policy and the terms and conditions of Trustpilot go along with. These can be viewed on the web site of Trustpilot, at: http://de.legal.trustpilot.com/end-user-privacy-terms .
By ordering one of our products or services, you expressly agree to the aforementioned transmission of customer data via electronic interface to the Business App of Trustpilot and to the automated dispatch of a rating invitation from this application. If you do not agree with this, please send an email to [email protected].
The use of this service is voluntary therefore the legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR.
Mailgun
System emails for your account
If you have registered for a Clevver account or use any of our products, it may be necessary to periodically provide you with general information about your account or product usage, as well as changes to this Privacy Policy.
We use the Mailgun service (Mailgun Inc., 620 Folsom St., Ste 100, San Francisco, CA 94107, USA) as the email delivery software for such emails to your account. When using your data, Mailgun relies on the EU-US Data Privacy Framework or Standard Contractual Clauses. Further information on the privacy of Mailgun can be found here: https://www.mailgun.com/privacy-policy .
Mailgun keeps meta-data about the emails sent out, so we can check to whom and when emails were sent. This data can be viewed up to 30 days after sending the emails at Mailgun. If you do not want to receive such system emails from us, you must revoke your data protection consent. This leads to the deletion of your account.
The legal basis is Art. 6 Para. 1 S.1 lit. f) GDPR. It is in our interest to inform you via our systems about the product and any other kind of changes.
Google Gemini (AI features in mailbox/postbox)
Clevver integrates AI features in the postbox functionality (such as automated content recognition, summarization, classification and translation of incoming mail). For these features, content of scanned mail items can be transmitted to and processed by Google's Gemini API.
Responsible person is:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (with affiliated processing by Google LLC, USA, where applicable).
The data processed in this context may include the textual and image content of digitized mail items as well as metadata required to perform the AI task. Google processes the data on the basis of an order processing agreement according to Art. 28 GDPR. According to Google's terms for the Gemini API for paid services, content sent to the Gemini API is not used to train Google's foundation models. Where data is transferred to the United States, this is safeguarded by the EU-US Data Privacy Framework and/or Standard Contractual Clauses according to Art. 46 GDPR.
The use of AI features may produce inaccurate, incomplete or misleading results. Such AI-generated outputs are provided for convenience only and do not replace the original document; the customer is responsible for reviewing the original mail item before relying on AI-generated content.
Further information on Google's privacy practices can be found at https://policies.google.com/privacy and on the Gemini API data handling at https://ai.google.dev/gemini-api/terms.
The legal basis is Art. 6 Para. 1 S.1 lit. b) GDPR (performance of contract – provision of the booked postbox services including AI features) and Art. 6 Para. 1 S.1 lit. f) GDPR (legitimate interest in providing efficient processing of mail items).
Service providers from third countries
In order to be able to provide our services, we use the support of service providers from third party countries (non-EU countries). In order to ensure the protection of your personal data in this case, we conclude processing contracts with each - carefully selected - service provider. All of our processors provide sufficient guarantees to implement appropriate technical and organizational measures. Our third country data processors are either located in a country with an adequate level of data protection (Art. 45 GDPR) or provide appropriate safeguards (Art 46 GDPR). Below you may find our categories of processors, the country they are located at and the safeguards or guarantees they provide.
We use the support of the following providers:
Tracking service and Analysis Service, CRM Services und Hosting Services, Administrative Services, USA, certified under the EU-US Data Privacy Framework or operating under Standard Contractual Clauses:
EU-US Data Privacy Framework: The EU-US Data Privacy Framework is an agreement between the United States of America and the European Union to ensure compliance with European privacy standards. The European Commission adopted an adequacy decision for the EU-US Data Privacy Framework on July 10, 2023. For more information, see: https://www.dataprivacyframework.gov/
und
https://www.privacyshield.gov/list
· Payment Service, USA and Europe, binding corporate rules:
Binding Corporate Rules: Article 47 of the GDPR provides the possibility of ensuring data protectionwhen transferring data to a third country via Binding Corporate Rules. These are examined and approved by the data security authorities within the framework of the consistency mechanism pursuant to Art. 63 GDPR. Further information can be found here:
https://www.paypal.com/de/webapps/mpp/ua/bcr
Your rights
You have the following rights with respect to the personal data concerning you:
- Right to information,
- Right to rectification or deletion,
- Right to restriction of processing,
- Right to object to the processing,
- Right to data transfer,
- Right on confirmation.
In the case of a request for information, you must provide sufficient information about your identity and provide proof that it is your personal data. The information relates to data that has been stored regarding your person, the origin of the data, the recipient or the categories of recipients to which data has been transmitted and the purpose of the storage. To exercise these rights, please contact our Privacy Officer, which is mentioned at the beginning of the Privacy Policy.
If you have given your consent to the processing of your data, you can revoke at any time. Such revocation will affect the admissibility of processing your personal data by us.
Insofar as we base the processing of your personal data on the weighting of interests, you may object to the processing. This is the case if processing your data is not required to fulfill a contract with you, which is explained in the following description of the functions. In the event of such a revocation, we ask you to explain the reasons why we should not process your personal data. In the case of your justified objection, we will examine the situation and will either stop processing your data, adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.
Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You may contact us or our responsible data securirty officer via the contact details stated at the beginning of the Privacy Policy.
How you perceive these rights
To exercise these rights, please contact our data security officer:
or by mail:
Clevver GmbH
Friedrichstraße 155
10117 Berlin
Supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of your personal data infringes on the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to Article 78 GDPR.
Subject to change
We reserve the right to change this privacy policy in compliance with legal requirements.