Privacy Policy

Controller

Pulse & Patterns GmbH
Augustusplatz 1–4, 04109 Leipzig, Germany
Email: info@pulsepatterns.com

For all privacy matters, please contact us at fs@pulsepatterns.com.

Summary

We use Google Analytics to understand how our website is used, but only with your consent, which you give or refuse in the cookie banner. We do not use advertising tools. We also process personal data to deliver the website securely, answer your enquiries, send our newsletter if you subscribe, run our prize draw and provide downloads you request. We do not sell personal data.

Hosting and access data

This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow"). When you visit the website, Webflow processes the data your browser transmits so the pages can be delivered securely and reliably: IP address, date and time, requested URL, referrer URL, HTTP status code, transferred data volume, browser and operating system.

• Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and reliable website.
• Retention: server logs are kept by Webflow for a limited period and then deleted or anonymized, unless needed to investigate a security incident.
• Processor and transfer: we have a data processing agreement with Webflow (Art. 28 GDPR). Webflow is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of protection (Art. 45 GDPR). More information: webflow.com/legal/eu-privacy-policy.

Cookies and similar technologies

We use cookies and similar technologies in two ways: strictly necessary ones that the website needs to work, and Google Analytics, which we only use with your consent. On your first visit, a banner lets you accept or reject analytics. You can change or withdraw your choice at any time via "Cookie settings" in the footer.

• Strictly necessary: cookies and storage needed to deliver the website and to remember your cookie choice. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
• Analytics: Google Analytics (see 4.2). Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR.

4.1 Consent management (CookieYes)

We use CookieYes, provided by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, to ask for and store your cookie choices. CookieYes stores your choice in a cookie on your device (cookieyes-consent, valid for one year). It also keeps a consent log with an anonymized IP address, your country, your choice and the date and time, so we can prove consent.

• Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (our obligation to prove consent) and § 25(2) no. 2 TDDDG.
• Transfer: the European Commission has recognized the United Kingdom as providing an adequate level of protection (Art. 45 GDPR).

4.2 Google Tag Manager and Google Analytics

We use Google Tag Manager and Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager manages the scripts on our website. It does not set cookies or analyze your use itself. When the page loads, your IP address is transmitted to Google so the tool can be delivered. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in managing our website efficiently).

Google Analytics only runs if you consent to analytics cookies. It shows us how visitors use our website, for example which pages they view, for how long, and from which website or region they arrive. Google Analytics sets cookies (_ga and _ga_<ID>, valid for up to two years). According to Google, IP addresses of users in the EU are not stored. We do not use Google Analytics advertising features.

• Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw it at any time via "Cookie settings".
• Processor and transfer: we have accepted Google's data processing terms. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.
• Retention: Google deletes event data after the retention period set in our Google Analytics account (at most 14 months).
• More information: policies.google.com/privacy

Contact form and email

If you contact us through our contact form or by email, we process the data you provide to handle your enquiry: name, company, email address, phone number (optional), the topic you select, your message and any file you upload.

• Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps; otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).
• Where data is stored: form submissions, including uploaded files, are stored in Webflow (see section 3) and forwarded to our email system, Microsoft 365 (see section 9).
• Retention: we delete enquiries 12 months after they have been dealt with, unless legal retention obligations require longer storage (for example for business correspondence under German commercial and tax law).

Newsletter

If you subscribe to our newsletter, we use your email address to send you information about our services, insights and events. We only send the newsletter with your consent, which you give by ticking the consent box.

We use the double opt-in procedure: after you sign up, you receive an email asking you to confirm your subscription. You are only added to the list after you confirm. We log the time of sign-up and confirmation and the IP address used, to be able to prove your consent.

• Service provider: CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, as our processor under a data processing agreement (Art. 28 GDPR). Your sign-up is also stored as a form submission in Webflow (see section 3).
• Legal basis: Art. 6(1)(a) GDPR (consent); for logging the sign-up, Art. 6(1)(f) GDPR (our legitimate interest in proving consent).
• Withdrawal: you can unsubscribe at any time via the link in every newsletter or by emailing us. This does not affect the lawfulness of sending before you withdrew.
• Retention: we keep your email address until you unsubscribe. After that, we may keep it on a block list so we do not contact you again.

Prize draw

If you take part in our prize draw, we process your first and last name, email address, company and role to run the draw, notify the winners and deliver the prizes. Taking part does not require subscribing to the newsletter; the newsletter is a separate, optional choice.

• Legal basis: Art. 6(1)(b) GDPR (participation under the prize draw terms).
• Retention: we delete participants' data 12 months after the draw, unless legal retention obligations require longer storage.

Resource downloads

If you request a download, we process your name, email address and company to provide the resource. If you tick the opt-in box, we also use your email address as described in section 6.

• Legal basis: Art. 6(1)(b) GDPR for providing the download; Art. 6(1)(a) GDPR for the optional opt-in.
• Retention: we delete download requests after 12 months.

Recipients and international transfers

We use the following service providers. They act on our instructions under data processing agreements (Art. 28 GDPR).

• Webflow, Inc.
  Purpose: Website hosting, form submissions
  Location: USA
  Transfer safeguard: EU-U.S. Data Privacy Framework
• Google Ireland Limited
  Purpose: Google Tag Manager, Google Analytics (with consent)
  Location: EU; possible processing by Google LLC in the USA
  Transfer safeguard: EU-U.S. Data Privacy Framework
• CookieYes Limited
  Purpose: Consent management
  Location: United Kingdom
  Transfer safeguard: EU adequacy decision for the UK
• CleverReach GmbH & Co. KG
  Purpose: Newsletter delivery and double opt-in
  Location: Germany
  Transfer safeguard: Not needed (EU)
• Microsoft Ireland Operations Limited
  Purpose: Email (Microsoft 365, Exchange Online)
  Location: EU; possible processing in the USA
  Transfer safeguard: EU-U.S. Data Privacy Framework and Standard Contractual Clauses

We do not otherwise pass on your data, unless we are legally required to.

Links to social media profiles

Our website links to our profiles on LinkedIn, YouTube, Instagram and Facebook. These are simple links, not embedded plugins: no data is sent to these platforms until you click a link. Once you are on the platform, its own privacy policy applies.

Your rights

Under the GDPR, and subject to its conditions, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we rely on consent, you can withdraw it at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.

To exercise your rights, email fs@pulsepatterns.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Sächsische Datenschutz- und Transparenzbeauftragte, Dr. Juliane Hundert
Email: post@sdtb.sachsen.de
Website: www.datenschutz.sachsen.de
Phone: +49 351 85471-101

Data security

We protect personal data with appropriate technical and organizational measures, including TLS encryption of the whole website, access controls and need-to-know principles.

Minors

Our website is not directed at children under 16. We do not knowingly collect their data.

Changes to this policy

We update this policy when our website, services or legal requirements change. The version published here applies.