cauliflower
EN
DE Deutsch EN English FR Français ES Español IT Italiano NL Nederlands
Book a demo
Book a demo

Legal

Privacy Policy

This is a translation of our German privacy policy, provided for your convenience. In the event of any discrepancy between the two versions, the German original prevails.

1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.

2. Controller

The controller responsible for data processing on this website is:

Cauliflower GmbH & Co. KG
Fischertwiete 2
Chilehaus A
20095 Hamburg
Germany

Managing Director: Lukas Jonathan Waidelich
Email: privacy@cauliflower.ai

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar).

3. Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – this requires server log files to be recorded.

Cookies and storage on your device

This website sets no cookies – neither our own nor third-party ones. In particular, we use no marketing or tracking cookies.

Your consent is stored exclusively locally in your browser. We keep no central register of it and generate no identifier by which you could be recognised.

Contacting us and demo requests

If you contact us by email or via our contact or demo form, the details you provide (first and last name, company, email address, role, message, and your optional answer as to how you heard about us) are stored and processed for the purpose of handling your enquiry. Processing takes place on the basis of Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).

Your data is not passed on to third parties for their own purposes. For processing, however, we use carefully selected processors who act exclusively on our instructions (Art. 28 GDPR):

  • Amazon Web Services (AWS), Amazon Web Services EMEA SARL – storage of incoming enquiries in a database (Amazon DynamoDB). Processing takes place exclusively in the EU Frankfurt region.
  • Amazon Simple Email Service (SES), Amazon Web Services EMEA SARL – sending the confirmation of receipt to you and the internal notification to us. Processing takes place in the EU Frankfurt region.

We process this data until the purpose of processing no longer applies and then delete it, unless statutory retention obligations prevent this.

Booking a demo

On our website you can book a demo appointment directly. In doing so we process the appointment you choose, your name, your business email address, your company, the size of your team, the video conferencing solution you choose and, if you provide it, the topic you would like to discuss. We need this information to create the appointment, send you the invitation and hold the demo. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). Without this information we cannot create an appointment; alternatively you can reach us via our contact form or by email.

If the address through which you opened the booking page contains campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), we store them with your booking. They are used solely for the statistical evaluation of our marketing activities; the legal basis for this is Art. 6(1)(f) GDPR. Nothing is stored on or read from your device for this purpose.

To protect against misuse we limit the number of booking attempts. For this we store, for at most two hours, a hash value of your IP address formed with a secret key, not the address itself. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a calendar protected against automated mass bookings.

For bookings we use the following processors, who act exclusively on our instructions (Art. 28 GDPR):

  • Amazon Web Services (AWS), Amazon Web Services EMEA SARL – handling the booking and storing your details in a database (Amazon DynamoDB). Processing takes place exclusively in the EU Frankfurt region.
  • Google Workspace, Google Ireland Limited, Ireland – creating the appointment in our calendar, sending the invitation to your email address and, if you choose Google Meet, holding the video conference. Google may also process data outside the EU; transfers to the USA take place on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
  • Microsoft Teams, Microsoft Ireland Operations Limited, Ireland – only if you choose Microsoft Teams as video conference: creating the meeting and holding the video conference. To create the meeting, Microsoft receives only the start and end of the appointment and the subject “Cauliflower Demo”, not your name or email address. Microsoft may also process data outside the EU; transfers to the USA take place on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We process your details until the purpose no longer applies and then delete them, unless statutory retention obligations prevent this. The technical booking record, which contains neither your name nor your email address, is deleted automatically 60 days after the appointment.

4. Hosting

This website is hosted with Amazon Web Services (AWS). For details, please see the AWS privacy notice: https://aws.amazon.com/privacy/. AWS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable presentation of our website.

5. Your rights

You have the right at any time:

  • To obtain information about the personal data we hold about you (Art. 15 GDPR)
  • To request the rectification of inaccurate data (Art. 16 GDPR)
  • To request the erasure of the data we hold about you (Art. 17 GDPR)
  • To request the restriction of processing (Art. 18 GDPR)
  • To object to the processing of your data (Art. 21 GDPR)
  • To request data portability (Art. 20 GDPR)

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information.

6. Data protection contact

If you have any questions about data protection, please contact us at:
Email: privacy@cauliflower.ai