This Privacy Policy outlines how the Assessimus Group ("we", "us" or "our") collects, uses, and protects personal data collected from our website visitors ("you", "your"). This policy applies to our website, located at www.assessimus.com. We are committed to safeguarding your privacy and ensuring that your data is protected.

1. Personal Data We Collect

Given the nature of our website, we do not collect personal data automatically. However, when you contact us via email or telephone, you may provide us with certain information voluntarily. This may include:

• Your name
• Contact information, such as your email address and telephone number
• Any other personal data that you voluntarily provide to us

2. How We Use Your Personal Data

The personal data you provide us with is used for the following purposes:

• To respond to your enquiries or provide the services you have requested
• To maintain a record of correspondence with you

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

3. Sharing Your Personal Data

We do not sell or rent your personal data to third parties. However, we may disclose your personal data to the following categories of recipients:

• Service Providers: This includes Webflow, our website hosting provider, and Google Fonts, a service we use to provide fonts on our website. These service providers may collect and process certain personal data as follows:
  • Webflow: As our website hosting provider, Webflow may collect IP addresses, device information, and usage data for security, performance, and analytics purposes.
  • Google Fonts: When fonts are served, Google Fonts may collect IP addresses, referrer URLs, and device information to ensure the fonts are delivered correctly and efficiently.

3.1 WebFlow

We utilize Webflow, a website construction tool, for our website. This service is provided by the U.S.-based company Webflow, Inc., located at 398 11th St., Floor 2, San Francisco, CA 94103, USA.

Webflow processes your data, including within the USA. It's important to note that, as per the judgement of the European Court of Justice, there currently isn't a satisfactory level of data protection for the transfer of data to the USA. This circumstance might potentially involve certain risks for the legitimacy and security of data processing.

Webflow employs so-called Standard Contractual Clauses (SCCs) (= Art. 46 sections 2 and 3 GDPR) as the foundation for processing data at recipients located in third countries (those outside of the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for transferring data to these countries. SCCs are model contracts issued by the EU Commission, intended to ensure that your data aligns with European data protection standards even when transmitted and stored in third countries, such as the USA.

These clauses bind Webflow to adhere to the European level of data protection when handling your pertinent data, even when this data is stored, processed, and managed in the USA. These clauses are predicated on a decision implemented by the EU Commission. You can find this decision and the related standard contractual clauses at this location: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oi?locale=en

Additional details on the standard contractual clauses and the data processed by utilizing Webflow can be found in the Privacy Policy at https://webflow.com/legal/privacy.

3.2 Google Fonts

We utilize Google Fonts, a webfont hosting service, for our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website, your browser loads the required fonts directly from Google’s servers. This involves the transmission of your IP address and other technical information to Google. Google may process your data on servers located in the United States and other countries.

It is important to note that, as per the judgment of the European Court of Justice, there currently isn’t a satisfactory level of data protection for the transfer of data to the USA. This circumstance might potentially involve certain risks for the legitimacy and security of data processing.

Google employs so-called Standard Contractual Clauses (SCCs) (= Art. 46 sections 2 and 3 GDPR) as the foundation for processing data at recipients located in third countries (those outside of the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for transferring data to these countries. SCCs are model contracts issued by the EU Commission, intended to ensure that your data aligns with European data protection standards even when transmitted and stored in third countries, such as the USA.

These clauses bind Google to adhere to the European level of data protection when handling your pertinent data, even when this data is stored, processed, and managed in the USA. These clauses are predicated on a decision implemented by the EU Commission. You can find this decision and the related Standard Contractual Clauses at this location: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oi?locale=en.

Additional details on the standard contractual clauses and the data processed by utilizing Google Fonts can be found in the Google Privacy Policy at https://policies.google.com/privacy.

4. Cookies

No cookies are currently used on our website. Our website may use cookies in the future. In this case, we will update this privacy policy accordingly.

Please note that you can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended without them. If you wish to delete or block any cookies, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies.

5. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed.

6. Your Rights

As a data subject, you have several rights under the General Data Protection Regulation (GDPR), including:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us.

7. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

8. Contact Us

For any questions or requests relating to your personal data or this Privacy Policy, please contact us at:

Assessimus Group
Bergstraße 68
10115 Berlin
Germany
Email: Hello@assessimus.com