Privacy Policy
Controller and contact
The controller responsible for processing your personal data is neuefische GmbH
Gasstraße 6a, D-22761 Hamburg, Germany. Further contact options can be found in our provider identification ("Imprint").
You can reach our company data protection officer using the aforementioned contact details with the addition "The Data Protection Officer" or by email at datenschutz@neuefische.de.
This privacy policy applies to your contacting us via the contact form on our website for people interested in bootcamps. The general privacy policy applies to the use of our website and the application process, which you can view on our website: https://www.neuefische.de/datenschutz
Personal data
We process your telephone number and the associated connection data as well as your other data provided in this form for the following purposes:
Contract initiation and consultation
Provision of information on request
Statistical analysis to improve our services
Troubleshooting of the service
To the extent permitted by law for advertising and customer acquisition
The legal basis for this processing is Art. 6 para. 1 lit. b GDPR (contract fulfillment and pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interests consisting in the aforementioned processing purposes) and, if you have given your consent, Art. 6 para. 1 lit. a GDPR.
We will only use your data for further advertising purposes, such as e-mail advertising, if you have given us your consent to do so. You can revoke your consent at any time without giving reasons. Further information on the use of data for advertising purposes can be found in our general privacy policy: https://www.neuefische.de/datenschutz
Use of artificial intelligence
We use an AI system that carries out automated callbacks. The AI processes your telephone number and the content of the call in strict compliance with legal requirements. We ensure that the processing of personal data always takes place on a legal basis.
Recipients/data transfer to third countries
We will not pass on your data to third parties, sell it or use it for purposes other than those mentioned above.
In some cases, we use external service providers (processors) to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
If our service providers or partners are based in a country outside the EU and the European Economic Area (EEA), we will inform you of the consequences of this circumstance in this privacy policy.
For transfers to the USA, we rely on the European Commission's adequacy decision on the EU-US data protection framework of July 10, 2023. For other third countries, we use appropriate safeguards such as standard contractual clauses.
Eleven Labs
For AI-based speech synthesis and speech recognition, we use the ElevenLabs service (available at elevenlabs.io), which is provided by Eleven Labs, Inc. (hereinafter referred to as “ElevenLabs”), located at 85 Broad Street, New York, NY 10004, USA. Personal data may be processed in connection with the use of ElevenLabs. This includes, in particular, the text and audio data provided that is necessary for generating synthetic speech or recognizing speech input. ElevenLabs only gets access to this data to the extent necessary to provide the respective service. In addition, ElevenLabs may process automatically generated technical information such as device and connection data to improve and ensure the functionality of its services.
The following categories of personal data are processed when using ElevenLabs:
Texts entered during user interactions or transmitted as documents.
Audio content uploaded, for example, to generate personalized voices.
Technical information: e.g. IP address, Information about the device and browser used.
The data entered is processed for the purpose of establishing and fulfilling a contractual relationship with the user (Art. 6 para. 1 lit. b GDPR).
ElevenLabs transfers and processes personal data in the United States of America. To ensure an adequate level of data protection, ElevenLabs uses EU Standard Contractual Clauses (SCCs) and implements additional protective measures. ElevenLabs is contractually obligated to maintain a level of data protection comparable to that of the GDPR and to ensure the security of the data processed. Further information on this can be found in ElevenLabs' privacy policy: https://elevenlabs.io/privacy-policy. ElevenLabs has also joined the EU-U.S. Data Privacy Framework (DPF).
Personal data related to the use of ElevenLabs will only be processed for as long as necessary for the purpose of processing. Once the purpose of processing no longer applies, the corresponding data will be deleted, provided that there are no legal obligations to retain it.
For transfers to the US, we rely on the European Commission's adequacy decision on the EU-US data protection framework (https://www.dataprivacyframework.gov/EU-US-Framework) of July 10, 2023. For other third countries, we use appropriate safeguards such as standard contractual clauses.
Twilio
We use Twilio technology from Twilio Germany GmbH, Unter den Linden 10, 10117 Berlin, Germany (hereinafter "Twilio") to operate our AI-powered intelligent callback service.
The Twilio platform automatically receives, processes, and forwards phone calls to our systems. The following information is processed as part of this process:
Phone numbers (caller and called party)
Call content (audio data).
This technical infrastructure forms the basis for our digital telephone assistant and significantly improves communication with you.
Protecting your data is particularly important to us. Twilio uses special data residency features to ensure that all information is processed exclusively in data centers within the European Union. Additional security measures prevent access by non-European personnel.
Twilio's security standards are confirmed by several international certifications, including ISO 27001 and 27018 (information security) and SOC 2 (control mechanisms).
We carry out all data transfers and storage using modern encryption technologies to protect confidential information.
We process your data via Twilio on the following legal basis: Art. 6(1)(b) GDPR (contract fulfillment) and our legitimate interest in efficient communication processes (Art. 6(1)(f) GDPR).
You can find detailed information on data processing at Twilio in their privacy policy at www.twilio.com/legal/privacy.
Your rights
Within the legal limits and under the legal requirements, you have the right to
Information about your stored data
Correction of incorrect data
Deletion of your data
Restriction of processing
Revocation of consent
Data portability
Complaint to a supervisory authority in the event of a violation of your rights.
Duration of storage
We only store your data for as long as is necessary for the above-mentioned purposes or as long as statutory retention periods exist.
Do you have any questions about our privacy policy or would you like to exercise your rights? Please contact us using the contact details above.