Home
Rechtliches
Datenschutz

Data protection

Contact Information

enventa Group GmbH

In midfield 1

76135 Karlsruhe
phone
+49 721/9099 74-0
fax
+49 721/9099 74-99
email
info@enventa-group.com
Managing Director:
Daniel Plohnke, Stephanie E. Kliner
Registry court:
Mannheim District Court, HRB 742871
Sales tax ID:
DE 351297029
Web design and development:
Halbstark GmbH - Webflow Agency
www.halbstark.de

Privacy statement

General notice and mandatory information

We, enventa Group GmbH and its affiliated companies (hereinafter “we” or “enventa Group”), are pleased that you have visited our website and that you are interested in our group of companies and our products and services.

We take the protection of your personal data very seriously. Your personal data is processed exclusively within the framework of the legal provisions of European Union data protection law applicable to us, in particular the General Data Protection Regulation (hereinafter “GDPR”) and in addition to the Federal Data Protection Act.

With this privacy policy, we inform you about the processing of your personal data and about your rights as a data subject when using our website. The terms used, such as “personal data” or their “processing”, correspond to those of the GDPR.

1. Responsible person and data protection officer

Responsible for data processing within the meaning of data protection laws is:

‍
enventa Group GmbH, Im Mittelfeld 1, 76135 Karlsruhe
Telephone: +49 721 909974-0
email: info@enventa-group.com

You can view our legal notice here.
https://www.enventa-group.com/legal/impressum

You can contact our data protection officer as follows:

‍Dr. Oliver Meyer-van Raay, V-Formation GmbH, Stephanienstr. 18, 76133 Karlsruhe, 
om@v-formation.gmbh

If you have any questions about data protection and would like to assert data subject rights, please contact: compliance@enventa-group.com

2. Subject matter of data protection

The subject of data protection is personal data. This is all information relating to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as name, postal address, e-mail address or telephone number, but also information that is necessarily generated while using our website, such as information about the start, end and scope of use as well as the transmission of your IP address.

3. Data processing when you visit our website

It is generally possible to use our website without registration and without providing personal data. Even if you use our website in this way purely for informational purposes, personal data can be collected and processed automatically. The following is an overview of the type, scope, purposes and legal basis of data processing via our website.

a.) Provision of our website

When you access our website through your device, we automatically collect and process the following data using server log files:

  • Pages visited on our domain
  • date and time of access,
  • duration of the visit,
  • type of terminal device,
  • operating system used,
  • the features that you use
  • amount of data sent,
  • type of event,
  • Referrer-URL
  • domain name
  • IP address

We process this data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, namely to provide and display the website, to ensure and maintain technical operation, for the purpose of identifying and eliminating faults and for security reasons (e.g. to investigate cases of misuse or fraud). When you visit our website, this data is automatically processed. Without this provision, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your identity.

The collected data is usually deleted after three months, unless we exceptionally need it longer for the purposes mentioned above. In such a case, we will delete the data immediately after the purpose has expired.

As part of the processing of data, we use Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via the Cloudflare network. This enables Cloudflare to analyze traffic between your browser and our website and serve as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described here.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.cloudflare.com/privacypolicy/. You can find more information about security and privacy at Cloudflare here: https://www.cloudflare.com/privacypolicy/.

b) Cookies

In addition to the data mentioned in section 3. lit. a, when you use our website, we use technical tools for various functions, in particular cookies, which can be stored on your device. When you visit our website and at any time later, you can choose whether to allow cookies to be set in general or which individual additional functions you would like to select. You can make changes in your browser settings or via our cookie banner carry out.

The technical structure of the website requires us to use technically necessary (necessary) cookies. Without these techniques, our website cannot be displayed completely correctly or the support functions could not be enabled. You cannot opt out of these cookies if you want to use our website. The legal basis for this processing is our legitimate interest in the functionality of the website in accordance with Art. 6 para. 1 lit. f) GDPR.

We only set various categories of cookies after you have given your consent. You can use the desired cookies when you visit our website via the so-called cookie banner select. The functions are only activated with your consent and can be used in particular to analyse and improve visits to our website, to make it easier for you to use different browsers or devices, to recognize you when you visit or to advertise (possibly also to tailor advertising to your interests and to measure the effectiveness of ads). The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time without affecting the permissibility of processing until the withdrawal.

For detailed information on the type, scope, purposes, legal bases and options for objecting to data processing with cookies, please refer to the following descriptions of the individual functions that are based on the use of cookies.

c) Matomo

This website uses the open source web analysis service Matomo (formerly Piwik). The information generated during tracking about the use of this website is stored on our server. The IP address is anonymized before storage.

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of your consent in accordance with Article 6 (1) (a) GDPR. If you do not want Matomo to track your usage behavior, you can give your consent in our cookie banner In this respect, refuse or revoke. You can also disable the corresponding option in your browser's system settings. You can delete saved cookies at any time in your browser's system settings.

We store your data as long as we need it for the respective purpose, or as long as you have not objected to the storage of your data or withdrawn your consent. The information generated about the use of this website will not be passed on to third parties.

d) Use of SalesViewer® technology

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes. For this purpose, Javascript-based code is used, which is used to collect company-related data and use it accordingly. The data collected using this technology is encrypted using a non-recoverable one-way function (so-called hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website.

We cannot rule out the possibility that, in exceptional cases — e.g. through targeted comparison of IP addresses with the tracking data obtained — users may be identified as personal. In these cases, we process the personal data on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, the legitimate interests arising from the above purposes.

The data stored as part of Salesviewer will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any legal storage requirements.

You can object to the collection and storage of data at any time with effect for the future by clicking this link https://www.salesviewer.com/opt-out Click to prevent SalesViewer® from collecting data within this website in the future. An opt-out cookie for this website is stored on your device. If you delete your cookies in this browser, you must click this link again.

e) HubSpot CRM

We use HubSpot CRM on this website. HubSpot is a software company from the USA
(HubSpot Inc., Two Canal Park, Cambridge, MA 02141 USA), with hosting location in Europe,
hereinafter referred to as “HubSpot”.
We use HubSpot for our online marketing activities. This is a
integrated software solution that enables us, among other things, to identify existing and potential
to manage customers and customer contacts.
We use HubSpot as follows:
- Email marketing (newsletters and automated mailings, e.g. to provide
information material and downloads)
- Contact management (e.g. storage of contact data in our CRM for
contact)
- Provision of online forms, including for the following purposes:
o Event registrations (e.g. webinars or on-site events)
o Provision of information material
o Sign up for the newsletter
o Request and call-back service

The personal data collected in this way is stored on HubSpot servers within
European Union stored and can be evaluated by us and used for communication with
used by the potential customer or for marketing measures (e.g. newsletter mailings)
become. With HubSpot, we are also able to monitor the user behavior of our contacts on our
To record and analyze a website.
HubSpot is used on the basis of Art. 6 para. 1 lit. f DSGVO. The
The website operator has a legitimate interest in managing customers as efficiently as possible
and customer communication. If a corresponding consent has been requested, the
Processing exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent is valid at any time
revocable.
The data collected and otherwise processed in this way is stored on the servers of this provider
stored and further processed. In this respect, HubSpot acts as our contract processor and
processes the data exclusively in accordance with our instructions. We have this provider carefully

selected and contractually bound accordingly. The assignment is also not precluded
that the provider processes the data outside the European Union and is also based there. Die
Contract documents relevant to the ordering of HubSpot include the EU
Standard contractual clauses, so that ordering is possible in accordance with Article 46 GDPR. Die
Documents can be found here: https://legal.hubspot.com/de/dpa.
For more details, see HubSpot's privacy policy:
https://legal.hubspot.com/de/privacy-policy

‍
 f) Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analyses. It is only used to manage and play out the tools integrated via it. However, Google Tag Manager collects your IP address, which can also be transferred to Google's parent company in the United States.

Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on his website. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR; consent can be withdrawn at any time.

g) Social Media

Within our website, we link to our social media pages on social networks such as Xing, LinkedIn, Facebook, Instagram. After clicking on the respective icon, your user information is transmitted to the respective provider. If you are logged into the social network of the respective provider with your user account and cookies from the respective provider are stored on your device, your visit to our website is associated with your personal user account.

We are represented on the following social networks and process personal data within this framework to publish information about us and to communicate with active users of social media platforms:

We have no influence on the collection and processing of personal data by the respective provider. User data can also be processed by providers outside the EU/EEA. For example, please use the links above to find out from the respective provider how they process your personal data.

We process your personal data that we receive as part of operating our social media pages, in particular for the following purposes:

  • presentation of our company and corporate culture, including existing career and continuing education opportunities at the enventa Group;
  • Announcements and presentation of current events and events, including online seminars;
  • collecting statistical information about the reach of social media channels;
  • carrying out customer surveys, marketing campaigns, sweepstakes, competitions or similar promotions or events;
  • If applicable Reconciliation and storage of data in our customer relationship management system (CRM)
  • Resolution of disputes and legal disputes, establishment, exercise or defense against legal claims or disputes, enforcement of existing contracts.

We process your data on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR, unless expressly stated otherwise, in order to present our company and the offers you have requested on your preferred channels and to be able to respond quickly to your messages and inquiries. In addition, our legitimate interest is to analyze the reach and use of our social media pages in order to achieve an appropriate design and continuous improvement. If you wish to enter into a contractual relationship with an enventa Group company with your request, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR.

Should we intend to process your personal data for purposes other than those mentioned above, we will inform you accordingly before processing.
In particular, we process the following personal data through our social media pages:

  • Usernames on the respective platform and your comments and messages posted by you on our respective social media page.
  • Your activity on our social media pages via the respective platform operator, e.g. (generally anonymized or aggregated) analyses of visits to the social media site, interactions, visits and average duration of video playback, geodata (origin of visitors) and statistics on the relationships of our visitors.
  • Other information that is necessary to answer your inquiries or to uniquely identify you in our systems, where necessary.

When you visit one of our social media pages, the respective platform providers can also process further data about you and create user profiles to display interest-based advertising.

In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media platform, but we would like to point out that these can be asserted most effectively with the respective provider. Only the provider has access to the user's data and can directly take appropriate measures and provide information.

The data collected directly by us via the social media site is deleted from our systems as soon as the purpose for storing it no longer applies, you legitimately ask us to delete it or revoke your consent to storage. Mandatory legal provisions — in particular retention periods — remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social media platform for their own purposes.

4. Data processing when registering on this website

You can register on this website to use additional features on the site. We only use the data entered for this purpose for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse to register.

For important changes, such as the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you in this way.

The data entered during registration is processed for the purpose of carrying out the user relationship established by registration and, if necessary, to initiate further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory storage periods remain unaffected.

5. Newsletter data

If you would like to receive the newsletter offered on the website, we need you to provide us with
an email address and information to verify that you are the owner of the specified email
You have an email address and agree to receive the newsletter. More data is
not collected or only collected on a voluntary basis. We use the service to send our newsletter
HubSpot one. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA.
The data entered in the form is processed exclusively on the basis of your Consent (Art. 6 para. 1 lit. a GDPR). The consent given to store the data, the email. You can revoke your email address and its use to send the newsletter at any time. For example, via the “unsubscribe” link in the newsletter. The legality of what has already been done Data processing operations remain unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be processed by us up to your unsubscription from the newsletter is saved by us or the newsletter service provider, and
deleted from the distribution list after unsubscribing from the newsletter or after the purpose has ceased to exist.
We reserve the right to include email addresses from our mailing list at our own discretion
to delete or block our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO.
After you unsubscribe from the mailing list, your e-mail address will be sent to us or to Newsletter service providers may be blacklisted to prevent future mailings. Data from the blacklist is only used for this purpose and not with other data merged. This is in both your interest and our interest in compliance

the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6
Paragraph 1 lit. f DSGVO). Storage in the blacklist is not limited in time. You can the
Object to storage if your interests outweigh our legitimate interest.

‍

6. Contact

If you contact us, e.g. by e-mail or via a contact form, your details will be processed by us to process your contact request and to process it in accordance with Art. 6 paragraph 1 lit. b) GDPR and, if necessary, also passed on to one of our affiliated companies or to third parties in this context.

As we use our contact form to request entries that are not required to contact us, we have always marked them as optional. We use this information to specify your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and on the basis of your consent (Article 6 (1) (a) GDPR). You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.

Data submitted via the contact form will be processed by us until you request us to delete it, revoke your consent to store it, or until there is no longer any need to store data. Mandatory legal provisions — in particular retention periods — remain unaffected.

7. Recipients of personal data

Within our company, only those people have access to personal data who need it for the purposes specified in each case. We will only share your personal data with external third parties if this is necessary to process or process your request, if there is another legal permission or if we have your consent to do so

Data is transferred within our group of companies for sales and marketing purposes on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR.

We will only share your personal data with external third parties if this is necessary to process or process your request, if there is another legal permission or if we have your consent to do so. External recipients may in particular be service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance of our website. Such contract processors are carefully selected by us and regularly checked. You may only use the data for the purposes specified by us and in accordance with our instructions.

It is also possible that we may have to transfer personal data to authorities and state institutions, such as public prosecutors, courts or tax authorities, for legally compelling reasons. In this respect, the transfer is carried out on the basis of Article 6 (1) lit. c) GDPR.

Furthermore, we may share your personal data with third parties if we offer participation in promotions, competitions, contracts or similar services together with partners or service providers (e.g. transport service providers). In these cases, data is transferred on the basis of consent, to execute a contract with you or to protect our legitimate interests in accordance with Art. 6 para. 1 lit. a), b) and/or f) GDPR.

If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure before transfer that, outside of exceptional cases permitted by law, the recipient either has an adequate level of data protection, e.g. through an adequacy decision by the European Commission, through appropriate guarantees, such as the so-called EU standard contractual clauses of European Union) or your consent to the transfer of data is available.

8. Storage period

We only store your personal data for as long as is necessary to fulfill the purposes or — in the case of consent — as long as you do not withdraw your consent. In the event of an objection, we will delete your personal data, unless their further processing is permitted or even mandatory in accordance with the relevant legal provisions (e.g. as part of commercial and tax storage obligations). We delete your personal data even if we are required to do so for legal reasons.

9. Rights of data subjects

As a person affected by data processing, you have numerous rights. In detail, these are:

  • Right to information: You have the right to receive information about the data we have stored about you.  
  • Right of rectification and deletion: You can request us to correct incorrect data and delete your data.  
  • Restriction of processing: You can ask us to restrict the processing of your data.  
  • data portability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another person responsible.  
  • Objection to data processing on the legal basis of “legitimate interest”: You have the right to object to data processing by us at any time, for reasons arising from your particular situation, insofar as this is based on the legal basis of “legitimate interest”. If you exercise your right to object, we will stop processing your data unless we can prove compelling legitimate reasons for further processing that outweigh your rights.
  • Objection to cookies: You can also object to the use of cookies at any time.  
  • Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of processing your data until you withdraw your consent remains unaffected.  
  • Right to lodge a complaint with the supervisory authority: · You can also file a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

You are only entitled to the rights described above under the condition that the applicable legal requirements have been met, even if this is not expressly mentioned in the above description.

If you have any questions about the processing of your personal data, your rights as a data subject and any consent you have given, you can contact us free of charge. To exercise all of your rights mentioned above, please send a letter to the address given in Section 1 above. Please ensure that we are able to uniquely identify you.

10. Handling of applicant data

There are various ways to apply to us (e.g. by e-mail, post or via the online application tool softgarden). Below, we will inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure that your data will be collected, processed and used in accordance with applicable data protection law and all other legal regulations and that your data will be kept strictly confidential.

Scope and purpose of data collection

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes during job interviews, etc.) insofar as this is necessary to decide whether to establish an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and — if you have given consent — Art. 6 para. 1 lit. a GDPR. The consent can be withdrawn at any time. Within our company, your personal data will only be shared with people who are involved in processing your application.

If the application is successful, the data you submit will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.

Data storage period

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have provided with us for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Article 6 (1) (f) GDPR). The data is then deleted and the physical application documents are destroyed. In particular, storage serves as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has elapsed (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.

Longer storage may also take place if you have given appropriate consent (Art. 6 para. 1 lit. a GDPR) or if legal storage obligations preclude deletion.

Inclusion in the applicant pool

If we do not make you a job offer, it is also possible to include you in our pool of applicants. If accepted, all documents and information from the application will be added to the pool of applicants in order to contact you in case of suitable vacancies.

Inclusion in the pool of applicants is based exclusively on your express consent (Art. 6 para. 1 lit. a DSGVO). The submission of consent is voluntary and has no connection with the ongoing application process. The person concerned can withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided that there are no legal storage reasons.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.

We use softgarden's service for online applications.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

10. Links to offers from third parties

Websites and services from other providers to which our website links have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We expressly dissociate ourselves from all content of all linked third-party offers. Please note that third-party offers linked from our website may install their own cookies on your device or collect personal data. We have no influence on this. If necessary, please contact the providers of these linked third-party offers directly for information.

11. Status

From time to time, it may be necessary to adapt the content of this privacy policy. We therefore reserve the right to change them at any time. We will also publish the amended version of the privacy policy here. The current version of our data protection policy at the time of your visit applies.

 

‍

‍Status: November 2025

‍

‍