Privacy Policy
Effective Date: 07.05.2025
1. Introduction
At Passeca, we prioritize the protection of your personal data. This Privacy Policy outlines the types of personal data we collect, the purposes for which we process it, and your rights concerning your data. We adhere to the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Swiss Federal Act on Data Protection (revDSG).

2. Data Controller
Passeca GmbH
Bermersbachstr. 61, 76596 Forbach, Germany
Email: legal@passeca.com
Phone: +4917687551036

3. Data Collection and Processing
3.1. Categories of Personal Data
We may collect and process the following categories of personal data:
  • Identification Data: Name, title, company name.
  • Contact Information: Email address, phone number, and postal address.
  • Professional Information: Job title, industry, company size.
  • Technical Data: IP address, browser type, operating system, device information.
  • Usage Data: Pages visited, time spent on the website, navigation paths.
  • Communication Data: Content of inquiries, feedback, and other communications.
  • Scheduling Data: Appointment details, meeting preferences.
  • Document Data: Signed agreements, timestamps, and related metadata.

3.2. Sources of Data
We collect personal data directly from you when you:
  • Visit our website.
  • Fill out forms or surveys.
  • Schedule appointments.
  • Communicate with us via email or other channels.
Additionally, we may receive data from third-party services integrated into our website, as detailed below.

4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes and legal bases:
  • Contractual Necessity: To fulfill our contractual obligations or to take steps at your request prior to entering into a contract.
  • Consent: When you have given explicit consent for specific purposes, such as subscribing to newsletters or participating in surveys.
  • Legitimate Interests: To improve our services, ensure website security, and analyze user behavior, provided that such interests are not overridden by your rights and interests.
Legal Obligations: To comply with legal requirements, such as tax and accounting regulations.

5. Third-Party Services
We utilize the following third-party services, which may process your personal data. We ensure that all third-party providers adhere to data protection standards equivalent to those in the EU and Switzerland.

5.1. HubSpot
Our website uses HubSpot, a service of HubSpot Inc., for various marketing and sales activities. HubSpot is an integrated software solution that we use for our inbound marketing activities, lead generation, email marketing, CRM (customer relationship management), and contact form management. When you visit our website or interact with us through the forms provided on our website, certain information about your visit is collected and stored. This includes your IP address, the date and duration of your visit, the pages you visit, and information about the browser and operating system you use. In addition, if you contact us via a form, the data you provide (e.g. name, e-mail address) will be stored. HubSpot uses cookies to analyze the behavior of visitors to our website. This helps us improve the user experience on our website and make our marketing activities more effective. The information HubSpot collects helps us better tailor our marketing and sales activities to the needs of our visitors and customers, maintain and optimize our customer relationships, and measure the effectiveness of our marketing campaigns. Data processing is secure and in compliance with applicable data protection regulations. HubSpot is certified under the EU-US Data Protection Regulations and is committed to complying with all data protection requirements applicable in the European Union (EU).

5.2. Calendly
Our service integrates functions of the online appointment scheduling service Calendly, offered by Calendly LLC, 271 17th Street NW, Atlanta, GA 30363, USA. With Calendly, visitors to our website or clients who receive the link to our Calendly booking system can make appointments with us directly online. When you book an appointment through Calendly, you will be asked to provide certain personal data such as your name, email address, and, if applicable, your phone number. This data is needed to coordinate the appointment, to inform you about the appointment status, and to send reminders if necessary. Calendly has its own privacy policies and practices, which may differ from those of our website. For more information about privacy in relation to Calendly, please see Calendly’s privacy policy: https://calendly.com/pages/privacy. If you have any questions about the data collected by Calendly or wish to exercise your rights with respect to that data, you should contact Calendly LLC directly.

5.3. YouTube
Videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), are embedded on our website. When viewing the videos or clicking on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google servers and stored there. This data is used to provide the video, monitor performance, and improve the user experience. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

5.4. Google Forms
For surveys and online forms, we use Google Forms, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Forms allows us to create individual forms for surveys and data collection that you can fill out via links or directly on our website. When you fill out a Google form provided by us, the data you enter and your IP address are transmitted to Google and stored on Google's servers. These servers may be located in the USA or other countries. Please note that the data you enter in Google Forms will be processed and stored by Google. If you have concerns about data storage by Google or would like to prevent the transfer of your data to Google, you should not complete the form.

5.5. Zapier
We use the provider Zapier (Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA) on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1. for the automated processing of collected data.
Zapier automates the process between online software applications. No personal data is collected, but it is passed through Zapier. Processed personal data are e.g. the name, e-mail address, or address of a user. Zapier uses SSL by default to encrypt the data transfer.
Zapier is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNk2AAG&status=Active).
Privacy policy: https://zapier.com/privacy
Data processing contract: https://d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/411339/Auftragsdatenverarbeitungsvertrag_Zapier.pdf

5.6. Tilda
We use the provider Tilda (Tilda Publishing Ltd. Republic of Ireland - Registration number 671800) as a website service provider within our online offer on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR.
The purposes of Tilda's data collection and processing are to analyze website visitors and their interaction with website content. By default, all data collected is stored for a maximum of 30 days.
Privacy policy: https://tilda.cc/privacy/

5.7. Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. You can manage your cookie preferences through our cookie consent banner or your browser settings.

7. Data Transfers to Third Countries
When transferring personal data to countries outside the EU or Switzerland, we ensure appropriate safeguards are in place, such as SCCs, to maintain an adequate level of data protection.

8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Once the data is no longer needed, it is securely deleted or anonymized.

9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These measures include encryption, access controls, and regular security assessments.

10. Your Rights
Under applicable data protection laws, you have the following rights:
  • Access: Request information about the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data.
  • Restriction: Request restriction of processing under certain conditions.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to the processing of your data based on legitimate interests.
  • Withdrawal of Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please contact us at legal@passeca.com.

11. Supervisory Authorities
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority:
  • Germany: Federal Commissioner for Data Protection and Freedom of Information (BfDI) – https://www.bfdi.bund.de
  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC) – https://www.edoeb.admin.ch

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review this policy periodically to stay informed about how we process your personal data.