/
Privacy Policy – reev Website

Privacy Policy - reev Website

This Privacy Policy explains how personal data is processed on the website www.reev.com (the “Website”) by reev GmbH. reev GmbH processes only such dataas is necessary for the provision and security of the Website and its services, guided in doing so by the principle of data minimisation. “Personal data” means any information relating to an identified or identifiable natural person (data subject), such as name, address, telephone number, date of birth, email address or IP address. Information that cannot be attributed to a specific person, for instance as a result of anonymisation, is not regarded as personal data.

1. Controller

The controller responsible for the processing of personal data on the Website within the meaning of the General Data Protection Regulation (GDPR) is:

reev GmbH

Sandstraße 3

80335 Munich

Germany

Email: privacy@reev.com

 

2. Data Protection Officer

The following has been appointed as Data Protection Officer:

Kertos GmbH

Brienner Straße 41

80333 Munich

Germany

Email: dataprivacy@kertos.io

 

3. Data processing on our Website

 
3.1 Provision of the Website

Purpose: We process your data in order to ensure the reliable operation of the Website, to enable user-friendly access to our Website and to maintain IT security. For this purpose, we use a hosting provider and a Content Delivery Network (CDN) to deliver and secure the content.

Recipient(s): Kinsta Inc., 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA (Hosting); Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (CDN/Web Application Firewall).

Data processed:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file retrieved
  • Website from which access is made (referrer URL)
  • Browser used, and where applicable the operating system and the name of the access provider
  • Information on the routing of data traffic and on the system configuration (Cloudflare)

 

Legal basis: Art. 6(1)(f) GDPR. The processing is necessary for the provision of the Website and to ensure secure and user-friendly operation.

Storage period: Personal log-file data (in particular the IP address) are deleted after 7 days at the latest. Where data are stored beyond this period, this is done in pseudonymised form.

Transfer to a third country: Kinsta and Cloudflare are certified under the EU-US Data Privacy Framework (Art. 45 GDPR)

Further information: Privacy Policy: https://kinsta.com/legal/privacy-policy/ and https://www.cloudflare.com/privacypolicy/

 
3.2 Google Maps

Purpose: Display of interactive maps on our Website so that you can locate our premises and plan your visit.

Recipient(s): Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • IP address of the requesting device
  • Information on the use of the website
  • Device and browser data
  • where applicable, location data

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG.

Storage period: Until consent is withdrawn; otherwise in accordance with Google’s specifications.

Further information: https://policies.google.com/privacy

 
3.3 Newsletter

Purpose: Sending of email newsletters to provide information about the products, services and corporate activities of reev GmbH; statistical collection and analysis of reading behaviour in order to optimise the content

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München (“Marketing Cloud Account Engagement” service)

Data processed:

  • Email address
  • Where applicable, further voluntary information (e.g. name, gender)
  • Time of registration and confirmation (double opt-in) and IP address
  • Information on the browser and system
  • Opening and click behaviour (web beacon)

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

Storage period: The data are stored for as long as you have subscribed to the newsletter. Following unsubscription, your data are deleted, unless statutory retention obligations preclude this.

Further information: You may unsubscribe from the newsletter at any time by clicking the unsubscribe link at the end of each newsletter or by sending an email to privacy@reev.com. Privacy Policy: https://www.salesforce.com/company/privacy/

 
3.4 Contact forms

Purpose: Processing and responding to your enquiries received via the contact forms, and carrying out pre-contractual measures taken in response to your enquiry.

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • Form of address, first name and surname
  • Email address
  • where applicable, telephone number (voluntary)
  • Content of your message / enquiry
  • In the case of business enquiries: information about the company and the project (insofar as not personal data)
  • IP address

 

Legal basis: Art. 6(1)(b) and (f) GDPR (carrying out pre-contractual measures and legitimate interest in conducting our business activities). Voluntary information (e.g. telephone number) is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Storage period: Enquiries and the associated data are stored only for as long as is necessary to process the enquiry; where the data are required for a further contractual relationship, the relevant retention periods apply.

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.1 Ordering and dispatch

Purpose: Processing of orders placed via our Website and dispatch of the ordered goods via shipping service providers, including notification and coordination regarding delivery

Recipient(s): Shipping service providers (depending on the dispatch method): DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg; DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn; General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein; UPS Europa SA, Ave Ariane 5, 1200 Brussels, Belgium

Data processed:

  • First name and surname
  • Delivery address
  • Email address
  • Telephone number (insofar as required for the shipping/delivery notification)
  • Order and contract data

 

Legal basis: Art. 6(1)(b) GDPR (performance of a contract); for voluntary information Art. 6(1)(a) GDPR

Storage period: For the duration of the contract processing and, beyond that, within the framework of the statutory retention periods (in particular Section 257 HGB, Section 147 AO)

Further Information: Privacy notices of the shipping service providers:

 
3.4.2 Onboarding enquiries

Purpose: Processing of your enquiries regarding onboarding to the reev Dashboard, to ABL+reev Bundle charging stations, reev ready charging stations or the reev Connect Set, and contacting you in the event of queries

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • Form of address, first name and surname
  • Email address
  • Telephone number
  • Information about your company
  • IP address

 

Legal basis: Art. 6(1)(b) and (f) GDPR (carrying out pre-contractual measures and legitimate interest). Voluntary information is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Storage period: Three months after receipt of the enquiry at the latest, unless the data are required for a further contractual relationship.

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.3 Software upgrade enquiries

Purpose: Processing of your enquiries regarding a software upgrade of your reev solution and contacting you to clarify the project

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • Title, First Name, and Last Name
  • Email address
  • Telephone number
  • Information About Your Company and Upgrade Plans
  • IP address

 

Legal basis: Art. 6(1)(b) and (f) GDPR. Voluntary information on the basis of your consent pursuant to Art. 6(1)(a) GDPR

Storage period: Three months after receipt of the enquiry at the latest, unless the data are required for a further contractual relationship

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.4 Registration of Company Car Drivers

Purpose: Collection of your registration data in order to identify you and to enable home charging of your company car with reev

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • Form of address, first name and surname
  • Business email address
  • Address
  • Information about your employer
  • Information about the manufacturer of the wallbox hardware

 

Legal basis: Art. 6(1)(b) and (f) GDPR (legitimate interest in identification and the provision of our services).

Storage period: For the duration of the business relationship or for as long as is necessary to provide the services.

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.5 Enquiry regarding installation site “charging a company car at home”

Purpose: Processing of your enquiry regarding the integration of a charging station for charging your company car at home.

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • Form of address, first name and surname
  • Business email address
  • Information about the company, installer and charging infrastructure
  • IP address

 

Legal basis: Art. 6(1)(b) and (f) GDPR. Voluntary information on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Storage period: Three months after receipt of the enquiry at the latest, unless the data are required for a further contractual relationship.

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.6 Hubject Activation

Purpose: Activation of your country-specific reev EVSE ID & Hubject sticker

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • Previous EVSE ID
  • New EVSE ID
  • IP address

 

Legal basis: Art. 6(1)(b) and (f) GDPR (carrying out pre-contractual measures and legitimate interest in conducting our business activities)

Storage period: For the duration of processing and to document the activation; otherwise in accordance with the statutory retention periods

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.7 Feedback network for electricians

Purpose: Provision of information about news and events for members of the feedback network

Recipient: salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • First name and surname
  • Email address
  • Preferred language
  • Preferred topics

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by email to info@reev.com

Storage period: Until you withdraw your consent

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.8 Requesting Brochures

Purpose: To send you the brochures you requested via email

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich

Data processed:

  • Form of address, first name and surname
  • Email address
  • Further, non-personal information

 

Legal basis: Art. 6(1)(b) and (f) GDPR (processing of your enquiry)

Storage period: Only for as long as is necessary to process the enquiry or to perform a contractual relationship; the data are subsequently deleted

Further information: https://www.salesforce.com/de/company/legal/privacy/

 
3.4.9 Registering for webinars

Purpose: Registration and verification of participants for our webinars and provision of the associated services

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München; GoTo Technologies Ireland Unlimited Company, The Reflector, 10 Hanover Quay, Dublin 2, D02R573

Data processed:

  • Form of address, first name and surname
  • Email address

 

Legal basis: Art. 6(1)(b) and (f) GDPR

Storage period: For the duration of the webinar and, where applicable, beyond that for follow-up purposes; otherwise in accordance with the statutory retention periods.

Further information:https://www.salesforce.com/de/company/legal/privacy/; https://www.goto.com/company/legal/privacy

 

4. Job applications

Purpose: Selection of applicants for the possible establishment of an employment relationship and secure transmission of the application documents via our application form

Recipient(s): Personio SE & Co. KG, Rundfunkplatz 4, 80335 München

Data processed:

  • Name
  • Email address
  • Telephone number
  • Curriculum vitae
  • Cover letter
  • Further application documents provided by you
  • IP address, browser type and version, operating system, date and time of access

 

Legal basis: Art. 6(1)(b) GDPR (carrying out pre-contractual measures); Art. 6(1)(f) GDPR (efficient conduct of the application procedure)

Storage period: Until completion of the application procedure. In the event of a rejection, the data are stored for a further six months after notification of the decision. In the event of recruitment, the data are stored in the personnel file for the duration of the employment relationship. You may withdraw your application or object to the processing at any time; in this case your data are deleted.

Further Information: Privacy Policy for the Application Tool: https://reev.jobs.personio.de/privacy-policy?language=de

 

5. Live Chat

Purpose: Provision of an AI-assisted chatbot for direct customer communication, answering questions and providing support, and improving our Website.

Recipient(s): Intercom R&D Unlimited Company, 124 St Stephen’s Green, Dublin 2, DC02 C628, Ireland

Data processed:

  • Chat history
  • Name provided
  • IP address
  • Country of origin
  • Pages visited
  • Duration of the visit to the pages
  • Where applicable, further personal information (e.g. email address, telephone number), depending on what is provided

 

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in direct and customer-friendly communication)

Storage period: Chat logs and the associated data are stored for the duration of the processing of your enquiry and, where applicable, beyond that for quality-assurance purposes; contact information may be retained for longer in the CRM system, in accordance with the statutory retention periods and business requirements.

Further information: https://www.intercom.com/legal/privacy

 

5.1 Use of AI Systems

Purpose: Optimisation of our processes and improvement of your personalised visitor experience on our Website, in particular for data analyses, forecasts, the closing of security gaps and the more efficient handling of routine operations.

Recipient(s): Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland, Langdock GmbH, Greifswalder Str. 212, 10405 Berlin

Data processed:

  • Usage data of the Website
  • Technical data (e.g., IP address, browser type)
  • Content inputs, insofar as you actively provide these

 

Legal basis: Art. 6(1)(f) GDPR. Any decisions with legal or similarly significant effects on you are not taken by the AI alone, but are supplemented by human intervention.

Storage period: Only for as long as is necessary for the respective purpose; otherwise in accordance with the specifications of the systems used.

Further information: The AI used operates in accordance with the principles of the GDPR. There is no decision-making based solely on automated processing within the meaning of Article 22 of the GDPR. https://www.anthropic.com/legal/privacy; https://langdock.com/de/privacy-policy

 

6. Analytics and Tracking

Cookies are small text files that are stored on your device by your browser. Cookies do not run programs and do not install malware. Comparable technologies include web storage (local/session storage), fingerprinting, tags and pixels. Most browsers accept these technologies by default; however, you may adjust your settings so that their use is blocked or consent is obtained. If cookies or similar technologies are blocked, certain functions of the Website may not be fully available.

Purpose: We use tracking and analysis tools in order to continuously optimise our Website and adapt it to your requirements. For this purpose, information is collected using corresponding technologies or device information is combined (device fingerprinting).

Legal basis: We use tools that are technically necessary for the operation of the Website on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR or for the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR; in these cases, the storage of, or access to, information on your device is governed by Section 25(2) TDDDG. Optional tools are used exclusively with your consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Recipient(s):

The tracking and analysis tools used, together with their respective purpose and the data processed, are set out below:

 

6.1 Borlabs Cookie Banner (Consent Management)

Purpose: Obtaining, managing and documenting your consents for the use of cookies and comparable technologies

Recipient(s): Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany

Data processed:

  • Consent cookie (consent status)
  • Time of consent
  • Technical information on consent management

 

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR, Section 25(2) TDDDG (technically necessary to comply with statutory obligations to obtain and document consents)

Storage period: The consent cookie is stored for as long as is necessary for the consent-management function.

 

6.2 Google Consent Mode v2 (Advanced Mode)

Purpose: Control of the behaviour of Google services depending on your consent; conversion modelling for statistical evaluations and to optimise automatic bid settings

Recipient(s): Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • Anonymised IP address
  • Timestamp
  • User agent
  • Referrer URL

 

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR

Storage period: In accordance with Google’s specifications

Transfer to a third country: Transfer of data to the USA. Google is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses are in place (Art. 46 GDPR).

Further information: https://developers.google.com/tag-platform/security/guides/consent?hl=de&consentmode=advanced

 
6.3 Google Analytics

Purpose: Web analytics

Recipient(s): Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • Device data (e.g. IP address, device type, screen resolution);
  • Browser data (e.g. browser used, language, installed plug-ins such as ad blockers);
  • Usage data (e.g. pages accessed, time spent per page, click paths, scroll depth, entry and exit pages);
  • Event data (events) (e.g. clicks on buttons/links, forms submitted);
  • Location data (e.g. country, city);
  • Source and traffic data (e.g. referrer URL, access source such as a search engine);
  • Conversion and goal-completion data (e.g. newsletter sign-ups, goals achieved on the Website)

 

Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG

Further information:https://policies.google.com/privacy.

 

6.4 Google Remarketing

Purpose: Display of interest-based advertisements to visitors of our Website on the Google Display Network; analysis of the effectiveness of our advertising campaigns

Recipient(s): Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • Access data (e.g., IP address, time of visit)
  • Usage data (e.g., pages visited, duration of visit)
  • Device data (e.g., device type, operating system)
  • Browser data (e.g., browser used, language settings)
  • Source and traffic data (e.g., referrer URL, access source)
  • Event data (e.g., interactions with page content, clicks)
  • Location data (e.g., country, city—based on IP address)

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with Google’s specifications.

Further information: https://support.google.com/analytics/answer/6004245

 

6.5 Google Ads Conversion Tracking

Purpose: Conversion tracking to measure the effectiveness of Google Ads campaigns and to optimise and target the display of advertisements; the Google tag (gtag.js) or the Google Ads conversion tag records which user interactions following a click on a Google advertisement have led to a conversion (e.g. purchase, form submission, app download); attribution is carried out via a Google Click Identifier (GCLID), which is passed in the target URL when an advertisement is clicked and stored in a first-party cookie on the advertiser domain

Recipient(s): Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • IP address (e.g. full IPv4 address at the time the page is accessed; processed by Google in pseudonymised form)
  • Google Click Identifier (GCLID) (e.g. click ID from the gclid URL parameter, stored in the _gcl_aw cookie)
  • First-party cookie identifiers (e.g. _gcl_aw for conversion attribution, _gcl_au for conversion linker and remarketing)
  • URLs accessed and conversion pages (e.g. order confirmation page, thank-you page after form submission)
  • Device and browser characteristics (e.g. user-agent string, operating-system version)
  • Conversion event data (e.g. conversion type, conversion value, currency)
  • User-interaction data (e.g. clicks on advertisements, timestamp of the conversion)
  • Third-party cookie identifiers (e.g. IDE on doubleclick.net)

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with Google’s specifications.

Further information:https://ads.google.com/intl/de_de/home/privacy/solutions/enhanced-conversions-for-web/; http://www.google.de/policies/privacy/

 

6.6 HubSpot (marketing/analytics features)

Purpose: Analysis of landing pages, creation of reports and online marketing in order to optimise our Website and to evaluate interest in our services

Recipient(s): HubSpot Ireland Limited, HubSpot House, 1 Sir John Rogerson’s Quay
Dublin 2, D02 CR67, Ireland

Data processed:

  • IP address (generally truncated)
  • Geographic location
  • Type of browser
  • Duration of the visit
  • Pages accessed
  • Visitor sources by means of UTM parameters

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with HubSpot’s specifications

Further information: https://legal.hubspot.com/privacy-policy

 

6.7 Salesforce Sales Cloud (marketing/analytics features)

Purpose: Analysis of landing pages, creation of reports and online marketing in order to optimise our Website (see also the section “CRM, sales and lead management”)

Recipient(s): Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Data processed:

  • IP address
  • Geographic location
  • Type of browser
  • Duration of the visit
  • Pages accessed

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with Salesforce’s specifications

Further information: https://www.salesforce.com/company/privacy/

 

6.8 Meta Conversion Pixel

Purpose: Conversion tracking and analysis of website activities to measure the effectiveness of advertisements and to optimise and target the display of marketing campaigns (retargeting)

Recipient(s): Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Note on joint controllership:In respect of the collection and transmission of the data, joint controllership within the meaning of Art. 26 GDPR exists between us and Meta Platforms Ireland Limited. Following the transmission, Meta processes the data under its own responsibility. The basis of the joint processing is set out in the Meta Business Tools Terms of Service.

Data processed:

  • IP address (e.g. full IPv4 address, truncated IPv6 address)
  • HTTP header and browser information (e.g. user agent, referrer URL)
  • Device information (e.g. operating system, screen resolution)
  • URLs visited and domains accessed (e.g. product page, order confirmation page)
  • Interaction data (e.g. button clicks, scroll depth)
  • Pixel ID and cookie information (e.g. _fbp, _fbc)
  • Timestamp and session data (e.g. time the page is accessed, session ID)
  • Hashed user data via Advanced Matching (e.g. email address, telephone number) – insofar as activated

 

Legal basis:Consent pursuant to Art. 6(1)(a) GDPR; for the storage of, and access to, information on the device (cookies), additionally Section 25(1) sentence 1 TDDDG

Storage period:The storage period varies depending on the type of cookie: analysis cookies (_fbp, _fbc, fr) are stored for up to 90 days; identification and security cookies (datr, sb, oo) for up to 400 days; session cookies are deleted when the browser is closed. According to Meta’s own information, Meta stores the transmitted event data for as long as is necessary to provide the services and to comply with statutory obligations

Further information: https://www.facebook.com/privacy/policy/

 
6.9 Meta Conversion API

Purpose: Server-side conversion tracking to measure the effectiveness of advertisements and to optimise and target the display of marketing campaigns (retargeting); transmission of event data directly from the web server to Meta, without direct access to the data subject’s device

Recipient(s): Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

Note on joint controllership:For the use of the Meta Conversions API as well, joint controllership within the meaning of Art. 26 GDPR exists between us and Meta Platforms Ireland Limited, since event data are collected and transmitted on the basis of the Meta Business Tools Terms of Service. Following the transmission, Meta processes the data under its own responsibility.

Data processed:

  • IP address (e.g. full IPv4 address from the HTTP request, IPv6 address collected on the client side)
  • Browser and device information (e.g. user-agent string, operating-system version) – insofar as forwarded from the client to the server
  • URLs visited and event data (e.g. product page accessed, order confirmation page)
  • Conversion data (e.g. purchase value, product category, event name such as “Purchase” or “Lead”)
  • Cookie identifiers (e.g. _fbp, _fbc) – insofar as these are passed server-side as parameters
  • Hashed customer data (e.g. email address via SHA-256, telephone number via SHA-256) – within the framework of Customer Information Parameters, insofar as configured
  • External ID (e.g. internal user ID, order number) – insofar as configured

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR

Storage period: According to Meta’s information, event data are processed and stored for as long as is necessary to provide the Meta Business Tools services and to comply with statutory obligations.

Further information:https://www.facebook.com/privacy/policy/

 
6.10 LinkedIn Conversion Tracking

Purpose: Conversion tracking and analysis of website activities to measure the effectiveness of LinkedIn advertising campaigns and to optimise and target the display of advertisements to members of the LinkedIn platform (retargeting); the data are collected via the LinkedIn Insight Tag, a JavaScript code snippet embedded on the client side

Recipient(s): LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Note on joint controllership:Insofar as LinkedIn processes the data collected via the Insight Tag for its own purposes – in particular for cross-platform retargeting of LinkedIn members and the analysis of website visits – joint controllership within the meaning of Art. 26 GDPR exists between us and LinkedIn Ireland Unlimited Company. Insofar as LinkedIn processes the data exclusively on behalf of and on the instructions of the advertiser (e.g. to provide aggregated conversion reports), LinkedIn acts as a processor pursuant to Art. 28 GDPR. The bases of this processing are set out in the LinkedIn Marketing Solutions Terms of Service and the LinkedIn Data Processing Agreement.

Data processed:

  • IP address (e.g. full IPv4 address, encrypted and de-identified by LinkedIn after transmission)
  • URLs accessed and referrer URLs (e.g. product page visited, originating URL)
  • Device and browser characteristics (e.g. user-agent string, operating-system version)
  • Timestamp and page views (e.g. time the page is accessed, sub-pages accessed)
  • Cookie identifiers (e.g. LinkedIn’s own tracking cookies, first-party tracking cookie on the advertiser domain – if activated)
  • Conversion event data (e.g. form submission, purchase) – insofar as corresponding conversion rules are configured
  • Professional profile characteristics of LinkedIn members (e.g. career level, industry) – exclusively in aggregated, non-personal form as report data

 

Legal basis:Consent pursuant to Art. 6(1)(a) GDPR; for the setting and reading of cookies on the device, additionally Section 25(1) sentence 1 TDDDG

Storage period:LinkedIn encrypts the collected data immediately after transmission. Direct identifiers of LinkedIn members are de-identified within 7 days; the remaining de-identified data are deleted within 90 days.

Further information:https://www.linkedin.com/legal/privacy-policy

 

6.11 LinkedIn Insights Tag

Purpose: Web analysis to evaluate the use of our Website and to create reports on website activities

Recipient(s): LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Data processed:

  • IP address (e.g. full IPv4 address, truncated or hashed by LinkedIn immediately after transmission)
  • URLs accessed and referrer URLs (e.g. product page visited, originating URL)
  • Device and browser characteristics (e.g. user-agent string, operating-system version)
  • Timestamp and page-view information (e.g. time the page is accessed, number of pages accessed)
  • Cookie identifiers (e.g. LinkedIn tracking cookies lms_analytics, AnalyticsSyncHistory; first-party cookie li_adsid – insofar as activated)
  • Aggregated profile data of LinkedIn members (e.g. job title, industry affiliation, career level, company size, geographical region) – exclusively in anonymised, aggregated form as report data; identification of individual visitors by the advertiser is not possible

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with LinkedIn’s specifications.

Further information: https://www.linkedin.com/legal/privacy-policy

 
6.12 Google Tag Manager

Purpose: Central management and delivery of other tracking and/or statistics tools

Recipient(s): Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • Access data (e.g. time the page is accessed, referrer URL)
  • Device data (e.g. IP address, device type)
  • Browser data (e.g. browser used, language settings)
  • Event data (e.g. tag triggering, interactions with embedded scripts)
  • Location data (e.g. country, city – based on the IP address)

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with Google’s specifications.

Further information: https://www.google.com/policies/privacy/?hl=de

 
6.13 YouTube (video embedding)

Purpose: Embedding of YouTube videos on our Website in enhanced privacy mode

Recipient(s): Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data processed:

  • IP address
  • Information on the browser and operating system used Website from which access is made (referrer URL)
  • Cookies that YouTube sets when the service is started
  • For logged-in YouTube users: linking with the personal profile

 

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR, Section 25(1) TDDDG

Storage period: Until consent is withdrawn; otherwise in accordance with Google/YouTube specifications

Further information: https://www.google.de/intl/de/policies/privacy

Name of the cookie

Provider

Purpose

Category

Storage period

IDE

Google AdSense

Enables the display and analysis of personalized ads

Marketing/Tracking Cookies

1 year, 1 month

bcookie

LinkedIn Insight Tag

Collects a unique browser identifier to analyze visitor interactions

Statistics Cookies

11 months, 30 days

li_gc

LinkedIn Insight Tag

Stores consent to the use of LinkedIn cookies

Preference and convenience cookies

5 months, 26 days

lidc

LinkedIn Insight Tag

Load balancing on LinkedIn and ensuring the platform’s functionality

Technically Necessary Cookies

23 hours 58 minutes

_icl_visitor_lang_js

WordPress

Saves the visitor’s language preference

Preference and convenience cookies

1 T.

wp-wpml_current_language

WordPress

Remembers the language selected by the user on the website

Preference and convenience cookies

Session

wpml_browser_redirect_test

WordPress

Checks whether cookies are enabled in the user’s browser

Technically necessary cookies

Session

borlabs-cookie

Borlabs Cookie

Stores consent to the use of various cookies

Technically necessary cookies

5 months, 28 days

borlabs-cookie-gcs

Borlabs Cookie

Stores the user’s cookie group consent status

Technically necessary cookies

5 months, 28 days

__cf_bm

CloudFlare

Ensures that humans and bots are distinguished to protect the website

Technically necessary cookies

30 min.

FPAU

Google Analytics

Used for pseudonymized recognition for analytical purposes

Statistics cookies

2 months, 28 days

FPID

Google Analytics

Used to distinguish between visitors

Statistics cookies

1 year, 1 month

FPLC

Google Analytics

Links multiple sessions of a user for analysis purposes

Statistics cookies

19 hours 58 minutes

_ga

Google Analytics

Collects a unique ID to analyze user behavior

Statistics Cookies

1 year, 1 month

_ga_[ID]

Google Analytics

Distinguishes individual users for analytics reports

Statistics cookies

1 year, 1 month

_gcl_au

Google Tag Manager

Used to cache conversions for advertising purposes

Marketing/Tracking Cookies

2 months, 28 days

intercom-device-id-[ID]

Intercom

Identifies the device for providing the chat and support system

Preference and convenience cookies

8 M. 25 T.

intercom-id-[ID]

Intercom

Stores the user ID for recurring chats

Preference and convenience cookies

8 M. 25 T.

intercom-session-[ID]

Intercom

Detects active chats/sessions for the communication feature

Preference and Convenience Cookies

7 T.

_fbp

Meta Pixel

Tracks users to display relevant ads on Facebook

Marketing/Tracking Cookies

2 months, 29 days

FPGSID

Google Analytics

Presumably for generating or obtaining a session ID for technical processes

Technically necessary cookies

28 min. 20 sec.

_gtmeec

Google Tag Manager

Unspecified – likely tracking

Statistics cookies

2 months, 29 days

 

7. Contact by email

Purpose: Processing and responding to your enquiry received by email

Data processed:

  • Name
  • Email address
  • Content of your message

 

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communicating with you). Insofar as your enquiry is directed at the conclusion or performance of a contract, the processing is carried out on the basis of Art. 6(1)(b) GDPR

Storage period: Your data are stored only for as long as is necessary for the final processing of your enquiry.

 

8. Social media online presences

Purpose: Communication with prospective customers, provision of information about products and services, and analysis of the use of our online presence

Recipient(s): LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (“Facebook”)

Data processed:

  • Demographic information (e.g. age, gender)
  • Professional information (e.g. industry, professional experience)
  • Interaction data (e.g. likes, shares)
  • Usage statistics (e.g. page views, video views)
  • Content preferences (e.g. popular topics, interests)

 

Legal basis: Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures); Art. 6(1)(f) GDPR (legitimate interest in effective information and communication)

Storage period: In accordance with the privacy policies of the respective platforms

Joint controllership with LinkedIn and Meta: With regard to the processing of statistical usage data for our presences on LinkedIn and Meta (so-called “Page Insights”), we and LinkedIn Ireland Unlimited Company or Meta Platforms Ireland Limited are joint controllers within the meaning of Art. 26 GDPR. The joint controllership concerns in particular the collection and evaluation of usage data for the creation of page statistics, while LinkedIn or Facebook assumes primary responsibility for handling data subject rights and fulfilling the information obligations. You can find the essential content of the respective agreements on joint controllership in the LinkedIn Joint Controller Addendum and the Facebook Page Controller Addendum.

Further information:

 

Note: We have no influence on the independent data processing by the platform operators. When you visit our online presences, usage data may be transmitted to the operators, who use these for their own purposes. Data subject rights may be asserted directly against the platform operators.

 

9. CRM, sales and lead Management

Purpose: Management and maintenance of relationships with customers, prospective customers and other contractual or business partners (B2B), including lead management, the qualification and prioritisation of leads, the documentation of communication and contract histories, the planning and steering of sales activities and the arrangement and conduct of consultation calls

Recipient(s): salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München; Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland (Microsoft Bookings)

Data processed:

  • Surname and first name
  • Business contact data (e.g. email address, telephone number, business address)
  • Company-related data (e.g. company name, industry, company size, function/position, department)
  • Data on contractual transactions and enquiries (e.g. quotation number, service interests, history of enquiries and transactions)
  • Communication and interaction data (e.g. appointments, conversation notes, participation in events/webinars, response to emails, retrieval of content)

 

Legal basis: Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in the efficient organisation of sales and business relationships, targeted B2B communication and the optimisation of our products and services). You may object at any time, with effect for the future, to the processing for the purposes of direct marketing and associated profiling measures

Storage period: For the duration of the business relationship or for as long as a legitimate interest in further storage exists; subsequent deletion or anonymisation, unless statutory retention periods preclude this.

Further information: https://www.salesforce.com/company/privacy/; https://www.microsoft.com/de-de/privacy/privacystatement

 

10. International data transfers

  • Personal data are processed primarily within the EU/EEA. Transfers to so-called “third countries” are carried out exclusively in compliance with the requirements of the GDPR and where appropriate safeguards are in place. Before a transfer to a service provider in a third country, the level of data protection is assessed. A transfer takes place only where sufficient protection mechanisms exist. All service providers must conclude a data-processing agreement. For providers outside the EEA, additional measures are required. Under Art. 44 et seq. GDPR, a transfer is permissible if at least one of the following conditions is met:
  • The European Commission has determined that an adequate level of data protection exists.
  • Standard contractual clauses have been agreed with the recipient.
  • Other appropriate safeguards within the meaning of Art. 46 GDPR are in place.
  • In certain exceptional cases under Art. 49 GDPR.

 

11. Recipient(s)

The personal data we collect are, as a matter of principle, only disclosed if:

you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR,

the disclosure is necessary to safeguard our legitimate interests or to assert, exercise or defend legal claims, and there is no reason to assume that your overriding interests warranting protection, or your fundamental rights and freedoms requiring the protection of personal data, prevail (Art. 6(1)(f) GDPR),

we are legally obliged to disclose the data (Art. 6(1)(c) GDPR), or

this is legally permissible and necessary for the performance of a contract with you or for carrying out pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

Possible recipients are:

  • Processors: Group companies or external service providers (e.g. in the field of technical infrastructure and processing, maintenance, payment processing) that are carefully selected and monitored. Processors may process the data exclusively in accordance with our instructions.
  • Public bodies: Authorities and state institutions (e.g. tax authorities, public prosecutors’ offices, courts) to which we are required to transmit personal data, for instance to comply with statutory obligations or to protect legitimate interests.

 

12. Data yecurity and protective measures

We employ appropriate technical and organisational measures in order to ensure the security and confidentiality of your personal data. These measures serve to protect against unauthorised access, manipulation, loss or misuse. Our security precautions are reviewed regularly and adapted to the state of the art and current industry standards.

In particular, we use SSL or TLS encryption in order to protect the transmission of confidential content – such as enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

Please note that, despite extensive protective measures, data transmission over the internet may, as a matter of principle, have security gaps. In particular, in the case of unencrypted communication (e.g. standard email) there is a risk that data may be read by third parties. We therefore recommend that, when transmitting sensitive information electronically, you use encryption or other protective measures in order to minimise potential risks.

 

13. Storage period and deletion/blocking of data

Personal data are deleted or blocked as soon as the purpose of storage ceases to apply. Storage beyond this takes place only where this is required by Union-law or national provisions to which the controller is subject. The data are likewise deleted or blocked as soon as a statutory retention period expires, unless further storage is necessary for the performance of a contractual relationship.

 

14. Data subject rights

With regard to your personal data, you have the following rights:

Right of access (Art. 15 GDPR, Section 34 BDSG): You may request information as to whether, and which, personal data are processed by us, for what purpose, to which recipients or categories of recipients the data are transmitted and how long the data are stored.

  • Right to rectification (Art. 16 GDPR): You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): You may request the erasure of your personal data, in particular where these are no longer necessary, where you withdraw your consent or where the data have been processed unlawfully.
  • Right to restriction of processing (Art. 18 GDPR): You may request the restriction of the processing of your data, for example where the accuracy of the data is contested.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or – insofar as technically feasible – to request the transmission to another controller.
  • Right to withdraw consent (Art. 7(3) GDPR): You may withdraw a consent given at any time with effect for the future. The lawfulness of the processing up to the withdrawal remains unaffected by this.
  • Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to the processing of your personal data, in particular in connection with direct marketing or associated profiling. If you wish to exercise your right to withdraw consent or your right to object, an email to the following address suffices: privacy@reev.com.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data-protection provisions.

Automated individual decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, unless one of the exceptions in Art. 22(2) GDPR applies.

 

15. Change History

Date

Version

Reason for the change

July 1, 2026

1.0

New Format

We are happy to support you!

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Name*
Requested hardware *