Privacy Policy

1. General Information and Mandatory Disclosures

The protection of your personal data is very important to us. We process your personal data exclusively on the basis of the statutory provisions (GDPR, BDSG, TDDDG). In this Privacy Policy, we inform you about the most important aspects of data processing on our website.

2. Data Controller

The entity responsible for data processing on this website is:

Herita Technologies Group Ltd. 101 New Cavendish Street, 1st Floor South, London, United Kingdom, W1W 6XH Email: herita@herita.tech

Since our company is based outside the European Union (in the United Kingdom), we would like to point out that there is an adequacy decision by the EU Commission for the United Kingdom, which guarantees a comparable level of data protection.

3. Provision of the Website and Server Log Files

When you visit our website, the provider of the website (Framer B.V.) automatically collects and stores information that your browser transmits to us. This information includes: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address.

The basis for this data processing is Art. 6(1)(f) GDPR (legitimate interest in the error-free presentation and security of the website). These data are automatically deleted once the purpose has been fulfilled (usually after a few days).

4. Contact Form and Appointment Booking

If you send us inquiries via the contact form or email, or if you book an appointment, your details will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The processing of this data is based on Art. 6(1)(b) GDPR, provided that your request is related to the execution of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

The data will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions – in particular retention periods under tax and commercial law – remain unaffected.

5. Cookies and Consent Management (Consent Banner)

Our website uses cookies. Technically necessary cookies are set on the basis of Section 25 (2) TDDDG to provide the core functions of the website. Non-essential cookies (e.g., for analytics or marketing purposes) are only set after your explicit consent via our cookie consent banner (Section 25 (1) TDDDG in conjunction with Art. 6(1)(a) GDPR). You can revoke your consent at any time with effect for the future via the settings in the consent banner.

6. Use of Google Analytics

If you have given your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google uses cookies that enable an analysis of your use of the website. The data is usually transferred to a Google server and stored there. We use Google Analytics exclusively with IP anonymization activated, meaning that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR and Section 25 (1) TDDDG. Since a data transfer to the parent company Google LLC in the USA cannot be completely ruled out, we point out that Google LLC is certified under the EU-US Data Privacy Framework. You can revoke your consent at any time.

7. Use of Calendly

We use the Calendly tool provided by Calendly LLC (USA) for scheduling appointments. This use is based on Art. 6(1)(b) GDPR (pre-contractual measure) or Art. 6(1)(f) GDPR (legitimate interest in user-friendly appointment scheduling). The data entered is transmitted to Calendly. Calendly LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection for data transfers to the USA. The data will be deleted as soon as the purpose of storage no longer applies.

8. Use of Framer

Our website was created with Framer (provider: Framer B.V., Netherlands). Framer processes data as a data processor in order to guarantee the technical provision of the website. The processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). A Data Processing Agreement (DPA) has been concluded.

9. Your Rights and Revocation

Provided the legal requirements are met, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR).

Right of Revocation: If data processing is based on your consent, you have the right to revoke this consent at any time with effect for the future (Art. 7(3) GDPR). In addition, you have the right to lodge a complaint with a data protection supervisory authority.