Privacy policy

Hosting

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, on servers in Lithuania. Hostinger processes data on our behalf under Art. 28 GDPR; the data processing agreement is part of Hostinger's terms. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

Server logs

With every request, the server automatically stores your IP address, date and time, the requested address, the referring page, browser and operating system, the amount of data transferred and the status code. We need this information to run the website stably and securely and to detect attacks (Art. 6(1)(f) GDPR). We do not combine it with other data. Hostinger deletes the logs automatically after a short period.

Encryption

All connections to this website are encrypted with TLS, as shown by “https://” and the padlock in the address bar.

Contact form

If you write to us using the contact form, we process your first name, last name, email address, phone number and message, plus your company if you provide it, as well as the language and the page from which you sent the form. We use this information to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, otherwise your consent (Art. 6(1)(a) GDPR) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). You will receive a confirmation by email.

Guides and use case library

If you request free materials, we process your first name, last name, email address, phone number and, if provided, your company in order to send you the download link by email and to contact you about it by email or phone. The legal basis is your consent (Art. 6(1)(a) GDPR). We do not sign you up for a newsletter.

Protection against misuse

The forms contain an invisible field and a timing check against automated submissions. To prevent mass submissions, we store a non-reversible checksum of your IP address for no more than one hour (Art. 6(1)(f) GDPR). We do not use any third-party captcha.

Enquiries by email or phone

If you email or call us, we process your details to handle the enquiry on the same legal bases.

Retention

We delete enquiries once they have been dealt with and no statutory retention obligations apply, or when you withdraw your consent. If an enquiry leads to an engagement, the statutory retention periods for business records apply.

Matomo, without cookies

We count visits with Matomo, open source software running on our own web space at Hostinger in the EU. Matomo does not set cookies and stores nothing on your device. Your IP address is shortened by two bytes before it is stored, so we cannot identify you. We see, in aggregate, which pages are viewed, where visitors come from and which campaigns work. The data never leaves our server, and we delete raw data after 180 days. The legal basis is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR). If your browser sends “Do Not Track”, Matomo does not count your visit.

Google Analytics 4

Only with your consent in the statistics category do we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (_ga and _ga_ with an identifier, lasting up to two years) and records which pages you view, how long you stay and where you come from. Google Analytics 4 does not store IP addresses. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Google keeps event data for no more than 14 months. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More at policies.google.com/privacy.

LinkedIn Insight Tag

Only with your consent in the marketing category do we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It shows us, in aggregate, which industries, company sizes and job functions our visitors come from, as far as they are signed in to LinkedIn, and measures campaign performance. We do not see individual people. For this, LinkedIn sets cookies, including li_fat_id, lidc and bcookie, pseudonymises direct identifiers after seven days and deletes the remaining data after 180 days. Data may be transferred to LinkedIn Corporation in the USA; LinkedIn is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More at linkedin.com/legal/privacy-policy.

Elevate Horizons LLC is based in the USA. Data we process ourselves, such as enquiries in Odoo or emails in Microsoft 365, may therefore also be accessed from the USA. Without additional safeguards, the USA is not considered a country with a level of data protection comparable to the EU; US authorities may in some circumstances access data without effective legal remedies being available to you.

Where we use service providers in the USA, we rely on their certification under the EU-US Data Privacy Framework (Art. 45 GDPR) or on the European Commission's standard contractual clauses (Art. 46 GDPR). The website itself, the calendar and Matomo run on servers in the EU.