enclaive GmbH · Philipp-Keim-Str. 1 · 65719 Hofheim am Taunus · Germany. Owner contact email: contact@enclaive.io

For enquiries and questions please reach out to our data protection office: TrustLane Solutions GmbH, legal representative Masih Sediquian, Rosenthaler Str. 13, 10119 Berlin — datenschutz@trustspace.io

As far as personal information (such as name, address or e-mail address) is collected on our site, this is done on a voluntary basis, except in the cases expressly described below. This data will not be passed on to third parties without your express consent. We would like to point out that data transmission over the Internet (for example, communication by e-mail) can have security risks. Complete protection of data against access by third parties is not possible.

The use of our website is generally possible without providing personal data. You are neither obliged to visit this website nor to provide any personal data. If you do not provide us with personal information, you may not be able to use certain functionalities of this website. Otherwise, there will be no consequences for you.

The use by third parties of contact data published within the framework of the imprint obligation for the purpose of sending advertising and information material not expressly requested is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam mails.

On the basis of our legitimate interests (interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 (1) (f) GDPR) we use Google Analytics, a web analysis service of Google LLC. Google uses cookies. The information generated by the cookie about the use of the website is usually transferred to a Google server in the USA and stored there.

Google uses this information on our behalf to evaluate the use of our website, to compile reports on activity within this website and to provide further services associated with the use of this website and the Internet. Pseudonymous user profiles may be created from the processed data. We use Google Analytics only with IP anonymisation activated: the user's IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not combined with other Google data.

Users can prevent the storage of cookies by adjusting their browser settings, and can prevent the collection and processing of the data generated by the cookie by installing the browser plugin available from Google. Further information on the use of data by Google, together with settings and objection options, is available in Google's privacy policy. Personal data of users is deleted or anonymised after 14 months.

We use a consent banner to obtain, record and manage your choices about cookies and similar technologies. Your selection is stored in your browser so that the banner does not have to ask again on every visit, and so that we can demonstrate which consents were given. The legal basis for this processing is Art. 6 (1) (c) and Art. 6 (1) (f) GDPR; our legitimate interest is the management of the technologies used and the related consents. Providing this data is neither contractually required nor necessary for the conclusion of a contract, but without it we cannot manage your consents. You can change or withdraw your choice at any time via the cookie settings link in the footer.

Connecting your Google account grants enclaive two scopes: cloud-platform, to see, edit, configure and delete Google Cloud resources in your own GCP project, used solely to provision and manage the infrastructure you request; and userinfo.email, your Google account email, used to identify you. We do not access Google Drive, Gmail, Calendar or any other Workspace data. We do not sell this data, use it for advertising, or use it to train AI or machine-learning models. We do not share, transfer or disclose Google user data to any third party: it remains within your own Google Cloud project and enclaive's systems, and is used only to perform actions you direct. We may disclose it if legally required to do so, for example in response to a valid court order. You can revoke access at any time in your Google account settings.

All data is encrypted in transit (TLS/HTTPS) and at rest. OAuth access and refresh tokens are stored in a dedicated secrets vault, never in application databases or logs. Access to stored tokens is limited to a small number of authorised backend services and personnel on a least-privilege basis. Tokens are retained only for as long as your integration remains connected, and are deleted immediately when you disconnect or revoke access. Our information security programme is certified to ISO/IEC 27001.

[TO CONFIRM BEFORE LAUNCH — two points. (1) The current policy cites the Privacy Shield as the safeguard for transfers to Google in the USA; that framework was invalidated by Schrems II in July 2020 and replaced by the EU-US Data Privacy Framework. This passage has been left out and must be rewritten by counsel. (2) The processor list needs updating for the new site: Webflow as host, Google Tag Manager, the form provider, and the newsletter tool.]