We take the confidentiality and the protection of your personal data very seriously. Therefore, we process your personal data only to the extent permissible under statutory provisions, in particular under the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”).
With this Privacy Policy we would like to inform you in accordance with Art. 13 GDPR about the nature of the processing of your personal data via our website “maya-climate.com”(hereinafter “Website”) and in providing our services, the purposes of such data processing and about the rights to which you are entitled. Personal data is any information relating to an identified or identifiable natural person.
I. General Information
1. Controller
Maya Climate GmbH, Novalisstr. 11, 10115 Berlin (hereinafter “we”), is responsible for processing your personal data pursuant to Art. 4 (7) GDPR.
2. Transfer to third parties
We may transfer your personal data to third parties where necessary to provide our Website or services. If we use external service providers, these have been carefully selected by us and commissioned in writing and only process your personal data on our behalf. If necessary, we have concluded a processing agreement pursuant to Art. 28 GDPR with them. The categories of recipient we transfer your data to are cloud service providers, management tool providers, marketing tool providers and sales tool providers.
3. Transfer to third countries
We may transfer your personal data to non-EU/EEA countries. Insofar as there is no adequacy decision for these countries according to Art. 45 GDPR, we transfer your personal data subject to appropriate safeguards according to Art. 46 GDPR.
4. Blocking and deletion
Your personal data will be deleted or blocked as soon as the purpose for processing no longer applies. We will further retain your data if we are legally obliged to do so, especially for tax and accounting purposes. Blocking or deletion of your personal data will also take place if a retention period prescribed by the standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
5. Hosting Webflow
We host our website with Webflow. The provider is Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files including your IP addresses. Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the presentation of the page, to provide certain website functions and to ensure security (necessary cookies). For details, see Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy. The use of Webflow is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable presentation of our website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy.
II. Our Processing Activities
In the following we would like to provide an overview of the personal data we process, the purposes we process them for as well as the legal basis for such processing activity.
1. When you visit our Website
Each time you access our Website the following personal data is automatically processed:
- IP address of your requesting computer
- browser type, browser version and language used
- your operating system
- date and time of access of your visit
- name of your access provider
- name of the specific page or file accessed, and the amount of data transferred (access status/http status code)
- website from which your system accesses our Website (“referrer URL”)
The legal basis for this processing is our legitimate interest (Art. 6 (1) (f) GDPR). We weighed our interest in providing as well as operating and securing this website against your interest in the confidentiality of your personal data, whereby our interest prevails.Without the processing of personal data, the provision of the website is technically impossible. This also applies to its operation and security. In this context, the security of the website also serves your interests.
2. When you sign up for our newsletter
When you sign up for our newsletter, through which we will inform you about our company, products or to draw your attention to events that we are organizing. When you register, we collect the following personal data from you for the purpose of sending the newsletter:
- name,
- e-mail address and
- voluntary additional information (e.g.,position)
The legal basis for the processing of your personal data for the aforementioned purposes is, in the case of contacting our customers business contacts or their representatives, our legitimate interest in providing information about our service offerings and events in the context of existing business relationships pursuant to Art. 6 (1) (f) GDPR or otherwise your expressly granted consent pursuant to Art. 6 (1) (a) GDPR.You have the right to object to the processing of your data at any time if the processing of your data is based on our legitimate interest, or to revoke your consent with effect for the future. To do this, you can write to us at hello@maya-climate.com or informally using the contact details provided above or unsubscribe from the newsletter using the link contained in the newsletter email. Your data will be deleted immediately after unsubscribing from the newsletter.For the above-mentioned purpose, we may transfer your personal data to HubSpot,Inc.
3. When you sign up for our demo
When you sign up for our demo, we process the following information:
- name
- email address
- voluntary additional information (e.g.,position)
The legal basis for this processing of your personal data is principally Art. 6 (1) (b) GDPR. Insofar as the correspondence is neither necessary for the performance of a contract with us or in order to take steps prior to entering into a contract, the legal basis for the processing is Art. 6 (1) (f) GDPR. In such a case, it is our legitimate interest to communicate with you and to manage and document the communication.Your personal data will be deleted after final answering, as far as there are no legal or other obligations to store.For the above-mentioned purpose, we may transfer your personal data to Calendly, LLC and HubSpot, Inc.
4. Online events and webinars
When you take part in our online events and webinars, we process the following information:
- name, email address
- voluntary additional information (e.g., position)
- video and sound recording
- Metadata (call history (date, time and duration of communication), name of the meeting, device/hardware data, connection data (call number, country name, start and end times, IP addresses),location data, support and feedback data.
We process your data for the purpose of conducting the event, as well as for documenting the event through image and sound recordings and using the resulting recordings for press and public relations.The legal basis for this processing of your personal data is principallyArt. 6 (1) (b) GDPR (contract for the implementation of the event) or your explicit consent according to Art. 6 (1) (a) GDPR. Insofar as the processing of your personal is neither necessary for the performance of a contract with us orin order to take steps prior to entering into a contract, the legal basis for the processing is Art. 6 (1) (f) GDPR. In such a case, it is our legitimate interest to communicate with you and to manage and document the communications.
5. When you apply for a job on our career website(s)
If you apply to us in response to open positions published on our career website(s) or if you send us an unsolicited application (e.g., via hello@maya-climate.com), we process the following categories of personal data during the application process:
- private contact and identification information
- personal data on your professional qualifications
- place of study or training, certificates
- the personal data you provide to us in your curriculum vitae including photos of you
- any other personal data you may have provided in the application
The person responsible for the application process at Maya Climate will receive your application documents and they will be forwarded internally to other application decision-supporting team members of Maya Climate. § 26(1) BDSG and Art.6(1)(b) GDPR are the legal basis for this data processing. Any information that you provide voluntarily, and which goes beyond the required amount will be processed in our legitimate interest Art. 6(1)(f) GDPR in being able to respond to your application in the best possible way.In case of a successful application, we will process your personal data for the purposes of the (prospective) employment relationship in accordance with a separate data privacy policy, which you will then receive from us.Otherwise, we will generally store your data for a period of six (6) months from the time of receipt of the rejection by you. Your application documents are then deleted.For the above-mentioned purpose, we may transfer your personal data to Personio SE & Co. KG Seidlstraße 3, 80335 München.
6. Cookies and Plugins
a) Functional cookies
We use functional cookies to ensure functionality of our Website. Cookies are small text files that store information on the userbehavior when visiting a website and that are placed on the user’s computer andheld available for further visits to the website. These cookies do not causeany damage to your computer and do not contain any viruses.The information obtained using functional cookies will notbe linked to your IP address. No other personal data is collected. We use theinformation contained in these cookies to enable, analyze, and prove theoperation and use of our Website and in order to ensure our IT security.You may also visit our Website without cookies being used,if you have disabled the storage of cookies by adjusting your browser settingsaccordingly. However, in doing so, you may not be able to use all functions ofour Website.The legal basis for the data processing is our legitimateinterest (Art. 6 (1) (f) GDPR). We weighed our interest in providing thecookie-dependent functions of this Website against your interest in theconfidentiality of your personal data, whereby our interest prevails. Withoutthe processing of personal data, it is not technically possible to provide thefunctions. At the same time, the option outlined above is open to you toprevent the processing of your personal data in connection with cookies.As soon as you close your browser, the session cookie isautomatically deleted by default, unless you have made a different setting inthe cookie settings of your browser.
b) Analytics and Marketing ToolsGoogle Analytics, Google Tag Manager, Google Recaptcha, Google Search Console, Google AdSence
We use the abovementioned Google Services on our website, provided by Google IrelandLimited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland("Google").Google Analytics uses so-called tracking pixels and cookies.The information generated by a cookie about your use of this website is usuallytransmitted to a Google server in the USA and stored there. However, byactivating IP anonymization, Google will truncate your IP address beforehandwithin the European Economic Area (European Union and other Member States).Only in exceptional cases will the full IP address be transferred to a Googleserver in the USA and shortened there.On our behalf, Google will use this information for thepurpose of evaluating your use of the websites, compiling reports on websiteactivity and providing us with other services relating to website activity andinternet usage. The IP address transmitted by your browser as part of GoogleAnalytics will not be merged with other data from Google.The processing of your personal data is based on yourconsent (Art. 6 (1) (a) GDPR. You can revoke your consent at any time for thefuture by changing the cookie settings.Google processes your personal data in the USA. The transferof data to the USA is possible due to the Data Privacy Framework.
c) Hotjar
We use Hotjar in order to better understand our users’ needsand to optimize this service and experience. Hotjar is a technology servicethat helps us better understand our users’ experience (e.g. how much time theyspend on which pages, which links they choose to click, what users do and don’tlike, etc.) and this enables us to build and maintain our service with userfeedback. Hotjar uses cookies and other technologies to collect data on ourusers’ behavior and their devices. This includes a device's IP address(processed during your session and stored in a de-identified form), devicescreen size, device type (unique device identifiers), browser information,geographic location (country only), and the preferred language used to displayour website. Hotjar stores this information on our behalf in a pseudonymizeduser profile. Hotjar is contractually forbidden to sell any of the datacollected on our behalf.
d) SalesViewer
Use of SalesViewer® technology:This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personallyThe data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.
III. Data Subject Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- right of access
- right to rectification
- right to erasure (“right to be for gotten”)
- right to restriction of processing
- right to object to the processing
- right to withdraw consent
- right to data portability
If we process your personal data based on our legitimateinterests (Art. 6 (1) (f) GDPR), you can object to the processing by contactingus (see “Controller” for contact details). The same applies if weprocess your data based on your consent, you have the right to revoke yourconsent at any time with effect for the future.Furthermore, you are entitled to lodge a complaint with asupervisory authority regarding the processing of your personal data.