1. Introduction
In the following, we provide information about the collection of personal data when usingour website https://levity.aiour profiles in social media.Personal data is any data that can be related to a specific natural person, such as their name or IP address.1.1.
Contact details
The controller within the meaning of Art. 4 (7) EU General Data Protection Regulation (GDPR) is
Levity AI GmbH
Große Hamburger Str. 17
10115 Berlin, Germany
email: [email protected]
We are legally represented by Gero Keil, Thilo Hüllmann.Our data protection officer is heyData GmbH, Gormannstr. 14, 10119 Berlin, www.heydata.eu, e-mail: [email protected].
1.2. Scope of data processing, processing purposes and legal bases
We detail the scope of data processing, processing purposes and legal bases below. In principle, the following come into consideration as the legal basis for data processing:
Art. 6 para. 1 s. 1 it. a GDPR serves as our legal basis for processing operations for which we obtain consent.
Art. 6 para. 1 s. 1 lit. b GDPR is the legal basis insofar as the processing of personal data is necessary for the performance of a contract, e.g. if a site visitor purchases a product from us or we perform a service for him. This legal basis also applies to processing that is necessary for pre-contractual measures, such as in the case of inquiries about our products or services.
Art. 6 para. 1 s. 1 lit. c GDPR applies if we fulfill a legal obligation by processing personal data, as may be the case, for example, in tax law.
Art. 6 para. 1 s. 1 lit. f GDPR serves as the legal basis when we can rely on legitimate interests to process personal data, e.g. for cookies that are necessary for the technical operation of our website.
1.3. Data processing outside the EEA
Insofar as we transfer data to service providers or other third parties outside the EEA, the security of the data during the transfer is guaranteed by adequacy decisions of the EU Commission, insofar as they exist (e.g. for Canada and Israel) (Art. 45 para. 3 GDPR).
If no adequacy decision exists (e.g. for the USA), the legal basis for the data transfer are usually, i.e. unless we indicate otherwise, standard contractual clauses. These are a set of rules adopted by the EU Commission and are part of the contract with the respective third party. According to Art. 46 para. 2 lit. b GDPR, they ensure the security of the data transfer. Many of the providers have given contractual guarantees that go beyond the standard contractual clauses to protect the data. These include, for example, guarantees regarding the encryption of data or regarding an obligation on the part of the third party to notify data subjects if law enforcement agencies wish to access the respective data.
The transfer of data to third parties in the United Kingdom of Great Britain and Northern Ireland is currently based on the transitional arrangement in the trade and cooperation agreement between the European Union and the United Kingdom.
