Privacy Policy

This Privacy Statement is provided in English for your convenience. Please note that in case of a dispute or discrepancy between the German Data Privacy Statement and the English translation, the German version shall prevail.

As of: April 6, 2026

1. Data Controller (hereinafter: "we")

PlaceAlive GmbH
Igelgrund 6
30419 Hannover

represented by the managing director:
Mr. Maximilian Schubert, contact details as above

Contact:

Phone: +49 175 94 95 288
Email: info@placealive.com

Further details about us can be found in our legal notice.

2. Personal data, purposes of processing, and legal basis

You can generally use our website without having to provide any personal data. The provision of personal data is voluntary.

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as"data subject"). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.

The purpose of data processing is to operate this website with information about our range of services and contact options.

Personal data is only collected on our website if this is necessary

  • for the use of the website (legal basis: Art. 6(1)(a) and/or Art. 6(1)(b) General Data Protection Regulation (GDPR)),
  • to safeguard our interest in improving the user experience and maintaining the security of use (legal basis: Art. 6(1)(f) GDPR),
  • for the use of the services offered on the website and for pre-contractual measures, in particular for form entries (legal basis: Art. 6(1)(a) and/or Art. 6(1)(b) GDPR), or
  • for the conclusion and performance of a contract (legal basis: Art. 6(1)(a) and (b) GDPR).

Further details on data processing can be found below under the relevant headings:

3. Access data/server log files

When you visit our website, the servers automatically store the information that your browser sends, known as server log files. The information includes:

  • Name of the website accessed
  • File
  • date and time of retrieval
  • notification of successful retrieval
  • browser type and version
  • user's operating system
  • referrer URL
  • IP address (anonymized)
  • provider

This data is not merged with other data sources. The information is used exclusively for the analysis and maintenance of the technical operation of the servers and the network in accordance with Art. 6(1)(f) GDPR.

4. Cookies

Our website stores cookies. Cookies are small files that enable specific information relating to the user's device (PC, smartphone, etc.) to be stored on that device. They serve to improve the user-friendliness of websites and thus benefit users (e.g. by storing login data). They also serve to collect statistical data on website usage and to analyze this data for the purpose of improving our offering. You can find more detailed information in the following sections of our privacy policy. If you give your consent to non-essential cookies, the legal basis is Section 25 (1) TDDDG, Article 6 (1) (a) GDPR (consent). You can find further information on this and on the cookies and services used in our consent management tool and revoke your consent at any time, freely and without disadvantage, with effect for the future.

As a user, you can influence the use of cookies. Most browsers have an option that restricts or completely prevents the storage of cookies. However, please note that the use and, in particular, the ease of use will be restricted without cookies.

5. Contact via email/contact form

If you send us inquiries by email or contact form, your details there, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions in accordance with Art. 6(1)(b) GDPR. We will not pass on this data without your consent.

6. Recipients of personal data

Notwithstanding the above, personal data is only disclosed to the following categories of recipients:

To our employees and to the host of our website. The host is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter "Webflow"). We have concluded a Data Processing Agreement (DPA) with our host.

Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, for the provision of certain website functions and for ensuring security (necessary cookies).

For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy

The use of Webflow is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Beyond this, your personal data will not be disclosed to third parties without your express consent, unless we are legally obliged to do so pursuant to Art. 6(1)(c) GDPR or the disclosure is strictly necessary for the performance of a contractual relationship pursuant to Art. 6(1)(b) GDPR.

The transfer of data to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy

The company holds a certification under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards for data processing in the USA. Further information: https://www.dataprivacyframework.gov/participant/5666

Please note that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data from access by third parties is not possible.

7. Use of third-party providers and plugins

Cookiebot

We use the Cookiebot service on our website to obtain and document your consent to the use of cookies. The provider is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Cookiebot stores a cookie in your browser that documents your consent status. The data processed in this context (including anonymised IP address, timestamp and consent status) is stored on servers of Cybot A/S.

The use of Cookiebot serves to fulfil our legal obligation to obtain and document consent pursuant to Section 25 TDDDG and Art. 7 GDPR. The primary legal basis is therefore Art. 6(1)(c) GDPR (compliance with a legal obligation). In addition, there is a legitimate interest in maintaining proof of lawful consent, so that Art. 6(1)(f) GDPR may be applied supplementarily.

Since Cookiebot is technically necessary in order to obtain the legally required consent in the first place, it is loaded without prior consent. Consent is therefore not required in this respect (Section 25(2) No. 2 TDDDG).

Cybot A/S uses the technical infrastructure (CDN) of the US company Akamai Technologies Inc. to provide the service. It therefore cannot be excluded that data may be transferred to the USA. The transfer is based on the Standard Contractual Clauses adopted by the EU Commission (Art. 46(2)(c) GDPR) and, where applicable, the EU-US Data Privacy Framework. An adequate level ofd ata protection is thereby ensured.

We have concluded a Data Processing Agreement (DPA) with Cybot A/S (Art.28 GDPR).

Consent records are stored for 12 months.

Further information: https://www.cookiebot.com/en/privacy-policy/

Hubspot

Our website uses the HubSpot service. The provider is HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland (European subsidiary of HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA). Only the European data centre of HubSpot Ireland is used.

Nevertheless, it cannot be excluded that data may be transferred to the USA. The transfer is based on the Standard Contractual Clauses of the EU Commission (Art. 46(2)(c) GDPR). In addition, HubSpot is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of data protection. Further information: https://www.dataprivacyframework.gov/

HubSpot is an integrated software solution that we use to cover various aspects of our online marketing, including reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms.

In the course of optimising our marketing activities, the following data may be collected and processed via HubSpot: geographic location, browser type, navigation information, referrer URL, performance data, IP address, device identifier, duration of visit, clickstream data, and device model and version.

The legal basis for processing is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future. Data will be deleted once it is no longer required for the purpose for which it was collected, and no later than after 12 months.

We have concluded a Data Processing Agreement (DPA) with HubSpot Ireland Limited (Art. 28 GDPR).

Further information: https://legal.hubspot.com/privacy-policy

Google Ads, Conversion Tracking & Remarketing

This website uses Google Ads as well as Google Conversion Tracking and Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (European subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When you access our website via a Google advertisement or perform certain actions on our website, a cookie is set. This cookie enables the measurement of the success of advertisements (conversion tracking) and the re-targeting of website visitors via the Google advertising network (remarketing). The following data may be processed: IP address, browser type, pages visited, time spent on site and interaction data.

Processing is carried out on the basis of your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future.

The conversion tracking cookie is deleted after 90 days. Remarketing lists are generally stored at Google for a maximum of 540 days. The cookie lifetime on your device is between 30 and 90 days depending on the cookie type.

Google LLC is a US company. It therefore cannot be excluded that data may be transferred to the USA. The transfer is based on the Standard Contractual Clauses of the EU Commission (Art. 46(2)(c) GDPR). In addition, Google is certified under the EU-US Data Privacy Framework (DPF). Further information: https://www.dataprivacyframework.gov/

We have concluded a Data Processing Agreement (DPA) with Google Ireland Limited pursuant to Art. 28 GDPR.

Further information: https://policies.google.com/privacy

Meta Ads (Facebook Pixel / Instagram Remarketing)

To evaluate and optimise our advertising campaigns, we use services provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (European subsidiary of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA).

The so-called Facebook Pixel tracks whether users interact with our website after clicking on a Meta advertisement (conversion tracking). In addition, the Pixel enables the re-targeting of website visitors via Meta platforms (remarketing). The following data may be processed: IP address, browser type, pages visited, time spent on site and – where available – information from your Meta account.

Processing is carried out on the basis of your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future.

With regard to the processing via the Facebook Pixel, there is joint controllership between us and Meta pursuant to Art. 26 GDPR. Meta provides an agreement for this purpose, which we have accepted: https://www.facebook.com/legal/controller_addendum

Meta Platforms, Inc. is a US company. It therefore cannot be excluded that data may be transferred to the USA. The transfer is based on the Standard Contractual Clauses of the EU Commission (Art. 46(2)(c) GDPR). In addition, Meta is certified under the EU-US Data Privacy Framework (DPF). Further information: https://www.dataprivacyframework.gov/

Data collected via the Pixel is generally deleted by Meta after 180 days.

Further information: https://www.facebook.com/privacy/policy

Appointment Booking (Cal.com / cal.eu)

An appointment booking calendar provided by Cal.com is embedded on our website. The provideris Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. We use the service via the European infrastructure (cal.eu), where all data is stored and processed exclusively on servers within the EU.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art.6(1)(f) GDPR. No transfer of data to third countries takes place.

Booking data (name, e-mail address, appointment details) is stored for the duration of the business relationship and to comply with statutory retention obligations, for a maximum of six years pursuant to Section 257 of the German Commercial Code (HGB). We review annually whether deletion is possible.

We have concluded a Data Processing Agreement (DPA) with Cal.com, Inc. (Art. 28 GDPR).

8. Duration of storage

We delete your personal data immediately after the purpose for which it was collected has been fulfilled. We store your data from your emails until your request has been fully processed and completed. After that, the information is usually deleted.

In addition, we review on an annual basis whether the data stored about you can be deleted.

Session cookies are automatically deleted by us after your visit to our website. Access data and server log files are deleted after one week.

Please note that certain data is subject to commercial and tax law retention obligations of at least six (§ 257 HGB) or ten (§147 AO) years.

9. Rights of data subjects

You are not legally obliged to provide your personal data. However, the provision of such data may be necessary for the conclusion of a contract or for certain functions of the website. If you do not provide this data, a contract or a function on the website may not be offered.

No automated decision-making within the meaning of Art. 22 GDPR that has a legal effect on you or similarly significantly affects you takes place.

However, in the context of the use of HubSpot, Google Ads and Meta Ads, your data may be processed in the form of profiling. This includes in particular the analysis of your user behaviour on our website (e.g. pages visited, time spent on site, click behaviour) and the resulting segmentation for marketing purposes and re-targeting via advertising networks (remarketing).

This form of profiling serves exclusively to optimise our marketing activities and has no legal or similarly significant effects on you. Processing is only carried out on the basis of your explicit consent (Art. 6(1)(a) GDPR), which you may revoke at any time with effect for the future.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the GDPR and from Sections 32 to 37 of the new Federal Data Protection Act (BDSG)-neu.

With regard to your personal data, you have the right to

  • Information, Art. 15 GDPR
  • Correction, Art. 16 GDPR
  • Deletion, Art. 17 GDPR
  • Restriction of processing, Art. 18 GDPR
  • Portability, Art. 20 GDPR.

If you have given your consent to the processing of personal data, you have the right to

  • Withdrawal, Art. 7 GDPR – with effect for the future.

You also have the right to

  • object to the processing of personal data,, Art.21 GDPR

1. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (1) (f) GDPR (data processing based on a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

2. In individual cases, we process personal data for direct marketing purposes. If this is the case for you, you have the right to object at any time to the processing of data concerning you for such advertising purposes.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and should be addressed to us as specified above under 1.

If you believe that the processing of your personal data violates data protection law, you always have the

  • right to lodge a complaint

to the competent supervisory authority, see Art. 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The contact details of the data protection officers in the federal states,t he supervisory authorities for the non-public sector, broadcasting, churches, in Europe and other countries, as well as the Virtual Data Protection Office can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover.