Privacy policy

This English version is provided for convenience; the German version is binding.

1. Controller

The controller for data processing on this website is Delantoro LLC, 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, United States.

Phone: +49 1512 1281631

Email: lars@hero-pages.com

2. Access data and hosting

This website is delivered through the network of Cloudflare, Inc., which acts on our behalf. When you visit the website, technically necessary data (e.g. IP address, date and time, page accessed, browser information) is processed so that the website can be delivered stably and securely.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and error-free operation). The data is stored only as long as this purpose requires.

3. Contacting us

If you contact us by email or phone, we process your information to handle your request. Depending on the request, processing is based on Art. 6(1)(b) GDPR (pre-contractual or contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication). If your request concerns data protection, such as an objection, the legal basis is also Art. 6(1)(c) GDPR.

We delete your information once your request has been fully dealt with, unless statutory retention obligations apply.

4. Cookies and audience measurement

On the pages of www.companypedia.info we set no cookies, store no information in your browser and do not use Google Analytics. The exceptions are the forms and the customer account for businesses at admin.companypedia.info (see sections 8 and 9).

To evaluate the use of the website in aggregated form, we use Cloudflare Web Analytics by Cloudflare, Inc. When a page is opened, your browser loads a script from Cloudflare that sends details of the page view, such as the page opened, the referring page, browser information and loading times, to Cloudflare; for technical reasons your IP address is transmitted as well. Cloudflare Web Analytics sets no cookies, and we receive only aggregated statistics.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand and improve the reach and technical quality of the website.

5. Videos and links to other websites

Videos in company profiles are loaded only when you click them. Only then does your browser connect to the provider (YouTube or Vimeo) and transmit, among other things, your IP address; the provider may also process the data in the USA. The legal basis is the consent you give with the click (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Any further processing is governed by the provider's privacy policy.

Company profiles contain links to other websites, for example to map services. Such websites open only when you click the link; their provider's privacy policy applies to them.

6. Details of people in company profiles (information under Art. 14 GDPR)

companypedia.info presents companies with their mandatory information and further business information. This includes details of people. This section informs the people concerned, whose data we have not collected from them directly.

People and data concerned

This concerns people whom a company names in its imprint or on its website, in particular its legal representatives such as managing directors, and contact persons a company gives for its profile. We process their name, their position in the company and business contact details.

Source of the data

The details come from publicly accessible sources, namely the imprint and the website of the company concerned, and for claimed profiles also from the company's own information. We publish only business details and only people the company currently names. We do not publish dates of birth.

Purpose and legal basis

We publish the details so that companies can be found reliably with their mandatory information. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest, and that of our users, is to be able to see who is behind a company and represents it; companies publish these details in their imprint for exactly this purpose.

Recipients

The details are publicly available on this website. We use service providers for the processing (see section 11).

Storage period

We store the details as long as the profile is published and the company names the person. Details of people the company no longer names are removed at the next update of the profile. After an objection, we store only what is needed to prevent the details from being published again.

Your right to object

You can object at any time, on grounds relating to your particular situation, to the processing of your data in company profiles (Art. 21(1) GDPR). Use the “Report or correct this entry” link on the profile, or write to lars@hero-pages.com and name the profile concerned. After your objection, we remove your details from the profile and prevent them from being published again.

7. Automatically created texts

Parts of the texts in company profiles are created automatically, solely on the basis of the company's own information, in particular its website, and are labelled as such; company data and details of people from the imprint are excluded.

8. Forms and protection against misuse

With our forms you can list a company, claim a profile, report an entry or request a new password. We process the information you enter in the form, such as your name, your email address and your request, to handle the request and reply to you. To protect against misuse, we also store a check value of your IP address from which the address itself cannot be read.

We protect the forms against automated requests with Cloudflare Turnstile by Cloudflare, Inc. When a form is opened, your browser loads a script from Cloudflare that sends technical characteristics of your browser and your IP address to Cloudflare to check whether the request comes from a person.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract with us, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is to handle requests and reports and to protect our services against misuse. We delete the information once it is no longer needed for handling the request, unless statutory retention obligations apply.

9. Claiming profiles and the customer account

You claim a profile together with booking Premium. For this we process the information from the form, in particular your name, your business email address, your position in the company and, where given, your phone number. We use this information to check your authority for the company, to approve the profile and to communicate with you about your profile.

With Premium you get a customer account in which you can edit the content of your profile and upload pictures and documents. For this we process your login details and the data needed for a secure login; the login is kept in a technically necessary cookie. We check submitted content and uploaded files before they appear on the profile. When Premium ends, access to the customer account ends too. A free listing is possible without a customer account.

The legal basis is Art. 6(1)(b) GDPR (contract and pre-contractual measures); the security of the login and protection against misuse are based on Art. 6(1)(f) GDPR. We store the data as long as your customer account exists, and beyond that only where statutory retention obligations apply.

10. Payment processing (Stripe)

If you book Premium when claiming a profile or later, we use the payment provider Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA, to process the payment.

The data required for this — in particular your name, email address, billing address, your VAT identification number where applicable, and your payment details — is transmitted directly to Stripe and processed there. We neither collect nor store full card details. If you book Premium before your claim has been approved, your payment method is charged only after the approval.

The legal basis is Art. 6(1)(b) GDPR: the transfer is necessary to perform the contract concluded with you. We retain invoice and payment data beyond that where commercial and tax law obliges us to (Art. 6(1)(c) GDPR).

Processing also takes place in the United States. The transfer is based on the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

This section does not concern companies that we bill by invoice; no data about them is sent to Stripe.

You can find more information in Stripe's privacy policy: https://stripe.com/privacy

11. Recipients and transfers to third countries

We pass on personal data only where this is necessary for the purposes named in this policy. Recipients are service providers acting on our behalf, for example for hosting and databases, sending email, protecting our forms against misuse, reading and evaluating websites including the automatic creation of texts, and payment processing.

Delantoro LLC is based in the USA, and service providers also process data partly in the USA or other third countries. Where we transfer personal data to third countries, we rely on an adequacy decision of the European Commission, for example for companies certified under the EU-U.S. Data Privacy Framework, or on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can obtain a copy of the Standard Contractual Clauses on request using the contact details in section 1.

12. Your rights

You have the right at any time to information about your stored personal data, to rectification, erasure, restriction of processing and to data portability within the framework of the law.

Where we process data on the basis of Art. 6(1)(f) GDPR, you can object to the processing on grounds relating to your particular situation (Art. 21 GDPR). For details in company profiles, section 6 applies.

You also have the right to withdraw consent you have given at any time with effect for the future, and to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please use the contact details in section 1.