Privacy Policy

Last updated: July 2025

A. Controller

gyde GmbH Rotebühlstraße 50, 70178 Stuttgart, Germany Phone: +49 1575 5525175 Email: info@gyde.io

Data Protection Officer: rsdatenschutz Bismarckstraße 2, 71634 Ludwigsburg

Supervisory Authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

B. Website Usage

I. Informational Use

When you visit our website for informational purposes only, we collect data that your browser transmits to our server. This includes your IP address, date and time of the request, browser type and version, operating system, and the referring URL. This data is necessary for the technical provision of the website and is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

II. Analysis and Tracking

With your consent, we use the following services:

  • Google Analytics 4 — for website usage analysis with IP anonymization
  • Google Ads — for conversion tracking and remarketing
  • LinkedIn Insight Tag — for conversion tracking

Legal basis: Your consent per Art. 6(1)(a) GDPR and § 25(1) TDDDG.

III. Active Website Use

When you actively use our website (e.g., contact forms, course registration), we process the data you provide for the following purposes:

  • Contact inquiries — to respond to your questions
  • Course registration — name, email, company, and position
  • Newsletter — email address for promotional communications via HubSpot
  • Business analytics — for market research and service improvement
  • Legal enforcement — to protect our rights
  • Statutory compliance — to fulfill legal obligations

C. Training Services

1. gyde Platform / App

When you use the gyde platform, we collect: email address, authentication tokens, user metadata, company details, role information, engagement metrics, quiz responses, and diagnostic information.

  • Employer-registered users: Consent granted by employer (Art. 6(1)(a) GDPR)
  • Self-registered users: Contractual necessity (Art. 6(1)(b) GDPR)
  • Sensitive data: Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR)

Our website contains links to external websites. We have no influence on the content of these external sites and cannot assume any liability for them. Please review the respective privacy policies before sharing data.

E. Data Recipients

Your data may be shared with the following categories of recipients:

  • Internal employees with need-to-know access
  • IT hosting and administration providers
  • Marketing service providers
  • Payment processors
  • Legal advisors and debt collection services
  • Public authorities (where legally required)

F. Third-Country Transfers

Where data is transferred to countries outside the EU/EEA, we ensure appropriate safeguards through EU Standard Contractual Clauses. Transfers to the USA occur via Google services and HubSpot.

G. Data Retention

  • Informational website use: Deleted 7 days after your visit
  • Active website use: Duration of the business relationship plus statutory retention periods (2–10 years per commercial and tax codes)
  • App and coaching data: Duration of the program; deleted upon request or contract termination unless legal obligations apply
  • Aggregated data: Retained indefinitely for service optimization (no personal reference)

H. Data Provision

You are not legally required to provide personal data. However, certain services and functionalities may not be available without it.

I. Profiling

We use limited profiling for email response analysis. No fully automated decisions per Art. 22 GDPR are currently implemented.

J. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time with future effect
  • Lodge a complaint with the supervisory authority

K. Right to Object (Art. 21 GDPR)

You may object to processing based on legitimate interests or public interest at any time. Your objection will prevent future processing unless we can demonstrate compelling legitimate grounds. Objections to direct marketing are always honored immediately.

L. Policy Updates

This privacy policy may be updated when changes to our data processing occur. The current version is always available on this page.