Privacy Policy for Visitors and Prospective Customers

Below we inform you about which personal data is processed when visiting platoyo.com and how we handle your personal details if you contact us as a prospective customer.

1. Data Controller

Responsible pursuant to Art. 4 No. 7 GDPR is:

Atalanda GmbH
Münchener Str. 1
83395 Freilassing
Email: partner@platoyo.com
Phone: +49 8654 774 17 21
Fax: +49 8654 403 99 65

Authorized representative: Managing Director Roman Heimbold
Hereinafter: "Platoyo"

2. Data Protection Officer

Contact our data protection officer at:
Email: datenschutz@platoyo.com
Phone: +49 8654 774 17 22
Fax: +49 8654 403 99 65
Mailing address as above.

3. What is Personal Data?

The term "personal data" as defined in Art. 4 No. 1 GDPR means any information relating to an identified or identifiable person – e.g. name, address, telephone number, email address, or IP address as well as content from email correspondence.

4. Scope, Purpose, and Nature of Data Processing

Below, we explain which data is collected and stored when using platoyo.com (Section 5) and when making inquiries as a prospective customer (Section 6), and for which purposes this occurs.

5. Data Processing When Using the Website

5.1. IP Address and Logfiles

To ensure proper operation and defend against attacks, we store your IP address and log file data for a period of 60 days.
Legal bases: Art. 6(1)(b) GDPR (provision of the website) and Art. 6(1)(f) GDPR (legitimate interest in IT security).
No personal reference is established by us.

5.2. Cookies and Social Plugins

We use technically necessary cookies. Further cookies (e.g. for statistics, marketing) are only used with your explicit consent. You can manage these via our cookie banner upon your first visit.
Cookies can be deactivated or deleted at any time via your browser settings.

5.2.1. User-ID Cookie

To improve the user experience, we store a random user ID in a cookie, which allows logged-in users to be recognized. This cookie does not contain any personal data.

5.2.2. Universal Analytics (Google)

We use Universal Analytics by Google to analyze user behavior. IP addresses are anonymized before transmission. Processing is based on your consent in accordance with Art. 6(1)(a) GDPR.
More information and an opt-out link can be found on Google’s website.

5.2.3. Hotjar

We use Hotjar to analyze user behavior (e.g. click paths, dwell time). Data is processed in an anonymized form and is not linked with other data. For more information, please read Hotjar’s privacy policy.

5.2.4. Microsoft Clarity

This service anonymously analyzes user behavior on our website (e.g. mouse movements). The data does not allow any conclusions to be drawn about your identity. Details can be found in Microsoft’s privacy notices.

5.2.5. LinkedIn Insight Tag

The Insight Tag collects information such as IP address, device information, and page views. This data is encrypted, anonymized, and deleted after 90 days. More information and an opt-out link can be found in your LinkedIn settings.

5.3. YouTube

Our website embeds YouTube videos in enhanced privacy mode. When you play a video, YouTube may process your data. For more information, please see Google’s privacy policy.

5.4. Vimeo

Vimeo videos are also embedded in enhanced privacy mode. When a video is played, connection data is transmitted to Vimeo. For details, refer to Vimeo’s privacy policy.

5.5. Google Maps

We use Google Maps to display maps. Your IP address will be transmitted to Google in the process. Please see Google’s privacy policy for details.

5.6. Newsletter

To send the newsletter, we require your email address. We also statistically capture opens and click behavior. This is only done with your explicit consent (Art. 6(1)(a) GDPR) as part of a double opt-in procedure.
For sending we use Mailchimp, a service provided by Rocket Science Group LLC, USA. Your data will be handled there in accordance with GDPR standards.

5.7. HubSpot

For customer communication and marketing purposes, we use HubSpot. Data transfers to the USA are based on recognized privacy standards (EU-U.S. Data Privacy Framework and Standard Contractual Clauses).
More information: HubSpot privacy.

6. Processing of Prospective Customer Inquiries

If you contact us, we process your contact details and inquiry information to handle your request (Art. 6(1)(b) GDPR) and for further contact maintenance (Art. 6(1)(f) GDPR).

7. Data Disclosure

Your data is processed solely for the stated purposes.
Transfer to third parties is only made to carefully selected and contractually bound service providers (e.g. hosting, software).
Transfers to third countries are only made in compliance with the GDPR requirements.

8. Storage Period

• Logfiles and IP addresses: 60 days
• Universal Analytics data: 14 months
• Newsletter data: until unsubscribed
• Prospective customer data: 2 years after last contact (or 6 years in case of legal retention obligation)

9. Your Rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification, erasure, restriction (Art. 16–18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to data processing (Art. 21 GDPR)
• Withdrawal of your consent
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

For questions or to exercise your rights, contact us at team@platoyo.com or directly contact the data protection officer at datenschutz@platoyo.com.