Privacy Policy

This is an English convenience translation of our privacy notice. In case of discrepancies, the German version prevails.

The protection of your personal data is very important to us. Here we list all information about the processing and storage of your data when you visit our website and interact with our company.

To use all functions and services of our site, the collection of your personal data is necessary. Processing and storage take place solely in accordance with the statutory guidelines and requirements of the General Data Protection Regulation (GDPR) and other relevant data-protection provisions.

Controller

ILCT Solutions LTD
Apostolou Pavlou 16, 2nd floor
8046 Paphos
E-mail: contact@goglobal.associates

Collection and processing of personal data on this website

Note: to protect your data as comprehensively as possible against unwanted access, we take technical and organisational measures and use an encryption method on our website. Your data is transferred over the internet using TLS encryption between your computer and our server and vice versa. You can usually recognise TLS by the closed padlock symbol in your browser's status bar and an address beginning with https://.

Collection of access and log data

This website automatically collects and stores server-log-file information transmitted by your browser, namely:

  • the user's IP address
  • date and time of access
  • type of request
  • client information such as type and version
  • the user's operating system (device, OS version)
  • referrer information (the source of the visit)

The legal basis for this processing is legitimate interest under Art. 6(1)(f) GDPR. The legitimate interest lies in being able to identify indications of unlawful use of our website (e.g. defending against hacker attacks) and in ensuring a smooth connection.

This website is hosted directly by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. We have concluded a data-processing agreement with Vercel Inc. pursuant to Art. 28 GDPR. Vercel automatically collects and stores information in server log files that your browser transmits. Data transfers to Vercel Inc. are subject to the Data Privacy Framework, the adequacy decision for the USA.

The collected data is stored in server log files for seven days. Only in the event of attacks on our server infrastructure or other legal violations do we store the server log files longer. This longer storage is based on our legitimate interest under Art. 6(1)(f) GDPR and serves to preserve evidence.

Spotify

We use the podcast hosting service "Spotify" of Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. The service is embedded on the basis of your consent under Art. 6(1)(a) GDPR. Published podcasts can be loaded directly from Spotify via an iframe on our website. When you visit one of our pages with embedded Spotify content, a direct connection is established between your browser and the Spotify server, whereby Spotify learns that our page was accessed from your IP address. If you click the Spotify button while logged into your Spotify account, our page content can be linked to your Spotify profile. Further information: spotify.com/legal/privacy-policy

Enquiries via the contact form, e-mail and phone

Any information about yourself that you send us voluntarily is of course treated confidentially. We use the personal data you provide exclusively to process and answer your enquiry. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR, which arises from our interest in answering enquiries from customers, business partners and prospects and in promoting customer satisfaction. A further legal basis for natural persons is the initiation or performance of a contract under Art. 6(1)(b) GDPR.

We store and use contact data and information received (such as business communication histories) from customers and prospects to conduct and initiate the business relationship. Processing is based on (pre-)contractual measures under Art. 6(1)(b) GDPR. The provider is HubSpot Ireland Limited, Dublin, Ireland, with whom we have concluded a data-processing agreement under Art. 28 GDPR.

Insofar as personal data is transferred to HubSpot, Inc., Cambridge, USA, this takes place on the basis of the Data Privacy Framework (the adequacy decision for the USA); standard contractual clauses exist in addition. You have the right at any time to information about the data stored about you in the customer database and can request its correction or deletion.

All personal information you send us with your enquiry is deleted or anonymised no later than 2 years after our final answer, unless a contract is concluded. The 2-year retention results from the fact that you may occasionally contact us again about the same matter and refer to previous correspondence.

Data processing of business partners and customers

Performance of contractual obligations (Art. 6(1)(b) GDPR)

The purposes of processing arise from the implementation of pre-contractual measures and the fulfilment of obligations under the concluded contract. For contract handling we process master data such as first and last name, billing address and billing and payment data. We use the e-mail address and phone number for communication. We also process your data in our HubSpot accounting system.

Compliance with legal obligations (Art. 6(1)(c) GDPR)

The purposes of processing arise in individual cases from statutory requirements, including retention and identification duties, e.g. under tax control and reporting obligations, and data processing in connection with official requests. In this context, data may also be transferred to our appointed tax advisor and appointed law firms.

Protection of our legitimate interests (Art. 6(1)(f) GDPR)

We process the contact data of customers and contact persons at customers, prospects, suppliers and other business partners for communication by e-mail, phone and post. The legal basis is legitimate interest under Art. 6(1)(f) GDPR, arising from the interest in conducting or initiating the business relationship and maintaining personal contact.

We fundamentally rule out passing data on to third parties without consent.

Personal data is stored for the purpose of conducting business relationships for as long as a legitimate interest exists. It may be necessary to process the personal data provided beyond the actual performance of the contract. The legitimate interests here are in particular the selection of suitable business partners, compliance measures, the assertion of legal claims, the defence against liability claims, the prevention of criminal offences and the settlement of damages arising from the business relationship.

Who receives the personal data provided?

Within contractual relationships we may engage processors or service providers who can gain access to your personal data. Compliance with data-protection requirements is ensured contractually. Specifically, we use the following processors:

Google Workspace of Google Ireland Limited, Dublin, Ireland. Data transfers to Google LLC, Mountain View, USA, are subject to the Data Privacy Framework.

Retention period

Data collected for contract handling is stored until the expiry of statutory/contractual warranty and guarantee rights. After this period, we retain the information required under commercial and tax law for the statutory period (regularly seven years from conclusion of the contract), during which the data is processed again solely in the event of a review by the tax authorities and for customer enquiries.

Data processing to document GDPR compliance

Insofar as your data is processed on the basis of consent under Art. 6(1)(a) or Art. 9(2)(a) GDPR, we process it exclusively for the stated purpose and after separate information, in order to be able to demonstrate, within the accountability obligation under Art. 5(2) GDPR, that you have consented to the processing in question.

If you assert data-subject rights under the GDPR against us, we also process and store your data in order to demonstrate, within the accountability obligation under Art. 5(2) GDPR, that we complied with the GDPR when handling your request.

If you assert your rights under the GDPR against us, your data may be transferred to our external data-protection consultancy (SCALELINE Datenschutz).

Social media

We maintain the following social-media presences:

Data processing by us

a. Maintaining the above social-media pages and running ads
Personal data entered on social-media pages, such as comments, videos, images, likes and public messages, is published by the respective platform. We reserve the right to delete content if necessary. Where appropriate, we share content on our page and contact you via the platform, for example via its messengers. We also regularly run ads via our social-media pages. The legal basis for these processing operations is legitimate interest under Art. 6(1)(f) GDPR, which lies in our public relations and communication.

b. Page insights
The social-media platforms provide anonymised statistics and insights that help us understand the types of actions people take on our page ("page insights"). These are created on the basis of certain information about people who have visited our page. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in obtaining information about the actions and visitors of our pages.

This processing of personal data is carried out by the social-media platform and us as joint controllers under Art. 26 GDPR. Joint responsibility requires a separate agreement:

If you want to object to a specific processing operation over which we have influence (e.g. deleting comments), please use the contact details above.

Note: providing your data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide your personal data. The consequence of not providing it is that you cannot communicate or interact with us via our social-media pages. To contact us, please use the e-mail address above.

Data processing by the platform operator

Besides us, the operator of the social-media platform is itself a further controller carrying out its own data processing. We have only limited influence on the processing by the operator. Where we can exert influence (e.g. through configuration), we work within our possibilities towards data-protection-compliant handling by the operator. In many places, however, we cannot influence the operator's processing and do not know exactly which data it processes. The respective operator informs you about the processing of personal data in its own privacy notices:

When using the platforms, your personal data is usually also processed by the respective platform operator on servers in third countries, in particular the USA. Certain third countries have an adequacy decision from the European Commission, meaning their level of privacy protection is comparable to that in the EU/EEA. In all other cases, we conclude standard contractual clauses with the platform operators for the transfer of personal data to third countries.

Note: the platform operator uses web-tracking methods, which can take place regardless of whether you are logged in or registered with the platform. We cannot influence or switch off the platform's web tracking. It cannot be ruled out that the platform provider uses your profile and behavioural data, for example to evaluate habits, personal relationships and preferences. We have no influence on the processing of your data by the platform provider.

Your rights

Under Art. 15(1) GDPR you have the right to obtain, free of charge on request, information about the personal data stored about you. If the statutory requirements are met, you also have a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data. If you provided the processed data yourself, you have a right to data portability under Art. 20 GDPR.

If processing is based on Art. 6(1)(e) or (f) GDPR, you have a right to object under Art. 21 GDPR. If you object to processing, it will cease in future unless we can demonstrate compelling legitimate grounds for further processing that outweigh your interest in objecting.

If processing is based on consent under Art. 6(1)(a), Art. 9(2)(a) or Art. 49(1)(a) GDPR, you can withdraw your consent at any time with effect for the future, without affecting the lawfulness of previous processing.

You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU member state of your residence, workplace or the place of the alleged infringement. The competent data-protection authority in Cyprus can be reached at dataprotection.gov.cy.

No automated decision-making

We do not carry out automated decision-making or profiling.

Provision

Unless stated otherwise in the previous sections, the provision of personal data is neither legally nor contractually required, nor necessary for concluding a contract. Failure to provide your personal data may mean, for example, that we cannot answer your enquiries.

These privacy notes were created in cooperation with the consultancy datenschutz-fix. The texts are protected by copyright.