Privacy Policy
Effective date: September 23, 2025
Last updated: September 24, 2025
Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.
Our privacy policy is structured as follows:
I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing
I. Information about us as controllers of your data
The party responsible for this website (the ‘controller’) for purposes of data protection law is:
Marco Seidler
Rahmannstraße 11
65760 Eschborn
E-Mail: info@excelfind.com
II. The rights of users and data subjects
You have the rights to access, rectification, erasure, restriction, portability, and to object (incl. to direct marketing) under Arts. 15–21 GDPR, and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Supervisory authority (Germany, Hessen): Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI).
You may withdraw consent at any time with future effect.
III. Information about the data processing
Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.
The data thus collected will be temporarily stored, but not in association with any other of your data.
The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.
Cookies
We use cookies and similar technologies to operate our site, improve performance, and personalize content. You can manage your choices at any time. For details on cookie categories, individual cookies, providers, purposes, and durations, please see our Cookie Policy.
Contact
If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
Social Media
YouTube (Google Ireland Limited, Dublin, Ireland; Google LLC, USA) is used for video embeds.
Legal basis:
Consent (Art. 6(1)(a) GDPR) for non-essential cookies, managed via our Cookie Policy.
Legitimate interests (Art. 6(1)(f) GDPR) in secure content delivery.
International transfers: see section below.
We use privacy-enhanced mode where feasible and respect your cookie preferences.
Analytics and Advertising
Google Analytics 4 (GA4)
We use GA4 to analyze site usage. IP addresses are truncated/anonymized and event data controls are enabled.
Legal basis: consent (Art. 6(1)(a) GDPR) via our Cookie Policy.
You can adjust your choice anytime via Cookie Settings (footer). Browser opt-out add-ons are an additional option.
Nelio A/B Testing
We use Nelio A/B Testing by Nelio Software, S.L. (Spain) to run experiments (e.g., alternate page layouts) and measure results. Nelio may set cookies or use similar identifiers to consistently serve a test variant and collect aggregated performance metrics (page views, conversions).
Data categories: pseudonymous identifiers, experiment/variant ID, basic usage events, page URLs; no direct identifiers are required.
Purpose: UX optimization and performance analysis.
Legal basis: consent for non-essential cookies (Art. 6(1)(a) GDPR) via our Cookie Policy; legitimate interests (Art. 6(1)(f)) in running non-cookie measurements where applicable.
Retention: limited to the experiment duration and evaluation period.
You can change your choice anytime via Cookie Settings in the footer; Nelio-related cookies are blocked until consent is given.
Newsletter
When you subscribe, we process your email address and, if provided, your name. We also store your IP address and the time of signup for proof of consent. Emails may include performance metrics (e.g., opens, clicks) to understand engagement; this tracking is pseudonymous and used for statistical purposes only.
Legal basis: consent (Art. 6(1)(a) GDPR).
We use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) as our email service provider. Brevo processes your data on our behalf under a Data Processing Agreement in accordance with Art. 28 GDPR.
Retention: until you unsubscribe or we remove inactive subscribers after 24 months.
You can unsubscribe at any time via the link in each email. Email performance tracking (opens, clicks) is used for statistical purposes. You can object to this at any time by unsubscribing.
Payment Service Providers and Sales Platforms
DigiStore24 Inc. (United States) acts as the reseller for our offerings. The provider and contracting party is DigiStore24 Inc., 360 Central Avenue, Suite 800, St. Petersburg, FL 33701, USA.
As the data controller, DigiStore24 Inc. explains in its own Privacy Policy which data they store and process when you access their platform and make a purchase. For more information, please see: https://www.digistore24.com/page/privacy.
Legal bases:
Contract (Art. 6(1)(b) GDPR) to process your purchase.
Legal obligation (Art. 6(1)(c) GDPR) to retain transaction records for tax/accounting.
Retention: Transaction data is retained in line with statutory commercial/tax retention periods.
Since DigiStore24 Inc. is based in the United States, data transfers outside the EU/EEA are involved. These transfers rely on Standard Contractual Clauses (SCCs) and, where applicable, the provider’s Data Privacy Framework certification to ensure an adequate level of protection.
International data transfers
Some providers are located outside the EU/EEA (e.g., Google/YouTube, DigiStore24 Inc.). Where personal data is transferred to the United States, transfers rely on the provider’s EU–US Data Privacy Framework (DPF) certification or on the European Commission’s Standard Contractual Clauses (SCCs), together with appropriate safeguards and, where necessary, supplementary measures to ensure an adequate level of protection.
Brevo (newsletter provider) is EU-based, and newsletter data is hosted within the EU.
Children's Data
Our services are not directed at children under 16, and we do not knowingly collect such data. If we become aware that we have collected personal data from a child under 16, we will delete it promptly.
Automated Decision-Making
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.
Retention overview
Server logs: up to 7 days (longer for incidents).
Contact inquiries: lifecycle + up to 12 months.
Newsletter data: until unsubscribe or 24 months inactivity.
Analytics/marketing cookies & events: as listed in the Cookie Policy.
Commercial/transaction records: per statutory retention.
Changes to this notice
We may update this policy. The effective date is shown at the top. Material changes will be highlighted.