Elucidate GmbH is committed to protecting and respecting privacy. Elucidate GmbH collects and processes personal data relating to visitors to efi.elucidate.co and elucidate.co, and in relation to the services we provide. The data we process differs depending on the different interactions with us, as detailed below.
This policy includes information on Elucidate, how we collect and use information, how we keep it safe, how long we keep this information, who has access to this information and the right of access to the data.
When we talk about “Elucidate”, or “us” or “we” in this notice, we are talking about Elucidate GmbH, located in Berlin, Germany (Amtsgericht Charlottenburg HRB 196707B).
Our Data Protection Officer oversees how we collect, use, share and protect information gathered to ensure all required rights are fulfilled. Our Data Protection Officer can be contacted at firstname.lastname@example.org.
The information we collect varies in line with the use cases below:
The information we have collected is stored in a GDPR compliant data processing facility in Frankfurt am Main, Germany. This facility holds the following certifications ISO 27001, ISO 27017, ISO 27018, SOC1, SOC2, SOC 3, FIPS 140-2, PCi, CSA STAR. All data stored in our databases is encrypted using 256-bit Advanced Encryption Standard (AES-256).
To use the information lawfully, we rely on:
To meet our regulatory and legal obligations, we collect some personal information and delete it once we no longer require it. We may also gather information from public sources to help us provide our services through the EFI platform.
Information which has been gathered is available to selected parties as detailed below:
With one exception, we do not transfer data outside the European Economic Area (EEA).
The only exception relates to one of our sub-processors which adheres to GDPR for data relating to European citizens but is located in the US.
Our data processing centre and our backup data centre are located in Frankfurt am Main in Germany. We have configured the data centres to store data within the EU only.
A full list of sub-processors and locations in use is available from https://elucidate.co/sub-processors.
Upon request by the appropriate party, we can correct, erase, or grant access to the personal data we hold, or (where processing is based on consent) withdraw consent to our processing of this personal data. One can exercise these rights by email to email@example.com.
If there is a concern regarding the proper handling of personal data, a complaint can be made to our data protection regulator, the German Information Commissioner’s Office (https://www.bfdi.bund.de/DE/).
We will make changes to this notice upon annual review or as required due to changes, particularly when we change how we use your information or the sub-processors we engage. We will always publish an up-to-date version of this notice on our website at https://elucidate.co/privacy-policy.