Status: 08/2026
The protection of your personal data is important to us. This privacy policy informs you in accordance with Articles 13 and 14 GDPR comprehensively about which personal data we process when you visit our website valoon.chat, for what purposes this is done, and what rights you have.
Valoon GmbH
Represented by: Marvin Rosian, Diego Cisterna, Jan Wolber
Please send data protection inquiries to:
We process personal data only to the extent that a legal permit basis exists. Legal bases particularly include: your explicit consent (Art. 6 para. 1 lit. a GDPR), the fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR), as well as the exercise of legitimate interests, unless these are overridden by your interests (Art. 6 para. 1 lit. f GDPR).
This website is operated by the following hosting provider:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68, 02742 Friedersdorf
Server Location: Germany (Dresden)
Hosting is carried out on the basis of our legitimate interest in a reliable, secure, and performant presentation of our online offering (Art. 6 para. 1 lit. f GDPR). A data processing agreement under Art. 28 GDPR has been concluded with ALL-INKL.COM. The data processed during website hosting is processed and stored exclusively on servers within Germany (Dresden); no transfer to third countries outside the EU/EEA occurs in the context of website hosting.
Whenever you access our website, your browser automatically transmits information to our server. These are stored in server log files:
Purpose: Ensuring smooth website operation, error diagnosis, and system security. Legal basis: Art. 6 para. 1 lit. f GDPR. IP addresses are automatically deleted or anonymized after 7 days.
You can reach us via a contact form, email, or phone. We process the data you provide (especially name, email address, subject, and content of your message).
Purpose: Processing your inquiry. Legal basis: Art. 6 para. 1 lit. b GDPR if your inquiry concerns the conclusion or fulfillment of a contract; otherwise Art. 6 para. 1 lit. f GDPR. Your data will be deleted after the final processing of your inquiry, unless legal retention obligations prevent this.
For making appointments, we currently use the service Calendly of Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. When booking an appointment, you provide us with your name, email address, and possibly other information you specify. These data are transmitted to Calendly and processed there.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measure or appointment arrangement within a business relationship). Since Calendly LLC is based in the USA, a third-country transfer takes place. This is based on the EU Commission’s adequacy decision on the EU-US Data Privacy Framework, as far as Calendly LLC is certified accordingly; EU standard contractual clauses according to Art. 46 para. 2 lit. c GDPR are additionally used.
We regularly send release notes to active customers, former customers, and interested parties within our nurturing process. Currently, the dispatch is done via two systems:
Processed data: Email address, possibly name and company affiliation, sending and opening statistics.
Legal basis for sending release notes to current and former customers as part of the customer relationship: Art. 6 para. 1 lit. f GDPR (legitimate interest in informing existing and former customers about product developments) and § 7 para. 3 UWG, insofar as the conditions of the existing customer exception apply. Legal basis for upcoming opt-in newsletter: your consent according to Art. 6 para. 1 lit. a GDPR.
You can object to receiving release notes and newsletter content at any time or revoke your consent, for example via the unsubscribe link in each message or by contacting info@valoon.chat. Data processing agreements according to Art. 28 GDPR have been concluded with both HubSpot and Pipedrive.
Your contact data will be stored until you unsubscribe or declare an objection to advertising. After an objection, we record your contact data only in a suppression list to document your objection permanently and prevent further contact for advertising purposes; this suppression list storage occurs within the statutory limitation periods.
Our website uses cookies. Technically necessary cookies are set based on Art. 6 para. 1 lit. f GDPR. All other cookies and technologies are set only with your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG).
To obtain and manage your cookie consent, we use the Borlabs Cookie plugin by Borlabs GmbH, Rübenkamp 32, 22307 Hamburg, Germany. The tool stores your consent decision in a cookie so it can be retrieved on future visits. Legal basis: Art. 6 para. 1 lit. c GDPR (fulfillment of documentation duty according to Art. 7 para. 1 GDPR). The provider is based in Germany; no third-country transfers take place in this respect.
We use the Google Tag Manager by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin 4, Ireland. The Google Tag Manager integrates the analytics and marketing services described below. The Tag Manager itself does not set cookies or collect personal data; it only serves the technical management of integrated services, which are activated only after your consent.
If you have consented, we use Google Analytics 4 by Google Ireland Limited to analyze user behavior on our website (e.g., page views, dwell time, click paths, devices used). IP anonymization is enabled by default.
Legal basis: Art. 6 para. 1 lit. a GDPR. Data can be transferred to the USA (Google LLC). The legal basis for third-country transfer is the EU Commission’s adequacy decision on the EU-US Data Privacy Framework dated July 10, 2023, supplemented by EU standard contractual clauses according to Art. 46 para. 2 lit. c GDPR.
If you have consented, we serve ads via Google Ads and use conversion tracking by Google Ireland Limited. Clicking an ad sets a cookie to recognize if you performed a certain action on our website afterward. Legal basis: Art. 6 para. 1 lit. a GDPR. Third-country transfer to the USA based on the EU-US Data Privacy Framework.
If you have consented, we use the LinkedIn Insight Tag by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The tool enables analysis of website visits related to our LinkedIn ad campaigns and the creation of target group-specific statistics. Legal basis: Art. 6 para. 1 lit. a GDPR. Transfer to the parent company LinkedIn Corporation (USA) is not excluded; data transfers are supported by the EU Commission’s adequacy decision on the EU-US Data Privacy Framework if LinkedIn Corporation is certified accordingly, additionally by EU standard contractual clauses as per Art. 46 para. 2 lit. c GDPR.
If you have consented, we use the Meta Pixel by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland to measure the effectiveness of our Facebook and Instagram ads and to deliver targeted advertising (Custom Audiences). A non-reversible checksum (hash value) is generated from certain usage data and transmitted to Meta.
Legal basis: Art. 6 para. 1 lit. a GDPR. Transfer to Meta Platforms, Inc. (USA) is possible; legal basis is the EU-US Data Privacy Framework adequacy decision, which Meta Platforms, Inc. has joined, supplemented by standard contractual clauses. Opt-out option: https://www.facebook.com/ads/website_custom_audiences/.
If you have consented, we use Hotjar by Hotjar Ltd. (Contentsquare Group), Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta to analyze user behavior on our website (e.g., mouse movements, clicks, scrolling, anonymized heatmaps and session recordings). Hotjar masks personal text inputs by default.
Legal basis: Art. 6 para. 1 lit. a GDPR. Hotjar/Contentsquare processes the data collected through this function exclusively within the European Union (including corporate headquarters in Malta and other EU locations). Currently, no transfer to third countries outside the EU/EEA is planned. A data processing agreement under Art. 28 GDPR exists with Hotjar/Contentsquare.
If you have consented, we also use HubSpot by HubSpot Ireland Limited, One Dublin Landings, North Wall Quay, Dublin 1, Ireland for website tracking, lead capture via forms, and prospectively for appointment booking. Among other data, IP address, visited pages, dwell time, and voluntarily submitted contact data via forms are processed.
Legal basis: Art. 6 para. 1 lit. a GDPR for tracking; Art. 6 para. 1 lit. b GDPR for processing data submitted via a HubSpot form within an inquiry. Transfer to HubSpot Inc. (USA) as parent company is possible; this is based on the EU-US Data Privacy Framework adequacy decision if HubSpot Inc. is certified accordingly; supplemented by EU standard contractual clauses under Art. 46 para. 2 lit. c GDPR.
We actively operate profiles on the following platforms:
By clicking these links, you leave our website. The data processing upon visiting the respective platform is governed exclusively by the respective platform provider’s privacy policies. We have no influence on this processing and, unless we operate our own interaction offers (e.g., fan page analysis), are not joint controllers within the meaning of Art. 26 GDPR.
We embed YouTube videos on our website and will continue to do so. Embedding is done in extended privacy mode (youtube-nocookie.com). A connection to YouTube servers and thus data transfer to Google LLC or YouTube LLC (USA) only occurs when you actively play the video.
Legal basis: Your consent according to Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. Third-country transfer to the USA based on the EU-US Data Privacy Framework. Additional information: https://policies.google.com/.
Unless specifically indicated otherwise, we store personal data only as long as required for the processing purpose. In detail:
As part of operating our website, we use the following categories of recipients with whom – where required – data processing agreements under Art. 28 GDPR have been concluded:
– ALL-INKL.COM (website hosting, Germany)
– HubSpot Ireland Limited (newsletter, website tracking, forms, future appointment booking)
– Pipedrive OÜ (newsletter dispatch, limited until 14.08.2025)
– Calendly LLC (appointment booking, limited until migration to HubSpot)
– Borlabs GmbH (consent management)
– Google Ireland Limited (Tag Manager, Analytics, Ads, YouTube)
– LinkedIn Ireland Unlimited Company (Insight Tag)
– Meta Platforms Ireland Limited (Meta Pixel)
– Hotjar Ltd. / Contentsquare Group (user behavior analysis)
Disclosure to third parties for advertising purposes without your consent does not occur. Where legally obligated, data can be passed to competent authorities.
Data transfers to third countries outside the EU/EEA take place only based on an adequacy decision by the EU Commission, EU standard contractual clauses under Art. 46 para. 2 lit. c GDPR, or other appropriate safeguards under Chapter V GDPR. We have reviewed and documented internally the certification status of the following US providers in the EU-US Data Privacy Framework registry:
Hotjar/Contentsquare processes data collected for user behavior analysis exclusively within the EU. No third-country transfers take place in this respect; a data processing agreement under Art. 28 GDPR exists with the provider.
ALL-INKL.COM processes and stores data arising in the context of website hosting solely on servers located within Germany. No third-country transfer occurs within website hosting; a data processing agreement under Art. 28 GDPR exists with ALL-INKL.COM.
Right of Access (Art. 15 GDPR)
You may request information as to whether and which personal data we process about you, as well as information on purpose, recipients, storage duration, and the origin of this data.
Right to Rectification (Art. 16 GDPR)
You have the right to have incorrect or incomplete personal data corrected.
Right to Erasure (Art. 17 GDPR)
You may request the deletion of your personal data, provided there are no legal retention obligations or other legitimate reasons to the contrary.
Right to Restriction of Processing (Art. 18 GDPR)
Under legal conditions, you may demand that the processing of your data be limited to mere storage.
Right to Data Portability (Art. 20 GDPR)
If processing is based on your consent or a contract and is automated, you may request the data be provided in a structured, common, and machine-readable format.
Right to Object (Art. 21 GDPR)
You can object to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR at any time for reasons related to your particular situation. Objection to direct marketing is possible at any time and without giving reasons.
Revocation of Consents
If processing is based on your consent, you may revoke it at any time with future effect, for example via the cookie settings (Borlabs) or informally by contacting datenschutz@valoon.chat. The lawfulness of processing carried out until revocation remains unaffected.
To assert your rights, please contact datenschutz@valoon.chat or the contact details provided in section 1. We will process your request immediately, at the latest within one month.
Without prejudice to other legal remedies, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for Valoon GmbH is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf
Phone: +49 (0)211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
We reserve the right to update this privacy policy at any time with future effect in order to adapt it to changed legal requirements or new processing practices. The currently valid version is available at https://valoon.chat/datenschutzerklaerung/.
