Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Arveum Intelligence GmbH i.G.

Jägerberg 23, 82335 Berg

Germany

Managing Director: Albrecht Senden

Email: datenschutz@arveum.com

Contact person pursuant to German Telemedia Act (TMG):

Philipp Montgelas

Email: datenschutz@arveum.com

This notice applies to visits to the marketing website at arveum-intelligence.com and to the processing of lead data from the contact form. It does not describe candidate-data processing on our customers’ career portals:

– Candidates applying via a tenant career page: the Article 13 GDPR notice at <tenant>.hr.arveum.ai/datenschutz applies, with the respective customer acting as data controller.

– Candidates or tenants interacting directly with the voice platform: voice.arveum.ai/datenschutz describes platform-side processing (Aria/Clara voice backend).

We process personal data of our users only to the extent necessary for the provision of a functional website and our content and services.

Processing only takes place with the user's consent or where a legal basis exists.

This website is operated on our own server. The following data is automatically recorded in server log files with each page request:

– IP address of the requesting device

– Date and time of the request

– Name and URL of the retrieved file

– Referrer URL (previously visited page)

– Browser and operating system used

– HTTP status code

This data is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

Retention period: maximum 7 days.

When you submit an inquiry via the contact form, the following data is processed: name, company, email address, phone number, EBIT figure, and your message.

This data is used exclusively for processing your inquiry and for any follow-up questions and will not be shared with third parties without your consent.

Transmission occurs via email through a secured SMTP server (TLS encryption). Form data is not permanently stored in a database.

Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

Retention period: Until final processing of your inquiry, no later than 3 years.

We use technically necessary cookies required for the operation of this website, as well as – with your consent – analytics cookies from Google Analytics 4 (GA4) and marketing cookies from the LinkedIn Insight Tag.

Strictly Necessary Cookies:

These cookies are required for basic website functions and cannot be disabled. They store your cookie preferences, selected language version, and color scheme setting. No personal data is transferred to third parties.

– arveum-theme: Display setting (light or dark mode). Duration: 1 year.

– arveum-locale: Selected language after manual language switch. Duration: 1 year.

– arveum-cookie-consent-v2: Cookie consent (stored choice: all or necessary only). Duration: 12 months.

Local Browser Storage (LocalStorage):

– arveum-theme: Mirror of display setting as fallback.

Legal basis for necessary cookies: Art. 6(1)(f) GDPR (legitimate interest) and Art. 6(1)(a) GDPR (for arveum-cookie-consent-v2).

Analytics Cookies (only with your consent):

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow St, Dublin 4, Ireland.

GA4 uses cookies (_ga, _gid, _ga_*) to collect anonymized information about the use of this website (pages visited, time spent, approximate geographic origin).

IP addresses are anonymized before storage (IP anonymization is active by default in GA4).

Legal basis: Art. 6(1)(a) GDPR (consent).

Third-country transfer: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; additionally, Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR apply.

Retention period: up to 26 months.

Right of withdrawal: You can withdraw your consent at any time with future effect by clicking on "Cookie Settings" in the footer of this website.

Marketing Cookies (only with your consent):

With your consent, we use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). It is used to measure the success of our advertising campaigns on LinkedIn (conversion tracking), to show visitors of this website advertising on LinkedIn (retargeting), and to obtain aggregated reports about the visitors of our website.

Data processed: The Insight Tag transmits the URL visited, the referrer URL, your IP address, device and browser characteristics (user agent) and the time of the visit to LinkedIn, and, depending on the settings in our LinkedIn account, actions you take on our website. According to LinkedIn, the IP address is truncated or hashed. If you are logged in to LinkedIn, LinkedIn can associate the visit with your account. We only receive aggregated reports from LinkedIn that do not allow individuals to be identified.

Cookies and browser storage: LinkedIn sets cookies on its own domains, including bcookie (1 year), lidc (24 hours), li_gc (6 months), li_sugr (90 days), UserMatchHistory (30 days) and AnalyticsSyncHistory (30 days). LinkedIn determines which of them are set in each case; the complete list is in LinkedIn's cookie table: https://www.linkedin.com/legal/l/cookie-table

If you reach us through an ad on LinkedIn, the Insight Tag also stores the cookies li_fat_id (30 days) and li_giant (7 days) on our domain. For visitors outside the EU, the EEA, the United Kingdom and the Canadian province of Quebec, it also places a pseudonymous identifier (li_adsId) in the browser's storage (6 months).

Responsibility: We decide on embedding the Insight Tag and thus on the collection of data on our website and its transmission to LinkedIn. LinkedIn is independently responsible for the further processing and also uses the data for its own purposes (LinkedIn Independent Controller Addendum: https://www.linkedin.com/legal/l/linkedin-independent-controller-addendum).

Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent).

Third-country transfer: LinkedIn stores the data on servers in the USA. LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework; additionally, Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR apply.

Retention period: According to LinkedIn, direct identifiers are removed within 7 days (pseudonymisation) and the remaining data is deleted within 180 days.

Further information: https://www.linkedin.com/legal/privacy/eu

Objecting to retargeting directly with LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Right of withdrawal: You can withdraw your consent at any time with future effect by clicking on "Cookie Settings" in the footer of this website.

You can delete cookies and local storage at any time via your browser settings.

On our contact and newsletter form pages, we use the bot protection service Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Cloudflare Turnstile analyzes user behavior based on various characteristics (e.g., browser environment, interaction patterns) to distinguish automated requests (bots) from human users.

Data may be transferred to Cloudflare servers in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and abuse prevention).

This website uses exclusively self-hosted fonts (Space Grotesk, Inter). No requests are sent to external servers.

Third parties therefore receive no information about your website visit.

This website uses TLS/SSL encryption. You can recognize an encrypted connection by the https:// in the address bar of your browser.

As a data subject, you have the following rights:

– Right of access (Art. 15 GDPR)

– Right to rectification (Art. 16 GDPR)

– Right to erasure (Art. 17 GDPR)

– Right to restriction of processing (Art. 18 GDPR)

– Right to data portability (Art. 20 GDPR)

– Right to object (Art. 21 GDPR)

– Right to withdraw consent (Art. 7(3) GDPR) – at any time with future effect

To exercise your rights, contact: datenschutz@arveum.com

You have the right to lodge a complaint with the competent data protection supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27, 91522 Ansbach, Germany

Phone: +49 981 53-1300

Email: poststelle@lda.bayern.de

Website: www.lda.bayern.de

Arveum offers “Clara”, an AI-powered recruiting agent. Under Annex III, point 4(a) of the EU AI Act (Regulation 2024/1689), Clara is classified as a high-risk AI system.

On this marketing website you will find:

– a pre-recorded audio snippet of Clara’s AI voice (Hero area) as demonstration content. Playback runs entirely client-side in your browser; we do not process your voice or record your interaction with the snippet.

– no interactive Clara interview. Live interactions take place exclusively on our customers’ career subdomains.

Conformity assessment, risk-management documentation (Annex IV EU AI Act), the active sub-processor list and our DPIA are available on reasoned request. Please contact datenschutz@arveum.com.

We reserve the right to update this privacy policy in the event of changes to legal requirements or our data processing practices. The version current at the time of your visit shall apply.