PRIVACY POLICY
Elephant Power GmbH
Last updated: December 2025
1. General Information
We take the protection of your personal data seriously and process it in line with the GDPR.
Data Controller (Verantwortlicher):
Elephant Power GmbH
Sieglestraße 33H
70469 Stuttgart
Germany
E-mail: data@elephant.pw
Registered:
Commercial Register B, Local Court Stuttgart, HRB 800747
Data Protection Officer (Datenschutzbeauftragter):

Danijel Sistov
E-mail: danijel.sistov@elephant.pw
2. Collection and Processing of Personal Data
a )  Website visit
Data collected: IP address, date/time, file, referrer, browser/OS, provider
Purpose: security, stability, functionality
Legal basis (Rechtsgrundlage): Art. 6 (1) f GDPR
Storage period: 14 days

b ) Contact inquiries (email/form)
Data collected:
name, email address, phone number (optional), message content
Purpose: processing and follow-up communication
Legal basis (Rechtsgrundlage): Art. 6 (1) b GDPR (pre-contractual measures) or Art. 6 (1) f GDPR
Storage period: up to 6 months after completion

c ) Customer/contract data
Data collected:
name, address, payment/contract details, communication
Purpose: contract performance, billing, compliance with law
Legal basis (Rechtsgrundlage): Art. 6 (1) b, c GDPR
Storage period: 6 years (HGB), 10 years (tax law)

d ) Application data
Data collected:
application documents, communication
Purpose: recruitment procedures
Legal basis (Rechtsgrundlage): § 26 BDSG, Art. 6 (1) b GDPR
Storage period: up to 6 months after procedure

e ) Cookies & Analytics
Cookie categories:
  • strictly necessary cookies (session, security)
  • analytics cookies (Google Analytics – anonymized)
  • no advertising/tracking cookies without consent
Legal basis (Rechtsgrundlage):
  • Necessary cookies: Art. 6 (1) f GDPR, § 25 (2) TTDSG
  • Analytics cookies: Art. 6 (1) a GDPR, § 25 (1) TTDSG
Details available in our Cookie Settings.
3. Data Sharing and Recipients
Personal data is only shared if:
  • you consent (Art. 6 (1) a GDPR),
  • necessary for contract performance (Art. 6 (1) b GDPR),
  • legally required (Art. 6 (1) c GDPR),
  • or based on legitimate interest (Art. 6 (1) f GDPR).
Recipients may include:
  • IT service providers (hosting, maintenance)
  • legal and tax advisors
  • authorities (if legally required)
We conduct a balancing test to ensure your fundamental rights are protected.
4. International Data Transfers
Data may be transferred outside the EU/EEA only with safeguards:
  • Google LLC (USA): EU Standard Contractual Clauses + EU-U.S. Data Privacy Framework
  • Data processing agreements ensure GDPR-level protection
  • Data may be processed on servers outside the EU
5. Data Subject Rights
You have rights to: access, rectification, erasure, restriction, portability, objection, withdrawal, complaint (Art. 15–21, 77 GDPR).
Special right of objection against direct marketing (Art. 21 (2) GDPR):
You may object at any time to the processing of your personal data for direct marketing purposes.
Supervisory authority:
Baden-Württemberg State Commissioner for Data Protection and Freedom of Information
Prof. Dr. Tobias Keber
Lautenschlagerstraße 20, 70173 Stuttgart
E-mail: poststelle@lfdi.bwl.de
Tel.: +49 711 615541-0
How to exercise:
E-mail: data@elephant.pw. We respond within 30 days (Art. 12 GDPR).
6. Storage Period and Deletion
 

 Data Category

 Purpose

 Storage Period

 Server log files

 Security, operation

 14 days

 Contact requests

 Processing & follow-up

 Up to 6 months

 Customer/contract data

 Contract, legal duties

 6 years (HGB), 10 years (tax law)

 Application data

 Recruitment process

 Up to 6 months
 after initial application

 Cookies

 Functional /Analytics

 see Cookie settings

 

 Data 
 Category

 Purpose

 Storage Period

 Server
 log files

 Security,   operation

 14 days

 Contact
 requests

 Processing &
 follow-up

 Up to 6 months

 Customer/
 contract data

 Contract,
 legal duties

 6 years (HGB),
 10 years (tax law)
 Application
 Data
 Recruitment 
 process
 Up to 6 months
 after initial
 application
 Cookies  Functional
 /Analytics
 see Cookie
 settings
7. Data Security
SSL encryption and technical/organizational safeguards.
8. Updates
Last updated: December 2025
We may update this policy to reflect legal changes or business developments.
Material changes will be communicated via e-mail or website notice.
Current version: www.elephant.pw/privacy

Our Solution

About Us

©2025 Elephant Power. All rights reserved.