top of page

Privacy Policy

​

1. Introduction
This privacy policy explains how Creo GmbH ("Heartlist", "we", "us") collects, uses, and protects your personal data when you visit our website or engage with our services.

​

2. Data Controller
Creo GmbH
Karl-Wastl-Str. 4, 84405 Dorfen, Germany
hello@heartlist.org

​

3. Types of Data Collected
We may collect and process the following types of personal data:

  • Name, contact details, and company affiliation (e.g. during application)

  • Email address and preferences (e.g. newsletter signup)

  • Technical data such as IP address, browser type, operating system, referral source, and time spent on pages

  • Any data you voluntarily provide through forms or communication with us
     

4. Purpose of Data Processing
We process your personal data to:

  • Evaluate applications and manage memberships

  • Provide you with information or services you request

  • Send relevant updates, newsletters, or offers

  • Analyze website usage and improve functionality

  • Ensure legal compliance and protect our rights
     

5. Legal Basis for Processing
Processing is based on:

  • Your consent (Art. 6(1)(a) GDPR)

  • Contractual necessity (Art. 6(1)(b) GDPR)

  • Our legitimate interests in improving services and communication (Art. 6(1)(f) GDPR)
     

6. Data Sharing
We only share your data with:

  • Trusted third-party service providers (e.g. IT support, analytics tools)

  • Legal authorities if required

  • Partners with your consent
     

7. International Transfers
If data is transferred outside the EU, we ensure adequate safeguards under GDPR, such as standard contractual clauses.
 

8. Data Retention
We retain personal data only as long as necessary for the stated purposes or as required by law.
 

9. Cookies
Our website uses cookies to enhance user experience and analyze performance. Please refer to our [Cookie Policy] for details.
 

10. Your Rights
Under the GDPR, you have the right to:

  • Access, rectify, or erase your data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority
     

11. Security
We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
 

12. Updates to this Policy
We may update this privacy policy. The latest version will always be available on our website.
 

Contact
For any privacy-related concerns, contact: hello@heartlist.org

This policy is governed by German law.

bottom of page