Privacy Policy

Home > Privacy Policy

Privacy Policy

Last Update: October 2023

We have created this Privacy Policy to explain and describe to you how and why we collect personal information from you when you access our services, for what purpose we do it and to inform you about your rights and the way
you can exercise them.

Scope of this Policy

This Privacy Policy applies to your use of and access to the services provided, owned or operated by one.five GmbH or any of our affiliate companies (“one.five”, “we”, “us”, or “our”) consisting of https://www.one-five.com/, https://www.tea.one-five.com/ or any other of our websites, or any other products or services offered by one.five (collectively, the “Services”).

The collection and use of the personal information you provide to us when you submit a job application for a role with one.five; send us feedback; or provide details to us of any technology, invention or development of interest, for example, are also covered by this Privacy Policy.

By using or accessing the Services, you acknowledge that you have read this Privacy Policy and that you understand your rights in relation to our use of your personal information and how we will collect, use and share it. If you do not agree with this Privacy Policy in general or any part of it, you should not use our Services. Any changes we make to this Privacy Policy will be updated on this website. 

one.five is completely committed to respecting and protecting your privacy; for more information about how we use your personal information or to raise any questions you may have about this Privacy Policy, please contact us at info@one-five.com.

  • We collect and process personal information that you choose to share with us yourself, as well as personal information we process when you use and interact with our Services.

    The types of information you choose to share

    When you submit an application for a job with us; send us feedback, provide us with information relating to technologies, inventions or developments you believe to be of interest to one.five; or when you create an account on the one.five Services, you share certain categories of personal information with us. This information may include:

    - your name;

    - your voice or images of you;

    - your mobile or other telephone number;

    - your address;

    - your email address;

    - your date of birth;

    - your registration / login data (e.g., your username and password);

    - information you provide in public forums on our Services, such as your public posts; and any other personal information you choose to share with us.

    The types of information we collect while you use our Services

    We also collect and process certain types of information automatically, whenever you interact with us in order to allow you to use our Services or improve your experience. The usage data that we, as well as the analytics tools described in section 6 below, may collect when you use our Services include:

    - the internet protocol (“IP”) address used to connect your device to the internet;

    - the location of your device during the use of our Services;

    - the date, time and duration of your access to our Services;

    - information collected by cookies and other technologies (please see our Cookies Policy for more information on this);

    - information about your browser, network and device;

    - web pages you visited prior to coming to this website; and your behaviour while using our Services

  • We take steps to ensure that the personal information we collect is accurate and up-to-date. In the event that you believe your information is in any way incorrect or inaccurate, please let us know immediately, by writing an email to info@one-five.com. We will make sure we investigate the matter and correct any inaccuracies as quickly as possible where necessary or give you ways to update it quickly or to delete it - unless we have to keep that information for legitimate business or legal purposes.

    When updating your personal information, we will ask you to verify your identity before we can act on your request.

  • one.five will only share your personal information where this is legally required or permitted and, in these cases, only with specified authorised recipients.

    Squarespace

    The personal information we collect and process when you use our Services is shared with Squarespace, our website analytics service provider, which we use to learn about our website traffic and activity.

    Squarespace collects personal information from our Services only for the purposes of analysis by us. This personal information is not collected for Squarespace’s own usage or exploitation. For further information about how Squarespace processes personal information, read Squarespace’s Privacy Policy.

    Google Analytics

    To better understand how you might engage with our Services, in certain circumstances, such as when you access our Technical Economic Analysis application via https://www.tea.one-five.com/, we use Google Analytics which collects certain personal information such as, e.g., cookies, geolocation and IP address.

    Google Analytics collects personal information from our Services only for the purposes of analysis by us. This personal information is not collected for Google’s own usage or exploitation. For further information about how Google processes personal information, read Google’s Privacy Policy.

    With our affiliates

    one.five may share personal information it processes about you with entities within the one.five family of companies.

    Where legally required or for security reasons

    We may share information about you for legal, safety and security reasons. We may share information about you if we reasonably believe that disclosing the information is needed to:

    • comply with any valid legal process, governmental request, or applicable law, rule or regulation;

    • investigate, remedy, or enforce potential Terms of Service violations;

    • assist external auditors in the event of audits or investigations, if there is a legal requirement or legitimate business interest to do so;

    • protect the rights, property, or safety of us, our members or others; and

    • detect and resolve any fraud or security concerns.

    Mergers and acquisitions

    one.five may share information about you as part of a merger or acquisition. If we are involved in a merger, asset sale, financing, liquidation or bankruptcy, or acquisition of all or some portion of our business to another company, we may share your information with that company before and after the transaction closes.

  • When using one.five Services, personal information is collected to power our site analytics, including:

    • information about your browser, network, and device;

    • web pages you visited prior to coming to this website; and

    • your IP address.

    This information may also include details about your use of our Services, including:

    • clicks;

    • internal links;

    • pages visited;

    • scrolling;

    • searches; and

    • timestamps.

    We share this information with Squarespace, our website analytics provider, and in certain cases, Google Analytics, to learn about site traffic and activity.

  • Some of the personal information you provide to us will be stored or processed on our behalf by third party suppliers and data processors and may be located in other jurisdictions whose laws may differ from the jurisdiction in which you live. Whether to third parties or internally, any transfers of personal information from the European Economic Area (“EEA”) to countries not deemed to provide an adequate level of data protection are governed by European Union (“EU”) standard contractual clauses, or in the case of the United States, the Trans-Atlantic Data Privacy Framework, and/or equivalent data transfer regulations to protect the security and confidentiality of personal information, as described below. We will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Policy.


    Squarespace stores your personal information (for analytics purposes) in multiple Tier III data centres across the USA. Squarespace serves images and other static assets via multiple geographically distributed content delivery networks (CDNs). This system ensures that the data in each page view is served from the data centre closest to your location. For further information about how Squarespace processes personal information, read Squarespace’s 
privacy policy - squarespace.com/privacy

    Personal information contained on job applications you submit to us or when providing details to us of any technology, invention or development of interest will be stored on our servers within the EEA and will only be shared with external service providers in certain circumstances for the purposes of assessing your applications via specific contracts approved by the European Commission.

  • We may transfer your personal information outside of the EEA, including to the USA, in order to provide this information to some of our third party business partners; to allow for our analytics providers, Squarespace and Google Analytics, to provide analytics services; to comply with a legal obligation; or for our own legitimate business purposes. At all times when transferring your information outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

    • Transfer of your personal information to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.

    • Where we use certain service providers or transfer data to other recipients, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (so-called standard data protection clauses).

    • Where we use providers based in the US, we may transfer data in compliance with the provisions of the Trans-Atlantic Data Privacy Framework.

    • Not withstanding the above, in the absence of an adequacy decision by the European Commission, or appropriate safeguards, a transfer or a set of occasional transfers of personal data to a third country located outside the EEA may take place pursuant to the Art. 49 GDPR derogations for specific situations.


    Please contact us if you want further information on the specific steps we take when transferring your personal data out of the EEA, in particular if you wish to receive an overview of third country recipients and a copy of the appropriate or suitable safeguards in place.

  • We apply a general rule of keeping personal information only for as long as is required to fulfil the purpose for which it was collected. However, in some circumstances we may retain your personal information for longer periods of time.

    We may retain your information for the following purposes:

    • as long as it is necessary and relevant for our operations, e.g., so that we have an accurate record of your dealings with us in the event of any complaints or challenge; and

    • to comply with applicable laws, prevent fraud, resolve disputes, troubleshoot problems, assist with any investigation, enforce our Terms of Service and take other actions as permitted by law.

  • We take great care in maintaining the security of our Services and your information and in preventing unauthorised access, loss, misuse, alteration, destruction or damage to it through industry standard technologies and internal procedures. Among other things, we contractually ensure that any third party processing your personal information equally provides for confidentiality and integrity of your data in a secure way. However, the transmission of data via the internet is never completely secure, and although we shall do our best to protect your personal information, we cannot guarantee the security of your data transmitted through our Services; any transmission is at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorised access.

  • one.five GmbH, incorporated and existing under the laws of Germany, having its registered office at Reichskanzlerstraße 23a, 22609 Hamburg and registered with the commercial register of the local court of Hamburg under registration number HRB 164675 is the controller of your personal information.

  • Our Services are not intended for children under 13 years of age. No one under age 13 should provide any personal information to or on any of our Services. In addition, we may limit how we collect, use and store some of the information of EU users between the ages of 13 and 16. We do not knowingly collect personal information from children under 13. Parents and legal guardians should at all times supervise their children's activities. If we learn we have collected or received personal information from a child under 13, we shall delete that personal information.

  • In accordance with the provisions of applicable law, those members located within the EEA have the following rights:

    • Access: you have the right to request a copy of the personal information that we are processing about you. If you require additional copies, we may need to charge a reasonable fee.

    • Rectification: you have the right to correct errors in the personal information held about you by us.

    • Deletion: you have the right to request that your personal information be deleted and no longer processed by us, which we will comply with, unless there is a legal obligation to retain your personal information and/or other legitimate reasons for their processing by us.

    • Restriction of Processing: in certain circumstances, you may request that the processing of your personal information be restricted. This means that we will be allowed to continue to store your personal information, but we will not be able to use it.

    • Portability: you have the right to obtain and reuse the personal information which you have provided to us, and to be able to transmit them directly to a third party in a structured, commonly used and mechanically readable format. In order to exercise this right, please ensure you provide us with a valid email address.

    • Objection: in certain circumstances, you may object to the processing of your personal information by us. Where we receive a valid objection from you, we will stop the processing activity, except where we must continue to process your data for legitimate reasons, or for the purpose of establishing, exercising or defending possible legal claims.

    We guarantee the adoption of the necessary measures to ensure the exercise of your rights free of charge. In all circumstances, when exercising one of the above rights, please provide appropriate evidence which confirms your identity. You may exercise any of the above rights in any of the following manners, indicating which right you are exercising:

    • by writing to us at one.five GmbH, Reichskanzlerstr. 23a, 22609 Hamburg, Germany;

    • by writing an email to: info@one-five.com; or

    • through any other means that may be available to you according to availability.

    You also have the right to lodge a complaint with any of the EU supervisory authorities.

    Archive of previous versions

Why we’ll be collecting your personal information

We collect and process your personal information only when it is necessary for operating, providing or improving our Services for you; while assessing your application to join one.five, or where you wish to flag technologies, inventions or developments of interest to one.five.

The table below shows all of the ways that we intend to use your personal information, as well as the legal bases we rely on to do so.

To provide you access to any of our websites, as may be applicable

Legitimate interest

To register you as a user of our services and manage and terminate your subscription

Performance of a contract

To assess any technology, invention or development you bring to our attention

Legitimate interest

To perform our contractual obligations, in particular to make the Services available for use and manage their use

Performance of a contract

To provide customer support services and answer your questions and inquiries

Performance of a contract

To improve our Services and marketing measures and adapt them to your needs and to develop new services and perform internal quality checks

Legitimate interest (we have a legitimate interest in continuously improving and developing our services)

To handle your requests about our Services

Performance of a contract

To carry out marketing telephone calls to inform you about our Services, to ask feedback about our Services or inform you of improvements of our Services

Your consent

To manage our relationship with you, including notifying you about changes to our Services, Terms of Services, other applicable

Performance of a contract guidelines or terms, or this Privacy Policy

To verify that your usage of our Services does not infringe our terms and conditions or any laws or regulations

Performance of a contract

Lawful basis for processing

Purpose / Activity

Performance of a contract

To verify your identity

Legitimate interest

To assess your job application

Legitimate interest (we have a legitimate interest in understanding how you use our Services)

To monitor and analyse trends and usage

Legitimate interest (we have a legitimate interest in the processing of data if you activate a social plug-in and thus express that you would like us to transfer data to the respective social network)

To enable you to recommend us via social media or share information about our Services with others

Legitimate interest (we have a legitimate interest in defending ourselves against damages claims and to cooperate with our insurers in relation to the settlement of claims and adjustment of losses)

To respond to requests for information from our insurers for claims settlement and loss adjustment purposes

Legitimate interest (we have a legitimate interest in carrying out direct marketing activities provided that this complies with applicable marketing law)

To send newsletters and / or other marketing emails to inform you about our Services, to ask feedback about our Services or inform you of improvements of our Service

This processing is either based on the performance of a contract – if the information you have requested relates to a contract with you or is a pre-contractual issue – or on our legitimate interest – if the information you request relates to something else (we have a legitimate interest in communicating with you upon your request and to deal with any matters arising of that contact)

To contact you and provide you with information that you have requested and deal with any matters arising as a result of that contact

(a) Performance of a contract (if you have chosen to participate in the competition or to complete a survey)
(b) Legitimate interest (offering you to participate in a competition or to complete a survey; we have a legitimate interest in providing you with the opportunity to participate in a competition and to complete a survey so that we can constantly improve our Services in general in order to develop and further our business)

To enable you to participate in a competition or complete a survey

To comply with relevant legal obligations, such as keeping accounting records or with obligations to disclose data based on a court decision or official order

Necessary to comply with a legal obligation

This processing is either based on the protection of vital interests – in emergencies or – in all other cases – on our legitimate interest (we have a legitimate interest in protecting the personal safety of our members and the public)

To act in an emergency to protect the personal safety of others

Legitimate interest (we have a legitimate interest in assisting the police with the investigation of suspected crimes and responding to requests for information in connection with personal injury, theft or damage to property)

To respond to requests for information from the police and other public authorities to protect legitimate interests of third parties regarding personal health or property

Necessary to comply with the legal obligations regarding data security – if the measures are necessary to comply with these obligations – or legitimate interest – if the measures go beyond what we are strictly required to do (we have a legitimate interest in resolving disruptions, ensuring the security of our systems and the detection and tracing of (the attempt of) unauthorised access or fraudulent activity)

To determine disruptions and to ensure the security of our systems, including the detection and tracing of (the attempt of) unauthorised access to our servers or Services; to prevent, detect, process and investigate malfunctions, incidents, fraudulent or other illegal activities, or mitigate the risk of occurrence of the aforementioned events

Legitimate interest (we have a legitimate interest in using the technology we employ to better understand your behaviour)

Use information we’ve collected from cookies and other technology to enhance our Services and your experience with them

Legitimate interest (we have a legitimate interest in accounting, risk management and record keeping in accordance with customary business practice)

For accounting, risk management and record keeping purposes