Privacy at Giver CRM
giver-crm-20261012-v1
Who is responsible?
Giver is responsible for account administration, access protection and service communication. Your company is responsible for the contact and sales data it enters in its CRM. Giver processes those contents on your company’s documented instructions under the data-processing agreement.
Which data do we process?
To create an account we need your name, business email and company name. We record your email verification, company membership and acceptance of the customer terms. Your company decides which contacts, organisations, deals, notes and files to store. Do not upload health information, identity documents or other special-category data.
Purpose and legal basis
We use account data to provide the requested service and administer the company contract. Our bases are Article 6(1)(b) GDPR where you are a contracting party and Article 6(1)(f) for business representatives, access security and abuse prevention. Our legitimate interest is a usable, secure business service. CRM contents are processed on behalf of your company; your company determines its lawful purposes and bases.
Hosting and email
The CRM is hosted by IONOS on the existing Giver server in Germany. Each company has a separate database and file area. Resend sends access and invitation emails. Messages include the recipient address and the information needed for account access. CRM correspondence to your contacts is not enabled through this account. Resend’s delivery service uses the configured EU region; its provider and subprocessors may process data outside the EEA. Applicable safeguards, including standard contractual clauses, are described in Resend’s data-processing agreement and subprocessor list.
Browser storage
Required session cookies protect your sign-in. Language and interface preferences and application assets may be stored locally by the native CRM. No optional analytics, advertising tracking or marketing subscriptions are enabled. Necessary access storage is used to provide the service you request, under section 25(2) TDDDG.
Retention
Account and CRM contents are retained for the company’s use and documented instructions. You can request an export, correction or closure through support. At contract end, your company chooses return or deletion; we arrange this within 30 days unless a legal duty requires specific records to remain. Backups are encrypted and access restricted. Where deletion is required, affected backup copies are also removed or isolated until removal; restored data must honour the deletion instruction. No indefinite archive or statutory bookkeeping service is promised.
Your rights
You may request access, correction, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. Contact mmusiol@ongiver.com. For CRM contents, contact the company that entered your data; Giver assists it. You can complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision. We do not make automated decisions with legal or similarly significant effects.
Provider and contact
Giver, Maximilian Matthias Musiol, Ickstattstraße 26, 80469 München, Deutschland. mmusiol@ongiver.com
Resend Data Processing Agreement · Resend Subprocessors · IONOS