Data Protection

Data protection information for the use of the Kevla website and the active use of Kevla solutions

We process personal data in accordance with the provisions of the European General Data Protec-tion Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable legal regulations.

Below we inform you in accordance with Art. 12, 13, 14 and 21 GDPR about the handling of your personal data when using our website www.kevla.io and the active use of Kevla solutions ("solutions") in our web app, in No. 6.2.2 in particular about the storage of personal data when using our solutions.

1. Data Controller

Your data is processed by:

Kevla GmbH (hereinafter referred to as "we" or "us")

Voltastrasse 5

13355 Berlin

info@kevla.io

2. Purposes and legal bases of processing

2.1 Informational use of our website

You can visit our website without providing any personal data. If you only use our website for in-formation purposes, i.e. if you do not register, conclude a contract or otherwise provide us with information about yourself, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us as part of the cookies used.

2.1.1 Technical provision of the website

For the purpose of the technical provision of the website, our system (i.e. the web server) automat-ically collects information from your browser each time you access the website. The temporary storage of your IP address by our system is necessary to enable delivery of the website to your computer. For this purpose, the user's IP address must necessarily be stored for the duration of the session.

The IP address is stored in the log files in order to ensure the functionality of our website. We also use this data to optimize the website and to ensure the security of our information technology systems (e.g. attack detection). In addition, evaluates the data for marketing purposes in connection with the tools mentioned under 2.1.2 Analysis and tracking.

The following information is collected:

IP address;

Browser type/version (e.g.: Firefox 59.0.2 (64 bit));

Browser language (e.g. English);

Operating system used (e.g. Windows 10);

Inner resolution of the browser window;

Screen resolution;

Javascript activation;

Java On / Off;

Cookies On / Off;

Color depth;

Time of access;

The previous website from which you reached us (referrer URL).

We also use cookies to make our website available for you to use. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system when you access a website. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use these cookies, among other things, to make our website and its technical functions available to you. Some functions of our website cannot be offered without the use of cookies.

The following information is stored in the cookies and transmitted to us:

The language you have selected on our website, an identification code of the service providers we use so that you can be recognized when you visit our website again.

For the technical provision of our website, we process your personal data on the basis of the following legal basis:

to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in order to make the website technically available to you.

2.1.2 Analysis and tracking

Google Analytics

On our website we use Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies to analyze how you use the website. The information collected by the cook-ie about the use of our website is usually transferred to a Google server in the USA and stored there.

Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Revocation of your consent

We only use Google Analytics with your consent. You can revoke your consent once you have given it by

prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent;

download and install the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Google Ads

On our website, we also use Google Ads, an advertising platform from Google Inc. This platform allows us to create and place ads that are displayed in Google's search results. The ads are selected based on the keywords that a user enters when searching. The aim of Google Ads is to help companies improve their online presence and attract more customers.

Revocation of your consent

We only use Google Ads with your consent. You can revoke your consent once you have given it by

prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

On our website, we also use HubSpot, a service of HubSpot Inc. for our marketing activities. Hub-Spot uses cookies to analyze your use of our website. The information collected by the cookie about your use of our website is usually transferred to a HubSpot server and stored there.

Among other things, Hubspot collects your IP address, geographical location, browser type, duration of the visit and the pages accessed. Hubspot processes this data on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity, marketing and internet usage. If you register on the website, your web-site activities may be linked to the data you provided during registration in order to provide you with targeted information, for example.

Revocation of your consent

We only use Hubspot with your consent. You can revoke your consent once you have given it by

prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

Social links

A link to the LinkedIn service is integrated on the website. After clicking on the link, you will be redi-rected to our LinkedIn page, for example, i.e. only then will user information be transferred to the respective page. For information on the handling of your data when using the social media pages, please refer to the data protection information.

2.2 Active use of our website and our solutions

In addition to purely informational use, you can also actively use our website to register to use our solutions, to subscribe to a newsletter or to contact us. In addition to the processing of your per-sonal data described above for purely informational use, we will then also process other personal data from you that we require, for example, to process the conclusion of a contract with us.

2.2.1 Processing of requests

In order to be able to process and respond to your inquiries to us, e.g. via the contact form or to our e-mail address, we process the personal data you provide in this context. In any case, this includes your name and your e-mail address in order to send you a reply, as well as any other information that you send us as part of your message.

We process your personal data to respond to user inquiries on the basis of the following legal bases:

to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in responding appropriately to your inquiries;

If the request is aimed at concluding a contract with us, the additional legal basis is Art. 6 para. 1 lit. b GDPR.

2.2.2 Registration with and use of our solutions

We enable you to register and use our solutions on our website and in our web app.

You can register in order to use our solutions. To do so, you must enter some personal data in an input mask and send it to us.

The purpose of registration and login is to enable the use of our solutions and in particular the up-load of compliance documents.

You must enter your e-mail address and a password of your choice. You must also enter the following data:

First and last name;

Role in the company;

Telephone number.

The following data is also stored at the time of login:

The IP address of the user;

Date and time of login.

We process your data for the above purpose on the basis of the following legal basis:

Your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you gave us when you regis-tered;

to fulfill our contractual obligations to our contractual partner for the use of our solutions, Art. 6 pa-ra. 1 lit. b GDPR.

2.2.3 Payment

We use payment service providers to process payments for your order.

We pass on the information provided during your order process (e.g. name, address, IBAN, BIC, invoice amount) to the payment service providers. This transfer is exclusively for the purpose of payment processing with the respective payment service provider and only takes place to the ex-tent that it is necessary for this purpose.

The payment service providers may transfer the data transmitted to them to credit agencies. The purpose of this transfer is to check identity and creditworthiness. The payment service providers may also pass on your data to third parties if this is necessary for the fulfillment of contractual obli-gations or if the data is to be processed on their behalf.

We process your data for the above purpose on the basis of the following legal basis:

Art. 6 para. 1 lit. b GDPR, as the processing of the data is necessary for the payment by means of the payment service provider and thus for the execution of the contract.

2.2.4 Compliance with legal regulations

We also process your personal data in order to fulfill other legal obligations. These may apply to us in connection business communication, among other things. These include, in particular, retention periods under commercial, trade or tax law.

We process your personal data on the basis of the following legal basis:

Fulfillment of a legal obligation to which we are subject pursuant to Art. 6 para. 1 lit. c GDPR in connection with commercial, trade or tax law, insofar as we are obliged to retain your data.

2.2.5 Enforcement of rights

We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary for the prevention or prosecution of criminal offenses.

We process your personal data for this purpose on the basis of the following legal basis:

to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses.

2.2.6 Advertising purposes

We use your data with your consent for advertising purposes, such as sending you our newsletter. We collect mandatory information such as your e-mail address, but also information that you provide to us voluntarily. We use the voluntary information to continuously improve our customer rela-tionship with you.

We process your personal data on the basis of the following legal basis:

your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you gave to the provider when registering for the respective social media platform;

if you have provided us with your e-mail address in connection with the expression of your interest in using our solutions or if we send you personalized advertising, to safeguard our legitimate inter-ests in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 7 para. 3 UWG. § Section 7 (3) UWG; our legitimate interest is based on our economic interests in the implementation of advertising measures and target group-oriented advertising.

Right to object to use in the context of the conclusion of a contract

If we receive your e-mail address in connection with the conclusion of the contract and the provi-sion of our products and you have not objected to this, we reserve the right to regularly send you offers for similar products from our range by e-mail. You can object to this use of your e-mail ad-dress at any time by sending a message to the contact option described below or via a link provid-ed for this purpose in the newsletter e-mail, without incurring any costs other than the transmission costs according to the basic rates.

Analysis of the response to marketing communication

When we send you marketing information, we also analyze when and how you open it, with the help of our service provider Hubspot Inc. As a rule, the following data is stored:

Open/not open with date/time of 1st opening and number of openings;

Click on links (number of clicks, date/time of 1st click);

Land of opening and utilized device;

Deregistrations;

Bounces (indication of non-delivery).

Evaluating and analyzing this data helps us to avoid sending you advertising indiscriminately. In-stead, we send you advertising, such as newsletters, which correspond to your areas of interest. In this respect, for example, we also compare which of our advertising e-mails you open in order to avoid sending you unnecessary e-mails. We would also like to provide you with information that is relevant to you. By tracking opening and click rates, we can better recognize which content is of interest to you.

We process the data for analyzing the response to our newsletter on the following legal basis:

to safeguard our legitimate interests, Art. 6 para. 1 lit. f GDPR. Our legitimate interest is our eco-nomic interest in the implementation of advertising measures and target group-oriented advertising.

3. Purposes and legal bases of data processing for social media use

To present our company and communicate directly with you, we use social media platforms from providers such as LinkedIN ("providers"), through which we maintain our presence (e.g. in the con-text of company and employee profiles) and process your data.

3.1 Shared responsibility

If data is collected on our website that both the provider and we process and use for joint purposes (e.g. in the context of analysis or advertising), the operator and we are jointly responsible. It is often not possible for us to deactivate this function. You can therefore contact both the respective pro-vider and us with your request. We currently use the following providers:

LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

You can contact the provider's data protection officer at any time.

3.2 Informational use of the social media presence

You can visit our social media site without providing any personal information. If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information about yourself, we do not process any personal data, with the exception of the data that the provid-er collects and transmits to us as part of the cookies it uses.

3.3 Analysis and tracking

For the purpose of analyzing and tracking the use of its social media platform and our website, the provider uses cookies that enable an evaluation of your surfing behavior. This allows us to improve the quality of the platform and our website and their content. We learn how the platform and the website are used and can thus constantly optimize our offer.

However, we have no influence on the data collected and data processing activities, nor are we aware of the full extent of the data collection, the exact purposes of the processing or the storage periods. We also have no information on the deletion of the data collected by the platform operator.

We process your personal data on the basis of the following legal basis:

your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you gave to the provider when registering for the respective social media platform.

3.4 Active use of the social media presence

In addition to the purely informational use of our website, you can also actively use our website to contact us. In addition to the processing of your personal data described above in the case of purely informational use, we will then also process other personal data from you that we require, for example, to process your inquiry. This also applies in the event that we actively use the website, e.g. to contact you on your own initiative or to initiate business contacts with you.

3.4.1 Sharing, publishing and interacting with posts etc.

You can comment on, share or otherwise interact with (like, recommend, review, etc.) posts, photos, videos, etc. created by us on the provider's platform and on our website. We may share your content on our website if this is a function of the operator's platform and communicate with you via the platform. Public messages etc. may be published by the operator, but will not be used or processed by us for other purposes at any time.

In the case of reviews, we reserve the right to publish a statement (e.g. to clarify a problem, good-will actions, etc.) in response to your message and to ask you to contact us again. Otherwise, we only reserve the right to delete content if this should be necessary.

We process your personal data on the basis of the following legal basis:

To safeguard our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Data processing is carried out in the interests of our public relations work and communication.

3.4.2 Processing requests

In order to process your inquiries to us, e.g. via contact forms, a chat or our e-mail address, to an-swer them specifically and to provide you with the requested information, we process the personal data provided by you in this context. This includes your contact details in order to send you an answer or to make any necessary queries, as well as any other information that you send us in this context.

If you send us an inquiry via our solutions, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the required response. You always have the option of sending confidential inquiries to our address stated in the legal notice or in this privacy policy. We may contact you electronically, by telephone or by post, depending on the subject of the inquiry and the necessity.

We process your personal data to respond to user inquiries, requests for materials, etc. on the basis of the following legal bases:

to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in the proper response to and execution of customer inquiries;

If the request is aimed at the conclusion of a contract, the additional legal basis is Art. 6 para. 1 lit. b GDPR;

with your consent in the context of using the live chat, Art. 6 para. 1 lit. a GDPR.

3.5 Active use of social media by us

We also actively use our presence on business-oriented platforms such as LinkedIn to address, communicate or initiate business contacts, etc. with you.

For this purpose, we process the data provided to us by the respective platform. In particular, this may include your name, your employer, your position with your employer, your education and other contacts on the respective platform. Depending on the type of contact with you, we may process further data, such as the specific business relationship or the content of the communication with you.

We process your personal data to contact, communicate or initiate business contacts with you on the basis of the following legal bases:

your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you gave to the provider when registering for the respective social media platform, insofar as it concerns your platform user data (name, employer, position, usage behavior on the platform, etc.);

to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, provided that we already have a business relationship with you or carry out pre-contractual measures via the platform based on your request (e.g. further contact or communication);

to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR; our legitimate interest consists in the appropriate approach, communication or initiation of business contacts with you for the establishment, implementation, maintenance or termination of a business relationship with you.

3.6 Legal obligation

We also process your personal data in order to fulfill other legal obligations. These may apply to us in connection with business communication, among other things. These include, in particular, re-tention periods under commercial, trade or tax law.

We process your personal data on the basis of the following legal basis:

Compliance with a legal obligation to which we are subject pursuant to Art. 6 para. 1 lit. c GDPR in connection with commercial, trade or tax law, insofar as we are obliged to retain your data.

3.7 Law enforcement

We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary for the prevention or prosecution of criminal offenses.

We process your personal data for this purpose on the basis of the following legal basis:

to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, insofar as we as-sert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses.

4. Categories of recipients of personal data

We only give access to your data to those persons who need it to fulfill our contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes.

Your personal data will only be passed on to external recipients if you have given us your consent to transfer it to third parties, if the transfer serves to fulfill legal obligations to provide information, report and/or pass on personal data  or to external service providers who act as processors on our behalf or perform functions for us (e.g. IT service providers, computer center, sending the newslet-ter, etc.).

In connection with our use of social media, we can neither exclude nor influence whether the oper-ator passes on your data to other categories of recipients due to a lack of information from the plat-form operators. Further information on the recipients of the platform operators' data can be found in the operators' privacy policies.

5. Data transfer to a third country or to an international organization

We do business globally. Therefore, your personal data may be transferred to other parts of our company in countries outside the European Union. Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary in the context of processing our contractual relationships or is required by law (e.g. reporting obligations under tax law), if you have given us your consent or in the context of order processing.

When using the tools Google Analytics, Google Ads, Hubspot and LinkedIn, we transfer your IP address or your shortened IP address to countries outside the European Union, including the USA. The data transfer is based on the adequacy decision of the EU Commission of July 10, 2023 in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield.

In the context of social media use, your data may be transferred to countries outside the European Union, including the USA. We have no influence on this. Further information can be found in the privacy policies of the platform operators.

If service providers in third countries are used and we can influence this, they are obliged to comply with the level of data protection in Europe in addition to written instructions by agreeing the EU standard contractual clauses. Alternatively, we transfer the data if the data transfer is based on the implementing decision (EU) 2016/1250 of the EU Commission of July 12, 2016 in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protec-tion provided by the EU-US Privacy Shield. Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations.

6. Storage period

6.1 Informational use of the website/social media presence

If you use our website purely for information purposes, we store your personal data exclusively for the duration of your visit to the website. After you leave the website, we will delete your personal data immediately within 3 months at the latest

Cookies installed by us are usually also deleted after you leave our website, especially the session cookies used.

This does not apply to Hubspot's cookies for analyzing the response to marketing communication. These are stored after their collection for the duration of the respective marketing campaign (be-tween one and 26 months, depending on the campaign) and deleted after the end of the campaign within two months at the latest or after your justified objection. Google Analytics cookies and Google Ads cookies remain stored for a period of up to 26 months. You also have the option of de-leting installed cookies yourself at any time.

6.2 Active use of the website, our solutions and social media presence

6.2.1 General storage period

When actively using the website/social media presence, we initially store your personal data for the duration of the response to your inquiry. This also includes the potential future and actual initiation of a contract and the performance and execution of a contract.

In addition, we process your data for the duration of your subscription to our newsletter or until you withdraw your consent to receive it. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

In addition, we store your personal data until any legal claims arising from the relationship with you become time-barred in order to use them as evidence if necessary. The limitation period is usually between 1 and 3 years, but can also be up to 30 years. Once the limitation period has expired, we will delete your personal data unless there is a statutory retention obligation (e.g. Sections 257 HGB, 147 AO). These retention obligations can be two to ten years. For this period, the data will only be processed again in the event of a review by the tax authorities.

6.2.2. Storage period when using our solutions

If you are  authorized ("User") entitled to use our Solutions, in particular to upload compliance doc-uments (e.g. certificates or attestations, "Trust Documents") and register to use our Solutions for this purpose, we will store your personal data as follows:

We store your personal data that you provide before uploading the trust documents as part of the registration for our solutions, i.e. your first and last name and your telephone number, for 25 months after your registration.

Log protocols due to

the creation and uploading of trust documents;

of changes to trust documents;

internal and external approvals or the withdrawal of trust documents;

the downloading of data

are also stored for 25 months.

We process your personal data for this purpose on the basis of the following legal basis:

Your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you give us during the registra-tion process;

to fulfill our contractual obligations to our contractual partner for the use of our solutions, Art. 6 pa-ra. 1 lit. b GDPR.

7. Rights of data subjects

You are a "data subject" within the meaning of the GDPR if your personal data is processed. You have the following rights vis-à-vis us, which you can assert vis-à-vis the body named in section 1 if we process your personal data:

Right to information

In accordance with Art. 15 GDPR, you are entitled at any time to request confirmation from us as to whether we process personal data concerning you; if this is the case, you are also entitled in ac-cordance with Art. 15 GDPR to receive information about this personal data and certain other in-formation (including processing purposes, categories of personal data, categories of recipients, planned storage period, your rights, the origin of the data, the use of automated decision-making and, in the case of third country transfer, the appropriate guarantees) and a copy of your data.

Right to rectification

In accordance with Art. 16 GDPR, you are entitled to demand that we correct the personal data stored about you if it is inaccurate or incorrect.

Right to erasure

You are entitled, under the conditions of Art. 17 GDPR, to demand that we erase personal data concerning you without undue delay. The right to erasure does not exist, among other things, if the processing of personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) for the establishment, exercise or defense of legal claims.

Right to restriction of processing

You are entitled to demand that we restrict the processing of your personal data under the condi-tions of Art. 18 GDPR.

Right to data portability

You are entitled, under the conditions of Art. 20 GDPR, to demand that we provide you with the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.

Right of objection

You are entitled to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we must stop processing your personal data. The right to object exists only within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection.

Right of withdrawal

You have the right to withdraw your consent at any time. The revocation is only effective for the future; this means that the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR, subject to the conditions of Art. 77 GDPR. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy. You can contact the state data protection authority responsible for us at

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59-61

10555 Berlin

Phone: +49 30 13889-0

Fax: +49 30 2155050

E-mail: mailbox@datenschutz-berlin.de

8. Links to third-party providers

Some sections of our website contain links to third-party websites. These websites are subject to their own data protection principles. We are not responsible for their operation, including data han-dling. If you send information to or via such third-party sites, you should check the data protection declarations of these sites before you send them information that can be assigned to you personal-ly. For information on the handling of your data when using the website, please refer to the respec-tive data protection notices of the providers.

9. Scope of the obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to make our website and the operator of a social media platform available to you, answer your inquiries to us, provide you with information etc., enter into a contract with you or provide our contractually owed services and enable you to use our solutions.

10. Profiling / Automated decision making

As part of the use of Hubspot, your data is partially processed automatically with the aim of evalu-ating certain personal aspects (profiling). This processing serves to provide you with targeted in-formation and advice on products and services. This enables communication and advertising tai-lored to your needs, including market and opinion research.

It is also possible that the operators of a social media platform may process your data in a partially automated manner with the aim of evaluating certain personal aspects (profiling). This may be done in order to provide you with targeted information and advice about products and services. This enables communication and advertising tailored to your needs, including market and opinion research.

We do not carry out any profiling or use any purely automated decision-making processes within the meaning of Article 22 GDPR. We will inform you separately if we should use further procedures in individual cases in the future.

11. Amendments

We reserve the right to amend this privacy policy at any time. Any changes will be announced by publishing the amended privacy policy on our website. Unless otherwise specified, such changes will take effect immediately. Therefore, please check this privacy policy regularly to see the latest version.

As of: March 2025

  • Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google), for users of Google services who have their habitual residence in the European Economic Area or Switzerland.
  • Google LLC, based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for users of Google services who have their habitual residence in the United Kingdom.

he responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).