Legal

Privacy policy

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information on data processing

We process personal data of our visitors only to the extent necessary to provide a functioning website and our content. Processing is carried out on the basis of the statutory provisions, in particular the GDPR.

3. Provision of the website and log files

This website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Each time the website is accessed, the server automatically collects data and information from the accessing computer system (IP address, date and time of access, page accessed, data volume transferred, browser type and version, operating system, referrer URL). This data is stored in the server's log files and is not combined with other data sources.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technical provision and security of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Strato AG.

4. No cookies, no tracking

This website does not use cookies and does not employ any analytics or tracking services. No data is transferred to third parties for advertising or analytics purposes. Fonts are served locally from our own server; no connection to third-party servers (e.g. Google Fonts) is established when visiting this website.

5. Contact by email

If you contact us by email, the personal data transmitted (e.g. name, email address, content of the message) is processed exclusively to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry is aimed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply.

6. Job applications

If you apply for a position with us, we process the application data you submit (e.g. CV, cover letter, references) exclusively for the purpose of the application procedure. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG). Application documents are deleted no later than six months after completion of the application procedure, unless you have consented to longer storage or statutory retention obligations apply.

7. Links to LinkedIn

This website contains links to our company profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). These are plain links; no data is transferred to LinkedIn when you visit our website. Only when you click the link do you leave our website; LinkedIn's privacy policy then applies.

8. Data security

For security reasons, this website uses SSL/TLS encryption. Data you transmit to our website cannot be read by third parties.

9. Your rights as a data subject

You have the following rights vis-à-vis us with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.