Privacy Policy

We process personal data when you

• visit our website (technical access data / log files),
• contact us via the contact form or by e-mail / telephone,
• apply for a position via e-mail.

Our website is provided via Vercel (hosting, deployment, content delivery network). Technically necessary data are processed to deliver and secure the website (e.g. IP address, time of request, requested resource).

Data-processing agreement: We use Vercel as a processor within the meaning of Art. 28 GDPR and have concluded a corresponding data-processing agreement.

International transfers: Depending on the technical delivery / support, processing outside the EU / EEA (e.g. USA) cannot be excluded. In such cases the transfer takes place on the basis of suitable guarantees (in particular EU Standard Contractual Clauses) supplemented by additional technical and organisational measures.

Legal basis: Art. 6(1) lit. f GDPR (legitimate interest in the secure, stable and efficient operation of the website).

When you access our website the following data are processed automatically:

• IP address,
• date and time of access,
• name and URL of the requested file,
• referring URL,
• browser type / version, operating system.

Purposes: Operation, technical security (e.g. abuse detection), error analysis and optimisation.

Legal basis: Art. 6(1) lit. f GDPR.

Retention period: Generally up to 7–14 days, after which the data are deleted or anonymised.

When you contact us we process the data you transmit. In the contact form these are in particular name, e-mail, company and message.

Purposes: Processing your enquiry, communication, initiation / handling of contracts where applicable.

Legal bases:

• Art. 6(1) lit. b GDPR (pre-contractual / contractual communication), or
• Art. 6(1) lit. f GDPR (general enquiries; legitimate interest in communication).

Recipients: Internally responsible departments; hosting / IT service providers where applicable (see section „Hosting / Vercel“).

Retention period: Until processing is complete; beyond that only where retention obligations exist or the data are required for legal defence.

When you apply for a position we process your application data (e.g. contact details, CV, cover letter, references and communication content).

Purposes: Conducting the recruitment process, deciding on the establishment of an employment relationship.

Legal bases: § 26 BDSG in conjunction with Art. 6(1) lit. b GDPR; Art. 6(1) lit. f GDPR where applicable (legal defence).

Retention period:

• In case of hire: transfer to the personnel file (in accordance with the applicable time limits),
• In case of rejection: 6 months after the conclusion of the procedure, unless consent for longer storage is given.

We use cookies and similar technologies only insofar as they are technically necessary (e.g. for basic functions and security).

Legal bases:

• Technically necessary technologies: § 25(2) TDDDG and Art. 6(1) lit. f GDPR,
• Non-essential technologies (e.g. tracking / marketing): Only with consent under § 25(1) TDDDG and Art. 6(1) lit. a GDPR.

Note: If we use non-essential tools in the future we will employ a consent banner allowing you to choose and change your preference at any time.

We do not currently use any web-analytics or tracking tools for marketing purposes.

Depending on the processing, recipients may include:

• Internal departments,
• Hosting / IT service providers (in particular Vercel; see section 3),
• E-mail service provider: IONOS (e-mail sending).

Data are disclosed only where required, a legal basis exists or you have given your consent.

You have the following rights vis-à-vis us:

• Access (Art. 15 GDPR),
• Rectification (Art. 16 GDPR),
• Erasure (Art. 17 GDPR),
• Restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR),
• Objection to processing on the basis of Art. 6(1) lit. f GDPR (Art. 21 GDPR).

Withdrawal of consent: You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

You have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). The authority responsible for your member state applies; for Hesse this is, for example, the Hessian Commissioner for Data Protection and Freedom of Information.

We employ appropriate technical and organisational measures to protect your data (e.g. TLS / HTTPS, access restrictions).

We update this privacy policy whenever the legal situation, our website or our data processing activities change.

Last updated: 05.02.2026