Privacy notice

1. Data controller

The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is:

2. General information about data processing

We process personal data only to the extent necessary to provide this website, handle enquiries or comply with legal obligations. Depending on the situation, processing is based on Article 6(1)(b) GDPR (pre-contractual steps or a contract), Article 6(1)(f) GDPR (legitimate interests), Article 6(1)(c) GDPR (legal obligations) or, where valid consent is obtained, Article 6(1)(a) GDPR.

Our legitimate interests include operating the website securely and reliably and responding appropriately to general enquiries. The purposes and legal bases for specific processing are described below.

3. Website access and hosting

This website is hosted using Cloudflare Pages. When you visit, Cloudflare processes technical connection data, which may include your IP address, the time and destination of the request, browser and operating system information, and technical status and transfer data. Cloudflare uses its global network to provide this service.

This processing is necessary to deliver, maintain and secure the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our online service. Retention periods follow the storage and deletion criteria applicable to the Cloudflare services used.

4. Contact forms and enquiries

You can submit a general enquiry, a job application or a company staffing request through this website. The general contact form requires your full name and phone number; email address and message are optional. The application form requires your full name, phone number, town or city, the type of work sought, and information about your driving licence and access to a car; a message is optional. The company form requires the company name, contact person, phone number, email address, number of staff needed, sector, preferred start date and message. Each form contains a hidden field used for technical spam prevention. If you contact us by other means, we process the information you provide.

We use this information to respond to you and, where relevant, prepare the next steps you requested. For enquiries about a potential business relationship or contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries may be handled on the basis of Article 6(1)(f) GDPR; our legitimate interest is responding to incoming enquiries.

We delete personal data submitted through the application form no later than 60 days after receipt, unless statutory retention obligations prevent deletion.

Information marked as required is necessary to receive and handle your application or enquiry. Without it, the form cannot be submitted. Optional information helps us respond more specifically.

5. Email delivery through Resend

When you submit a form, your information is sent to us through the Resend email service (Plus Five Five, Inc.). Resend processes the data to deliver the message. The message is then stored in our email inbox and handled by the relevant staff. More information is available in Resend's Data Processing Addendum and its list of subprocessors.

We delete your enquiry when it is no longer needed to handle it, unless statutory retention obligations or the need to establish, exercise or defend legal claims require continued storage. Application data is deleted no later than 60 days after receipt, unless statutory retention obligations apply. The website does not store form submissions in its own database.

6. Transfers to third countries

Cloudflare and Resend may process personal data outside the European Economic Area, including in the United States. The providers' data protection terms provide safeguards for such transfers, including the EU Standard Contractual Clauses. You can request a copy of these safeguards using the contact details above.

7. Cookies and similar technologies

This website does not use cookies or similar technologies for analytics, advertising or tracking. Your language choice is not stored persistently in your browser.

8. Retention period

We retain personal data only for as long as needed for the relevant purpose. Application data is deleted no later than 60 days after receipt. Contact and staffing enquiries are deleted once the matter is resolved, unless statutory retention obligations or the need to establish, exercise or defend legal claims require further storage. Technical connection data is retained in accordance with the storage and deletion criteria of the hosting services used.

9. Your rights

Subject to the legal requirements, you have the right to access your personal data (Article 15 GDPR), request rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on legitimate interests, you may object for reasons relating to your particular situation under Article 21 GDPR.

You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights, contact us using the details above.

10. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, place of work or the place of the alleged infringement.

The competent authority for our company is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg. Contact details are available on the LfDI Baden-Württemberg website.

11. Automated decision-making

Based on the current operation of this website, no automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place. The hidden form field is used only to detect automated spam submissions.

12. Changes to this privacy notice

We update this privacy notice when the website, services we use or legal requirements change. The version shown above applies.