Privacy

The German version of this privacy policy is the legally binding one.

Controller

Taten mit Daten GmbH
Bölschestr. 17
12587 Berlin, Germany
Managing Director: Dr. Christian Schäfer
E-mail: kontakt@tatenmitdaten.com

Overview

This website sets no cookies and uses no analytics or tracking tools. Fonts and icons are served from our own server; no third-party content is loaded. We process personal data only to the extent needed to deliver the website and to answer enquiries.

Hosting and delivery

The website is stored with Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg) in the Frankfurt data centre and delivered through the Amazon CloudFront content delivery network. Data may also be routed via servers outside the EU. When a page is requested, AWS processes technically necessary data such as IP address, date and time, the requested page, browser and operating system, in order to deliver the page and protect it against attacks. We do not store access logs ourselves.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and fast delivery of the website. A data processing agreement is in place with AWS. For transfers to the USA, the parent company Amazon.com, Inc. is certified under the EU-US Data Privacy Framework.

Colour scheme

If you switch between the light and dark design, your browser stores this choice locally (localStorage). It never leaves your device and is not sent to us. The legal basis is § 25(2) no. 2 TDDDG, as the storage is required for the function you explicitly requested.

Contact by e-mail

When you contact us by e-mail, we process the information you send in order to answer your enquiry. Our mailbox is provided by Google Workspace (Google Ireland Limited, Ireland) as a processor; data may also be transferred to the USA, for which the parent company Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once it is no longer needed for this purpose; statutory retention obligations remain unaffected.

Booking via Calendly

To book an initial call, we link to Calendly (Calendly LLC, USA). Calendly is not embedded in this website: only when you follow the link do you open Calendly's page. There, Calendly sets cookies and processes data under its own responsibility; see Calendly's privacy notice.

When you book, Calendly passes us your name, e-mail address, the appointment and your answers to the booking questions. We process them to prepare and hold the call. The legal basis is Art. 6(1)(b) GDPR.

Links to LinkedIn and Xing

The references to our LinkedIn and Xing profiles are plain links, not embedded plugins. Data is only transferred when you click a link, and is then processed by the respective provider under its own responsibility.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). An informal e-mail to the address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, which is responsible for us.

Advertising

We expressly object to the use of the contact details published in the imprint for sending unsolicited advertising and information material. We reserve the right to take legal action in the event of unsolicited advertising, such as spam e-mails.