Privacy Policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

• orbitsandpieces GmbH
• Am Stollen 19b
• 38640 Goslar
• Germany
• Email: info@orbitsandpieces.com

Represented by the managing directors Theresa Schuhmann and Hauke Hemmerling. Further details can be found in our imprint.

• We do not set any cookies.
• We do not use any analytics, tracking or marketing tools.
• Fonts and all other content are served from our own server; no third-party content is loaded when you visit the website.
• Our website is operated exclusively in data centres within the European Union.

Our website is hosted by Scaleway SAS, 8 rue de la Ville l’Évêque, 75008 Paris, France. The content is stored in an object storage in Paris and delivered via Scaleway's content delivery network (Edge Services), which also provides the encrypted connection (HTTPS).

Each time the website is accessed, the following data is processed for technical reasons and stored in server log files:

• IP address of the requesting device
• date and time of access
• requested file or page and amount of data transferred
• HTTP status code
• referrer URL (the previously visited page), if transmitted by the browser
• browser type and version as well as operating system (user agent)

This processing is necessary to deliver the website, to ensure its stability and security, and to detect errors or attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of the website. The data is not combined with other data sources or analysed for statistical purposes.

Scaleway deletes the log data after 30 days at the latest.

We have concluded a data processing agreement with Scaleway pursuant to Art. 28 GDPR. Scaleway processes the data solely on our instructions and within the European Union.

We use the typeface “Inter”. It is stored on and loaded from our own server. No connection to servers of Google or any other third party is established.

If you contact us by email, we process the data you provide (in particular your email address, your name and the content of your message) in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or to steps prior to entering into a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to your enquiry.

We delete your data once it is no longer required to handle your enquiry, unless statutory retention obligations apply (for example under commercial or tax law for business correspondence, up to ten years).

For our email communication we use Google Workspace provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR); in addition, Google has concluded the European Commission's standard contractual clauses.

You can apply to us by email. We process the data you send us (for example contact details, CV, references and cover letter) solely for the purpose of the application process.

The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) (steps prior to entering into an employment relationship). Where you voluntarily provide special categories of personal data (for example information on health or a severe disability), we process it on the basis of Art. 9(2)(b) GDPR.

If you are hired, your data will be further processed for the purposes of the employment relationship. Otherwise we delete your application documents no later than six months after the application process has been completed, unless you have consented to longer storage. This period serves to defend against possible claims under the German General Equal Treatment Act (AGG).

We use Google Workspace for email (see section 5).

You can arrange a call with us via the “Book a call” buttons. Depending on the selected language, you will be taken to the booking page of one of our employees in Google Calendar. This is a plain link: as long as you do not click it, no data is transmitted to Google.

When you book an appointment, we process your name, your email address, the selected time slot and any further information you provide in order to organise and hold the appointment. The confirmation is sent to your email address. The legal basis is Art. 6(1)(b) GDPR, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in simple appointment scheduling.

Bookings are handled via Google Workspace provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor (for transfers to the USA, see section 5). The use of the booking page itself, which is operated by Google, is additionally subject to Google's privacy policy: https://policies.google.com/privacy

We delete appointment data once it is no longer needed, unless statutory retention obligations apply.

Our website contains links to websites of other providers, for example to our funding programme. Merely visiting our website does not transmit any data to these providers. Only when you click a link do you leave our website; the operator of the linked site is responsible for it.

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

Right to object: where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, an informal message to info@orbitsandpieces.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

• Die Landesbeauftragte für den Datenschutz Niedersachsen
• Prinzenstraße 5, 30159 Hannover

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

We are not required to appoint a data protection officer. If you have any questions about data protection, you can reach us at any time at the email address above.

We update this privacy policy when our website or the legal requirements change. The version published here applies.