Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Cyberlope GmbH
Hilpertstr. 31
64295 Darmstadt, Germany
Email: web@cyberlope.eu
Phone: +49 6151 7869797

Represented by Managing Directors Dr. Sven Niedner and Peter Bruhn.

This website is intended exclusively for businesses within the meaning of Section 14 of the German Civil Code (BGB).

2. Data Protection Officer

Cyberlope GmbH is not required to appoint a Data Protection Officer pursuant to Section 38 of the German Federal Data Protection Act (BDSG). Therefore, no Data Protection Officer has been designated.

3. Hosting and Server Log Files

Our website is hosted by an external service provider, SiteGround Spain S.L. (“SiteGround”).
To ensure reliable and secure delivery of our website, SiteGround processes so-called server log files. These files may contain the shortened IP address of the requesting device, the date and time of access, the accessed resource, transferred data volume, browser type, and operating system.

The processing of this data is based on our legitimate interest in a technically error-free and secure operation of the website (Article 6 (1)(f) GDPR).
Server log files are usually deleted or anonymized after seven days.

For performance optimization, a Content Delivery Network (CDN) such as SiteGround CDN or Cloudflare may also be used. Data are distributed across servers within the EU to accelerate content delivery.

4. Cookies and Consent Management

Our website uses cookies. Some cookies are technically necessary for the proper functioning of the site.
We also use additional cookies (e.g. for analytics) only with your consent.

Your consent and withdrawal preferences are managed through a Consent Management Platform (CMP).
The legal basis for storing or accessing non-essential information is Section 25 TTDSG in conjunction with Article 6 (1)(a) GDPR.
You can withdraw your consent at any time via the settings in the CMP.

5. Web Analytics (Google Analytics 4)

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies to help us understand how visitors use our website. IP anonymization is enabled, meaning that your IP address is shortened before being stored or transmitted.
Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.

Processing is based on your consent in accordance with Article 6 (1)(a) GDPR and Section 25 TTDSG.
Data are retained according to Google’s standard retention periods (currently up to 14 months).
You may withdraw your consent at any time through the CMP.

6. Fonts (Google Fonts)

We use Google Fonts for the uniform display of text and fonts.
Where technically feasible, the fonts are hosted locally on our servers to avoid any connection to Google’s servers.
In cases where an external connection is necessary, this occurs only after you have provided your consent via the CMP. This may involve a transfer of personal data to Google servers in the USA.

Processing is based on your consent under Article 6 (1)(a) GDPR and Section 25 TTDSG.

7. Embedded Videos (YouTube and Vimeo)

Our website may embed videos hosted by YouTube (Google Ireland Limited) and Vimeo Inc. (USA).
When you play such a video, a connection is established to the provider’s servers, transmitting technical data such as your IP address, device information, and the time of access.

Data processing occurs based on your consent under Article 6 (1)(a) GDPR and Section 25 TTDSG.
Please refer to the providers’ privacy policies for more information:

  • YouTube: https://policies.google.com/privacy
  • Vimeo: https://vimeo.com/privacy

8. Contact Form

When you contact us via the contact form, we process the information you provide—specifically your name, email address, function, and message—to respond to your inquiry.

The legal basis for this processing is Article 6 (1)(b) GDPR (pre-contractual communication) or our legitimate interest in handling inquiries efficiently (Article 6 (1)(f) GDPR).
Your data will be deleted once your inquiry has been fully processed, unless statutory retention obligations require longer storage. As a rule, data are erased after 12 months.

9. Newsletter

You can subscribe to our newsletter to receive updates about our services.
Registration uses the double-opt-in procedure to verify that you are the owner of the provided email address.

The newsletter could be sent via an external service provider. A data processing agreement under Article 28 GDPR will be concluded with the provider.
Processing is based on your consent under Article 6 (1)(a) GDPR. You can withdraw your consent at any time via the unsubscribe link included in each email.

10. Social Media Links

Our website contains links to our profile on LinkedIn.
No data are transmitted to LinkedIn simply by visiting our website. Data transfer only occurs once you actively click the link and access LinkedIn, at which point the platform’s own privacy policy applies.

11. Job Applications

If you apply for a position with us, we process your personal data for the purpose of deciding on the establishment of an employment relationship.
The legal basis is Section 26 BDSG and Article 6 (1)(b) GDPR.
Your data are usually deleted six months after the conclusion of the recruitment process, unless legal retention obligations or our legitimate interests (e.g. legal defense) require longer storage.

12. Data Subject Rights

You have the following rights under the GDPR:

  • The right to access your personal data (Article 15)
  • The right to rectification (Article 16)
  • The right to erasure (“right to be forgotten”, Article 17)
  • The right to restriction of processing (Article 18)
  • The right to data portability (Article 20)
  • The right to object to processing (Article 21)
  • The right to withdraw consent at any time (Article 7 (3))

To exercise your rights, please contact us at web@cyberlope.eu.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, manipulation, loss, or destruction. These measures are continuously updated to reflect the current state of technology.

14. Updates to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal, technical, or operational changes.
The current version is dated October 2025.