Privacy Policy cirqlone.com

Contact details of the controller

CIRQL ONE GmbH

represented by its Managing Directors Gregor Stoeckler and Stefan Hockenberger

Langer Anger 7-9
69115 Heidelberg
Germany

Tel.: + 49 (0) 6221 4053 650
E-Mail: info@cirqlone.com

Contact details of the Data Protection Officer

Thomas Ott, external Data Protection Officer

kolbcom GmbH
P7, 22
68161 Mannheim
Germany

Fax: 0621/121829-32
E-Mail: info@kolbcom.de

We welcome you to our website. The protection of your personal data is very important to us. Below, we therefore inform you about how we process your personal data.

General processing of visitor data

In principle, our website can be used without providing personal data. However, please note that access data are collected and stored in server log files even in this case. This includes, in particular, the following data:

browser type / browser version;
operating system;
the website from which you access our website;
date and time of access;
your IP address.

As a rule, we evaluate this information in anonymised form for the purpose of defending against attacks and improving our offering. This constitutes processing of personal data on the basis of a balancing of interests pursuant to Art. 6(1) sentence 1 lit. f GDPR. We subsequently delete these data. As a rule, the data cannot be traced back to you personally by us and are not merged with other data.

However, if there are specific indications of unlawful use, we reserve the right to subsequently evaluate the data.

Categories of data; sources of data

As a rule, we process the personal data that are transmitted in connection with your use of our website or that you provide to us in the context of an enquiry, a pre-contractual relationship or a contractual relationship. In individual cases and to the extent necessary for the performance of a contract, we also process personal data that have been lawfully obtained from publicly accessible sources, such as commercial registers, debtor registers or the internet, or that have been lawfully transmitted to us by third parties, such as credit agencies.

This may include technical data relating to you, such as IP address and browser type; personal data, such as name, date of birth and legal representatives; address and contact data, such as address, e-mail address and contact persons; financial data, such as the name of the account holder, IBAN and BIC; contractual data, such as contract term, purchased services and cancellations; communication data, such as correspondence and e-mail communication; advertising data, such as marketing communications; as well as other comparable categories of personal data.

Processing of personal data on the basis of consent (Art. 6(1) sentence 1 lit. a GDPR)

In individual cases, we obtain your consent for specific purposes expressly identified in connection with the collection of data.

In these cases, data processing is carried out exclusively on the basis of your consent. It may be that your request cannot be processed without your consent and must therefore be made dependent on such consent. The data are processed exclusively for the purpose or purposes expressly specified.

You may withdraw any consent you have given at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Processing of personal data for the performance of a contract or for pre-contractual measures (Art. 6(1) sentence 1 lit. b GDPR)

Where a contract is concluded with us, we use personal data to the extent necessary for the performance of the contract or for the implementation of pre-contractual measures. The purposes of the data processing are determined by the specific contractual content, which can be found in the contractual documents.

Where a contract with us already exists, we process your data in order to verify that you are our contractual partner and in order to properly provide the contractually owed services.

Processing of personal data on the basis of a balancing of interests (Art. 6(1) sentence 1 lit. f GDPR)

We process personal data after weighing the interests involved, to the extent necessary to protect our interests or the interests of third parties.

Examples of such purposes include:

ensuring the IT security and integrity of our systems;
preventing or investigating criminal offences;
asserting or defending legal claims.

Contacting us

If you contact us by e-mail or telephone, we process the personal data you provide in order to respond to your enquiry. The legal basis for this is generally Art. 6(1) sentence 1 lit. b GDPR or, by way of exception, where there is no contractual connection, Art. 6(1) sentence 1 lit. f GDPR, whereby our legitimate interest lies in properly responding to your enquiry. We delete the data after your enquiry has been finally processed, unless a contractual or statutory retention obligation applies.

Contact Form

If you send us an enquiry via our contact form, we process the data you provide on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR in order to process your enquiry. As a rule, your data will be deleted after the enquiry has been processed, unless a contractual or statutory retention obligation applies. If you provide us with contractually relevant information, we transfer such information to our inventory system.

You may withdraw your consent at any time with effect for the future using any of the contact details provided.

Chatbot function

A chatbot is used on our website. In this context, the data you provide, such as name, e-mail address, location, chat content and, where applicable, uploaded files, are collected and stored for the duration of the chat. After the chat has ended, the data are generally deleted, unless storage is necessary for the performance of a contractual relationship. In that case, further processing is carried out in accordance with the general provisions set out above.

Cookies are also used in connection with the chatbot. Their use is governed by the information provided under “Use of cookies and local storage”.

Applications

Where we process data in connection with your application, please also refer to the privacy notice for applicants, available at https://cirqlone.com/privacy-notice-for-applicants/.

We process your data, in particular your name, contact details, curriculum vitae, evidence of academic, professional and vocational qualifications and achievements, as well as content data provided by you in your cover letter, for the purpose of entering into an employment contract. The legal basis for this data processing is Section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). If your application is unsuccessful, we store your data for six months after completion of the application procedure. If your application leads to employment, your data will be stored for the duration of the employment relationship.

We ask you not to provide any particularly sensitive data in your application. This includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, or data concerning a natural person’s sex life or sexual orientation, cf. Art. 9(1) GDPR. We also ask you not to attach a photograph to your application.

Use of cookies and local storage

When you visit our website, various cookies and local storage technologies may be used. Cookies are text files that are placed on your device and, among other things, enable our website to function smoothly. Local storage means that data are stored locally in your browser cache; these data may remain available and be read even after the browser window has been closed, unless the cache is deleted.

Some cookies and local storage technologies are necessary in order to ensure the functionality or IT security of our website. The use of such functional cookies is based on a legitimate interest in enabling the use of our website, including its functions, pursuant to Art. 6(1) sentence 1 lit. f GDPR. In these cases, processing is also carried out in accordance with Section 25(2) no. 2 TDDDG.

We may use further cookies and local storage technologies that are not strictly necessary on the basis of Art. 6(1) sentence 1 lit. a GDPR and therefore on the basis of your consent. The purposes of the cookies used in each case may include:

enabling the use of special functions;
the pseudonymised analysis of user behaviour in order to optimise our website;
increasing the attractiveness and user-friendliness of our website;
improving and tailoring our offering to users’ needs.

The use of non-essential cookies and local storage technologies takes place in the context of so-called user profiles. A pseudonym is assigned to you, under which the usage data are stored. Your IP address is stored only in shortened form, so that, as a rule, it is no longer possible to personally identify you on the basis of the user profile.

Where we use cookies or local storage primarily for the purposes of re-marketing or marketing, or for the implementation of social media plugins, we base such use on your freely given consent to such data processing and therefore require your consent. With regard to the individual plugins and tracking tools, we refer to the detailed information set out below.

Most of the cookies used by us are deleted from your device after you close your browser (session cookies). Other types of cookies may remain on your device and enable us to recognise your device via the user profile created when you next visit our website (persistent cookies).

You can use the cookie banner that appears when you first visit our website to select which cookies are to be set. We use Cookiebot, a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, as our cookie banner. Through the use of this service, personal data may be transmitted to the service provider. The legal basis for the processing of data in this context is Art. 6(1) sentence 1 lit. f GDPR, whereby our legitimate interest lies in providing a functional, modern website that complies with statutory requirements. We delete the data as soon as the purpose for which they were collected has been fulfilled. Further information can be found in Cookiebot’s privacy policy and cookie declaration, available at: https://www.cookiebot.com/de/privacy-policy/,

https://www.cookiebot.com/de/cookie-declaration/ .

Cookies and local storage technologies are used on our website exclusively by us and not by third parties, with the exception of the third-party cookies and local storage technologies expressly mentioned in this privacy notice.

You may give your consent by confirming our cookie banner when accessing our website. You may withdraw consent once given at any time with effect for the future.

We use the following cookies:

Cookie	Purpose	Storage period
CookieConsent	Speichert Consent-Entscheidung des Nutzers (Cookiebot)	1 year
wpEmojiSettingsSupports	WordPress Emoji-Erkennung	Session
_cfuvid	Cloudflare Rate-Limiting	Session
__cf_bm	Unterscheidung Mensch/Bot (Cloudflare)	1 day
_ga	Google Analytics – Besucher-ID	2 years
_ga_#	Google Analytics – Session-Status	2 years
__hstc	HubSpot – seitenübergreifendes Tracking	180 days
hubspotutk	HubSpot – Besucher-Tracking	180 days
__hssc	HubSpot – Session-Cookie	1 day
__hssrc	HubSpot – erkennt neuen Browser	session
snowplowOutQueue_#_post2	Leadinfo – Event-Queue	Persistent
__ptq.gif	HubSpot – Tracking-Pixel	session
_li_id.*	Leadinfo – Besucher-Identifikation	1 year
_li_ses.*	Leadinfo – Session-Tracking	1 year
tpg_post_views	Zählt Seitenaufrufe einzelner Blog-Posts (The Post Grid Plugin – Beliebtheitssortierung)	1 day

We use local storage for the following services:

Key	Purpose	Storage period
Tidio	Chat widget status, visitor ID, timestamp of the last message	Persistent (until cache is cleared)
HubSpot	Visitor tracking, form data, event queue	Persistent (until cache is cleared)

Web analytics

We use the services listed below for web analytics purposes.

In the context of web analytics, cookies may be used on various pages. Cookies are text files that are placed on your device and, among other things, enable the smooth operation of our website.

The use of cookies takes place in the context of so-called user profiles. A pseudonym is assigned to you, under which the usage data are stored.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies.

In connection with the use of cookies, we rely on your consent to the collection of data. If you do not consent to the use of data when you first visit our website, we will not collect your usage behaviour or other personal data that may arise during your visit to our website and will therefore not use such data for usage analysis or subsequent re-marketing activities. This also applies to third-party cookies such as the Google Analytics plugin used here.

If you consent to the processing of your data as part of the opt-in procedure by confirming the cookie banner, the lawfulness of the processing of your data is based on consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. We therefore use your data within the scope of the consent you have given for marketing purposes and for evaluating your usage behaviour.

The information generated by the cookie about your use of this website is generally transmitted to a server of Google LLC in the United States and stored there. Information about the use of this website and your IP address may be transmitted to a Google server in the United States and stored on that server. The data transfer is permissible on the basis of your consent pursuant to Art. 49(1) sentence 1 lit. a GDPR. If IP anonymisation is activated on this website, your IP address will, however, first be shortened by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data unless you have configured the Web & App Activity settings in a Google account in such a way that Google is permitted to merge such data.

Further information on terms of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de&gl=de.

Google Analytics has been extended on our website by the code “anonymizeIp” in order to ensure anonymised collection of IP addresses (so-called IP masking).

Google Tag Manager

We use Google Tag Manager on our website. This service enables us to manage tags integrated into our website, such as Google Analytics tags, through a single interface. Google Tag Manager does not use cookies and does not collect personal data. Google Tag Manager triggers other tags which may themselves collect data. Google Tag Manager does not access these data. If tracking has been deactivated at domain or cookie level, this deactivation remains in place for all tracking tags implemented via Google Tag Manager.

HubSpot

We also use the analytics tool HubSpot on our website. This tool is operated by HubSpot Inc. at 25 First Street, Cambridge, MA 02141, USA.

HubSpot allows us to analyze how you use our website. For this purpose, cookies are stored on your computer, and information such as your IP address, location, browser type, visit duration, and pages accessed is evaluated.

Your personal data is transferred to the USA in this process. This transfer takes place on the basis of standard contractual clauses pursuant to Art. 46(2)(c) GDPR. Standard contractual clauses are drafted by the EU Commission and are intended to ensure that your data is adequately protected even outside the scope of the GDPR, meaning outside the EU and the EEA. The data transfer is also permitted on the basis of your consent pursuant to Art. 49(1), sentence 1, point (a) GDPR.

You can find HubSpot’s Data Processing Agreement, which reflects the EU Commission’s standard contractual clauses, at https://legal.hubspot.com/dpa.

Leadinfo

We use the Leadinfo service provided by Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands, on our website.

Leadinfo enables us to analyse the usage behaviour of website visitors and to identify company visits. For this purpose, in particular information about pages accessed, the time and duration of the visit and the IP address are processed and compared with publicly available company data.

Leadinfo is used only with your consent pursuant to Art. 6(1) lit. a GDPR and Section 25(1) TDDDG. Consent is obtained via our consent management tool and may be withdrawn at any time with effect for the future.

To the extent that personal data are subsequently processed, this is also carried out on the basis of your consent for the purpose of analysing website use, optimising our offering and identifying potential business contacts.

Leadinfo acts for us as a processor on the basis of a contract pursuant to Art. 28 GDPR.

Further information can be found at: https://www.leadinfo.com/en/legal/privacy/

No use of social plugins

We do not use social plugins on our website.

Links to other websites

Our website contains links to other external websites, in particular LinkedIn. These are not so-called social plugins. If you click on such a link, you access the relevant website and are redirected to it.

Where we process your data on these external websites, for example because you contact us via those websites, our privacy provisions apply.

In addition, the linked websites process your personal data for their own purposes. We cannot provide any information on the manner of processing, the purposes of processing or the storage period of your personal data by these providers. Please refer to the privacy notices of the respective providers for further information on how they process your personal data. These are available at:

LinkedIn:
https://www.linkedin.com/legal/privacy-policy?_l=en_EN (English) / https://www.linkedin.com/legal/privacy-policy?_l=de_DE (German)

If you have subscribed to our newsletter, we process the data you provide on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR in order to send you our newsletter on a regular basis. Providing an e-mail address is sufficient for registration. Any further information is provided voluntarily. For legal reasons, we also store the IP address and the date of registration.

Our newsletter is sent using the service provider HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. We have concluded a data processing agreement with the provider. We use the so-called double opt-in procedure for registration, whereby, after consenting to receive the newsletter, you must expressly confirm your e-mail address again in a second step. Only then will the service be activated. In this context, your data will be stored exclusively within the EU. The data will be used exclusively for sending the newsletter. The service provider does not use the data for its own purposes.

You may withdraw your consent at any time with effect for the future. A withdrawal link is included at the end of each newsletter e-mail. Of course, you may also withdraw your consent using the other contact options provided.

More detailed information on data protection at HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy.

Disclosure of data

We disclose data to other third parties if and to the extent that we have entrusted them with the performance of tasks. Data are disclosed only to the extent necessary for the performance of the tasks assigned.

We cooperate with the following companies:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJsesel, Netherlands
LEMPIRE, 128 rue La Boétie, 75008 Paris, France
Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark
JOIN Solutions AG, Erika-Mann-Straße 53, 80636 Munich, Germany
Google Ireland Limited; Gordon House, Barrow Street, Dublin 4, Ireland

Furthermore, service providers may be entrusted with tasks in the following areas, for example:

IT maintenance
IT development
IT provision
legal counse

Data are always disclosed on the basis of a statutory provision or an appropriate agreement pursuant to Art. 26 or Art. 28 GDPR that ensures compliance with all data protection requirements.

Otherwise, data are disclosed only in the cases provided for by law, for example where there is a statutory obligation to provide information to law enforcement authorities. In these cases, the disclosure of data is lawful pursuant to Art. 6(1) sentence 1 lit. c GDPR

Where applicable, data may be disclosed within the group of companies:

Cirql One s.r.o., Galvaniho 15B, 82104 Bratislava, Slovakia

Data are disclosed within the group of companies to the extent necessary for the performance of contractual or statutory obligations (Art. 6(1) sentence 1 lit. b and lit. c GDPR) or where there is a legitimate interest in group-wide data disclosure (Art. 6(1) sentence 1 lit. f GDPR).

Cross-border data transfers (Art. 49(1) sentence 1 lit. a GDPR)

A transfer of data to a third country is intended. This transfer is carried out on the basis of the consent you have given. Recipients of the data provided by you include the following companies:

HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA
Tidio LLC, 1201 Sansome Street, San Francisco, CA 94111, USA
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Where personal data are transferred to a third country, we comply with the applicable data protection requirements by basing the transfer on standard contractual clauses and/or by obtaining your consent to the transfer pursuant to Art. 49(1) sentence 1 lit. a GDPR.

Data transfers occur, for example, in connection with the use of Google services. Due to the use of these services, data are transferred to the United States of America.

Data are transferred only if you give us your consent.

Specific information on the recipient, the personal data transferred and the purpose of the data transfer can be found in the information on the respective processing operation set out below.

Due to the transfer of data, there may be risks for your personal data. With regard to data transfers to the United States of America, the European Commission has adopted an adequacy decision which, in principle, ensures an adequate level of data protection. In addition, depending on the service concerned, standard contractual clauses are in some cases used in order to achieve the greatest possible level of protection for your data. Whether standard contractual clauses are used can be found in the information on the respective services.

Storage period

We delete your personal data without undue delay as soon as the data are no longer required for the performance of contractual and statutory obligations or for safeguarding our legitimate interests.

Where a contractual relationship exists, personal data are stored at least for as long as this is necessary for the performance of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual term, since the data may remain relevant after the end of the contract within the applicable limitation periods. In addition, deletion may only take place once any retention periods under tax and commercial law have expired.

The criteria for determining the storage period of cookies can be found in the relevant section.

Rights of data subjects

As a data subject affected by the processing of personal data, you have the following rights:

You have the right to obtain confirmation as to whether personal data concerning you are being processed. Where this is the case, you have the right of access to the personal data and to the information listed in detail in Art. 15 GDPR.

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the grounds set out in detail in Art. 17 GDPR applies, for example where the data are no longer necessary for the purposes pursued (right to erasure).

You have the right to obtain from the controller restriction of processing where one of the conditions set out in Art. 18 GDPR applies, for example where you have objected to processing, for the period during which the controller verifies the matter.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, provided that the processing of those data is based on your consent or on a contract and the processing is carried out by automated means (Art. 20 GDPR). In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller where technically feasible (right to data portability).

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you where such processing is based on our legitimate interest. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims (Art. 21 GDPR).

To exercise your rights, you may contact us at any time using the contact options provided on our website.

Right to object to direct marketing

In individual cases, we process personal data for direct marketing purposes. In this case, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing (Art. 21 GDPR).

If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

The objection may be submitted at any time without any formal requirements using any of the contact options specified in this privacy notice or in our legal notice.

Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR). You may exercise this right before a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information (Landesbeauftragter für den Datenschutz und die Informationsfreiheit).

Further information is available at the following link:

https://www.baden-wuerttemberg.datenschutz.de/

Of course, you may also contact us directly if you are dissatisfied or have any questions regarding data protection. The quickest way to reach our internal contact person for data protection matters is via the contact details provided above.

Automated decision-making

We do not use procedures involving fully automated decision-making or profiling within the meaning of Art. 22 GDPR.

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary in order to use certain functions or to conclude a contract. If you do not provide the required data, you may not be able to use certain functions or services, or a contract may not be concluded.

Date and amendments to this privacy notice

This privacy notice is current as of April 2026.

We reserve the right to update this privacy notice as necessary in order to adapt it to legal and technical developments or in connection with the offering of new services or products. If we amend our privacy policy, we will publish the amended version directly in this notice on our homepage.