Privacy Policy
This English translation is provided for convenience only. The legally binding version is the German Datenschutzerklärung.
1. Controller
circolution GmbH, Münchener Straße 10, 60329 Frankfurt am Main, Germany.
Email: info@circolution.com
2. Hosting
This website is operated on Microsoft Azure (region Germany West Central, Frankfurt am Main). All content, logs and metadata remain within Germany. Transmission is exclusively encrypted (TLS 1.2 / 1.3). Microsoft is engaged as a processor within the meaning of Art. 28 GDPR.
3. Server log files
When you access the website, technically necessary access data (including IP address, time, page requested) is processed. The legal basis is the legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).
4. Contact form and email contact
If you use the contact form or write to us by email, we process the data you provide (e.g. name, email address, message) to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is transmitted in encrypted form and forwarded to the circolution GmbH mailbox and, where applicable, to the CRM system in use.
5. Spam protection (Cloudflare Turnstile)
To protect the contact form against automated abuse we use Cloudflare Turnstile (Cloudflare Germany GmbH / Cloudflare, Inc.). Turnstile checks whether input comes from a human without setting tracking cookies. Technical characteristics (including the IP address) may be processed. The legal basis is the legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on a legitimate interest, you may object at any time for reasons arising from your particular situation (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.
7. Data security
Transmission is exclusively encrypted (TLS 1.2 / 1.3). Server-side access controls, network restrictions and logged access are in place.
8. Embedded YouTube video
A background video on the homepage is embedded via YouTube in privacy-enhanced mode (youtube-nocookie.com). When the homepage is opened, a connection to Google servers is established (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA); this may process your IP address and device information and transfer them to the USA. Google is certified under the EU-U.S. Data Privacy Framework. In privacy-enhanced mode YouTube sets no tracking cookies before you play the video. The legal basis is the legitimate interest in an appealing presentation of our services (Art. 6(1)(f) GDPR).
9. Google Maps (two-click embed)
In the "Find Us" section an interactive Google Maps map can be loaded. The map is only embedded after your explicit click on "Load map"; only then is a connection to Google servers established, processing among other things your IP address (provider as in section 8; transfer to the USA possible, DPF-certified). Without your click no contact with Google takes place. The legal basis is your consent declared by the click (Art. 6(1)(a) GDPR); alternatively a direct link to Google Maps is available.