Privacy Policy
Here's how we protect your information.
1. Name and address of the responsible party 2. Contact details of the data protection officer 3. General information on data processing 4. Rights of the affected person 5. Use of cookies 6. Email contact 7. Application via email 8. Hosting 9. Used plugins 10. Integration of plugins through external service providers
Name and address of the responsible party
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is: SAPERED GmbH Am Thyssenhaus 1-3 45128 Essen Germany hey@sapered.de sapered.com
Contact details of the Data Protection Officer
The data protection officer for the controller is: DataCo GmbH Sandstraße 33 80335 Munich Germany +49 89 7400 45840 www.dataguard.de On this page, we inform you about how your personal data is processed on the website.
What Do We Understand by Legal Basis?
Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) - You have provided us with your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw this consent at any time. For more information on how to withdraw your consent, please refer to the "Exercising Your Rights" subsection in the following parts of this privacy policy. Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) - We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because you have requested it or have taken specific steps prior to entering into this contract. Legal Obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) - We must use your data to comply with the law. Vital Interests (Art. 6 para. 1 sentence 1 lit. d GDPR) - Processing your data is necessary to protect your vital interests or those of another person, such as to safeguard you from significant physical harm. Public Task (Art. 6 para. 1 sentence 1 lit. e GDPR) - Processing your data is required for the performance of a task carried out in the public interest or under official authority vested in us, such as a statutory function. Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR) - Processing your data is required to support a legitimate interest that we or another party may have, provided your own interests do not override them. Please note that we may not be able to provide you with our website services if your data is processed for contract fulfillment or legal obligations and you choose not to provide the requested data.
Shared Data and International Transfer
As outlined in this privacy policy, we utilize various service providers who assist us in delivering our services and safeguarding your data. When we engage these providers, it is necessary to share your personal data with them. We have agreements with all service providers we share your data with, obligating them to protect your information. When your personal data is transferred outside the EU, we ensure it receives an equivalent level of protection. This is either because the destination country offers an "adequate" level of data protection according to the European Commission, or we implement another safeguard, such as an enhanced contractual agreement, specifically the Standard Contractual Clauses (SCCs) adopted by the European Commission. For instance, when utilizing US service providers, we rely on either the SCCs or the EU-US Data Privacy Framework, depending on the provider. You may request a copy of the SCCs we have established with our service providers by emailing the address specified in this privacy policy.
Your Rights
If your personal data is being processed, you are considered a data subject under the GDPR, and you have the following rights with respect to the data controller: 1. Right to Access (Article 15 GDPR) You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and the following information: Purposes of processing Categories of personal data Recipients or categories of recipients Planned retention period or criteria for setting this period Existence of rights to rectification, deletion, restriction, or objection Right to lodge a complaint with the relevant supervisory authority If applicable, the source of the data (if collected from a third party) If applicable, the existence of automated decision-making, including profiling, with meaningful information about the logic involved, as well as the significance and expected consequences If applicable, transfer of personal data to a third country or international organization 2. Right to Rectification (Article 16 GDPR) If your personal data is incorrect or incomplete, you have the right to request that it be corrected or completed without delay. 3. Right to Restriction of Processing (Article 18 GDPR) You have the right to request the restriction of processing of your personal data if one of the following conditions is met: You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data. The processing is unlawful, and you oppose the deletion of the personal data and request restriction instead. We no longer need your personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims. After you have objected to processing, pending verification of whether our legitimate grounds override yours. 4. Right to Erasure ("Right to be Forgotten") (Article 17 GDPR) You have the right to demand the immediate erasure of your personal data if one of the following reasons applies: Your data is no longer necessary for the purposes for which it was collected. You withdraw your consent and there is no other legal basis for processing. You object to the processing and there are no overriding legitimate grounds, or you object under Article 21(2) GDPR. Your personal data is processed unlawfully. Erasure is required to comply with a legal obligation under Union or Member State law to which we are subject. The personal data was collected in relation to offered services of the information society referred to in Article 8(1) GDPR. Please note that the aforementioned reasons do not apply as far as processing is necessary: For exercising the right of freedom of expression and information; For compliance with a legal obligation or performance of a task carried out in the public interest to which we are subject. For reasons of public interest in the area of public health. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes. For the establishment, exercise, or defense of legal claims. 5. Right to Data Portability (Article 20 GDPR) You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request the transmission to another controller. 6. Right to Object to Certain Data Processing (Article 21 GDPR) You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions. If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing; this includes profiling to the extent that it is related to such direct marketing. 7. Right to Lodge a Complaint with a Supervisory Authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR. A list of supervisory authorities responsible in Germany can be accessed on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing Every time our website is accessed, our system automatically collects data and information from the accessing computer system. The following data is collected: Information about the browser type and version used The user's operating system Date and time of access Websites from which the user’s system accesses our website Websites that are accessed by the user’s system via our website This data is stored in the log files of our system. User IP addresses or other data that enable the association of data with a user are not affected. These data are not stored together with other personal data of the user. 2. Purpose of Data Processing The storage in log files ensures the website's functionality. The data also helps us optimize the website and ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context. 3. Legal Basis for Data Processing The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR. 4. Duration of Storage The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. In the case of data collection for website provision, this is the case when the respective session is terminated. In the case of data storage in log files, this happens no later than seven days. Further storage is possible. In this case, the users' IP addresses are deleted or anonymized, so that association with the accessing client is no longer possible. 5. Exercising Your Rights The data collection for website provision and storage in log files is essential for operating the website. Users can object to this. Whether the objection is successful is determined by a balancing of interests.
Use of Cookies
1. Description and Scope of Data Processing During your visit to our website, we use technical tools for various functions, particularly cookies, which may be stored on your device. Upon accessing our site, and at any time afterwards, you can choose whether to allow the setting of cookies in general or select individual additional functions. You can make changes in your browser settings or via our consent manager. Cookies are text files or information in a database stored on your hard disk and associated with your browser, allowing certain information to flow to the entity that sets the cookie. Below, we describe the types of cookies we use: We use technically necessary cookies required for the technical structure of the website. Without these cookies, our site cannot be displayed correctly, or support functions might be unavailable. The following data is stored and transmitted by technically necessary cookies: Language settings Page view frequency Utilization of website functions We use cookies on our website that are not technically necessary. These are text files considered non-essential for the functionality of the website but also collect other data. By setting non-essential cookies, the following data is processed: Location of internet users Date and time of website access Tracking of browsing behavior Linking website visits with other social media platforms 2. Purpose of Data Processing The purpose of using technically necessary cookies is to ensure our website's functionality. Some functions of our website cannot be offered without cookies, requiring browser recognition even after changing pages. The following applications require technically necessary cookies: Adoption of language settings Website functionality The use of non-essential cookies aims to improve our site's quality, content, reach, and economic efficiency. By setting these cookies, we learn how the website is used, allowing us to continuously optimize our offerings, particularly for performance analysis of the website. 3. Legal Basis for Data Processing The provisions of the Telecommunications-Digital Services-Data Protection Act (TDDDG) are relevant for storing information in the user's terminal equipment and/or accessing information already stored there. If setting and reading cookies is technically needed, it is to ensure our website's functionality. In this case, storing and accessing cookies on your device is based on § 25 Para. 2 No. 2 TDDDG. This storage and access to information on your device aim to facilitate the use of our website and offer you our services as requested. Some functions of our site do not work without these cookies and cannot be provided otherwise. Generally, cookies are deleted after ending the session (e.g., logging out or closing the browser) or after a predetermined duration. Information on varying cookie storage times can be found in the following sections of this privacy policy. Where cookies are used that are not technically necessary, it is based on your explicit consent provided via the cookie banner. The basis for storing and accessing information in this instance is § 25 Para. 1 TDDDG in conjunction with Art. 6 Para. 1 lit. a), Art. 7 GDPR. You can withdraw your consent at any time with future effect or grant it later by configuring your cookie settings accordingly. Alternatively, you can prevent cookie storage through appropriate browser software settings. Please note that browser settings only affect the browser you are using. If personal data is processed after storing and accessing information on your device, the GDPR provisions apply. Information on this can be found in the following sections of this privacy policy. 4. Exercising Your Rights You can withdraw your consent to cookie usage at any time and manage your consent preferences under the following link: www.sapered.com
Hosting
The website is hosted on servers by a service provider we have engaged. Our service provider is: Framer The servers automatically collect and store information in server log files, which your browser automatically transmits to us when you visit the website. The stored information includes: Browser type and version Operating system used Referrer URL Hostname of the accessing computer Date and time of server request IP address These data are not merged with other data sources. The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring a technically flawless presentation and optimization of their website, which requires the collection of server log files. The website is delivered via Framer's global content delivery network (CDN). Therefore, a fixed geographic server location cannot be specified. Requests may be processed by servers in various countries, including non-EU countries. For more information, please see Framer’s privacy policy: https://www.framer.com/legal/privacy-statement/
Email Contact
1. Description and Scope of Data Processing Our website allows you to contact us via the provided email address. In this case, any personal data shared in the email will be stored. The data will solely be used to process the conversation. 2. Purpose of Data Processing The legitimate interest in processing the data also arises when contact via email is made. 3. Legal Basis for Data Processing The legal basis for processing data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is to optimally respond to your email inquiry. If the email contact aims to conclude a contract, Art. 6 Para. 1 lit. b GDPR serves as an additional legal basis for the processing. 4. Duration of Storage Data is deleted as soon as it is no longer needed to fulfill the purpose for which it was collected. For personal data sent via email, this is the case when the conversation with the user is concluded. A conversation is considered concluded when circumstances indicate that the relevant matter has been fully resolved. Any personal data additionally collected during the sending process will be deleted at the latest after a period of seven days. 5. Exercising Your Rights If users contact us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. Account Deletion and Modification of Personal Data Users of our website can request the deletion of their accounts or the correction of their personal data at any time. Simply send an informal email to: hey@sapered.de. We process such requests as quickly as possible and confirm the implementation upon request. Please note that due to legal retention obligations, we may need to retain certain data until the end of the specified period. All personal data saved during the course of contact will be deleted in this case.
Contact Form
1. Description and Scope of Data Processing Our website features a contact form provided via the service HubSpot, Inc., 25 Street, Cambridge, MA 02141, USA. When a user takes advantage of this option, the data entered into the submission form is transmitted to HubSpot and stored there. At the time the message is sent, the following data is saved: Name Email address Company (optional) Phone number (optional) Date and time 2. Purpose of Data Processing Processing the personal data from the submission form or via the provided email address serves solely to help us manage and respond to your inquiry. The other personal data processed during the sending process helps us prevent any misuse of the contact form and ensures the security of our information technology systems. 3. Legal Basis for Data Processing The legal basis for processing data transmitted when sending an email is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest is to provide you with the best possible response to the inquiry you send us via the contact form. If the email contact aims at entering into a contract, the additional legal basis for processing is Art. 6 (1) sentence 1 lit. b GDPR. 4. Storage Duration Data is deleted as soon as it is no longer required to achieve the purpose of its collection. For personal data from the contact form's submission mask and data sent by email, this applies when the respective conversation with the user has ended. A conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been fully and formally resolved. Any additional personal data collected during the sending process will be deleted after a maximum period of seven days. 5. Exercising Your Rights If you contact us using the contact form, you can object to the storage of your personal data at any time, in the following manner: Account Deletion and Correction of Personal Data: Users of our website can request the deletion of their account or the correction of their personal data at any time. To do so, simply send an informal email to: hey@sapered.de. We will process your request as quickly as possible and, if requested, confirm when it has been completed. Please note that in the case of statutory retention requirements, we must store certain data until the retention period expires. In this case, all personal data stored in the course of contacting us will be deleted. 6. Data Transmission The data collected via the contact form is transmitted to HubSpot, Inc. (USA). HubSpot is certified under the EU-U.S. Data Privacy Framework. This transmission is based on Art. 45 GDPR (adequacy decision) and additionally on standard contractual clauses (Art. 46 (2) lit. c GDPR). For more information, please refer to HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy
Plugins in use
HubSpot (Contact Form) On our website, we use the contact form provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. This service allows us to efficiently receive and manage your inquiries, establishing a reliable point of contact for our partnership. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 sentence 1 lit. b GDPR for contract-related requests. For more details, please visit: https://legal.hubspot.com/privacy-policy
Company Presentations
Instagram: Instagram, part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. On our company page, we provide information and offer Instagram users the opportunity to communicate. If you engage with our Instagram profile (such as comments, posts, likes, etc.), be aware that you may publicly reveal personal data (such as your real name or profile photo). However, since we generally have little or no influence over how Instagram processes your personal data, we cannot make definitive statements about the purpose and scope of data processing. We use our corporate presence on social networks for communication and information exchange with (potential) clients. Specifically, we use it for: Corporate presentation and recruiting Publications on our profile may include: Product information Service information Client contacts Every user is free to disclose personal data through their activities. Where we process your personal data to analyze online behavior, offer contests, or conduct lead campaigns, this is based on your explicit consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR. The legal basis for processing personal data to communicate with customers and prospects is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in responding to your inquiries optimally or in providing the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Data generated by our corporate presence is not stored in our systems. For processing your personal data in third countries, we have arranged suitable safeguards using standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. You can request a copy of these clauses from us. You can object to the processing of your personal data collected as part of using our corporate presence at any time and exercise your rights as a data subject as detailed in the section "Your Rights" of this privacy policy. Simply send an informal email to hey@sapered.de. For information on Instagram’s processing of personal data and related options to object, please visit: Instagram: https://help.instagram.com/519522125107875
Utilizing Corporate Profiles on Professional Networks
1. Scope of Data Processing Our corporate presence is utilized for applications, information/PR, and active sourcing. We have no details on the processing of your personal data by the companies jointly responsible for our corporate presence. For further information, please refer to the privacy policies of: LinkedIn XING On our page, we provide information and offer users the opportunity for communication. Our corporate presence is utilized for applications, information/PR, and active sourcing. We have no details on the processing of your personal data by the companies jointly responsible for our corporate presence. For further information, please refer to the privacy policies of: LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/en If you perform an action on our corporate presence (e.g., comments, posts, likes, etc.), you may make personal data (e.g., your real name or user profile photo) public. 2. Legal Basis for Data Processing The legal basis for processing personal data for the purpose of communication with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or providing requested information. If the contact aims at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. 3. Purpose of Data Processing Our corporate presence informs users about our services. It is up to each user to disclose personal data through activities. 4. Duration of Storage Data generated by our corporate presence is not stored in our systems. 5. Exercising Your Rights You can object to the processing of your personal data collected through the use of our corporate presence at any time and exercise your rights as a data subject, as outlined in the "Your Rights" section of this privacy policy. Send us a simple email to the address provided in this privacy policy. Further information on exercising your rights can be found here: LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/en This privacy policy was created with the support of DataGuard.
Latest Update
March 30, 2026