Privacy Policy

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Centigrade GmbH
Science Park 2
66123 Saarbrücken
Germany
Phone: +49 681 959 3110
E-mail: contact@centigrade.de

Data Protection Officer

You can reach our data protection officer at datenschutz@centigrade.de or by post at the address above, marked „Datenschutzbeauftragter".

General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Legal bases are in particular your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (b), compliance with legal obligations (c), and our legitimate interests (f). Personal data is deleted as soon as the purpose of storage no longer applies or a statutory retention period expires.

Provision of the website and server log files

This website is hosted by Netlify, Inc. (San Francisco, USA). On each access, Netlify automatically collects information in server log files as a processor: IP address, date and time of access, the resource requested, the referrer URL, and browser type and operating system. This data serves to deliver the website and to ensure security and stability. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify; transfer to the USA is based on appropriate safeguards (EU-US Data Privacy Framework or standard contractual clauses). Log file data is stored only as long as required for operation, error analysis, and abuse prevention; this period generally does not exceed 30 days.

Cookies and consent management

Our website uses cookies and comparable technologies. Technically necessary cookies are used on the basis of § 25(2) TDDDG; they are required to operate the website, for example to store your privacy choice.

To manage, document and process withdrawal of your consent we use our own solution, based on the open-source library "CookieConsent", which runs entirely on our own infrastructure. No data is transmitted to an external consent management platform provider. Your choice is stored in a cookie on your device (name "cg_consent", lifetime 12 months).

In addition, we record every choice you make on our server so that we can demonstrate consent in accordance with Art. 7(1) GDPR. We store only a randomly generated consent identifier, the time of the decision, the categories you granted and denied, and the version of this privacy policy. Your IP address is not stored. We delete these records after 12 months.

Services that are not technically necessary — in particular audience measurement and marketing tags — are loaded only after your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw or adjust your consent at any time with effect for the future via the "Cookies" link in the footer.

Google Tag Manager, Google Analytics and Google Ads

Only if you have consented do we load Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before your consent, no connection to Google is established and no Google script is executed. Tag Manager does not itself create independent usage profiles, but serves to trigger the services listed below.

Google Analytics 4 helps us understand how our website is used. In particular, page views, interactions, approximate location data, technical information about the device and browser used, and pseudonymous identifiers are processed. Google Analytics 4 processes IP addresses in truncated form as standard. The retention period for user-related event data is 14 months; after that the data is automatically deleted or aggregated.

Google signals. The "Google signals" feature is enabled in Google Analytics 4. If you are signed in to your Google account during your visit and have allowed personalised advertising there, Google may link your visits to this website across devices to your Google account. This gives us aggregated reports on the age, gender and interests of our visitors; we cannot identify individuals from it. You can object to the use of your data at any time in your Google account.

Google Ads. We measure whether visitors submit an enquiry or book a consultation after clicking one of our ads (conversion measurement) and build audiences for ad delivery on that basis. A cookie is set that allows the ad click to be matched to your later action.

The legal basis for all of the above is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Where Google transfers data to the USA, this is based on appropriate safeguards; Google LLC is certified under the EU-US Data Privacy Framework.

Contact form and e-mail contact

If you contact us via the contact form or by e-mail, we process the data you provide (name, e-mail address, message, and any further voluntary information) to handle your request. Form submissions are processed via a serverless function at Netlify; delivery to us is handled via Microsoft 365 or Exchange Online from Microsoft. The legal basis is Art. 6(1)(b) GDPR for contract-related or pre-contractual requests, otherwise Art. 6(1)(f) GDPR. The data is deleted once your request has been conclusively processed and no statutory retention obligations apply.

Newsletter and Mailchimp

We use Mailchimp (The Rocket Science Group LLC, Atlanta, USA) to send our newsletter and, where applicable, for form-based whitepaper, download, or topic subscriptions. During signup, we process your e-mail address, optional interest details, and in the double opt-in process the signup timestamp and IP address. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in every e-mail. A data processing agreement is in place with Mailchimp; the provider is certified under the EU-US Data Privacy Framework.

Embedded third-party content

We embed videos and audio content from external providers on our website. So that this content is immediately playable, it is loaded when the relevant page is opened — unlike the analytics and marketing services described in the previous section. Your IP address is transmitted to the respective provider because it is technically required to deliver the content to your device. The legal basis is our legitimate interest in presenting our work without interruption, pursuant to Art. 6(1)(f) GDPR.

We have reduced the associated data processing as far as possible:

  • Vimeo (Vimeo, LLC, New York, USA) — all players are embedded in "Do Not Track" mode. In this mode Vimeo sets no tracking cookies and does not analyse your usage behaviour; only cookies required for the secure operation of the player remain.
  • YouTube (Google Ireland Limited, Dublin, Ireland) — exclusively via the youtube-nocookie.com domain. Cookies are set only once you actually start a video.
  • Spotify (Spotify AB, Stockholm, Sweden), Apple Podcasts and occasionally other media players referenced by editorial articles.

You may object to this processing at any time under Art. 21 GDPR using the contact details given in the "Rights of the data subject" section. For details, please refer to the privacy notices of the respective providers. We do not currently use a kununu widget. Links to our kununu profile only redirect you to kununu after an active click.

Rights of the data subject

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, e.g. the Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Str. 12, 66111 Saarbrücken.

Validity and changes to this privacy policy

This privacy policy has status August 2026. As our website develops or due to changed legal requirements, it may become necessary to amend it.