Privacy­notice

The controller within the meaning of Art. 4 (7) GDPR is Atlas GbR, represented by Justin Bomholt and Felix Friedrich.

Horstmarer Landweg 88, 48149 Münster, Germany
hello@atlas-technologies.de

No data protection officer has been appointed; the conditions of § 38 BDSG are not currently met.

This site is statically prerendered and has no user accounts. Only three small endpoints run on the server: two turn form entries into emails to us, the third manages sign-ups for news by email. Only those sign-ups have a database. There is no tag manager, no embedded video or maps, no content delivery network, no chat or booking widgets and no advertising networks.

When the site is accessed, our hosting provider processes technically necessary access data: IP address, date and time of access, the file requested, referrer, browser type and version, operating system and device type. According to the provider, the IP address is anonymised as soon as it is collected.

The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is the secure and reliable operation of the site. The data is not combined with other sources and is not used to identify individuals.

The site is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. The provider acts as our processor and handles the data solely on our instructions. According to the provider, no data is transferred to third countries.

According to the provider, this access data is stored for eight weeks and then deleted. We do not store it beyond that.

While the “SiteAnalytics” service is enabled in our hosting contract, IONOS additionally evaluates this access data statistically. According to IONOS, the service is enabled by default, uses no cookies, anonymises the IP address immediately after transmission and passes no data to third parties. This site embeds no tracking pixel; here, such an evaluation can only be based on the server log files, and no information is stored on or read from your device for it.

The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is the statistical evaluation and technical optimisation of the site.

This site sets no cookies.

No information is currently stored on your device and no information stored there is accessed. A consent banner is therefore not required, and is deliberately not shown.

Es findet no audience measurement . No analytics service is embedded, no usage profiles are created, and no cross-site tracking takes place.

When you submit the “Get started” inquiry form, we process which Atlas solutions interest you, the name of your company, your full name and your business email address and, where you provide them, your company size and your message.

The details are transmitted to our server, turned directly into an email to our mailbox and not stored there. They are used solely to deal with your enquiry and never for advertising. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns steps prior to entering a contract, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest being to answer your enquiry. We delete the details once your enquiry has been dealt with in full, unless a statutory retention period applies.

To guard against abusive repeat submissions, our server stores a hash of your IP address, formed with a secret key, in its temporary directory when you submit a form. This is pseudonymous personal data: your IP address cannot be read from it, but we could form the same value again for the same address. For the “Get started” form it is evaluated for one minute, for the news sign-up and the application form for one hour, and for the confirmation and unsubscribe links for ten minutes. Once that period has passed it has no effect, and it is deleted automatically with the next request to the same function. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest being the prevention of abuse.

The forms set no cookies, load no third-party content and do not access information on your device within the meaning of § 25 TDDDG.

If you write to us by email instead, we process what you send on the same legal bases.

Through the “Stay updated” field in the footer you can sign up for occasional news from Atlas by email. For this we process your email address and the language in which you signed up.

We use the double opt-in procedure: after you sign up, you receive an email with a confirmation link that can be used once and expires after 48 hours. Your subscription takes effect only once you confirm it. If you do not confirm, your address is deleted when the link expires.

The legal basis is your consent under Art. 6 (1) (a) GDPR. You may withdraw it at any time with effect for the future, using the unsubscribe link in every email or by writing to hello@atlas-technologies.de. When you withdraw, we delete your address from the list. An inquiry through “Get started” or an application is not a sign-up for news.

We store your email address, the language, the version of the consent wording you were shown, and the times of sign-up and confirmation. We store the confirmation link only as a hash. The data is held in a database on our hosting provider IONOS’s webspace, outside the publicly accessible directory, and is only ever transmitted encrypted. We send the confirmation email and the news through IONOS’s mail server.

To be able to demonstrate that consent was given or withdrawn (Art. 7 (1) GDPR), we log sign-up, confirmation and unsubscribing with their time. The log contains not your email address but only a hash of it formed with a secret key, and is deleted after three years. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is demonstrating consent.

Our mailbox runs on Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Every message you send us, including applications and their attachments, is received and stored there.

Google acts as our processor. A transfer to the United States cannot be excluded. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the European Commission’s standard contractual clauses apply under Art. 46 (2) (c) GDPR.

The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is operating a reachable business email address.

Through the application form at Careers you submit your details and attached documents to our server. They are not stored there: the documents are passed straight into an email to our mailbox and then discarded. No copy and no cache is created on the web server.

We process your first and last name, email address, the position you are applying for and your motivation and, where you provide them, your phone number, a link (for instance to a profile or portfolio) and up to four attached documents.

The legal basis for processing your application is Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG, as it serves the decision on entering into an employment relationship. Your documents are stored in our mailbox; the section that applies is Our mailbox.

If you voluntarily share special categories of personal data with us, such as information on a severe disability, we process it only as far as the application process requires, on the basis of Art. 9 (2) (b) GDPR in conjunction with § 26 (3) BDSG.

Once the process has concluded we retain your documents for six months and then delete them. The legal basis for retention is Art. 6 (1) (f) GDPR; the legitimate interest is defending against possible claims under the Allgemeines Gleichbehandlungsgesetz, Germany’s equal treatment act. If you are hired, the documents are transferred to your personnel file.

Longer retention, for instance in a talent pool, occurs only with your separate consent under Art. 6 (1) (a) GDPR, which you may withdraw at any time with effect for the future.

All fonts are served from our own server. There is no connection to Google Fonts or any other font service, and no IP address is transmitted to a third party.

Video and images are also held on our own server. No content from YouTube, Vimeo or comparable providers is embedded.

Recipients of personal data are IONOS SE as hosting provider and Google Ireland Limited as the provider of our mailbox, where you write to us or apply. Both act as our processors.

No transfer to any further third party takes place. Simply visiting the site transfers no data to a third country: the site loads nothing from external servers. If you write to us or apply for a role, the details in the section apply Our mailbox.

You are under no statutory or contractual obligation to provide your data. Without the details marked as required, however, we cannot deal with your enquiry or application.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as a right to object to processing based on legitimate interests (Art. 21). Consent once given may be withdrawn at any time with effect for the future.

To exercise them, contact hello@atlas-technologies.de. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (the North Rhine-Westphalia data protection commissioner), Kavalleriestraße 2-4, 40213 Düsseldorf.

This site is served exclusively over a TLS-encrypted connection. Requests over HTTP are redirected automatically to HTTPS.