Privacy policy

Scope

This privacy policy explains how personal data is processed when you visit this website of CSBERG GmbH (consulting and software divisions) and when you contact us. The privacy policy on datenbruecke.com applies to the use of the Datenbrücke software.

1. Controller

CSBERG GmbH, Neuer Wall 10, 20354 Hamburg, Germany. Email: kontakt@csberg.de

2. Hosting and delivery

The website is delivered via Vercel. This generates server log data, including IP address, time of access and the resource requested. The legal basis is our legitimate interest in secure and stable delivery (Art. 6(1)(f) GDPR).

3. Contact by email or phone

If you contact us by email or phone, we process your details (such as name, company, contact details and the content of your request) to handle your inquiry. Emails are received via Microsoft 365; inquiries may be recorded in our CRM (Pipedrive) for processing. The legal basis is pre-contractual measures or our legitimate interest in handling your request (Art. 6(1)(b) or (f) GDPR).

4. Cookies and analytics

This website sets no cookies, uses no analytics or tracking services and embeds no third-party content. Fonts, images and videos are served from our own server. A cookie notice is therefore not required.

5. Recipients and processors

• Vercel Inc. — website hosting and delivery (USA / EU edge)
• Microsoft Ireland Operations Ltd. — email (Microsoft 365) (EU)
• Pipedrive OÜ — CRM, handling of inquiries (EU, Estonia)

6. Transfers to third countries

Vercel may also process personal data outside the EU, in particular in the USA. Such transfers are based on appropriate safeguards under Art. 44 et seq. GDPR, in particular EU Standard Contractual Clauses (SCC), supplemented by additional safeguards.

7. Retention

• Server log and security data: only as long as required for the respective purpose.
• Contact and prospect data: until your request has been handled; beyond that in the CRM to follow up on a potential business relationship, at most until you object.
• Business correspondence and invoice data: in accordance with statutory retention obligations (generally 6–10 years under German commercial and tax law).

8. Legal bases

• Art. 6(1)(b) GDPR (performance of contract, pre-contractual measures)
• Art. 6(1)(f) GDPR (legitimate interest: secure delivery, handling inquiries)
• Art. 6(1)(c) GDPR (legal obligations, e.g. retention)

No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

9. Your rights

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17)
• Restriction of processing (Art. 18), data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Complaint to a supervisory authority (Art. 77)

The competent supervisory authority for CSBERG GmbH is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany. You may also contact the supervisory authority of your habitual residence.

Please send requests to: kontakt@csberg.de

10. Changes to this privacy policy

We update this privacy policy when processing or the services we use change. The version published on this page applies.