Privacy policy / Data protection notice

General information

This Privacy Policy explains how we handle your personal data when you visit our website, contact us, request B2B access or subscribe to our newsletter. Personal data means any information relating to an identified or identifiable natural person (Art. 4 (1) GDPR). We take the protection of your personal data very seriously and treat it confidentially and in accordance with the legal data protection regulations of the European Union (GDPR) and Germany (BDSG, DDG, TDDDG).

Controller

CircleCube GmbH
Neumann-Reichardt-Straße 27-33
Haus 16
22041 Hamburg
Germany

Managing Directors: Florian Blümer, Linus Weber, Mario Meszaros
E-mail: post@circlecube.eu
Website: www.circlecube.eu

The controller is the natural or legal person who determines the purposes and means of the processing of personal data.

Data collection on our website

When you access our website, the browser automatically transmits information to the Webflow and Strato servers. These are temporarily stored in so-called server log files. The following data may be collected:

• IP address of the requesting device
• Date and time of access
• Name and URL of the accessed file
• Referrer URL (previously visited website)
• Browser type and version, operating system
• Name of the access provider

These data are processed to ensure a stable and secure website connection (Art. 6 (1)(f) GDPR – legitimate interest). Data are not merged with other data sources.

Hosting: Our website is operated using the platform of Webflow, Inc. (398 11th Street, 2nd Floor, San Francisco, CA 94103, USA). Webflow processes data on our behalf as a data processor, including on servers in the USA. Data transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46 GDPR) as part of the data processing agreement with Webflow. Domain management is handled by Strato AG (Otto-Ostrowski-Str. 7, 10249 Berlin, Germany), which acts as a data processor within the EU.

Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies that are technically necessary to provide the website you requested are set on the basis of § 25 (2) No. 2 TDDDG and Art. 6 (1)(f) GDPR. Cookies and technologies that are not necessary (for example for statistics or marketing) are only used with your consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR), which you can give, change or withdraw at any time via the cookie settings on our website. Cookie settings: We use the open-source tool cookieconsent to ask for and manage your choice. Your decision is stored in your browser (cookie "cc_cookie") for up to six months so that we do not ask you on every visit. You can change it at any time via "Cookie settings" in the footer. Statistics (Google Tag Manager and Google Analytics): With your consent we use Google Tag Manager and, through it, Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to understand how our website is used. Google Tag Manager is only loaded after you have agreed to "Statistics". Without your consent no Google script is loaded and no statistics cookies are set. If you consent, data such as your IP address, device and browser information and the pages you view may be transmitted to Google and processed on servers in the USA and other third countries. Such transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 46 GDPR). Legal basis: your consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR). You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer. External content (appointment calendar): The page "Book an appointment" embeds the booking calendar of our customer portal (Odoo, see the section on the customer portal). The calendar is only loaded after you have agreed to "External content" or clicked "Load calendar". When it loads, your IP address and technical data are transmitted to the provider of the customer portal. Legal basis: your consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR).

Google Analytics settings: We have accepted Google's data processing terms for Google Analytics. IP addresses are not logged or stored in Google Analytics. Event data is kept for a maximum of 14 months and then deleted automatically.

Contact by e-mail and contact form

If you contact us via our contact form or by email, we collect and process:

• First and last name
• Company name
• Telephone number (optional)
• E-mail address
• Preferred way of contact (by e-mail or by phone) and message text

These data are processed exclusively to respond to your request (Art. 6 (1)(b) GDPR – pre-contractual measures or contract performance, or Art. 6 (1)(f) GDPR – our legitimate interest in answering enquiries). Data will not be shared with third parties unless necessary to fulfill your inquiry. Your data will be deleted once your inquiry has been fully processed, provided there are no legal retention obligations.

The contact form on our website is provided via our website platform Webflow. When you submit the form, your entries are forwarded automatically to our team via the automation service Make (make.com). Make processes the data on our behalf as a processor under a Data Processing Agreement (Art. 28 GDPR); we use Make’s EU region (eu1). From there, your enquiry is passed on, for example by e-mail or to our customer system Odoo (see section “Customer portal, support and appointments (Odoo)”). In addition, your submission is stored in the Webflow form storage until your enquiry has been processed.

Partner profile form (Tally)

On the page "Become a partner" you can send us your company profile for a partner page on our website. The form is provided by Tally (tally.so). It is only loaded after you have agreed to "External content" in the cookie settings or clicked "Load form". When it loads, your IP address and technical data are transmitted to the provider. Legal basis: your consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR).

If you submit the form, we process the data you enter: company name, website, descriptions and key facts, details on the collaboration with CircleCube, logo and photos you upload, and the name, e-mail address and, if given, telephone number of your contact person. We use these data to create and maintain your partner page, to ask follow-up questions and to stay in touch with you (Art. 6 (1)(b) and (f) GDPR). The information intended for your partner page is published on our website; you confirm this in the form (Art. 6 (1)(a) GDPR). Logos and photos may show people. Please only upload material for which you hold the rights.

Tally processes the data on our behalf as a processor under a data processing agreement (Art. 28 GDPR). Responses and uploaded files are stored in our Tally account. Information on hosting and subprocessors is available in Tally's privacy documentation. We keep the data for as long as the partnership or your partner page exists and delete them afterwards, unless statutory retention duties apply. You can ask us at any time to correct or remove your page.

Newsletter subscription

If you subscribe to our newsletter, we collect and store your email address. The subscription process is based on your explicit consent (Art. 6 (1)(a) GDPR).

We use the newsletter function of our customer system Odoo to manage and send newsletters. Odoo S.A. (Chaussée de Namur 40, 1367 Grand-Rosière, Belgium) processes the data on our behalf under a Data Processing Agreement (Art. 28 GDPR). You can revoke your consent at any time by clicking the “unsubscribe” link in any newsletter or by contacting us directly. Your data will then be deleted from the mailing list immediately.

Customer portal, support and appointments (Odoo)

Our customer portal (portal.circlecube.eu) is operated on the business software Odoo. In the portal and through our website you can request B2B access, log in, open support tickets in our helpdesk, book appointments and send us enquiries via the contact form.

Depending on the function, we process the data you enter, such as your name, company, business e-mail address, telephone number, the content of your enquiry or ticket, files you attach, the appointment you choose and your access data. We process these data to set up, secure and manage your access, to answer your requests, to provide support and to carry out the business relationship (Art. 6 (1)(b) GDPR) and, where applicable, to protect the security of the portal and to handle enquiries efficiently (Art. 6 (1)(f) GDPR).

Odoo is provided by Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium. As far as Odoo processes personal data on our behalf, Odoo acts as our processor under a Data Processing Agreement (Art. 28 GDPR). Information on hosting regions and subprocessors is available in Odoo’s privacy documentation. Your data are stored in our Odoo system and deleted when they are no longer required for the purposes stated above, unless statutory retention obligations apply.

External links, social media and press kit

Our website contains links to external websites and services, for example to partners, to news articles, to our profiles on LinkedIn and YouTube, and to our press kit, which we provide as a shared folder on Google Drive. When you click such a link, the respective provider receives technical data such as your IP address and the page you came from, and may process further data under its own privacy policy. We have no influence on this processing.

We maintain profiles on LinkedIn (LinkedIn Ireland Unlimited Company) and YouTube (Google Ireland Limited). When you visit these profiles, the operators process your data under their own responsibility. Please refer to their privacy policies for details.

Data retention and deletion

We store personal data only for as long as necessary for the purposes stated in this policy, or as required by law. When the data are no longer required, they will be deleted in accordance with Art. 17 GDPR.

Your rights under the GDPR

You have the following rights under applicable data protection laws:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Your competent supervisory authority in Germany is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Str. 22, 20459 Hamburg
E-mail: mailbox@datenschutz.hamburg.de
https://datenschutz-hamburg.de

Data security

We use SSL/TLS encryption to protect the transmission of confidential data via our website. Encrypted connections are indicated by “https://” and a lock symbol in the browser’s address bar.

Updates and amendments

We may update this Privacy Policy from time to time to reflect legal, technical, or organizational changes. The current version is always available on our website.

Last updated: October 2026