Privacy Policy

I. Information about the Controller

The controller responsible for this website within the meaning of the General Data Protection Regulation (GDPR) is:

Berliner Nanotest und Design GmbH
Gerhard-Sedlmayr-Str. 11
12487 Berlin
Germany

Telephone: +49 (0) 30 6392 3880
Email: info@nanotest.eu

II. Data Protection Officer

Dr.-Ing. Phillip Käser Consulting GmbH

For privacy-related inquiries, you may contact us via:

Email: dpo@nanotest.eu

III. Rights of Data Subjects

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

IV. Server Log Files

For technical and security reasons, our website automatically processes certain information transmitted by your browser to our server.

This information may include:

• browser type and version,
• operating system,
• referring website,
• visited pages,
• date and time of access,
• IP address.

The processing is necessary to ensure the stability, security, and proper operation of the website.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security, stability, and optimization of our website and preventing misuse of our online services.

Server log data is stored only temporarily and deleted automatically after no more than seven days unless longer retention is required for security or legal reasons.

V. Anonymous and Aggregated Usage Statistics

We collect limited technical usage statistics in order to improve the functionality, stability, and usability of our website.

The collected information may include:

• visited pages,
• date and time of access,
• device type,
• operating system,
• browser type and version,
• screen resolution,
• general technical usage information.

The collected data is processed in a privacy-preserving manner and anonymized or aggregated where possible. No personal profiles are created and no tracking for advertising purposes or cross-site marketing profiling takes place.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security, stability, and optimization of our website and improving the usability of our online services.

The statistical data is stored only for as long as necessary for technical and analytical purposes and is then deleted automatically.

VI. Contact Requests

If you contact us via email or through a contact form, the data you provide will be processed for the purpose of handling your request.

The legal basis for this processing is Art. 6(1)(b) GDPR if your request relates to a contractual relationship or pre-contractual measures. In all other cases, the legal basis is Art. 6(1)(f) GDPR.

Your data will be deleted once your request has been fully processed, provided no statutory retention obligations apply.

VII. Google reCAPTCHA

We use Google reCAPTCHA to protect our contact forms against spam, automated misuse, and malicious attacks.

The provider within the European Union is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

reCAPTCHA may process technical information such as:

• IP address,
• browser and device information,
• operating system,
• referrer URL,
• date and duration of the visit,
• interactions necessary for bot detection.

This processing serves exclusively to distinguish legitimate human users from automated systems.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and communication systems against abuse, spam, and automated attacks.

Data may also be transferred to servers of Google LLC in the United States.

Further information about how Google processes personal data can be found here:

Google Privacy Policy: https://policies.google.com/privacy

Google Terms of Service: https://policies.google.com/terms

VIII. Online Job Applications

We offer applicants the opportunity to apply for jobs electronically via our website.

The data submitted as part of the application process is processed exclusively for the purpose of handling the application procedure.

The legal basis for this processing is §26 BDSG in conjunction with Art. 88 GDPR.

If an application results in employment, the submitted data will be stored for the purpose of implementing and managing the employment relationship in compliance with applicable legal obligations.

If no employment relationship is established, the application data will be deleted automatically after completion of the application procedure unless longer retention is required by law or justified for legal defense purposes.

IX. Social Media Links

Our website contains links to external social media platforms such as YouTube and LinkedIn.

These services are integrated only as external links. No automatic connection to the servers of these platforms is established when visiting our website.

Only when you actively click on such a link will you be redirected to the respective platform, where additional data processing may occur under the responsibility of the respective provider.

Further information can be found in the privacy policies of the respective providers:

YouTube (Google): https://policies.google.com/privacy

LinkedIn: https://www.linkedin.com/legal/privacy-policy

X. Embedded YouTube Videos

Our website may embed videos from YouTube using YouTube’s enhanced privacy mode.

The provider is YouTube LLC, a subsidiary of Google Ireland Limited.

According to YouTube, enhanced privacy mode means that data is only transmitted to YouTube servers when you actively start a video.

When a video is played, YouTube may process personal data such as:

• IP address,
• browser information,
• device information,
• date and time of access,
• visited pages.

If you are logged into a Google or YouTube account, this information may be associated with your user account.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing multimedia content and improving the presentation of our website.

Further information about data processing by Google can be found here:

https://policies.google.com/privacy

XI. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy in order to reflect changes in legal requirements or changes to our services and data processing practices.