Privacy Policy

Aterise GmbH Leopoldstraße 31 80802 Munich Germany

Represented by: Valeria Kisler, Managing Director

Email: info@aterise.com
Phone: +49 176 72973657

Commercial Register: Amtsgericht München, HRB 271824 VAT Identification Number: DE349278501

Aterise GmbH is the controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR).

When you visit our website, certain information is automatically processed by our hosting and security infrastructure. This may include your IP address, date and time of access, requested pages, browser type and version, operating system, referrer URL and other technical information necessary to deliver and secure the website.

We process this information to operate, maintain and secure our website and to detect and prevent technical problems or misuse.

The legal basis is our legitimate interest in providing a secure and reliable website, pursuant to Art. 6(1)(f) GDPR.

We retain server log information only for as long as necessary for these purposes and for the establishment, exercise or defence of legal claims where applicable.

If you contact us through the contact form, by e-mail or by phone, we process the information you provide — in the contact form your name, company, business e-mail address and the description of your project or request.

We use this information to respond to your inquiry, to communicate with you and, where applicable, to prepare or carry out a business relationship. Inquiries submitted through the website are transferred to our CRM system HubSpot via the automation service Make, and a notification with the content of your inquiry is sent to our business mailbox, which runs on Google Workspace (see Sections 4, 5 and 8).

The legal basis is Art. 6(1)(b) GDPR where the processing is necessary to take steps at your request prior to entering into a contract or to perform a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling business inquiries and communicating with business contacts.

We store inquiry data until your request has been fully handled. Where a business relationship follows, we retain the data for its duration and thereafter in accordance with statutory retention obligations under commercial and tax law (up to six or ten years, Section 257 HGB, Section 147 AO).

We use HubSpot as our CRM and contact management system to handle and manage business inquiries and business contacts. Our contracting party and processor is HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany; data may also be processed by its parent company HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA.

HubSpot acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. Where personal data is processed in the United States, the transfer is safeguarded by HubSpot, Inc.’s certification under the EU–US Data Privacy Framework (Art. 45 GDPR) and by the EU Standard Contractual Clauses contained in the data processing agreement (Art. 46 GDPR). The legal basis and storage periods are those stated in Section 3.

We use Make, a workflow automation service, to transfer information submitted through our website into our CRM system. Make is provided by Celonis, Inc., One World Trade Center, 87th Floor, New York, NY 10007, USA, and its affiliates. Make acts as our processor under a data processing agreement pursuant to Art. 28 GDPR and processes the data only for the purpose of this transfer. Where data is processed in the United States, the transfer is safeguarded by Celonis, Inc.’s certification under the EU–US Data Privacy Framework (Art. 45 GDPR) and by the EU Standard Contractual Clauses contained in the data processing agreement (Art. 46 GDPR). The legal basis and storage periods are those stated in Section 3.

PostHog

We use PostHog for website analytics to understand how visitors interact with our website. PostHog is provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA.

PostHog processes technical and usage information such as browser and device information, pages viewed, interactions and your IP address, and assigns a pseudonymous visitor identifier that is stored in a cookie and in your browser’s local storage (entries beginning with “ph_” or “__ph_”).

Our PostHog project is hosted in the United States. The transfer is safeguarded by the EU Standard Contractual Clauses contained in PostHog’s data processing agreement (Art. 46 GDPR). PostHog acts as our processor under a data processing agreement pursuant to Art. 28 GDPR.

PostHog is loaded only after you have given your consent for analytics through our Cookie Settings; no PostHog cookies are set and no data is transmitted before that. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Analytics data is retained for no longer than 12 months. You may withdraw your consent at any time through the Cookie Settings; PostHog is then deactivated and its cookies and storage entries are deleted.

Google Ads

We use strictly necessary technologies to operate and secure our website.

In addition, we use PostHog for website analytics. This technology is loaded only after you have given your consent.

With your consent, we also use Google Ads conversion tracking to measure the success of our advertising campaigns.

For more information about the technologies we use and your choices, please see our Cookie Policy and Cookie Settings.

We disclose personal data only to the following recipients, and only to the extent necessary:

• our hosting and website infrastructure provider (operation and security of the website) — processor;
• HubSpot Germany GmbH / HubSpot, Inc. — CRM and contact management (see Section 4) — processor;
• Celonis, Inc. (Make) — workflow automation (see Section 5) — processor;
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Google Workspace for business e-mail and communication — processor;
• PostHog Inc. — website analytics, only with your consent (see Section 6) — processor;
• Google Ireland Limited — Google Ads conversion tracking, only with your consent (see Section 6) — independent controller;
• where applicable, professional advisers who are bound by confidentiality obligations.

For Google Ads, Google acts as an independent controller for the processing carried out on its advertising platform and for conversion measurement. We do not use Google Analytics, remarketing audiences or enhanced conversions on this website.

Service providers that process personal data on our behalf are bound by data processing agreements pursuant to Art. 28 GDPR. We do not sell personal data.

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR) — to obtain confirmation as to whether we process your personal data, and a copy of that data;
• Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected and incomplete data completed;
• Right to erasure (Art. 17 GDPR) — to have your data deleted where the legal conditions are met;
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR) — to receive the data you provided to us in a structured, commonly used, machine-readable format;
• Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on your consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you may object at any time without giving reasons; we will then no longer process your data for this purpose.

Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority competent for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, https://www.lda.bayern.de.

To exercise any of these rights, please contact us using the contact details in Section 1.

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

You are neither legally nor contractually required to provide personal data on this website. Providing your contact details is voluntary; however, without them we will not be able to respond to your inquiry.

We do not use personal data collected through this website for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

We may update this Privacy Policy from time to time to reflect changes to our website, services or legal requirements.

The current version will always be available on this page.