Privacy policy

1. Controller — Verantwortlicher

The controller within the meaning of Art. 4 no. 7 GDPR is:
Schwarm Technologies Germany GmbH
Rindermarkt 15, D-80331 München, Germany
Phone: +49 89 215 290 370
Email: office@schwarm.com

2. Data protection contact — Datenschutzkontakt

For any question about this policy or about the personal data we hold, write to office@schwarm.com. Where we are required to appoint a data protection officer, their contact details are published here.

3. Hosting and server log files — Hosting und Server-Logfiles

This website is hosted on Microsoft Azure Static Web Apps, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Nature and purpose of the processing: each time a page is requested, the hosting infrastructure records technical data in server log files — typically the requesting IP address, the date and time of the request, the file requested, the referrer URL, and the browser and operating system in use. This data is needed to deliver the site, to keep it stable, and to detect and defend against attacks.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in the secure and reliable operation of our website. The log data is not merged with other data sources, and is not used to identify individual visitors.

Our use of Azure is covered by the Microsoft Products and Services Data Protection Addendum, which serves as the processing agreement required by Art. 28 GDPR. Content may be delivered from edge locations outside the EU; see section 8 on third-country transfers.

4. No cookies, no tracking — Keine Cookies, kein Tracking

This site sets no cookies, runs no analytics or tracking scripts, and embeds no third party content — no advertising pixels, no chat widget, no video embeds. The typefaces are served from our own domain rather than from an external font service, so opening a page establishes no connection to any third-party server. Consequently there is no consent banner: there is nothing to consent to.

The one outbound destination on this site is the booking link described in section 6, which only ever opens when you click it.

5. Contacting us by email or phone — Kontaktaufnahme

Nature and purpose of the processing: if you write or call us, the details you give — your name, your contact details, and whatever you tell us about your enquiry — are processed to handle that enquiry and any follow-up to it.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry concerns a contract or steps taken prior to entering into one, otherwise Art. 6 (1) (f) GDPR — our legitimate interest in answering the people who approach us.

Retention: we keep the correspondence until the enquiry is settled and no further questions arise from it. Where commercial or tax law requires records to be retained (§ 257 HGB, § 147 AO), the data is kept for those periods and then deleted.

6. Online appointment booking via Microsoft Bookings — Online-Terminvereinbarung

We use Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (parent company: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA), to let you book a working session online.

Nature and purpose of the processing: when you use the service, the data you enter in the booking form — for example your name, email address, phone number, and the time and subject of the appointment — is transmitted to Microsoft and processed there to organise the appointment.

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract or of steps taken prior to entering into one), or our legitimate interest in fast and effective appointment scheduling under Art. 6 (1) (f) GDPR.

Third-country transfer — Drittlandübermittlung: it cannot be ruled out that data is transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of data protection.

Voluntary — Freiwilligkeit: using Microsoft Bookings is entirely voluntary. If you would rather not use the service, you can arrange an appointment with us at any time by email or by phone.

For more information on how Microsoft handles your data, see the Microsoft privacy statement.

7. Recipients — Empfänger

The only recipients of personal data from this website are the Microsoft entities named in sections 3 and 6, which act as processors on our behalf. Beyond them, we disclose personal data only where we are legally obliged to — for instance to public authorities acting within their powers. We do not sell personal data, and we run no advertising networks, data brokers or analytics providers on this site.

8. Transfers to third countries — Drittlandübermittlung

Both services named above are provided to us by Microsoft's Irish entity, but processing by its US parent cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework, and the Microsoft Products and Services Data Protection Addendum additionally incorporates the European Commission's Standard Contractual Clauses. We use no other providers that process personal data from this website.

9. Retention — Speicherdauer

We keep personal data only for as long as the purpose it was collected for requires, or for as long as statutory retention periods oblige us to. Once neither applies, the data is deleted.

10. Your rights — Ihre Rechte

Under the GDPR you have the right to obtain information about the personal data we hold about you (Art. 15), to have inaccurate data corrected (Art. 16), to have your data erased (Art. 17), to have its processing restricted (Art. 18), and to receive it in a portable format (Art. 20).

Right to object — Widerspruchsrecht: where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation (Art. 21 GDPR). Where processing rests on consent, you may withdraw that consent at any time with effect for the future (Art. 7 (3) GDPR); the lawfulness of processing carried out before the withdrawal is unaffected.

To exercise any of these rights, write to office@schwarm.com.

Right to lodge a complaint — Beschwerderecht: you also have the right to complain to a supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany

11. Links to third-party websites — Externe Links

This site links to websites we do not operate — the booking page, Microsoft's privacy statement, and the supervisory authority named above. Once you follow such a link, this policy no longer applies: the operator of that site is responsible for what it collects and how it handles it. We have no influence over their processing and accept no responsibility for it.

12. Encryption — Verschlüsselung

This site is served over TLS (HTTPS), so the pages you request and anything you send us through it are encrypted in transit. You can recognise an encrypted connection by the https:// prefix in your browser's address bar.

13. Changes to this policy — Änderungen

We update this policy when the site changes — if we add a form backend, analytics, or any other service that processes personal data, this page is updated before that service goes live. The date at the top tells you which version you are reading.