Privacy Policy

1. Controller

2. Hosting and server log files

This website is hosted by Strato AG (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany). When the page is accessed, technically necessary data is recorded in log files (IP address, timestamp, requested URL, referrer, user agent). The IP address is processed in anonymised form (last octet truncated). Storage maximum 14 days.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure operation of the website).

3. Cloudflare

We use Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) in front of our server to ensure availability and security of the website. Cloudflare processes visitors' IP addresses as technically necessary information.

For data transfers to the USA, a data processing agreement with standard contractual clauses is in place. Legal basis: Art. 6 (1) lit. f GDPR.

4. Cloudflare Turnstile

Our forms are protected by Cloudflare Turnstile to prevent spam and automated submissions. Turnstile processes the IP address and browser information but does not set tracking cookies and does not perform cross-site tracking.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in spam protection).

5. Contact form

If you contact us via the contact form, we process the data you provide (name, email, optionally phone, company, topic and message) to handle your enquiry. The data is forwarded by email only to our internal mailboxes and is not permanently stored in a database.

Legal basis: Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. b GDPR (pre-contractual measures). Retention: until your enquiry has been fully processed, then deletion after no more than 12 months, unless legal retention obligations apply.

6. Application form

When using the quick-apply form, we process the data you provide (name, email, phone, desired position, start date, profile links, stack experience, free description) exclusively for the application process. The data is forwarded by email to our applications mailbox (bewerbung@centralsolution.de).

Legal basis: § 26 BDSG in conjunction with Art. 88 GDPR. Retention: maximum 6 months after the application process is concluded, unless you consent to longer retention for future positions.

7. Email delivery (SMTP)

Incoming form messages are forwarded via our hosting provider's SMTP server (Strato AG) using a TLS-encrypted connection. No third-party services like Mailchimp, Sendgrid etc. are used.

8. Cookies

This website does not set any marketing or tracking cookies. Only technically necessary cookies are used (e.g. for form protection). These are permitted without consent pursuant to § 25 (2) no. 2 TTDSG.

9. Fonts and assets

All fonts (Bricolage Grotesque, Hanken Grotesk, IBM Plex Mono) and images are served locally from our server. No external providers (Google Fonts, Adobe Fonts etc.) are embedded.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw a granted consent at any time with effect for the future.

To exercise your rights, an informal message to info@centralsolution.de is sufficient.

11. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is: