Privacy policy
This English version is provided for convenience. The German version is legally binding: Datenschutzerklärung
Last updated: October 2026
1. Controller
The controller responsible for data processing on this website is Clarivo Labs UG (haftungsbeschränkt), represented by its Managing Director Paul von Hinüber, Bauerstr. 7, 80796 Munich, Germany, phone +49 5121 3064055, email kontakt@clarivo-labs.com.
2. Summary
We do not use cookies, analytics or tracking services, or social media plugins, and we do not load content from third parties. We process personal data only to the extent technically necessary to deliver the website, when you request a call or when you contact us.
3. Hosting and server logs
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes data transmitted by your browser:
- IP address and the approximate region derived from it
- date and time of access
- page or file requested, amount of data transferred, status code
- previously visited page (referrer)
- browser type and version, operating system
The purpose is to deliver the website, ensure its stable operation and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and functional website.
Vercel processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Content is delivered via a global server network, usually from a location near you; processing in the USA is possible. Vercel is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, EU Standard Contractual Clauses have been agreed (Art. 46(2)(c) GDPR).
Log data is available to us for no more than one day. Vercel deletes or anonymizes it as soon as it is no longer needed for these purposes. For more information, see Vercel’s privacy notice: vercel.com/legal/privacy-notice
4. Requests via the form
If you request a call via our form, we process the information you provide: first and last name, business email address, company name, industry and number of locations and, optionally, your phone number and how you heard about us. We use this information to process your request, schedule an appointment with you and prepare the call.
The legal basis is Art. 6(1)(b) GDPR, as the processing serves pre-contractual measures taken at your request. We process the optional information on how you heard about us under Art. 6(1)(f) GDPR; our legitimate interest is understanding how prospective customers find us. We need the information marked as required to process your request.
The form is processed by our hosting provider Vercel (Section 3) on a server in Frankfurt am Main, Germany, and sent to us by email; we use Google Workspace for email (Section 5). We store your request until it has been dealt with. If no business relationship results, we delete it no later than twelve months after our last contact. Statutory retention obligations for business correspondence (generally six years under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO)) remain unaffected.
To prevent misuse, the server counts how many requests come from an IP address. For this purpose, the IP address is held in memory for no more than ten minutes and is not stored permanently. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and misuse.
5. Contact by email or phone
If you contact us by email or phone, we process your information (name, contact details, content of your request) to handle your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or its initiation. In all other cases, it is Art. 6(1)(f) GDPR; our legitimate interest is responding to inquiries.
For email, we use Google Workspace from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a processor. A transfer to Google LLC in the USA cannot be ruled out; Google LLC is certified under the EU-U.S. Data Privacy Framework.
We delete your request once it has been dealt with, unless statutory retention obligations apply. For business correspondence, the retention period is generally six years (Section 257 HGB, Section 147 AO).
6. No cookies, no consent banner
This website does not set cookies. It only stores or reads information on your device that is strictly necessary to display the page (Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). No consent is required for this, which is why we do not show a cookie banner.
7. Fonts
The fonts used are loaded from our own web server. There is no connection to servers of Google or other font providers.
8. Encryption
This website uses TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar. The information you enter in the request form is also transmitted in encrypted form.
9. Your rights
You have the right at any time to access your data (Art. 15 GDPR) and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to kontakt@clarivo-labs.com is sufficient.
Right to object under Art. 21 GDPR: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defense of legal claims.
Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Postfach 1349, 91504 Ansbach, Germany, www.lda.bayern.de.
10. Obligation to provide data, no automated decision-making
You are not obliged to provide us with personal data. However, the website cannot be displayed without the technically necessary connection data, and we cannot schedule an appointment without the required fields. No automated decision-making, including profiling (Art. 22 GDPR), takes place.
11. Changes
We update this privacy policy when the website or the legal situation changes. The version published on this website applies; in case of discrepancies, the German version prevails.