Privacy Policy

Last updated: November 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ReachAD GmbH
Josef-Ruederer-Str. 5
80335 Munich, Germany
Phone: +49 (0)89 452 28 55 0
Email: info.re@reachad.de.mail

2. Data Protection Officer

We have appointed a data protection officer. Contact details of the data protection officer:

Proliance GmbH
www.datenschutzexperte.de
Leopoldstrasse 21
80802 Munich, Germany
Email: datenschutzbeauftragter.re@datenschutzexperte.de.mail

When contacting the data protection officer, please state the company your request refers to. Please do not include sensitive information, such as a copy of your ID, in your request.

3. Visiting this website

Server log files

When you visit our website, the web server automatically records information that your browser transmits. The following data is recorded:

• IP address
• page requested and time of access
• volume of data transferred and status of the request
• browser type and version used, operating system and language setting
• the previously visited page, if your browser transmits it

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free operation and the security of our systems. The data is deleted after 30 days.

Visitor statistics

We use the server log files to compile visitor statistics on our server, without cookies and without any tracking script on the page. We evaluate the pages requested, time, referring page, browser, operating system, device type (such as smartphone, tablet, desktop or TV) and language setting as well as the country, region, city and network operator derived from the IP address.

To count visitors, sessions and returning visits, we create a truncated checksum from the IP address and browser identifier. We delete the sequence of requests per checksum at the end of the day and the checksum 30 days after your last visit. Only aggregated figures and truncated IP addresses are kept permanently. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in evaluating and improving our website.

Backups

Backup copies of the entire server are kept for up to 7 days.

Hosting

This website is operated by a service provider within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with this provider.

Fonts and external content

The fonts used on this website are served locally from our own server. No connection to third-party servers is established in the process.

Cookies and browser storage

This website does not set any cookies and does not store anything in your browser's local storage, session storage or databases. Your browser merely keeps the site's files in its cache and remembers to open the site over an encrypted connection only. This is strictly necessary to provide the page you requested (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). We do not embed third-party analytics or advertising services or content from third-party servers. We therefore do not need your consent, and you will not see a cookie banner.

4. Contacting us

Contact form

If you send us an inquiry via the contact form, we process the data you provide. Required fields are company, name, email address, a short description of your project and the answer to the security question. Providing a phone number is optional.

The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry is aimed at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to inquiries.

We use your details exclusively to handle your inquiry and delete them once the inquiry has been fully dealt with and no statutory retention obligations stand in the way. Retention periods under commercial and tax law remain unaffected.

Contact by email or phone

If you contact us by email or phone, we process your details in order to handle your request on the same legal bases.

Security check in the form

To protect against automated requests, our server sets a small arithmetic question with a signed token that expires after 30 minutes. You enter the result yourself. In addition, we limit the number of requests per connection and hour and process your IP address for this purpose. No cookies are set, no data is transmitted to third parties, and your behavior is not analyzed. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against misuse.

5. Job applications

Job postings on this website are delivered from our applicant management system Personio. The provider is Personio SE & Co. KG, Munich, which acts as a processor on our behalf pursuant to Art. 28 GDPR. Our server retrieves the postings from there and delivers them together with this website. Your browser does not establish a connection to Personio in the process. Only when you click on a job posting are you taken to our careers page at Personio. We accept applications by email to career.re@reachad.de.mail or via this system. For processing within the system, the notices displayed to you during the application process apply in addition.

We process applicant data for the purpose of conducting the application procedure on the basis of Art. 6(1)(b) GDPR, that is, with a view to entering into an employment relationship. Once the procedure is complete, the data is deleted unless you have consented to longer storage or statutory retention obligations apply.

6. Embedded seals and awards

We display third-party seals and awards on our website. The seal graphics are served from our own server. Simply viewing the page does not transmit any data to the respective providers. Only when you actively click on a linked seal are you taken to the provider's website, whose privacy notice then governs its data processing.

7. Recipients and processors

Your data is transferred to third parties only insofar as this is necessary to fulfill the respective purpose or we are legally obliged to do so. Where we engage service providers, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

No data is transferred to third countries outside the European Union.

8. Your rights

As a data subject, you have the following rights against us with regard to the personal data concerning you:

• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent given pursuant to Art. 7(3) GDPR with effect for the future

To exercise these rights, a message to the contact details given above is sufficient.

Right to object

Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 27, 91522 Ansbach, Germany.

9. Data security

This website uses state-of-the-art transport encryption. In addition, we take technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access.

10. Changes to this policy

We update this privacy policy whenever changes to our services or to the legal situation make this necessary. The version available on this page applies in each case.