Data we process
Access information
When you visit our website, personal data is processed to display its content on your device.
This requires processing your device’s IP address and information about your browser.
We are required to protect the confidentiality and integrity of personal data processed through our IT systems. For this purpose, we log the following information:
- IP address of the requesting device (truncated)
- Operating system
- Browser version
- Name of the requested file
- Date and time of the request
- Amount of data transferred
- Referring URL
The truncated IP address is stored in a log that is deleted within seven days.
This data is also used to identify and correct website errors.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to ensure the integrity, confidentiality and availability of data processed through this website.
Contact and appointments
When you email us, use a contact form or book an appointment, we process the information you provide to handle your request. Contract-related enquiries are processed under Art. 6(1)(b) GDPR. Other enquiries are processed under Art. 6(1)(f) GDPR, based on our legitimate interest in responding to them.
We retain this data for as long as necessary to handle your request. We then delete it unless a further business relationship arises or statutory retention obligations apply. The use of HubSpot forms and calendars is described separately below.
Cookies, consent and privacy settings
We use our own consent controls. Optional analytics, advertising and HubSpot tracking load only after you choose “Accept all”. “Necessary only” keeps these services off. You may separately allow a particular HubSpot form or calendar without enabling general website tracking.
Open privacy settings. This control is also available in the footer of every page. Choose “Necessary only” to withdraw consent for future processing. If an optional service or embed has already loaded, this and other open pages with loaded services reload to end the running code; unsubmitted form entries will be lost. Reopening settings or choosing “Keep current choice” does not change your decision.
Your choice, notice version and expiry are stored in your browser’s Local Storage under ac-cookie-consent-v1 and used for up to 180 days. Expired or invalid acceptance requires a new choice. Acceptance saved under the previous notice is not carried over; an earlier necessary-only choice remains a refusal. Choosing necessary-only also sets the cookie ac-consent-denied-v2 for 180 days, so an earlier acceptance does not resume if Local Storage cannot be updated. A new acceptance removes this cookie. If your browser blocks storage, acceptance applies only to the current page.
This necessary storage is used to respect your privacy choice (§ 25(2) no. 2 TDDDG); processing any personal data for this purpose is based on our legitimate interest in managing and respecting consent (Art. 6(1)(f) GDPR). Optional storage/access uses your consent under § 25(1) TDDDG; the associated analytics and advertising processing is based on Art. 6(1)(a) GDPR.
On withdrawal, we also remove known optional cookies that this website can access. We cannot delete cookies on other providers’ domains, recall data already sent or cancel every request already in progress. Withdrawal does not affect the lawfulness of earlier processing. You can also delete cookies and website storage through your browser settings. Choices apply to this browser and website, not automatically to other devices or the AdmiralCloud application.
Google Analytics, Google Ads and Google Tag Manager
We use Google services provided by Google Ireland Limited, Ireland, with possible processing by Google LLC in the USA. Google Analytics measures page visits and interactions such as clicks, scrolling and downloads. Google Ads measures advertising interactions and conversions. Google Tag Manager loads and manages configured Google tags. Cookie storage depends on the individual services it loads.
After consent, Google may process IP addresses, browser/device information, pages and referrers, timestamps, events and cookie or advertising identifiers. These identifiers can connect visits and advertising interactions. Google Ads is integrated directly, through Tag Manager and through HubSpot. Refusing optional services also prevents these website integrations from loading.
Google lists _ga and _ga_* with a default lifetime of two years; Google Ads may use cookies such as _gcl_au. Actual cookies and lifetimes depend on service settings and browser restrictions; the stated lifetimes are the providers’ defaults. See Google Analytics cookie information, Google advertising cookies and Google’s privacy policy.
HubSpot: marketing, forms and appointment calendars
We use HubSpot services from HubSpot Ireland Limited, Ireland, and its group, including HubSpot, Inc. in the USA. After “Accept all”, HubSpot tracking can record visits, browser/device information, IP addresses, referrers and interactions and associate them with a contact when identifying information is provided. HubSpot also loads our configured Google Ads integration.
Forms for contact, trial accounts and resources, and calendars for appointments, load automatically after “Accept all”, or individually when you explicitly allow the relevant embed. Loading connects your browser to HubSpot and transfers technical connection data even before you submit anything. Form entries and booking details are processed when you use those services. Details depend on the fields and notices shown in the form or calendar.
Consent to load an embed is separate from the legal basis for handling your enquiry or appointment. Contract-related requests are processed under Art. 6(1)(b) GDPR; other enquiries under Art. 6(1)(f) GDPR, based on our interest in responding to them. Consent to receive newsletters or marketing emails remains separate. You may contact us by email without allowing embedded content; opening a separate calendar takes you to HubSpot’s website.
HubSpot lists the tracking cookies __hstc and hubspotutk with six-month lifetimes, __hssc with 30 minutes and __hssrc for the browser session. Forms, calendars and security functions may use additional cookies. See HubSpot’s cookie documentation and HubSpot’s privacy policy. Browser cookies and stored contact records have different retention periods; deleting a cookie does not delete a contact or enquiry.
Leadinfo
With your consent, we use Leadinfo B.V., Netherlands, to identify company visits from IP addresses and provide publicly available company information. Leadinfo may process pages visited, time of visit, browser information and domains from form entries to associate visits with companies. It uses first-party cookies to distinguish visits and analyse use. See Leadinfo’s privacy information for its processing and storage details. You can withdraw through our privacy settings or use Leadinfo’s opt-out.
Locally hosted fonts and social links
The fonts used by our website are served from our own domain, not from an external font provider. Our footer links to Facebook and LinkedIn are ordinary links, not embedded social plugins. Following a link takes you to the respective provider, whose privacy policy then applies.
Newsletters and email communications
We send newsletters and update notifications through a self-hosted mailing service. We use HubSpot for marketing emails.
We offer a newsletter covering current developments, existing and new products, and offers. A valid email address is required to subscribe.
Your website privacy choice or permission to load HubSpot content does not subscribe you to newsletters or marketing emails. The legal basis for sending the newsletter is your consent under Art. 6(1)(a) GDPR.
Withdrawal and cancellation: You may withdraw newsletter consent at any time using the unsubscribe link at the end of each newsletter. After unsubscribing, we no longer use your data to send the newsletter. Statutory retention obligations remain unaffected.
Changing your website privacy settings does not change your email subscriptions. You may withdraw any consent you have given for marketing emails and object to the use of your data for direct marketing at any time. Please contact our privacy team to do so.
Job applications
We process applicant data for the application procedure. The legal basis for deciding whether to establish an employment relationship is § 26(1) of the German Federal Data Protection Act (BDSG).
This includes personal details, contact information and application documents such as a cover letter, CV and certificates. Additional information may be provided voluntarily. You can send applications by email or post. Please note that email is not automatically end-to-end encrypted.
If your application is successful, we continue processing and storing your data for the employment relationship.
If no employment relationship results or you withdraw your application, we generally delete applicant data after six months. This period allows us to answer follow-up questions and assess or defend claims under the German General Equal Treatment Act. Statutory retention obligations and necessary retention for legal defence remain unaffected.
Recipients and disclosure
We use service providers to operate this website and its described functions, including the providers listed above. They receive data required for their respective tasks. Transfers for optional analytics and advertising services depend on your consent. Where providers also process data for their own purposes, their linked privacy notices explain that processing.
Processing outside the European Union
The described services may involve processing outside the European Union and European Economic Area, particularly in the USA. Different privacy laws may apply and public authorities may have access to data. Such transfers must meet the requirements of Articles 44 et seq. GDPR in addition to the relevant legal basis for processing. Information about recipients and processing is provided under each service. You may request details and a copy of the safeguards applicable to our transfers by contacting datenschutz@admiralcloud.com.
Your rights
Subject to applicable law, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time.
You may withdraw consent at any time for future processing. For optional website services, use the privacy settings in the footer. For other requests, contact our privacy team. Withdrawal does not affect the lawfulness of processing before it was withdrawn.
We may need proof of your identity to handle an access request.
Data deletion
We delete personal data when it is no longer needed. Continued retention may be necessary to fulfil contractual obligations or establish, assess or defend claims. Statutory retention obligations remain unaffected. Browser cookie lifetimes are not the same as retention periods for data sent to providers.
Complaints to a supervisory authority
You have the right to complain to a data protection supervisory authority about the processing of your personal data.
Changes to this privacy policy
We update this policy when changes to the website or other circumstances require it. The current version is available on this page.