Privacy Policy

The data controller responsible for this website is:

BurmCorp Labs UG (haftungsbeschränkt)
Kollwitzstraße 76
10435 Berlin
Germany

Represented by: Nils Torben Burmeister
Email: legal@burmcorp.com

We take the protection of your personal data seriously. This privacy policy explains what data is collected when you visit this website, how it is used, and your rights under the EU General Data Protection Regulation (GDPR / DSGVO).

This website is designed to collect as little personal data as possible. We do not use advertising, marketing trackers, or social media plugins.

This website is hosted on Cloudflare Pages and delivered through the Cloudflare content delivery network (CDN). When you visit this site, your browser connects to Cloudflare servers, which may process the following data:

• IP address
• Date and time of the request
• Requested URL and referrer URL
• Browser type and operating system
• Amount of data transferred

This data is processed by Cloudflare to deliver the website, ensure security (e.g. DDoS protection), and for operational purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website delivery).

We have concluded a Data Processing Agreement (Auftragsverarbeitungsvertrag) pursuant to Art. 28 GDPR with Cloudflare, Inc.

Cloudflare, Inc. is a US company. Data transfers to the US are covered by Cloudflare's compliance with the EU-US Data Privacy Framework. For more information, see the Cloudflare Privacy Policy.

This website uses Cloudflare Web Analytics, a privacy-focused analytics service provided by Cloudflare, Inc. Cloudflare Web Analytics does not use cookies, does not track individual users across sites, and does not collect personal data. It measures page views and visits in aggregate at the network edge.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding website usage to improve the service). This processing is covered by the Data Processing Agreement with Cloudflare mentioned above.

This website uses Google Fonts (Anton, Cormorant, Work Sans), which are self-hosted. The font files are downloaded at build time and served directly from our own infrastructure. No requests are made to Google servers when you visit this site, and no data is transmitted to Google.

This website does not use cookies for tracking, analytics, or advertising purposes. Cloudflare may set the following technically necessary cookies for security purposes:

• __cf_bm — bot management (expires after 30 minutes)
• cf_clearance — security challenge verification (expires after 30 minutes)

Additionally, this website uses your browser's local storage to remember your display preference (dark or bright mode). This data is stored locally on your device, is not transmitted to any server, and contains no personal information.

Both the cookies listed above and the local storage usage are strictly necessary for website functionality and do not require consent under §25(2) TTDSG (Telekommunikation-Telemedien-Datenschutz-Gesetz) and Art. 5(3) of the ePrivacy Directive.

If you contact us by email, the data you provide (email address, name, message content) will be stored and used solely to process your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We will delete your data once the purpose for processing has been fulfilled, unless we are legally required to retain it.

If you send us a job application (solicited or unsolicited), we process the data you provide (e.g. name, email address, CV, portfolio, GitHub profile) for the purpose of evaluating your application. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) in conjunction with §26 BDSG (Bundesdatenschutzgesetz).

We store application data for up to six months after the conclusion of the application process, unless you consent to longer storage. You may withdraw your application and request deletion of your data at any time by contacting careers@burmcorp.com.

Under the GDPR, you have the following rights:

• Access — the right to request information about the personal data we hold about you (Art. 15 GDPR)
• Rectification — the right to have inaccurate data corrected (Art. 16 GDPR)
• Erasure — the right to have your data deleted (Art. 17 GDPR)
• Restriction — the right to restrict processing of your data (Art. 18 GDPR)
• Data portability — the right to receive your data in a structured, machine-readable format (Art. 20 GDPR)
• Objection — the right to object to data processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent — the right to withdraw any previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR)

To exercise any of these rights, contact us at legal@burmcorp.com.

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our company is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
https://www.datenschutz-berlin.de

We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available at this URL. The date of the last update is noted at the top of this page.