Privacy Policy

The data controller responsible for this website is:

BurmCorp Labs UG (haftungsbeschränkt)
Kollwitzstraße 76
10435 Berlin
Germany

Represented by: Nils Torben Burmeister
Phone: +49 30 20009797
Email: legal@burmcorp.com

We take the protection of your personal data seriously. This privacy policy explains what data is collected when you visit this website, how it is used, and your rights under the EU General Data Protection Regulation (GDPR / DSGVO).

This website is designed to collect as little personal data as possible. We do not use advertising, marketing trackers, or social media plugins.

This website is hosted on Cloudflare Pages and delivered through the Cloudflare content delivery network (CDN). Cloudflare operates a global network; requests are typically processed by the geographically nearest edge server, which may be located outside the EU. When you visit this site, your browser connects to Cloudflare servers, which may process the following data:

• IP address
• Date and time of the request
• Requested URL and referrer URL
• Browser type and operating system
• Amount of data transferred

This data is processed by Cloudflare to deliver the website, ensure security (e.g. DDoS protection), and for operational purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website delivery).

We have concluded a Data Processing Agreement (Auftragsverarbeitungsvertrag) pursuant to Art. 28 GDPR with Cloudflare, Inc.

Cloudflare, Inc. is a US company. Data transfers to the US are covered by Cloudflare's compliance with the EU-US Data Privacy Framework. In addition, our Data Processing Agreement with Cloudflare incorporates the EU Standard Contractual Clauses (SCC) as supplementary safeguards for transfers to third countries without an adequacy decision. For more information, see the Cloudflare Privacy Policy.

Retention: Retention periods follow Cloudflare's own policy. According to Cloudflare, IP addresses in L7 HTTP/S request logs are typically anonymized or deleted within less than 24 hours; aggregated, non-personal analytics are retained for up to 30 days. We do not operate Logpush ourselves, and we do not store IP addresses or access logs at the application level.

This website uses Google Fonts (Anton, Cormorant, Work Sans), which are self-hosted. The font files are downloaded at build time and served directly from our own infrastructure. No requests are made to Google servers when you visit this site, and no data is transmitted to Google.

This website does not use cookies for tracking, analytics, or advertising purposes. Cloudflare may set the following technically necessary cookies for security purposes:

• __cf_bm — bot management (expires after 30 minutes)
• cf_clearance — security challenge verification (expires after 30 minutes)

Additionally, this website uses your browser's local storage to remember your display preference (dark or bright mode) under the key theme. This data is stored locally on your device, is not transmitted to any server, and contains no personal information.

Both the cookies listed above and the local storage usage are strictly necessary for website functionality and do not require consent under § 25(2) TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, formerly TTDSG) and Art. 5(3) of the ePrivacy Directive.

If you contact us by email, the data you provide (email address, name, message content) will be stored and used solely to process your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We will delete your data once the purpose for processing has been fulfilled, unless we are legally required to retain it.

Our business communications and related data processing (all @burmcorp.com email addresses, storage of attachments and documents, scheduling) are operated through Google Workspace. Google Cloud EMEA Limited and Google LLC process this data as our data processors. We have concluded a Data Processing Agreement with Google pursuant to Art. 28 GDPR (Google Workspace Data Processing Amendment). Data transfers to the US are covered by Google's compliance with the EU-US Data Privacy Framework and by the EU Standard Contractual Clauses (SCC) incorporated into the Data Processing Agreement. For more information, see the Google Privacy Policy.

You can also reach us by telephone. If you call us or leave a message on our voicemail, we process the data you provide (in particular your phone number and the content of any message you leave) in order to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We delete this data once the purpose for processing has been fulfilled, unless we are legally required to retain it.

Our telephone line is provided by fonial GmbH, Kaiser-Wilhelm-Ring 7-9, 50672 Cologne, Germany, as our telecommunications provider. With respect to the connection and telecommunications data processed in this context (e.g. phone numbers as well as the time and duration of a connection), fonial GmbH acts as an independent controller within the meaning of the GDPR and is, in that respect, subject to the secrecy of telecommunications (Fernmeldegeheimnis) and to German telecommunications law (TKG, TDDDG). For details, see the fonial privacy notice for telecommunications services.

If you send us a job application (solicited or unsolicited), we process the data you provide (e.g. name, email address, CV, portfolio, and links to public profiles such as GitHub) for the purpose of evaluating your application. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) in conjunction with §26 BDSG (Bundesdatenschutzgesetz).

The transmission and storage of your application is handled through the email infrastructure described in Section 6 (Google Workspace). The information on data processing and US data transfers given there applies accordingly.

We only review the content you actively share or link to. We do not perform any automated analysis of external profiles (e.g. commit history, activity data).

We store application data for up to six months after the conclusion of the application process, unless you consent to longer storage. The six-month period reflects the time frame for preserving evidence of potential claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG). You may withdraw your application and request deletion of your data at any time by contacting careers@burmcorp.com.

The provision of personal data to us is neither legally nor contractually required. You are not obliged to provide us with personal data. However, if you do not provide us with contact details, we will not be able to respond to your inquiry. For a job application, the information requested as part of the application process is required; without it, we cannot evaluate your application.

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website.

Under the GDPR, you have the following rights:

• Access — the right to request information about the personal data we hold about you (Art. 15 GDPR)
• Rectification — the right to have inaccurate data corrected (Art. 16 GDPR)
• Erasure — the right to have your data deleted (Art. 17 GDPR)
• Restriction — the right to restrict processing of your data (Art. 18 GDPR)
• Data portability — the right to receive your data in a structured, machine-readable format (Art. 20 GDPR)
• Objection — the right to object to data processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent — the right to withdraw any previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR)

To exercise any of these rights, contact us at legal@burmcorp.com.

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our company is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
https://www.datenschutz-berlin.de

We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available at this URL. The date of the last update is noted at the top of this page.