Clusterward

Privacy policy

This privacy policy informs you how and for what purpose personal data is processed when you use our website.

1. Controller and data protection contact

The controller within the meaning of Art. 4 para. 7 GDPR is:

BitKollegen GmbH
Drostestraße 16
30161 Hannover
Registered office: Hannover

Phone: +49 511 51 53 20 63
Email: [email protected]

We have not appointed a data protection officer, as there is no legal obligation to do so. The contact for all data protection questions is our managing director, Florian Apel. You can reach him at [email protected] or at the postal address given above.

2. Hosting and delivery of the website

When you visit our website, we process personal data to ensure that the website operates properly and securely. The following data may be processed:

  • IP address of the device you use to visit our website
  • operating system and browser (type, version and language setting)
  • date and time of access and the amount of data transferred
  • the URL of the previously visited website (referrer) and the (sub)page accessed
  • approximate location (country), derived from the IP address

Collecting this data and storing it in server log files is technically necessary to display the website to you and to ensure its stability and security. This also constitutes our legitimate interest in the processing. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The log files are deleted after 14 days at the latest, unless statutory retention periods require otherwise.

Hosting at Scaleway. This website and its content management system are operated by Scaleway SAS, 8 rue de la Ville l'Évêque, 75008 Paris, France. The servers, the database and the storage for images and files are located in Scaleway data centers in Amsterdam (Netherlands), i.e. within the European Union. We have concluded a data processing agreement with Scaleway in accordance with Art. 28 GDPR. Further information: Scaleway privacy policy.

Delivery via Cloudflare. To protect against attacks and to ensure fast delivery, traffic to our website is routed through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. In doing so, Cloudflare processes the connection data listed above, in particular your IP address, and may set technically necessary security cookies (e.g. “__cf_bm” to detect automated access, stored for 30 minutes). The legal basis is our legitimate interest in a secure and high-performing website under Art. 6 para. 1 sentence 1 lit. f GDPR, and for the security cookies in conjunction with § 25 para. 2 no. 2 TDDDG. A data processing agreement is in place with Cloudflare. A transfer to the USA is possible. It takes place on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision on the EU-US Data Privacy Framework, under which Cloudflare is certified. Further information: Cloudflare privacy policy.

3. Contact

When you contact us, we process your personal data. Depending on the type of contact, we process your name, email address, phone number, and the date and time of the appointment and the meeting participants. The data strictly required for contacting us is marked in our contact form. The data is processed either on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR in the context of initiating or carrying out pre-contractual measures, or on the basis of our legitimate interest in handling and responding to your other inquiries in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Any further information is not strictly required for contacting us and is therefore provided voluntarily on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Your personal data is deleted – subject to statutory retention periods – as soon as the purpose of storage no longer applies. This is the case when your inquiry has been fully handled and no further communication with you is required or requested by you.

Contact form. We store the information from our contact form (name, email address, topic, message and, optionally, your company) in the database of our content management system at Scaleway in Amsterdam (see section 2). There, it is accessible only to the people who handle your inquiry. The legal basis and deletion are governed by the preceding paragraph.

For contact with you, online video conferences and appointment bookings, we work with Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft.

Appointment booking with Microsoft Bookings. The Microsoft Bookings booking calendar is embedded on our “Book a demo” page. It is only loaded once you activate it with a click or have consented to the “External media” category in the cookie banner. Only then does your browser establish a connection to Microsoft; Microsoft receives your IP address and browser data and may use cookies or similar technologies required for the booking. The legal basis for loading the calendar is your consent under § 25 para. 1 TDDDG and Art. 6 para. 1 sentence 1 lit. a GDPR, which you can withdraw at any time via “Cookie settings”. We process the data you enter when booking (e.g. name, email address, appointment and comments) to carry out the appointment in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. A transfer to the USA is possible; it takes place on the basis of Art. 45 GDPR in conjunction with the adequacy decision on the EU-US Data Privacy Framework, under which Microsoft is certified. Further information: Microsoft privacy policy.

4. Job applications

If you apply to us – for an advertised position or speculatively, for example by email to [email protected] – we process the data from your application. This usually includes your name, contact details, CV and references, as well as any other information you voluntarily provide to us. We use this data exclusively for the application process. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (initiation of an employment relationship). Insofar as you provide us with special categories of personal data, such as health information, we process them only within the scope of Art. 9 para. 2 lit. b GDPR.

Only the people involved in the selection process have access to your documents. We process emails using the Microsoft services named in section 3, with whom we have concluded a data processing agreement.

Retention period. If you are not hired, we delete your application documents no later than six months after the process has been completed. Until then, we retain them so that we can defend ourselves against possible claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz); the legal basis is our legitimate interest under Art. 6 para. 1 sentence 1 lit. f GDPR. If we would like to keep your documents for future positions, we will ask for your consent beforehand (Art. 6 para. 1 sentence 1 lit. a GDPR), which you can withdraw at any time. If you are hired, we transfer the necessary data to your personnel file.

5. Cookies and consent

Cookies are small text files that your browser stores on your device. We use technically necessary cookies without which the website does not work, e.g. the “cc_cookie” cookie, in which we store your choice in the cookie banner for up to six months. The legal basis is § 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR.

We use all other cookies and similar technologies only with your consent under § 25 para. 1 TDDDG and Art. 6 para. 1 sentence 1 lit. a GDPR. We ask for consent via our cookie banner, broken down by category. As long as you have not consented, no corresponding scripts are loaded and no cookies are set. “Reject all” is just as easy as “Accept all”.

You can withdraw or change your consent at any time, without giving reasons, with effect for the future. To do so, click “Cookie settings” in the footer of any page. Details on the services used can also be found there and in the following sections.

6. Google Analytics

With your consent in the “Statistics” category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use it to understand which content on our website is read and how visitors find it, and to improve the website on that basis. We do not use Google Analytics for advertising.

During your visit, the following data in particular is transmitted to Google:

  • pages viewed, time spent on the page and scroll depth
  • clicks on links to other websites and file downloads
  • source of your visit (e.g. search engine or referring website)
  • approximate location at country level
  • technical information such as device type, operating system, browser and screen resolution
  • a randomly generated identifier (client ID) that allows your browser to be recognized on later visits

Your IP address is technically required for the transmission but is not stored by Google Analytics 4. We do not transmit names, email addresses or other contact details to Google.

We have configured Google Analytics to minimize data collection: Google Signals, linking with Google advertising products, ad personalization, granular location and device data collection, and sharing data with Google for its own purposes are disabled.

Google Analytics sets the cookies “_ga” and “_ga_5X0D2M2KWN” with a storage period of up to two years. Data associated with the client ID is automatically deleted after 14 months. Aggregated statistics without personal reference may be retained for longer.

The legal basis is your consent under Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TDDDG. Google processes the data on our behalf. We have concluded a data processing agreement with Google. In this context, data may be transferred to Google LLC in the USA. The transfer takes place on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision on the EU-US Data Privacy Framework, under which Google LLC is certified.

You can withdraw your consent at any time via “Cookie settings” in the footer. Further information: Google privacy policy.

7. LinkedIn

We maintain the following publicly accessible company profiles on social networks:

https://www.linkedin.com/company/bitkollegen

Data processing
The operators of social media networks allow us to view your public profile data, such as profile picture, name, occupation, date of birth, place of residence, age and gender. If you become active through our LinkedIn presence in the form of messages, comments, mentions or “Like” reactions that contain personal data (e.g. your name, your date of birth or your address), we can view this data.

You can decide for yourself which of your profile data is publicly accessible in the settings of your social media account.

On our LinkedIn page, we use the “Analytics” feature to retrieve and analyze a summary of data in the form of statistics, such as page views, likes and post reach. The analytics data does not allow any conclusions to be drawn about individual users.

Purpose of data processing and legal basis
Data processing in connection with our social media presences is carried out for the purposes of our public relations and communication. The legal basis for the use of our social media links is Art. 6 para. 1 lit. f GDPR. The data you enter on our social media pages, such as comments, likes, etc., is published by the social media platforms and used by us only for the purposes stated above. Further information on the purpose and scope of data collection and processing by the operators of the networks mentioned can be found in their privacy policies at

LinkedIn, https://www.linkedin.com/legal/privacy-policy

Duration of data storage
Your data collected by us via our social media presence is deleted from our systems as soon as the purpose of storage no longer applies, you ask us to delete it, you withdraw your consent to storage, or the purpose of data storage lapses. Otherwise, we delete this data from our systems after 2 years, unless mandatory statutory provisions prevent this. We have no influence on the storage period of your data that is stored by the operators of the social networks for their own purposes. Information on this can be found in the providers’ privacy policies mentioned above.

Lead generation tools
We use lead generation tools to acquire new customers. A lead is a prospect who submits their contact details to a company whose services or products they are interested in, for the purpose of being contacted. For this, we use the LinkedIn Lead Gen Forms service.

Data processing

We use forms for lead generation. If you contact us via LinkedIn Lead Gen Forms, personal data (e.g. name, email address or your phone number) is stored by LinkedIn and transmitted to us. We use this data to get in touch with you and to send you targeted information about our services and products.

Purpose and legal basis

The use of the lead generation tools serves our public relations and communication with prospects. The legal basis for evaluating the LinkedIn lead forms is the consent you give by submitting the forms (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future using the contact details provided on our website.

Duration of data storage

We store the data you submit to us via Lead Gen Forms for a period of 2 years from our receipt of the completed form. After that, the personal data is deleted, unless statutory retention periods prevent this.

At LinkedIn, lead data is automatically deleted after 90 days. Further information on how LinkedIn handles your data can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/help/linkedin/answer/87150/linkedin-marketing-solutions-und-die-datenschutz-grundverordnung-dsgvo-?lang=de

8. Your rights

You have the right to request confirmation as to whether personal data concerning you is being processed by us. If this is the case, we will gladly provide you with information about this personal data and the information listed in Art. 15 GDPR. In addition, subject to the respective statutory requirements, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR), the right to data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR). If the processing is based on your consent, you have the right to withdraw this consent at any time (Art. 7 para. 3 GDPR); this does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

To exercise your rights as a data subject, please use the contact options listed in section 1.

You also have the right at any time to lodge a complaint with a competent supervisory authority if you believe that the processing of personal data concerning you violates data protection regulations (Art. 77 GDPR).

9. Changes to this privacy policy

We update this privacy policy when our website or the legal requirements change. The version published here at any given time applies. Last updated: September 2026.