Privacy Notice

1. Overview

This privacy notice explains what personal data we collect when you visit this website, how we use it, and what rights you have. Personal data is any information that can be used to identify you directly or indirectly.

2. Data Controller

repath GmbH
Hohe Bleichen 22
20354 Hamburg, Germany
Email: [email protected]
Phone: +49 176 56 77 1318

Data Protection Officer

Mr Remke
repath GmbH
Hohe Bleichen 22
20354 Hamburg, Germany
Email: [email protected]

3. Data Collection on This Website

Server Log Files

Our hosting provider automatically collects and stores information in server log files that your browser transmits. This includes: browser type and version, operating system, referring URL, hostname, time of request, and IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Contact Forms

When you submit a contact form, the information you provide (including your contact details) is stored for the purpose of processing your enquiry and for follow-up questions. Data is submitted to HubSpot via the HubSpot Forms API. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Data is deleted once the enquiry is fully resolved.

Language Preference

When you switch the preferred language, we store this preference in a first-party cookie called lang_pref. The purpose is to display the website in your preferred language on subsequent visits. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly website). This is a technically necessary cookie and does not require consent.

Analytics

This website uses Google Analytics (GA4), a web analytics service provided by Google Ireland Limited. Google Analytics only runs after you have given consent via our cookie banner; if you decline, no analytics cookies are set and no data is sent to Google. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by clearing your browser's local storage for this site. More information: Google's privacy policy.

4. Data Sharing

We do not transfer your personal data to third parties except as described below. Service providers process data under data processing agreements pursuant to Art. 28 GDPR:

  • HubSpot (HubSpot Inc. / HubSpot Ireland Limited): Processing of form submissions (contact form / asset forms) for enquiry handling via the HubSpot Forms API.
  • Google Ireland Limited (Google Analytics): Provision of web analytics and processing of usage data for statistical purposes, only where consent has been given. Where data is transferred to Google servers outside the EEA, this is covered by Google's Standard Contractual Clauses.
  • Vercel Inc.: Website hosting and content delivery.

Where data is transferred to countries outside the EEA, we ensure appropriate safeguards under Art. 46 GDPR where applicable.

5. Your Rights

You have the right at any time to:

  • Request access to your stored personal data (Art. 15 GDPR)
  • Request rectification of inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Contact: [email protected]

6. Data Security

We employ appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.

7. Cookies

This website sets one first-party cookie (lang_pref) for language preference. This is technically necessary and does not require consent. We also store your cookie-consent choice in your browser's local storage under the key cookie_consent. Google Analytics cookies are only set if you accept via our cookie banner; you can reject or withdraw consent at any time, and no tracking cookies are set until you do accept.