Privacy policy
1. Controller
The controller responsible for data processing on this website is: CRM Concept GmbH Blasewitzer Str. 41 01307 Dresden Germany Email: corin.goetzke@crm-concept.de Represented by: Corin Linus Goetzke
2. Server log files
When you visit this website, the server automatically stores information transmitted by your browser: - IP address (truncated/anonymised) - date and time of the request - requested page - HTTP status code - user agent (browser, operating system) - referrer URL This data is processed to deliver the website and to identify technical issues. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in error-free presentation). Retention: 30 days, then automatic deletion.
3. Cookies, local storage and reach measurement
This website does not set any cookies and does not use local storage. We do not use tracking, advertising pixels, or cross-site profiles. Reach measurement: For pure reach measurement (which pages are viewed, where visitors come from, how long they stay), we use Vercel Web Analytics. Vercel Web Analytics does not set cookies, does not build a profile of you, and does not identify you. Only aggregated data is collected. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a functioning website). Language preference: Your language preference is encoded directly in the URL (`/de/…` or `/en/…`). On the first visit to a URL without a language prefix, we read your Accept-Language header once and redirect you to the matching language version. Nothing is stored on your device.
4. Contact
When you submit the contact form on this website, your inputs (name, company, email, message) are relayed through our transactional email provider Mailgun (Sinch Email Inc., 768 Spear Street, San Francisco, CA 94105, USA, EU region: api.eu.mailgun.net) to info@crm-concept.de. Mailgun acts as a data processor; a data processing agreement under Art. 28 GDPR is in place. We do not store form submissions in a separate database; the content reaches us as an email in our inbox. If you contact us by email (corin.goetzke@crm-concept.de or info@crm-concept.de), phone (Sales: +49 177 322 8452, Tech: +49 176 229 13675) or WhatsApp, your data will be processed to handle your inquiry and any follow-up questions. Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures) or lit. f (legitimate interest in communicating with prospects). Retention: until the inquiry is resolved, then in line with statutory retention requirements (up to 10 years). Consequences of not providing the data: Providing your contact details is voluntary. Without them, we can neither process your request nor respond to you.
5. Job applications
If you apply for an open position or send a speculative application, we process the data you submit (cover letter, CV, references, contact details) solely to handle your application. Legal basis: Art. 6 (1) lit. b GDPR and § 26 BDSG (initiation of an employment relationship). Retention: If your application is unsuccessful, your application documents will be deleted no later than six months after the conclusion of the process. Longer retention only occurs if legally required (e.g. retention obligations relating to the German Equal Treatment Act, AGG) or with your explicit consent, e.g. to add you to a candidate pool for future openings. Recipients: Your application is reviewed exclusively by the people involved in the selection process within CRM Concept GmbH. No transfer to third parties takes place.
6. Hosting
This website is served via Vercel Inc. (San Francisco, California, USA). Vercel's edge network renders the site from a German data centre (Frankfurt am Main region), so the connection to your browser runs via servers located in Germany. Because Vercel Inc. is a US-incorporated company, access from the USA during support or maintenance cannot be entirely ruled out. Vercel is certified under the EU-US Data Privacy Framework; we rely on the Adequacy Decision of the EU Commission of 10 July 2023 for any such transfers. A data processing agreement under Art. 28 GDPR is in place with Vercel.
7. Scheduling via Zeeg (once active)
For appointment booking we use Zeeg. Provider: Zeeg GmbH, Friedrichstr. 155, 10117 Berlin, Germany (Amtsgericht Berlin-Charlottenburg, HRB 253807). Zeeg is a German provider operating its infrastructure inside the EU; no transfer to third countries takes place under normal operation. When you book an appointment, Zeeg processes the data you enter (name, email, optionally phone number, requested slot) on our behalf to handle your booking. Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures). A data processing agreement under Art. 28 GDPR is in place with Zeeg. Zeeg is not yet embedded. Once the function goes live, we will update this privacy policy with concrete processing details if needed.
8. WhatsApp
If you contact us via the linked WhatsApp buttons, WhatsApp opens (provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). On your end, WhatsApp's terms apply. On our end, we process messages received via WhatsApp to handle your inquiry. Legal basis: Art. 6 (1) lit. b/f GDPR.
9. No other third parties
This website uses: - no Google Analytics, no Plausible, no Hotjar or comparable analytics services that identify you - no advertising pixels (Meta, LinkedIn, Google Ads, etc.) - no social-media plugins that send data to external servers - no embedded YouTube/Vimeo videos - no third-party fonts (all fonts are self-hosted) This means: apart from the hosting mentioned above, Vercel Web Analytics (anonymous, aggregated, cookie-free) and, if applicable, Zeeg/WhatsApp (see above), no data is transferred to third parties.
10. Your rights
Under GDPR you have the following rights: - access to your stored data (Art. 15) - rectification of inaccurate data (Art. 16) - erasure (Art. 17) - restriction of processing (Art. 18) - data portability (Art. 20) - objection to processing (Art. 21) - withdrawal of consent (Art. 7) To exercise these rights, contact us informally at corin.goetzke@crm-concept.de.
11. Right to lodge a complaint
You have the right to lodge a complaint with the data protection supervisory authority responsible for us: The Saxon Data Protection and Transparency Commissioner (Die Sächsische Datenschutz- und Transparenzbeauftragte) Maternistraße 17 01067 Dresden (Postal address: Postfach 11 01 32, 01330 Dresden) Email: saechsdsb@slt.sachsen.de Phone: +49 351 85 47 11 00 Web: https://www.datenschutz.sachsen.de
12. Data protection officer
We have not appointed a data protection officer. The statutory thresholds under Art. 37 GDPR and § 38 BDSG (typically at least 20 employees regularly engaged in automated processing of personal data) currently do not apply to us. For data protection inquiries or to exercise your rights, please contact the management directly at corin.goetzke@crm-concept.de.
13. No automated decision-making
We do not use any automated decision-making, including profiling, within the meaning of Art. 22 GDPR. No automated assessment of you or any decision based on such an assessment takes place.
14. Data security
All transmission between your browser and our website is TLS-encrypted (HTTPS). We use technical and organisational measures to protect your data against manipulation, loss, and unauthorised access.
15. Validity and changes
As of: 16 May 2026 (Vercel Web Analytics added) Due to changes in our website or in legal requirements, it may be necessary to update this policy. The current version can always be found on this page.