Privacy policy

Last updated: 8 August 2026

1. Controller and data protection officer

Controller

Advanum GmbH
Emmy-Noether-Str. 2
85221 Dachau
Germany

Managing Director: Jan Peter Becker
Email: info@advanum.com

Data protection officer

Jan Peter Becker
Advanum GmbH
Emmy-Noether-Str. 2
85221 Dachau

Email: info@advanum.com

2. Hosting

Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA.

When the website is accessed, technically necessary data are processed, in particular the IP address, the time of access, the content accessed as well as browser, device and protocol data. This is necessary in order to provide the website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR.

Vercel acts as a processor pursuant to Art. 28 GDPR. Where data are processed outside the European Economic Area, the requirements of Art. 44 et seq. GDPR apply. The website is transmitted encrypted via TLS.

3. Cookies and consent

We use cookies and similar technologies. Technically necessary technologies serve in particular to operate the website and to store your privacy settings.

To manage your consent we use Cookiebot from Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. In particular, your consent decision, the time it was given, a consent identifier and technical information about your browser and device are processed.

Necessary access to your device takes place on the basis of § 25 (2) TDDDG. Your consent is documented in particular on the basis of Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR. Usercentrics acts as a processor pursuant to Art. 28 GDPR.

We only use statistics and marketing services with your consent. The legal bases are § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. There you will also find further information on the cookies and services used.

4. Google Analytics and Google Ads

With your consent we use Google Analytics 4 and Google Ads from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how our website is used. In particular, pages visited, interactions, browser and device information, referrer, session duration and approximate location information may be processed. The retention period we have set for user and event data is 14 months.

Google Ads and conversion tracking help us measure the effectiveness of our advertising. This may record whether a particular action takes place on our website after contact with an advertisement, for example the submission of a form.

The Google tag and Google Consent Mode v2 control the Google services in line with your consent decision. The services are only activated after you have given your consent.

The legal bases are § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings.

Google may also process data outside the European Economic Area. The requirements of Art. 44 et seq. GDPR apply to such transfers.

5. Contact and email

If you contact us via the contact form, by email or by telephone, we process the data you provide, in particular your name, company, email address, telephone number, subject and the content of your enquiry.

Processing takes place pursuant to Art. 6 (1) (b) GDPR where it concerns the initiation or performance of a contract. In other cases the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in handling business enquiries.

For sending email and for our mailbox we use Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Enquiries submitted via our forms are passed from our server directly to our mailbox using Microsoft's Graph interface. No separate email dispatch service is involved.

Microsoft processes the data required for email communication as a processor pursuant to Art. 28 GDPR. Microsoft may also process data outside the European Economic Area; the requirements of Art. 44 et seq. GDPR apply to such transfers. Transmission is encrypted via TLS.

Enquiries that do not lead to a business relationship are generally deleted twelve months after the last relevant communication. Statutory retention obligations remain unaffected.

6. Protection against misuse

To protect our forms against automated or excessively frequent requests we use rate limiting.

For this purpose the IP address is processed briefly. Using HMAC-SHA-256 and a server-side secret, it is turned into a pseudonymised identifier truncated to 128 bits. The IP address itself is not stored as the rate-limiting key.

The identifier and the request counter are processed only in the memory of the respective server instance. The secret used is generated randomly when the instance starts and is not stored permanently. No external storage is used for rate limiting.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in protecting the website against misuse and in its secure availability.

7. Job enquiries and applications

Through our website you can enquire about open positions or express interest in working with us. No application documents or files can be uploaded via the website form.

We process the contact and enquiry data you provide, in particular your name, email address, telephone number, professional focus areas and your message. The details are transmitted to the responsible mailbox via the interface described in section 5.

Where the enquiry serves to initiate an employment relationship, the legal basis is § 26 (1) BDSG in conjunction with Art. 6 (1) (b) GDPR. For general job enquiries, Art. 6 (1) (f) GDPR may be the legal basis.

If a concrete application procedure arises from this, we process the application data you subsequently provide for that procedure. If no employment relationship comes about, we generally delete these data six months after the application procedure has been completed, unless longer storage is legally required.

If you separately consent to being included in our talent pool, we may store your application or candidate data for up to twelve months in order to contact you about suitable positions. The legal basis is Art. 6 (1) (a) GDPR. Consent is voluntary and can be withdrawn at any time with effect for the future by email to info@advanum.com.

8. LinkedIn and external links

We maintain a company profile on LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. If you visit our LinkedIn profile, LinkedIn processes data under its own responsibility.

On our website LinkedIn is embedded only as an external link. A connection to LinkedIn is established only when you follow the link. The same applies to other external links.

Our fonts are served locally. No connection to Google Fonts is therefore established when the website loads.

9. Recipients and data transfers

Within our company, only those persons who need personal data for their tasks have access to it. Further recipients may include hosting, email, consent, analytics and IT service providers as well as recipients required by law.

For data transfers outside the European Economic Area we observe Art. 44 et seq. GDPR.

10. Storage period

We store personal data only for as long as it is needed for the respective purpose. After that we delete it, unless statutory retention obligations, legal claims or valid consent require longer storage.

11. Automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

12. Your rights

Subject to the statutory requirements, you have in particular the right to:

• Access (Art. 15 GDPR),
• Rectification (Art. 16 GDPR),
• Erasure (Art. 17 GDPR),
• Restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR) and
• Objection (Art. 21 GDPR).

You can withdraw consent at any time with effect for the future.

Right to object pursuant to Art. 21 GDPR

If we process your data on the basis of Art. 6 (1) (e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving reasons.

To exercise your rights, please contact info@advanum.com.

You may also lodge a complaint with a data protection supervisory authority. The authority generally responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach

13. Updates

We adapt this privacy policy when our website, the services we use or the legal requirements change.