Privacy policy
This is a translation. The German version is legally binding.
1. Controller
Cubio GmbH, Solmsstraße 58, 60486 Frankfurt am Main, Germany, email services@cubio-consulting.com.
2. Principles
We only process personal data as far as this is necessary to run this website, answer your enquiries or carry out an application process. This website sets no cookies, collects statistics only with your consent (section 4) and loads no third-party content without consent. The website uses your device’s font and loads no fonts from third parties.
3. Hosting and server log files
The website is delivered via our hosting provider Netlify. Technically necessary data is processed in the process: IP address, time, page requested and browser.
- The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure operation).
- A data processing agreement is in place with Netlify. Where data reaches the USA, this is based on the EU-US Data Privacy Framework.
- The data is deleted as soon as it is no longer needed for secure operation.
4. Statistics and consent
This website sets no cookies. For statistics and market analysis we ask for your consent on your first visit. You can accept, reject or choose individually; your settings are always available via “Privacy settings” in the footer.
- Strictly necessary: We store your choice in your browser’s local storage so that we don’t ask again on every visit. The legal basis is § 25 (2) no. 2 TDDDG and Art. 6 (1) (f) GDPR. Your choice is valid for twelve months.
- Statistics and market analysis: With your consent we analyse anonymously which content is read and how visitors find the website, without cookies and without storing anything on your device. The legal basis is Art. 6 (1) (a) GDPR. We use Umami Cloud by Umami Software, Inc., San Francisco, USA.
- We record pages viewed, referring page, browser, operating system, device type, country and the event “enquiry sent” for the contact form. IP addresses are not stored in the statistics data; we cannot identify individual persons.
- Umami processes the data on our behalf (data processing agreement). The data may be processed on servers in the EU and the USA; transfers to the USA are based on the European Commission’s standard contractual clauses.
- The statistics data is deleted automatically after the retention period of our plan.
- Withdrawal: You can withdraw your consent at any time with effect for the future via “Privacy settings” in the footer.
5. Contact form and email
When you write to us via the form or by email, we process your details (name, email, company, message) to answer your enquiry.
- The legal basis is Art. 6 (1) (b) GDPR where a contract or its preparation is concerned, otherwise (f).
- We delete the data once the enquiry has been dealt with and no statutory retention obligations apply.
- The form is received by the form feature of our hosting provider Netlify, stored there and forwarded to us by email. Netlify processes the data on our behalf (data processing agreement); where data reaches the USA, this is based on the EU-US Data Privacy Framework.
- We delete the enquiries stored at Netlify once they have been dealt with.
- Spam protection: an invisible field and Netlify’s spam filter, without cookies.
6. Applications
We process application data to carry out the application process (Art. 6 (1) (b) GDPR). If no position is filled, we delete the data no later than six months after the end of the process, unless you consent to longer storage.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6 (1) (f) GDPR. Please contact the address above.
8. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden.
9. Last updated
October 2026