Privacy policy
Controller: Corevatis UG (haftungsbeschränkt), Albert-Einstein-Straße 57, 41751 Viersen, Germany, represented by managing director Mike Berndt. Contact: [email protected], phone +49 2162 9193040.
Hosting: Cloudflare Pages. Without your consent this website sets no analytics cookies and loads no services that require consent. The only service we ask your consent for is Google Analytics (see below).
Server logs and delivery: When you access the website, Cloudflare processes technically necessary connection data (IP address, time, page requested, user agent) to deliver the site and to fend off attacks. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Fonts, scripts and images are served from our own domain. Your browser loads third-party scripts in two cases only: for the spam protection on the contact page and — solely after your consent — for Google Analytics. Both are described below.
Cookies and consent: On your first visit we ask whether you agree to audience measurement with Google Analytics. “Decline” and “Accept” are offered on equal terms; without your consent the service stays switched off. We store your decision in your browser’s local storage (entry “cv-consent” with your choice and a timestamp) so that we do not ask again on every page; after twelve months we ask anew. This entry is technically necessary (Section 25(2) no. 2 of the German TDDDG), contains no identifier and is not transmitted to us or to third parties. You can change or withdraw your choice at any time via “Cookie settings” in the footer of every page; on withdrawal we stop the measurement and delete the Analytics cookies in your browser. We set no cookies for advertising purposes.
Audience measurement with Google Analytics: With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to understand which pages are viewed and how visitors find us, in order to improve the website. Your browser loads a script from www.googletagmanager.com only after you have agreed; before that there is no connection to Google. Google Analytics sets the cookies “_ga” and “_ga_2CKFV6Q9ZZ” (lifetime up to 13 months), which recognise your browser by a randomly generated identifier. Data processed includes in particular pages viewed, time and duration of the visit, the previously visited page (referrer), approximate location (derived from the IP address), device, browser and language details, and interactions such as clicks and scrolling. Google Analytics 4 neither logs nor stores IP addresses. We have disabled Google Signals and features for personalised advertising. Legal basis is your consent under Section 25(1) TDDDG (storing and reading the cookies) and Art. 6(1)(a) GDPR (subsequent processing). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer. Google Analytics automatically deletes user- and event-level data after two months. Google processes the data on our behalf under a data processing agreement (Art. 28 GDPR). More information: https://policies.google.com/privacy and https://business.safety.google/privacy/
Audience measurement with Cloudflare Web Analytics: If we enable this service, we use Cloudflare Web Analytics provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The service is cookieless and does not use fingerprinting. Only aggregated reach data is collected (page visited, referrer, country, anonymised usage metrics such as Web Vitals). No device- or user-level profile is created. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in needs-based design and statistical evaluation of this website).
Data transfer to the USA: Cloudflare is based in the USA, and Google Ireland may pass data on to Google LLC in the USA; a transfer to the USA therefore cannot be excluded. Cloudflare, Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); additionally Standard Contractual Clauses are in place (Art. 46(2)(c) GDPR). More information: https://www.cloudflare.com/privacypolicy/ and https://business.safety.google/privacy/
Contact by email or form: If you contact us by email or via the contact form, we process your details (name, company, email address, content of the inquiry) to handle the inquiry and any follow-up questions. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding). Data is deleted once it is no longer required for this purpose and no statutory retention obligations apply.
Contact via WhatsApp: We offer WhatsApp as an additional contact channel on the same phone number (WhatsApp Business; provider for users in the EEA: WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland — a Meta company). Using it is voluntary; phone, email and the contact form reach us just as well. If you message us on WhatsApp, we process your phone number, your profile name and the content of your message in order to answer the inquiry. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). Message content is end-to-end encrypted; WhatsApp does, however, process metadata (including phone numbers, timestamps, device and connection data) as its own controller and may transfer it to group companies in third countries. We have no influence over this. Please do not send us credentials, confidential documents or special categories of data (Art. 9 GDPR) via WhatsApp — use email or the phone for those. We retain WhatsApp messages only for as long as handling the inquiry requires. WhatsApp privacy information: https://www.whatsapp.com/legal/privacy-policy-eea
Contact form and spam protection: The contact form is protected by Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open the contact page, your browser loads a script from challenges.cloudflare.com; Cloudflare processes technical data such as IP address and browser characteristics to detect automated requests. Turnstile sets no tracking cookies and builds no user profile. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse); for transfers to the USA see above. The form data itself is transmitted to and stored on a system we operate ourselves on our own infrastructure in Germany; it is not passed on to third parties.
Your rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out until then. You may also lodge a complaint with a data protection supervisory authority; for NRW: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
Objection and privacy questions: please write to [email protected].
Last updated: October 2026.