This English version is a convenience translation. In case of discrepancies, the German version (Datenschutzerklärung) prevails.
This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data when you visit this website. Personal data is any data by which you can be personally identified.
Catego Technologies UG (haftungsbeschränkt)
Hafenweg 16
48155 Münster
Germany
Email: info@catego.org
Represented by the Managing Directors: Maximilian Matlik and Jens Martin Hungerberg.
We are not legally required to appoint a data protection officer and have therefore not designated one. If you have any questions about data protection, you can reach us at info@catego.org.
Unless a more specific storage period is stated below, we process personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods.
In particular, we process the following data: contact data (e.g. name, email address), content data (e.g. text entered in forms), access data and metadata (e.g. IP address, browser type, operating system, time of access) and newsletter data (email address and proof of registration/confirmation) if you subscribe to the newsletter.
The data is processed in order to provide the website securely and free of technical errors, to communicate with visitors, to handle enquiries submitted via the contact form and – if you have subscribed to it – to send our newsletter.
Depending on the processing operation, we process your personal data on the basis of consent (Art. 6 (1) (a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), or on the basis of our legitimate interests (Art. 6 (1) (f) GDPR). The applicable legal basis is specified in each of the individual sections.
Personal data is disclosed to processors to the extent necessary for operating the website – in particular to our hosting provider Webflow (Webflow, Inc., USA) and to CleverReach (CleverReach GmbH & Co. KG, Germany) for sending the newsletter. Data processing agreements are in place with these providers. Data is transferred to the USA on the basis of appropriate safeguards (e.g. the EU-US Data Privacy Framework or standard contractual clauses).
This website is hosted by Webflow, Inc. (398 11th Street, Floor 2, San Francisco, CA 94103, USA). When you visit the website, Webflow, acting as a processor, processes technically necessary data (see Server log files). The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Webflow. Data is transferred to the USA; Webflow is certified under the EU-US Data Privacy Framework, and the EU standard contractual clauses apply in addition (Art. 46 GDPR).
When you access the website, information transmitted by your browser is automatically recorded in so-called server log files: browser type and version, operating system used, referrer URL, host name of the accessing device, time of the server request and IP address. This data serves to display the website free of technical errors and to keep it secure. The legal basis is Art. 6 (1) (f) GDPR. For security reasons, the log files are stored only for a limited period (usually a few days) and then deleted.
Cookies are small text files that are stored on your device and do not cause any harm. At present, this website uses only technically necessary cookies, which are required to operate the website and may be stored without consent (Section 25 (2) TDDDG, Art. 6 (1) (f) GDPR).
You can adjust whether cookies are accepted in your browser settings at any time. Please note, however, that certain features of our website may not work properly if you disable cookies.
We use cookies for the following purposes:
Specifically, only the cookie "_cfuvid" is currently set. It comes from the content delivery network of our hosting provider (Cloudflare), serves security and abuse prevention purposes (distinguishing individual users behind a shared IP address) and is deleted at the end of the browser session.
We use non-essential cookies and comparable technologies only if you have given your express consent beforehand (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future. Technically necessary cookies that are required to operate the website may be set without consent (Section 25 (2) TDDDG).
To display fonts consistently, this website uses locally hosted fonts ("web fonts"), which are loaded from our server or that of our hosting provider when you access the website. No connection to third-party servers – in particular to Google Fonts – is established in the process; your IP address is not transmitted to third parties for this purpose.
If you subscribe to our newsletter, we need your email address. Registration uses the double opt-in procedure: after registering, you receive an email asking you to confirm; you are added to the mailing list only after confirming. As proof, we log the time of registration and confirmation as well as the IP address. The newsletter is sent via CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, with which a data processing agreement (Art. 28 GDPR) is in place. Processing takes place exclusively on CleverReach servers in Germany or the EU; no data is transferred to a third country (e.g. the USA). The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email and withdraw your consent; your data will then be deleted from the mailing list.
If you contact us via the contact form or by email, we process the information you provide (e.g. name, email address, content of the message) in order to handle your enquiry and in case of follow-up questions. Entries in the contact form are processed and stored by our hosting provider Webflow, acting as a processor; this involves the transfer to the USA described in the section "Hosting (Webflow)". Providing the data is voluntary; however, without the information required for handling it, we cannot answer your enquiry, or can do so only to a limited extent. The legal basis is Art. 6 (1) (b) GDPR if your enquiry serves the performance of a contract or pre-contractual measures, and otherwise our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR). The data is deleted as soon as it is no longer required; mandatory statutory retention periods remain unaffected.
If you apply for a job with us (e.g. by email), we process the data you send us (e.g. contact details, cover letter, CV, certificates) solely for the purpose of carrying out the application process. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Section 26 (1) BDSG (German Federal Data Protection Act) (steps prior to entering into an employment relationship). Your data is made accessible only to the persons internally involved in the application process. If no employment relationship is established, we delete your application documents no later than six months after the process has ended, unless you have consented to longer storage (Art. 6 (1) (a) GDPR) or statutory retention obligations prevent deletion. Please note that unencrypted emails are not transmitted in a manner protected against access.
No analytics, tracking or marketing tools are used on this website.
On our website, we link to our LinkedIn profile and to an external appointment booking service (Calendly). These are simple hyperlinks; data is transferred to the respective providers only when you actively click the link and open the external page. Processing on the linked pages is subject to the privacy policies of the respective provider.
Within the framework of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients and the purpose of the processing (Art. 15 GDPR), as well as a right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). You can contact us at any time regarding this and any further questions.
If data is processed on the basis of Art. 6 (1) (f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
No decision based solely on automated processing, including profiling (Art. 22 GDPR), takes place.
If processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (www.ldi.nrw.de). You may also contact any other supervisory authority.
The security of your data is important to us. We take technical and organisational measures to protect your personal data. For security reasons, this website uses SSL/TLS encryption, recognisable by "https://" and the lock symbol in the browser's address bar.
This Privacy Policy is currently valid and was last updated in September 2026. We reserve the right to amend this Privacy Policy in order to comply with current legal requirements.
If you have any questions about data protection, please contact us at:
Catego Technologies UG (haftungsbeschränkt)
Hafenweg 16
48155 Münster
Germany
Email: info@catego.org
