Privacy Policy

1. Data Protection at a Glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our full privacy policy below.

Who collects your data?

Data processing on this website is carried out by the website operator, change2target group GmbH. You can find full contact details in the "Responsible Party" section below.

How do we collect your data?

Data is collected in two ways: (1) data you actively provide — such as details submitted via our contact form — and (2) data collected automatically when you visit our site, such as technical information about your browser and device. We use Plausible Analytics, a privacy-first analytics tool that does not use cookies and does not collect personally identifiable information. No consent is required for this analytics tool.

What do we use your data for?

Contact form submissions are used solely to respond to your enquiry. Website analytics data (collected via Plausible Analytics) is used in aggregate to understand usage patterns and improve the website. We do not build personal profiles or run targeted advertising.

What rights do you have?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request correction, restriction, or deletion of your data, and to lodge a complaint with the competent supervisory authority.

10. Hosting

This website is hosted on Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. Vercel is our technical infrastructure provider. When you visit our website, Vercel automatically records server log data (including IP address, browser type, pages accessed, and time of access) as part of its standard operation. This is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in technically stable website delivery). Vercel processes data in accordance with its Data Processing Agreement and offers standard contractual clauses for EU data transfers. For details, see: https://vercel.com/legal/privacy-policy

2. Responsible Party (Controller)

The responsible party for data processing on this website within the meaning of the GDPR is:

Storage duration

Unless a specific storage period is stated elsewhere in this policy, your personal data will be stored until the purpose for processing no longer applies. If you request deletion or withdraw consent, your data will be deleted unless retention is required by law (e.g. tax or commercial retention obligations). In such cases, data will be deleted once the legal obligation expires.

Revoking consent

Where data processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal is not affected.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for Bavaria (where change2target is headquartered) is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany.

11. Analytics — Plausible Analytics

We use Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia) to understand how visitors use our website. Plausible Analytics does not use cookies, does not collect personally identifiable information, and does not track visitors across websites or devices. All data is aggregated and anonymised. The collected metrics include pages visited, referrer sources, browser type, country, and device type — none of which can be used to identify you individually.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in understanding aggregate website usage to improve the service). Because no personal data is processed by Plausible Analytics, no cookie consent is required for this tool.

For more information, see: https://plausible.io/privacy-friendly-web-analytics

12. Contact Form

We offer you the opportunity to contact us by e-mail and / or via a contact form. The data categories specified in the contact form (name, address, e-mail, telephone) are processed. At the time of sending the message, the user's IP address, date and time are also processed. For processing of data in the context of the sending process your consent is obtained and referred to this privacy statement. Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual measures) or, where applicable, Art. 6 para. 1 lit. f GDPR (legitimate interest in efficiently handling enquiries directed to us). If you provided explicit consent when submitting the form, the basis is Art. 6 para. 1 lit. a GDPR. If the e-mail contact aims to conclude a contract, the legal basis results from Art. 6 (1) (b) GDPR. In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

Contact form submissions are transmitted via Resend (Resend Inc., 2261 Market Street #5275, San Francisco, CA 94114, USA), our transactional email provider. Data is transmitted securely and processed in accordance with Resend's Data Processing Agreement. See: https://resend.com/legal/privacy-policy

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective communication with the user has ended. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

13. Job Applications

If you apply for a position via our application form, the personal data you provide — including your name, email address, CV, and any additional documents — will be processed exclusively for the purpose of evaluating your application.

Processing is carried out on the basis of § 26 BDSG (data processing for employment purposes) and Art. 6 para. 1 lit. b GDPR.

If your application is unsuccessful, your data will be deleted within six months of the conclusion of the application process, unless you have consented to being considered for future roles (in which case retention may extend to twelve months). You may withdraw this consent at any time by contacting info@change2target.com.

Application data is transmitted via Resend. CV and document attachments are transmitted securely and not stored by our email service provider beyond delivery.

14. LinkedIn

Our website contains a link to our LinkedIn company page. When you follow this link, LinkedIn may collect data about your visit in accordance with its own privacy policy. We have no control over, and are not responsible for, data processing by LinkedIn. For details, see the LinkedIn Privacy Policy at: https://www.linkedin.com/legal/privacy-policy

7. Your Rights

As a data subject, you have the right to request information or correction of the stored personal data at any time or to revoke your consent. In addition, you have the right to delete or restrict the processing or an objection to the processing. It is also referred to the right of data portability and the possibility of complaining to a supervisory authority. Corresponding requests by e-mail to us or our data protection officer under the aforementioned contact details.

• Right of access (Art. 15 GDPR): You may request information about the personal data we hold about you.

• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate personal data.

• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, subject to legal retention obligations.

• Right to restriction of processing (Art. 18 GDPR): You may request that we restrict the processing of your personal data in certain circumstances.

• Right to data portability (Art. 20 GDPR): You may request that we provide your personal data in a structured, machine-readable format.

• Right to object (Art. 21 GDPR): You may object to the processing of your personal data where processing is based on legitimate interests.

• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at: info@change2target.com