The German version of this page is legally binding and prevails in the event of discrepancies.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) for the
operation of this website is
Clarius.Legal Rechtsanwaltsaktiengesellschaft
Rolandsbrücke 4
20095 Hamburg
Telephone: +49 40 257 660 900
E-mail: info@clarius-group.com
Further mandatory information can be found in the Imprint.
You can reach our Data Protection Officer at dsb@clarius-group.com.
Principle
We collect and use your personal data in principle only insofar as this is necessary to provide a functional website as well as our content and services. We load optional services only once you have expressly consented. Use of this website is possible without consent to optional services.
Server log data
With every access to our website, your browser transmits technically necessary particulars that are logged on the web server: IP address, date and time of the request, the page accessed, the volume of data transferred, and browser type and operating system.
We process these data in order to provide the website technically and to ensure its security, in particular so that unauthorised access can be traced. The legal basis is our legitimate interest in secure and uninterrupted operation (Art. 6(1) sentence 1 lit. f GDPR). The log data are deleted after seven days and are not combined with other data sources.
For technical operation we engage a service provider as a processor, with whom a contract pursuant to Art. 28 GDPR exists.
Consent to the use of cookies
We use CookieFirst, a consent-management platform provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, the Netherlands, to obtain and document your consent to optional cookies and services. Further information is available at cookiefirst.com.
When you access our website, a connection to CookieFirst is established. CookieFirst stores a cookie in your browser to record your consent and enable only the categories you have accepted. CookieFirst processes your consent status, anonymised IP address, browser and device information, the date and time of your visit, the page on which you saved your settings, your approximate location and a unique visitor identifier (UUID).
You may change or withdraw your consent at any time with effect for the future via the “Privacy settings” link in the page footer. The lawfulness of processing carried out until withdrawal remains unaffected.
Cookie policy and cookie table
Google Analytics 4
After your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service helps us understand how our website is used and how we can improve our offering. The legal basis is your consent (Art. 6(1) sentence 1 lit. a GDPR).
In particular, information about pages accessed, dwell time, approximate region of origin,
device type, browser and the referring website is processed. In addition we measure individual
interactions, for example clicks on calls to action, e-mail addresses and telephone numbers,
the opening of content sections, scroll depth, started videos, share functions and submitted
forms. Google Analytics uses cookies, among other things, to distinguish users and sessions.
Google confirms that the standard implementation in particular captures session, approximate
location, browser and device information and uses the _ga cookie for the client
ID.
Google Analytics does not store full IP addresses. The IP address is used for approximate geolocation and is subsequently discarded. The retention period of usage data in our Google Analytics account is limited to 14 months.
We also use Google Signals. This allows Google to associate data from users who are signed in to their Google account and have personalised advertising enabled there with information from different sessions and devices. This enables us in particular to obtain aggregated analyses of demographic characteristics and interests as well as of cross-device usage. Google describes Google Signals accordingly as a feature in which session data can be associated with signed-in Google users who have personalised advertising enabled.
Google may also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework. For transfers of data to correspondingly certified US companies, an adequacy decision of the European Commission is in place.
Further information can be found in Google’s privacy policy.
HubSpot and contact forms
For contact, newsletter and event forms we use HubSpot. HubSpot acts for us as a processor on the basis of a contract pursuant to Art. 28 GDPR.
Our HubSpot account uses regional data hosting in the European Union. For EU customers, HubSpot provides for storage of customer data within the chosen hosting region. Individual services and processing operations may be excepted from this.
Via our general contact form you can transmit your name, your company, your e-mail address and your message. These particulars are required in order to assign and handle your business enquiry. We process them to handle and respond to your enquiry. The legal basis is Art. 6(1) sentence 1 lit. b GDPR insofar as your enquiry serves the initiation of a contract with you; for enquiries on behalf of a company or other business enquiries, processing is based on our legitimate interest in handling the enquiry (Art. 6(1) sentence 1 lit. f GDPR).
Insofar as your enquiry concerns the service area of another company of the Clarius Group, we may forward your particulars to the company responsible for handling it.
HubSpot may, in the course of individual processing operations, also process data in the United States. HubSpot, Inc. is certified under the EU-US Data Privacy Framework. In addition, the data processing agreement provides for Standard Contractual Clauses for transfers where this is required.
Further information can be found in HubSpot’s privacy policy.
Contact by e-mail and telephone
If you contact us by e-mail or telephone, we process your particulars in order to handle and respond to your enquiry. The legal basis is Art. 6(1) sentence 1 lit. b GDPR insofar as the communication serves the initiation or performance of a contract with you, and otherwise Art. 6(1) sentence 1 lit. f GDPR.
Insofar as your enquiry concerns the service area of another company of the Clarius Group, we may forward your particulars to the company responsible for handling it.
We store your particulars only for as long as this is necessary to handle the enquiry, unless statutory retention obligations or other reasons for further storage exist.
Newsletter
For subscription to our newsletter we use the double opt-in procedure. After your registration you receive an e-mail in which we ask you for confirmation. Only thereafter do we add you to the mailing list. To evidence the registration we log the time of registration and of confirmation.
The legal basis for sending the newsletter is your consent (Art. 6(1) sentence 1 lit. a GDPR). You may withdraw this at any time with effect for the future via the unsubscribe link in every e-mail or by message to info@clarius-group.com. After you unsubscribe, we no longer use your e-mail address for sending the newsletter. Data required to evidence a previously given consent may continue to be stored to the extent necessary.
For the technical provision of the registration forms and the administration of registrations we use HubSpot; in this respect the information on HubSpot above applies in addition.
Job advertisements and applications
We retrieve the job offers displayed on our careers pages server-side from the public jobs feed of our applicant management system Personio. When you merely view our careers pages, no data of yours are transmitted to Personio.
We receive your application via the application portal at clarius.jobs.personio.de, which is operated by Personio SE & Co. KG, Seidlstraße 3, 80335 Munich. If you follow this link, you leave our website. In the application process, Personio acts as a processor pursuant to Art. 28 GDPR.
The controller for the processing of your application data is in each case the company of the Clarius Group at which the advertised position is based. The controller company is apparent from the respective job advertisement.
Your application data are processed for the purpose of carrying out the application procedure (Section 26(1) of the German Federal Data Protection Act (BDSG)). They are made accessible only to the persons responsible for the specific application procedure. Deletion generally takes place at the latest six months after conclusion of the application procedure, unless statutory provisions conflict, further storage is required for the purpose of legal defence, or you have expressly consented to longer storage.
Social networks
We link to our profile on LinkedIn. These are simple references and not embedded content or buttons of the provider. Upon accessing our website, therefore, no data are transmitted to LinkedIn.
Only when you click a corresponding link are you redirected to LinkedIn. LinkedIn is the controller for the processing of personal data that takes place there. The same applies to links for sharing our posts.
Fonts and media
We serve all fonts from our own server. There is no connection to Google Fonts or other external font services. Videos are also provided directly by us; content from video platforms such as YouTube is not embedded.
Storage period
Unless a specific storage period is stated in this privacy policy, we store personal data only for as long as this is necessary for the respective processing purpose. Where statutory retention obligations exist, we store the data concerned for the duration of the respective statutory retention period.
Your rights
You have, subject to the statutory requirements, the right of access to the data processed about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).
Consents given may be withdrawn by you at any time with effect for the future (Art. 7(3) GDPR). For this purpose please contact dsb@clarius-group.com or use – for consents to optional website services – the “Privacy settings” in the page footer.
Insofar as we process personal data on the basis of a legitimate interest, you have the right to object to this processing on grounds relating to your particular situation (Art. 21 GDPR). If personal data are processed for direct marketing, you may object at any time without stating reasons.
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority competent for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit), Ludwig-Erhard-Straße 22, 20459 Hamburg.
Changes to this statement
We adapt this privacy policy when the services used on this website or the legal requirements change.
As of: September 2026
