Controller · Art. 4 No. 7 GDPR
MOKOM 01 digital GmbH & Co. KG
Full provider details in the Imprint.
Privacy Policy — MOKOM 01 digital GmbH & Co. KG
Legal · As of August 2026
We take the protection of your data seriously and process as sparingly as possible.
This statement describes which personal data we collect on this website, for which purpose, on which legal basis and for how long. The German GDPR and TDDDG apply.
Controller · Data protection officer · Your rights
Who is responsible —
and which rights you have.
- Data protection officerMarc BuchholzFor questions about data protection, exercising your rights, or specific processing activities, please contact this address directly.
- Your rights against usYou have the following rights as a data subject:Art. 15Access to your stored dataArt. 16Rectification of inaccurate dataArt. 17Erasure of your dataArt. 18Restriction of processingArt. 20Data portabilityArt. 21Objection to processingArt. 7 (3)Withdrawal of consent: effective for the futureWrite to us at datenschutz@mokom01.com. In addition, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR): competent is the Lower Saxony Data Protection Commissioner or another authority based on your residence, workplace, or place of the alleged infringement.
General · Legal bases · Retention
Foundations of
data processing.
- Personal dataPersonal data is any information relating to an identified or identifiable person: for example name, email address, or IP address.
- Legal basesWe process personal data exclusively on one of these legal bases. Which one applies in each case is stated alongside the respective processing activity.Art. 6 (1) aYou have consented to the processing.Art. 6 (1) bNecessary for the performance of a contract or pre-contractual measures.Art. 6 (1) cCompliance with a legal obligation.Art. 6 (1) fSafeguarding a legitimate interest that does not override the interests of the data subject.
- RetentionWe store personal data only as long as necessary for the respective purpose or as required by statutory retention periods. Specific deadlines are stated alongside each processing activity.
Specific processing activities
What we process when —
and why.
- Server logs & hostingWhen you access the website, your browser transmits technically necessary data to our web server, which is stored in log files:—IP address, date/time, page requested, HTTP status code—data volume transmitted, referrer URL—browser, operating system, device typePurposeDelivery, stability, defense against attacksLegal basisArt. 6 (1) (f) GDPRRetentionmax. 14 days, then automatic deletionHosting · Hetzner Online GmbHIndustriestraße 25, 91710 Gunzenhausen · processor under Art. 28 GDPR · DPA in place · servers in Germany.
- Cookies & consent managementCookies and similar technologies.We distinguish two categories: strictly necessary cookies are required to operate the site (your language choice and your consent): legal basis § 25 (2) No. 2 TDDDG, no consent required. Analytics cookies (web analytics) are set only after your explicit consent via our consent banner. See Web analytics · Google Analytics 4 below.You can change or withdraw your decision at any time via the “Cookie settings” link in the footer or directly on this page (see Consent management). Withdrawal applies to future processing. The language (DE / EN / FR) is controlled via the URL. In addition, an essential cookie (NEXT_LOCALE) remembers the language you last selected.
- Contact formWhen you reach out via the contact form, we process: first and last name (required), email (required), company (required), phone (optional), your message (required), privacy consent (required).PurposeHandling your inquiryLegal basisArt. 6 (1) (b) or (f) GDPRRetentionuntil inquiry resolved — max. 3 yearsDelivery · own SMTP serverDelivery is handled via our own SMTP server. No transfer to external email delivery services (e.g. Resend, SendGrid, Mailgun) takes place.Spam protection · Rate LimitingThe number of send attempts per IP is checked transiently in server memory and deleted after 1 minute at the latest. Legal basis: Art. 6 (1) (f) GDPR.
- Sparring booking formWhen you book a sparring session, we process: your requested slot (slot ID and date), first and last name (required), email (required), company (required), phone (optional, for follow-up questions), your optional topic (if provided), privacy consent (required).PurposeSending the calendar invite, preparing the sparring session, call back if neededLegal basisArt. 6 (1) (a) (consent) or (b) (pre-contractual measures) GDPRRetentionuntil sparring conducted — max. 3 yearsDelivery · own SMTP serverDelivery is handled via our own SMTP server. No transfer to external email delivery services takes place.Spam protection · Rate LimitingThe number of send attempts per IP is checked transiently in server memory and deleted after 1 minute at the latest. Legal basis: Art. 6 (1) (f) GDPR.
- Accessibility Quick CheckWhen you request the accessibility quick check, we process: website address (required), name (required), email (required) and optional details (important subpage, type of website, protected areas, occasion, particular focus, company, role, phone, marketing consent).PurposePreparing and delivering your free initial assessmentLegal basisArt. 6 (1) (f) GDPR (legitimate interest)Retentionuntil request resolved — max. 3 yearsDelivery · own SMTP serverDelivery is handled via our own SMTP server. No transfer to external email delivery services (e.g. Resend, SendGrid, Mailgun) takes place.Spam protection · Rate LimitingThe number of send attempts per IP is checked transiently in server memory and deleted after 1 minute at the latest. Legal basis: Art. 6 (1) (f) GDPR.
- Job applicationsApplications are sent to us by email. We process the documents submitted (cover letter, CV, certificates, other voluntary information) exclusively to assess your suitability.PurposeRecruitment processLegal basis§ 26 BDSG in conjunction with Art. 88 GDPR · Art. 6 (1) (b) GDPRRetention6 months after rejection · otherwise personnel filePlease do not submit special categories of personal data as per Art. 9 GDPR (e.g. health data, religion, trade union membership) unless required for the application.
- Consent management · Consent bannerWhen you first access this website, we display a consent banner that lets you decide whether non-essential cookies and similar technologies may be loaded. This currently applies exclusively to web analytics via Google Analytics 4.Solution usedWe use Klaro, an open-source consent manager by KIProtect GmbH, Berlin. The software is served from our own server, so there is no transfer to third parties. Your decision is stored exclusively in your browser.Stored dataConsent ID, timestamp, consent status per category, language preference, consent banner version. No personal data such as IP address or email address is stored.PurposeCollecting and documenting your consentLegal basis§ 25 (1) TDDDG · Art. 6 (1) (c) GDPR (accountability under Art. 7 (1) GDPR)Retention12 months, then re-askedVia the “Cookie settings” link in the footer or directly via the button below this paragraph, you can adjust or fully withdraw your consent at any time. Withdrawal applies to future processing; the lawfulness of processing carried out before withdrawal remains unaffected.This button reopens the consent banner so you can review, adjust or withdraw your choices.
- Web analytics · Google Analytics 4Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is integrated to analyse the use of our website statistically. The service is only loaded once you have explicitly consented in the consent banner. Without your consent, no data is transmitted to Google.Data processedTruncated IP address (IP anonymisation enabled), device and browser information, referrer, pages viewed, time spent, interaction events, pseudonymous cookie IDs (_ga, _ga_*).PurposeReach measurement, usage analysis, content optimisationLegal basis§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR — only after consentRetentionCookies up to 14 months · aggregated reports until next data refreshProcessing · Data transferA data processing agreement under Art. 28 GDPR is in place with Google Ireland Limited. Transfer to Google LLC (USA). Certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR) and supported by Standard Contractual Clauses (Art. 46 (2) (c) GDPR). IP anonymisation is enabled; Google Signals and ad-related features are disabled.
- Customer relationship management · HubSpotFor managing customer inquiries and contacts we use HubSpot, a service provided by HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA, with an EU entity at HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.Scope of useWe use HubSpot exclusively for managing customer contacts (CRM) and for server-side processing of form submissions via the HubSpot API. The HubSpot JavaScript tracking is not loaded on this website: no HubSpot cookies are set and no cross-site visitor tracking by HubSpot takes place. We do not use marketing automation, email tracking or chatbots.Data processed—Data submitted via forms or email (name, email, company, phone, message)—IP address at the time of form submission (spam protection by HubSpot)—Communication history, notes, status records for customer carePurposeLead management, customer relationships, internal documentationLegal basisArt. 6 (1) (b) GDPR · Art. 6 (1) (f) GDPR (no consent required as no tracking is used)RetentionFor the duration of the customer relationship · max. 3 years for inquiries without a contract · statutory retention periods remain unaffectedProcessing · Data transferA Data Processing Agreement (DPA) under Art. 28 GDPR is in place with HubSpot. Transfer to HubSpot, Inc. (USA), certified under the EU-US Data Privacy Framework (Art. 45 GDPR adequacy decision) and supported by Standard Contractual Clauses (Art. 46 (2) (c) GDPR).
Fonts · External content · Data security
What we don't do.
And how we protect data.
- Fonts · localWe use Ridley Grotesk and Playfair Display locally from our server. There is no transfer to third parties (e.g. Google Fonts).
- External contentThis website does not use any of the following services:—social media plugins (e.g. Facebook Like button, Twitter embed)—embedded maps (e.g. Google Maps)—embedded videos (YouTube, Vimeo)—third-party ad networks or conversion trackingThe analytics and CRM services we do use are described above under Web analytics · Google Analytics 4 and Customer relationship management · HubSpot. In the footer we link to our LinkedIn profile. A connection to LinkedIn is only established upon click. Without a click, no data is transmitted to LinkedIn.
- Data securityThis website uses TLS encryption (HTTPS) throughout. In addition, we apply strict security headers:CSP · HSTS · X-Frame-Options · Referrer-Policy · Permissions-Policy
- ChangesWe adjust this statement when processing activities or legal requirements change. The current version is always available at this address.
As of
August 2026