Skip to main content
MOKOM 01

Privacy Policy — MOKOM 01 digital GmbH & Co. KG

Legal · As of August 2026

We take the protection of your data seriously and process as sparingly as possible.

This statement describes which personal data we collect on this website, for which purpose, on which legal basis and for how long. The German GDPR and TDDDG apply.

Controller · Data protection officer · Your rights

Who is responsible —
and which rights you have.

  1. Controller · Art. 4 No. 7 GDPR
    MOKOM 01 digital GmbH & Co. KG
    Brucknerstraße 9, 49610 Quakenbrück, Germany
    +49 5431 9272658 · hallo@mokom01.com
    Full provider details in the Imprint.
  2. Data protection officer
    Marc Buchholz
    datenschutz@mokom01.com
    For questions about data protection, exercising your rights, or specific processing activities, please contact this address directly.
  3. Your rights against us
    You have the following rights as a data subject:
    Art. 15
    Access to your stored data
    Art. 16
    Rectification of inaccurate data
    Art. 17
    Erasure of your data
    Art. 18
    Restriction of processing
    Art. 20
    Data portability
    Art. 21
    Objection to processing
    Art. 7 (3)
    Withdrawal of consent: effective for the future
    Write to us at datenschutz@mokom01.com. In addition, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR): competent is the Lower Saxony Data Protection Commissioner or another authority based on your residence, workplace, or place of the alleged infringement.
General · Legal bases · Retention

Foundations of
data processing.

  1. Personal data
    Personal data is any information relating to an identified or identifiable person: for example name, email address, or IP address.
  2. Legal bases
    We process personal data exclusively on one of these legal bases. Which one applies in each case is stated alongside the respective processing activity.
    Art. 6 (1) a
    You have consented to the processing.
    Art. 6 (1) b
    Necessary for the performance of a contract or pre-contractual measures.
    Art. 6 (1) c
    Compliance with a legal obligation.
    Art. 6 (1) f
    Safeguarding a legitimate interest that does not override the interests of the data subject.
  3. Retention
    We store personal data only as long as necessary for the respective purpose or as required by statutory retention periods. Specific deadlines are stated alongside each processing activity.
Specific processing activities

What we process when —
and why.

  1. Server logs & hosting
    When you access the website, your browser transmits technically necessary data to our web server, which is stored in log files:
    —
    IP address, date/time, page requested, HTTP status code
    —
    data volume transmitted, referrer URL
    —
    browser, operating system, device type
    Purpose
    Delivery, stability, defense against attacks
    Legal basis
    Art. 6 (1) (f) GDPR
    Retention
    max. 14 days, then automatic deletion
    Hosting · Hetzner Online GmbH
    Industriestraße 25, 91710 Gunzenhausen · processor under Art. 28 GDPR · DPA in place · servers in Germany.
    hetzner.com/legal/privacy-policy
  2. Cookies & consent management
    Cookies and similar technologies.
    We distinguish two categories: strictly necessary cookies are required to operate the site (your language choice and your consent): legal basis § 25 (2) No. 2 TDDDG, no consent required. Analytics cookies (web analytics) are set only after your explicit consent via our consent banner. See Web analytics · Google Analytics 4 below.
    You can change or withdraw your decision at any time via the “Cookie settings” link in the footer or directly on this page (see Consent management). Withdrawal applies to future processing. The language (DE / EN / FR) is controlled via the URL. In addition, an essential cookie (NEXT_LOCALE) remembers the language you last selected.
  3. Contact form
    When you reach out via the contact form, we process: first and last name (required), email (required), company (required), phone (optional), your message (required), privacy consent (required).
    Purpose
    Handling your inquiry
    Legal basis
    Art. 6 (1) (b) or (f) GDPR
    Retention
    until inquiry resolved — max. 3 years
    Delivery · own SMTP server
    Delivery is handled via our own SMTP server. No transfer to external email delivery services (e.g. Resend, SendGrid, Mailgun) takes place.
    Spam protection · Rate Limiting
    The number of send attempts per IP is checked transiently in server memory and deleted after 1 minute at the latest. Legal basis: Art. 6 (1) (f) GDPR.
  4. Sparring booking form
    When you book a sparring session, we process: your requested slot (slot ID and date), first and last name (required), email (required), company (required), phone (optional, for follow-up questions), your optional topic (if provided), privacy consent (required).
    Purpose
    Sending the calendar invite, preparing the sparring session, call back if needed
    Legal basis
    Art. 6 (1) (a) (consent) or (b) (pre-contractual measures) GDPR
    Retention
    until sparring conducted — max. 3 years
    Delivery · own SMTP server
    Delivery is handled via our own SMTP server. No transfer to external email delivery services takes place.
    Spam protection · Rate Limiting
    The number of send attempts per IP is checked transiently in server memory and deleted after 1 minute at the latest. Legal basis: Art. 6 (1) (f) GDPR.
  5. Accessibility Quick Check
    When you request the accessibility quick check, we process: website address (required), name (required), email (required) and optional details (important subpage, type of website, protected areas, occasion, particular focus, company, role, phone, marketing consent).
    Purpose
    Preparing and delivering your free initial assessment
    Legal basis
    Art. 6 (1) (f) GDPR (legitimate interest)
    Retention
    until request resolved — max. 3 years
    Delivery · own SMTP server
    Delivery is handled via our own SMTP server. No transfer to external email delivery services (e.g. Resend, SendGrid, Mailgun) takes place.
    Spam protection · Rate Limiting
    The number of send attempts per IP is checked transiently in server memory and deleted after 1 minute at the latest. Legal basis: Art. 6 (1) (f) GDPR.
  6. Job applications
    Applications are sent to us by email. We process the documents submitted (cover letter, CV, certificates, other voluntary information) exclusively to assess your suitability.
    Purpose
    Recruitment process
    Legal basis
    § 26 BDSG in conjunction with Art. 88 GDPR · Art. 6 (1) (b) GDPR
    Retention
    6 months after rejection · otherwise personnel file
    Please do not submit special categories of personal data as per Art. 9 GDPR (e.g. health data, religion, trade union membership) unless required for the application.
  7. Consent management · Consent banner
    When you first access this website, we display a consent banner that lets you decide whether non-essential cookies and similar technologies may be loaded. This currently applies exclusively to web analytics via Google Analytics 4.
    Solution used
    We use Klaro, an open-source consent manager by KIProtect GmbH, Berlin. The software is served from our own server, so there is no transfer to third parties. Your decision is stored exclusively in your browser.
    Stored data
    Consent ID, timestamp, consent status per category, language preference, consent banner version. No personal data such as IP address or email address is stored.
    Purpose
    Collecting and documenting your consent
    Legal basis
    § 25 (1) TDDDG · Art. 6 (1) (c) GDPR (accountability under Art. 7 (1) GDPR)
    Retention
    12 months, then re-asked
    Via the “Cookie settings” link in the footer or directly via the button below this paragraph, you can adjust or fully withdraw your consent at any time. Withdrawal applies to future processing; the lawfulness of processing carried out before withdrawal remains unaffected.
    This button reopens the consent banner so you can review, adjust or withdraw your choices.
  8. Web analytics · Google Analytics 4
    Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is integrated to analyse the use of our website statistically. The service is only loaded once you have explicitly consented in the consent banner. Without your consent, no data is transmitted to Google.
    Data processed
    Truncated IP address (IP anonymisation enabled), device and browser information, referrer, pages viewed, time spent, interaction events, pseudonymous cookie IDs (_ga, _ga_*).
    Purpose
    Reach measurement, usage analysis, content optimisation
    Legal basis
    § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR — only after consent
    Retention
    Cookies up to 14 months · aggregated reports until next data refresh
    Processing · Data transfer
    A data processing agreement under Art. 28 GDPR is in place with Google Ireland Limited. Transfer to Google LLC (USA). Certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR) and supported by Standard Contractual Clauses (Art. 46 (2) (c) GDPR). IP anonymisation is enabled; Google Signals and ad-related features are disabled.
    policies.google.com/privacy
  9. Customer relationship management · HubSpot
    For managing customer inquiries and contacts we use HubSpot, a service provided by HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA, with an EU entity at HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.
    Scope of use
    We use HubSpot exclusively for managing customer contacts (CRM) and for server-side processing of form submissions via the HubSpot API. The HubSpot JavaScript tracking is not loaded on this website: no HubSpot cookies are set and no cross-site visitor tracking by HubSpot takes place. We do not use marketing automation, email tracking or chatbots.
    Data processed
    —
    Data submitted via forms or email (name, email, company, phone, message)
    —
    IP address at the time of form submission (spam protection by HubSpot)
    —
    Communication history, notes, status records for customer care
    Purpose
    Lead management, customer relationships, internal documentation
    Legal basis
    Art. 6 (1) (b) GDPR · Art. 6 (1) (f) GDPR (no consent required as no tracking is used)
    Retention
    For the duration of the customer relationship · max. 3 years for inquiries without a contract · statutory retention periods remain unaffected
    Processing · Data transfer
    A Data Processing Agreement (DPA) under Art. 28 GDPR is in place with HubSpot. Transfer to HubSpot, Inc. (USA), certified under the EU-US Data Privacy Framework (Art. 45 GDPR adequacy decision) and supported by Standard Contractual Clauses (Art. 46 (2) (c) GDPR).
    legal.hubspot.com/privacy-policy
Fonts · External content · Data security

What we don't do.
And how we protect data.

  1. Fonts · local
    We use Ridley Grotesk and Playfair Display locally from our server. There is no transfer to third parties (e.g. Google Fonts).
  2. External content
    This website does not use any of the following services:
    —
    social media plugins (e.g. Facebook Like button, Twitter embed)
    —
    embedded maps (e.g. Google Maps)
    —
    embedded videos (YouTube, Vimeo)
    —
    third-party ad networks or conversion tracking
    The analytics and CRM services we do use are described above under Web analytics · Google Analytics 4 and Customer relationship management · HubSpot. In the footer we link to our LinkedIn profile. A connection to LinkedIn is only established upon click. Without a click, no data is transmitted to LinkedIn.
  3. Data security
    This website uses TLS encryption (HTTPS) throughout. In addition, we apply strict security headers:
    CSP · HSTS · X-Frame-Options · Referrer-Policy · Permissions-Policy
  4. Changes
    We adjust this statement when processing activities or legal requirements change. The current version is always available at this address.
As of
August 2026