1. Data controller & contact
The controller responsible for processing personal data on this website is DaBrain CLIMB TECH GmbH, represented by its Managing Director Lars Mährholz, Dreilindenstraße 38, 14109 Berlin, Germany.
For questions about data protection or to exercise your rights, contact us at mail@climb-tech.de or by telephone on +49 172 390 8167.
2. Hosting & technical logs
This website runs on our own virtual server hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The data centre for this server is located in the United Kingdom.
When you access the website, the server infrastructure processes technical connection data. This may include your IP address, the time of access, the requested address, the HTTP method and version, the response status, the amount of data transferred, processing time and browser identification. This data is needed to deliver the requested content and protect the operation of the website.
The technical logs of the web server and the connection service in front of it may contain IP addresses; these are not automatically anonymised immediately across all logs. Logs are stored in files with size limits. Once those limits are reached, older files are automatically removed. The actual retention period therefore depends on the volume of log data; no fixed deletion period in days is configured.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are reliable website operation, troubleshooting, and protection against attacks and misuse. Access is available to the people responsible for technical operation and to IONOS insofar as necessary to provide its services.
Transfers of personal data to the United Kingdom are covered by an adequacy decision of the European Commission under Article 45 GDPR. Further information is available from the European Commission. The hosting provider's data processing terms are available in the IONOS data processing agreement.
3. Contact form, email & telephone
If you send us an enquiry, we process your name, email address, selected service and message to handle your request and contact you. The contact form does not support file uploads. Please provide only the information needed for your enquiry.
For enquiries about a quotation or an order, processing is necessary to take steps prior to entering into a contract or to perform a contract under Article 6(1)(b) GDPR. We handle other enquiries on the basis of Article 6(1)(f) GDPR; our legitimate interest is responding to your message.
The form sends your entries to our server over an encrypted connection. After validation, they are forwarded by email to mail@climb-tech.de over an encrypted SMTP connection. The form application does not maintain its own permanent database, file storage or message queue for this purpose. Form contents are not written to its application logs. Processing and storage in the email inbox are separate from this.
Messages are handled by the people responsible for your enquiry. Our hosting and email service providers are involved insofar as necessary for transmission and operation. We delete enquiry data once the enquiry has been dealt with and no further legitimate purposes or statutory retention requirements apply. If an order results, further retention depends on performance of the contract and the applicable retention requirements. A single retention period for all messages would therefore not be accurate.
Providing this information is voluntary. However, we cannot respond meaningfully to an enquiry without sufficient contact details and a description of your request. You may also contact us directly by email or telephone.
4. Protecting the form against misuse
We use a locally operated version of ALTCHA to protect against automated spam enquiries. Your browser solves a small computational challenge, and our server checks the response. No external CAPTCHA providers are contacted. In this implementation, ALTCHA does not set cookies or use persistent local browser storage.
The server processes short-lived random values, signatures and a pseudonymous identifier for the requesting connection. This identifier is derived from the IP address using a secret key generated anew when the application process starts. This part of the abuse protection stores the identifier rather than a plain-text IP address. The technical server logs described above are separate from this.
The computational challenge is valid for no more than five minutes and can be used only once. To limit repeated requests, identifiers, counters and expiry times are held in memory: for up to one minute for challenge requests and up to 15 minutes for contact enquiries. Expired entries are removed by the next cleanup run, within a further minute at the latest. These temporary entries are lost when the form application restarts.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is keeping the form available and limiting unwanted automated messages.
5. Local content, analytics & external links
Fonts, images, styles and the scripts required for the form are loaded from our own server. We do not embed external font services, maps or automatically starting social network content.
Google Analytics and other audience measurement or advertising tracking services are currently disabled. No analytics or advertising cookies are set, and this website does not create advertising profiles. If this changes, we will update this privacy notice and obtain any required consent before activation.
External services are accessible through ordinary links. A connection to the relevant provider is established only when you follow such a link. That provider's privacy notice applies to its service.
6. Your rights
Where the statutory conditions are met, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15 to 20 GDPR. You may withdraw consent at any time with effect for the future; this does not affect processing that has already taken place.
Right to object: Where processing is based on legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. Please contact us using the details above.
You also have the right to lodge a complaint with a data protection supervisory authority. In Berlin, you can contact the Berlin Commissioner for Data Protection and Freedom of Information.
7. Security & changes
The connection between your browser and this website is encrypted when you use HTTPS. We do not make decisions based solely on automated processing that have legal or similarly significant effects, including related profiling.
We will update this notice if the website's functions or data processing change.
Last updated: November 2026.