Privacy notice

The controller responsible for data processing on this website is:

Pavicore GmbH

Colonnaden 5, 20354 Hamburg, Germany

Contact: info@pavicore.com

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority.

Lead supervisory authority: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), Hamburg, Germany. You may also lodge a complaint with the supervisory authority in your country of residence.

We have not appointed a data protection officer as we are not legally required to do so. For any data protection queries, contact us at info@pavicore.com.

When you visit this website, our hosting provider Vercel Inc. (USA) automatically records information in server log files: IP address, date and time of access, page requested, data volume transferred, referrer URL, and browser and operating system details.

The legal basis is Art. 6(1)(f) GDPR (provision and security of the website). Transfers to the USA rely on EU standard contractual clauses; a data processing agreement under Art. 28 GDPR is in place with Vercel.

Cookies are small text files stored on your device. Strictly necessary cookies required for the operation of the website are set on the basis of the German TDDDG (§ 25(2)). All other cookies and similar technologies are only set after you have given your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

Consent management is handled by Cookiebot by Usercentrics, operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot assigns the cookies used to the categories Necessary, Preferences, Statistics, and Marketing, and withholds non-necessary categories until you consent. Your choice is stored in a cookie named “CookieConsent” for twelve months, after which we ask for your consent again.

An up-to-date list of all cookies in use, including provider, purpose, and storage duration, is available in our Cookie declaration. You can withdraw or adjust your consent there or at any time via “Cookie settings” in the footer.

When you use our enquiry form, your details (such as name, email address, company, and message) are processed via Forminit (Forminit Ltd., EU-hosted on AWS Ireland) and forwarded as an email to info@pavicore.com. The data is then stored in Microsoft OneDrive in a data centre located in Germany.

The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures) or Art. 6(1)(f) GDPR (responding to your enquiry). Data processing agreements under Art. 28 GDPR are in place with Forminit and Microsoft. We delete your data once it is no longer required for processing and no statutory retention obligations apply.

The enquiry form is protected by Cloudflare Turnstile, a bot-detection service operated by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you load the form, your browser automatically transmits technical signals (IP address, browser and device information, and interaction data) to Cloudflare to determine whether the request comes from a human or an automated script.

Turnstile does not set tracking cookies and does not build cross-site profiles. The data processed is used solely for spam prevention. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the form against abusive submissions). Transfers to the USA rely on EU standard contractual clauses. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.

With your consent (Art. 6(1)(a) GDPR) we use Google Analytics 4 and Google Ads, both services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), delivered via Google Tag Manager. Google Analytics 4 generates pseudonymous usage statistics; Google Ads measures the performance of our advertising via conversion tracking. Data categories processed include IP address, device identifiers, browser information, operating system, and interaction data (e.g. pages visited, clicks, time on page).

Data may be transferred to Google LLC in the USA; those transfers rely on EU standard contractual clauses. No analytics or advertising tags are loaded without your consent. You can withdraw consent at any time via “Cookie settings” in the footer.

Event data is retained for 14 months; user and session data likewise. This retention period is necessary to attribute return visits across longer decision cycles and to enable year-on-year comparison in reporting.

Google Tag Manager. Loading and controlling the analytics and advertising tags is handled by Google Tag Manager, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager itself sets no tracking cookies and processes no personal visitor data; it transmits only aggregate data about tag firing to Google. The legal basis is Art. 6(1)(a) GDPR (consent); the Tag Manager is only loaded after you have given your consent. Transfers to the USA rely on EU standard contractual clauses.

For scheduling calls we use Microsoft Bookings, a service of Microsoft Ireland Operations Limited. The data you provide in the booking form (name, email address, chosen time slot, and any notes) is processed to arrange and conduct the appointment.

The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures). A data processing agreement under Art. 28 GDPR is in place with Microsoft.

We reserve the right to update this privacy notice to keep it in line with current legal requirements.