Legal

Privacy Policy

We process personal data sparingly and only to the extent necessary for operating this website and responding to your inquiries.

1. Controller

appDev GmbH & Co. KG
Rahmannstraße 11, 65760 Eschborn
Phone: +49 69 5880 432 00
Email: info@appdev.de

Data Protection Officer: Thomas Schulz, Email: datenschutz@appdev.de

2. Hosting

This website is hosted with Cloudflare (Cloudflare Pages, Cloudflare, Inc.). When the site is accessed, technically necessary connection data is processed (including IP address, time of access, requested resource) to enable secure and reliable delivery. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider; any transfers to third countries are safeguarded by standard contractual clauses.

3. Fonts

This website uses the fonts “Inter” and “JetBrains Mono”. They are embedded locally on our server and delivered directly from there. When the fonts are loaded, there is no connection to third-party servers (in particular, not to Google), and no personal data is transferred to third parties in the process.

4. Contact form and guide download

When you write to us via the contact form, we process the data you provide (name, email address, optionally company, and your message) solely to handle your inquiry. The message is sent server-side via the transactional email service Brevo (Sendinblue GmbH), a provider that processes data within the European Union. The legal basis is your consent (Art. 6(1)(a) GDPR) as well as our legitimate interest in communication (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When you request our guide via the download form, we process your email address in order to send you the download link (likewise via Brevo). The legal basis is the fulfillment of your request (Art. 6(1)(b) GDPR). Only if you additionally actively tick the box that you would like to receive occasional practical tips do we add your email address to our mailing list after confirmation via a double opt-in email; the legal basis for this is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future via the unsubscribe link in every email.

5. Bot protection (Cloudflare Turnstile)

To protect our forms (contact forms on several pages, the application form, and the guide download form) against automated input, we use Cloudflare Turnstile, a service of Cloudflare, Inc. The Turnstile script is only loaded once a form appears within your viewport or you use it; it loads from Cloudflare’s servers and checks in the background whether the input comes from a human. In doing so, technical information such as your IP address as well as details about your browser and device are processed. The legal basis is our legitimate interest in fending off spam and abuse (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider; any third-country transfers are safeguarded by standard contractual clauses.

6. Appointment booking (Zeeg)

On several pages of our website we offer an appointment booking widget from the provider Zeeg (Zeeg GmbH). The widget is not loaded automatically: when you open the page, there is initially no connection to Zeeg. Only when you actively click “Show available times” is the widget loaded from Zeeg’s servers; in doing so, your IP address is transmitted to Zeeg. The legal basis for loading the widget is your consent, which you grant by actively clicking (Art. 6(1)(a) GDPR). If you subsequently book an appointment, we process the data you provide (name, email address, chosen time, and optional details) to arrange and carry out the meeting; the legal basis for this is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). Zeeg processes the data within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

7. Applications

When you submit a speculative application via our application form, we process the data you provide (name, email address, optionally phone, area of focus, a profile or portfolio link, your message, and an optionally uploaded CV) solely to carry out the application process. The message is sent to our mailbox server-side via the transactional email service Brevo (Sendinblue GmbH). The legal basis is the initiation of an employment relationship (Art. 6(1)(b) GDPR, Section 26(1) BDSG) as well as your consent (Art. 6(1)(a) GDPR). If no employment relationship comes about, we delete your application documents after the process is completed, unless statutory retention obligations exist.

8. Reach measurement (Google Analytics)

On the basis of your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to statistically evaluate the use of this website in order to improve it. This processes, among other things, the pages accessed, approximate location (based on a truncated, non-stored IP address), the device and browser used, and interactions on the website; cookies may be set for this purpose.

The analytics tag is only loaded AFTER you have actively given your consent in the cookie banner. We use Google Consent Mode v2 in “Basic” mode: without your consent, no Google script is loaded and no data is transmitted to Google. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

A data processing agreement pursuant to Art. 28 GDPR is in place with Google. A transfer of data to Google LLC in the USA cannot be ruled out; it is safeguarded by standard contractual clauses and the EU-US Data Privacy Framework. The retention of data at the user and event level is limited to 14 months.

9. Conversion measurement (Google Ads)

On the basis of your consent, we use Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure the success of our ads. If you reach this website via one of our ads and subsequently perform an action (e.g. submit a contact request or book an appointment), this is transmitted to Google as an anonymous “conversion”. Cookies may be set and a unique click identifier (GCLID) may be processed for this purpose.

The Google Ads tag is only loaded AFTER you have actively consented to the “Marketing” category in the cookie banner (Google Consent Mode v2, “Basic” mode). Without your consent, no Google script is loaded and no data is transmitted to Google. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

Enhanced Conversions for Leads: provided you have consented to the “Marketing” category, when you submit a contact form we additionally transmit the email address you provided to Google Ads in SHA-256 hashed form. The email address is not transmitted in plain text; Google uses the hash value solely to attribute conversions to our ads and to improve measurement. The purpose is conversion measurement. The legal basis is your consent (Art. 6(1)(a) GDPR); without consent to the “Marketing” category, no transmission takes place. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

10. Conversion measurement (Microsoft Advertising)

On the basis of your consent, we use Universal Event Tracking (UET) from Microsoft Advertising, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to measure the success of our Microsoft ads. If you reach this website via one of our ads and subsequently perform an action (e.g. submit a contact request or book an appointment), this is transmitted to Microsoft as a “conversion”. Cookies may be set and a unique click identifier (msclkid) may be processed for this purpose.

The UET tag is only loaded AFTER you have actively consented to the “Marketing” category in the cookie banner. Without your consent, no Microsoft script is loaded and no data is transmitted to Microsoft. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. A transfer of data to Microsoft Corporation in the USA cannot be ruled out; it is safeguarded by standard contractual clauses and the EU-US Data Privacy Framework.

11. Marketing analytics (LinkedIn Insight Tag)

The LinkedIn Insight Tag (a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) is technically prepared but is currently NOT in use: no LinkedIn script is loaded and no data is transmitted to LinkedIn. Should we activate it in the future, this will happen only after you have actively consented to the “Marketing” category in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It would then process, among other things, the URL accessed, the referring page, your IP address, device and browser characteristics, and the time of access; cookies may be set for this purpose. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer. A data processing agreement pursuant to Art. 28 GDPR is in place with LinkedIn; transfers to third countries are safeguarded by standard contractual clauses.

12. Website visitor identification and session recording (Leadinfo)

On the basis of your consent, we use Leadinfo, a service of Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands. Leadinfo helps us identify which companies visit our website, so that we can better assess the success of our advertising and reach out to business prospects. For this purpose, your IP address is analyzed and matched against a company database to determine the company behind it; in addition, the pages accessed, the referring page, and device and browser details are processed.

In addition, Leadinfo records your session on this website (so-called session replay). This captures interactions such as mouse movements, scrolling, clicks and the sequence of the content you view, and stores them for later playback, so that we can understand and improve how the website is used. According to Leadinfo, entries in form fields are masked by default and are not recorded. Because such a recording can relate to individual persons, this is not exclusively company-related processing.

The Leadinfo script is only loaded AFTER you have actively consented to the “Marketing” category in the cookie banner; a cookie is set for this purpose. Without your consent, no Leadinfo script is loaded and no data is transmitted to Leadinfo. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

A data processing agreement pursuant to Art. 28 GDPR is in place with Leadinfo. As part of the session recording, data is also transmitted to and stored with Amazon Web Services (Amazon Web Services, Inc., USA) as a sub-processor engaged by Leadinfo. This constitutes a transfer to a third country (USA); it is safeguarded by standard contractual clauses pursuant to Art. 46 GDPR.

13. Cookies and local storage

Without your consent, we do not set any tracking cookies. Only after your consent can Google Analytics (Section 8), Google Ads (Section 9), Microsoft Advertising (Section 10) and Leadinfo (Section 12) set cookies, such as “_ga” to recognize returning visits or conversion cookies to measure ad success. Your consent decision itself as well as your display setting (light or dark) are stored in your browser’s local storage as technically necessary (localStorage); these two items remain in your browser and are not transmitted to us.

14. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Any consent you have given can be withdrawn at any time with effect for the future.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1, 65189 Wiesbaden

Last updated: July 23, 2026.