LEGAL

Privacy notice

Information pursuant to Articles 13 and 14 GDPR. Last updated: August 2026.

1. Controller

OBELUS GmbH, Westerhamer Weg 30, 82024 Taufkirchen, Germany
Represented by Managing Director Tomas Langara
Phone: +49 8151 187 40 10 · Email: tomas.langara@obelus.de

2. No data protection officer

Fewer than 20 people are permanently engaged in the automated processing of personal data, so we are not required to appoint a data protection officer under Section 38 BDSG. Please address any concerns directly to the contact above.

3. Principles

We process personal data only to the extent necessary to provide a functioning website together with our content and services. The legal bases are Article 6 (1) (b) GDPR (contract and pre-contractual steps), (c) (legal obligation), (f) (legitimate interest) and, where obtained, (a) (consent).

4. Hosting and server log files

This website is hosted by a service provider within the European Union. On every visit the server automatically records data transmitted by your browser: IP address, date and time of the request, file requested, volume transferred, notification of successful retrieval, browser type and version, operating system and referrer URL. We cannot attribute this data to any identified person and do not combine it with other sources. The purpose is technical operation, stability and security of the website (Article 6 (1) (f) GDPR). Log files are deleted after 30 days at the latest. A data processing agreement under Article 28 GDPR is in place with the host.

5. Cookies and tracking

This website sets no cookies for analytics, marketing or profiling. There is no audience measurement and no tracking. A consent banner is therefore not required. Should this change in future, we will obtain your consent in advance through a consent tool.

6. Fonts

This website loads no fonts from third-party servers. Only the system fonts already present on your device are used. No connection is made to Google Fonts or comparable services and no IP address is transmitted to third parties.

7. Contact by email and telephone

If you contact us by email or telephone, we process the details you provide — name, contact data and the content of your enquiry — solely to deal with your request and any follow-up questions. The legal basis is Article 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, otherwise Article 6 (1) (f) GDPR. We delete this data once it is no longer needed for the purpose; statutory commercial and tax retention periods remain unaffected.

8. External links

Our website links to mapperstudio.io and LinkedIn. Clicking a link takes you to the respective site; data is processed by that provider only once you are there. We have no influence over that processing. No content from these providers is embedded in our pages.

9. Encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser and by the address bar starting with https://.

10. Recipients and transfers to third countries

Your data is not transferred to recipients outside the European Union. Within the EU we pass data only to processors who support us in operating the website and who are contractually bound under Article 28 GDPR.

11. Your rights

You have the right at any time to access the data stored about you (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to withdraw consent with effect for the future (Article 7 (3)).

RIGHT TO OBJECT UNDER ARTICLE 21 GDPRWhere we process data on the basis of a legitimate interest, you may object to that processing on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 27, 91522 Ansbach, Germany.

13. No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

14. Changes

We update this privacy notice whenever our services or the legal situation change. The version published here applies to each new visit.

Draft. Before publication, please have this reviewed by your legal advisers and adapted to the services actually in use — in particular the host and any contact form added later. This is a courtesy translation; the German version is legally binding.