Privacy Policy

The controller responsible for the processing of personal data on this website is:

When you contact us via the contact form or by email, we process the personal data you provide voluntarily: name, organisation, email address, the category of inquiry you select, and the content of your message. We do not use this website to collect data through cookies for tracking or advertising purposes.

We process personal data for the purpose of responding to inquiries and establishing contact on the basis of Art. 6 (1) (f) GDPR (legitimate interest in responding to requests and communicating with interested parties). Where you contact us to discuss or prepare a project relationship, processing may additionally be based on Art. 6 (1) (b) GDPR (pre-contractual measures).

Your data is used solely to process and respond to your inquiry, to communicate with you, and — where applicable — to prepare a potential collaboration. We do not share your data with third parties for their own marketing purposes.

When you access this website, the hosting provider automatically processes technical data (such as IP address, date and time of access, browser type and referring URL) for the purpose of enabling and securing the technical operation of the website. This processing is based on our legitimate interest in a stable and secure website (Art. 6 (1) (f) GDPR). Log data is kept for a limited period and deleted thereafter.

Personal data is shared only with internal staff who require it to process your inquiry and, to the extent necessary, with our hosting and IT service providers acting as processors under Art. 28 GDPR. Disclosure to other recipients occurs only where we are legally obliged to do so.

We retain personal data collected through inquiries only for as long as is necessary to fulfil the purpose for which it was collected, and thereafter in accordance with applicable statutory retention obligations. Once these grounds cease to apply, the data is deleted.

You have the right, at any time and free of charge, to:

• access the personal data we hold about you (Art. 15 GDPR);
• request the rectification of inaccurate data (Art. 16 GDPR);
• request the erasure of your data (Art. 17 GDPR);
• request the restriction of processing (Art. 18 GDPR);
• receive your data in a structured, commonly used format and transmit it to another controller (Art. 20 GDPR, data portability);
• object to the processing of your data (Art. 21 GDPR).

To exercise any of these rights, please contact us at office@palmerion.com.

You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. The competent authority for Palmerion is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or manipulation. Communications with us via email are generally not encrypted end-to-end; for sensitive information, please consider using secure channels.

We may update this privacy policy from time to time to reflect legal or operational changes. The current version is always available on this page.