Privacy policy

1. Controller

DANIALIS GmbH, Sternstr. 32, 39104 Magdeburg
Phone: 0391 61115411, Email: info@danialis.de
Represented by the managing director Nathan Salman Ghazbaf

2. Website hosting and maintenance

We have commissioned Bolmerg & Djalilpoor GbR (SB Group), Beckerstraße 3, 04179 Leipzig, to operate and maintain this website. It processes personal data only on our behalf and in accordance with our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with SB Group. SB Group operates the website using the hosting service Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA, as a sub-processor. A data processing agreement is in place with Netlify (Data Processing Addendum as part of Netlify's terms of use).

When you visit the website, Netlify processes technically necessary data (for example IP address, date and time of access, page visited, browser) in server log files. The legal basis is Art. 6(1)(f) GDPR (secure and stable operation of the website). Netlify stores these log files only for as long as is necessary for this purpose and then deletes them. The transfer to the USA is based on the European Commission's Standard Contractual Clauses agreed in the contract with Netlify (available at eur-lex.europa.eu/eli/dec_impl/2021/914/oj) and on the EU-US Data Privacy Framework.

3. Contacting us and forms

If you contact us using a form, by email, by phone or via WhatsApp, we process your details in order to handle your enquiry. Form submissions are transmitted via the Netlify Forms service (see section 2) and stored in the Netlify account. Netlify automatically checks every submission using the Akismet spam filter of Automattic Inc., USA, which Netlify uses as a sub-processor. For this purpose, the details entered in the form and technical data (for example IP address and browser) are transmitted to Akismet. The spam check is based on our legitimate interest in protecting our forms against spam and misuse (Art. 6(1)(f) GDPR). The safeguards described in section 2 apply to the transfer to the USA.

We also receive the content of the forms by email. Our email inbox is operated via Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). A data processing agreement is also in place with Microsoft. A transfer to Microsoft Corporation in the USA cannot be ruled out in this context. Any such transfer is based on the EU-US Data Privacy Framework and the Standard Contractual Clauses in the contract with Microsoft (see section 2 for where to find them).

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures. In all other cases, we base the processing of form submissions on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, and the processing of enquiries by email, phone or WhatsApp on our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). We need the details marked with * in order to process your enquiry. Without them, we cannot process the enquiry. All other details are voluntary.

Storage period: We delete form submissions in the Netlify account no later than three months after receipt. We delete enquiries that do not lead to us working together no later than six months after we have finished handling them. We store data from a consultation or placement for as long as we work together and delete it no later than six months after our cooperation ends. Where statutory retention obligations apply (for example six or ten years for business letters and accounting records under § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO)), we keep the documents concerned until these periods expire.

In the course of job placement, we may process further documents (for example certificates, passport, CV). Please do not send such documents via the forms. We will request them from you separately after the initial consultation and agree with you on a suitable way to provide them, for example by presenting them at our office in Magdeburg. We only pass your data on to potential employers, educational institutions or authorities insofar as this is necessary for the placement or your application (Art. 6(1)(b) GDPR) or you have given your consent.

4. WhatsApp, Instagram and Google Maps (links)

On our website, we link to WhatsApp. A connection to WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland is only established when you click a WhatsApp link. WhatsApp then receives your IP address, information about your browser and the pre-filled message text. For the roadmap in the Path finder, this text contains the answers you selected there and the number of documents you already have. You can change or delete the text in WhatsApp before sending it. If you send us the message, WhatsApp also processes your phone number and the content of your message. A transfer to Meta Platforms, Inc. in the USA is possible in this context. Any such transfer is based on the EU-US Data Privacy Framework. WhatsApp's privacy policy applies.

We also link to our Instagram profile (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) and to our location on Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These are simple links. Data is only transferred when you click a link. The privacy policy of the respective provider then applies.

5. Cookies and consent management

We store the choice you make in the cookie banner in your browser's local storage (entry “cc_cookie”) for up to 6 months. The legal basis for storing it on your device is § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), and the legal basis for processing your choice is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent). You can change or withdraw your choice at any time using the “Cookie settings” link in the footer.

Only if you use the relevant feature does the website also store the following in local storage: the boxes you tick in the roadmap in the Path finder (“danialis-plan-…”), the fact that you have closed the language notice or chosen a language yourself (“danialis-lang-hint”), and whether you have paused animations (“danialis-motion-paused”). These entries remain on your device, are not transmitted to us and stay stored until you delete them in your browser. The legal basis is § 25(2) no. 2 TDDDG.

6. Meta Pixel (only with consent)

With your consent, we use the Meta Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, to measure the effectiveness of ads on Facebook and Instagram. We only measure page views. We have switched off the pixel's automatic collection of clicks and page content. The data transmitted includes in particular your IP address, information about your browser and device, the page visited and an identifier from the “_fbp” cookie, which the pixel sets on your device (lifetime of up to 90 days). A transfer to the USA is possible in this context. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without consent, the pixel is not loaded. You can withdraw your consent at any time with effect for the future. We will then delete the Meta cookies (“_fb…”) on your device and no longer load the pixel.

We and Meta are joint controllers for the collection of data on our website and its transmission to Meta (Art. 26 GDPR). The details are set out in Meta's agreement on joint controllership: facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing. You can find information on this at facebook.com/privacy/policy. The transfer to the USA is based on the EU-US Data Privacy Framework.

7. Google Maps (only after a click)

On the contact page, you can load a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded when you click “Load map”. Your IP address, the page visited and information about your browser, among other things, are then transmitted to Google, and Google may use cookies or similar technologies on your device. A transfer to Google LLC in the USA is possible in this context. Any such transfer is based on the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Your consent only applies to the page view in question. If you reload the page, the map will no longer be displayed. Further information: policies.google.com/privacy.

8. Fonts

The fonts used are loaded locally from our server. No connection to Google Fonts or other providers is established for the fonts.

9. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, simply contact us using the contact details above. We do not carry out automated decision-making, including profiling (Art. 22 GDPR).

Right to object (Art. 21 GDPR): If we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection to info@danialis.de without any formal requirements.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragte für den Datenschutz Sachsen-Anhalt), Otto-von-Guericke-Straße 34a, 39104 Magdeburg (postal address: Postfach 1947, 39009 Magdeburg).

Last updated: October 2026