Privacy Policy

1. Controller

Attacan GmbH, Tirolerstraße 54, D-87459 Pfronten, Germany. Managing Director: Leon Heiß. Commercial register: HRB 17359, Amtsgericht Kempten.

General contact: info@attacan.com · Privacy and legal matters: legal@attacan.com

2. Principles

We process personal data only to the extent required for the operation, security, communication functions, and audience measurement of this website. We do not use marketing or advertising tools, and we do not sell or share personal data for advertising purposes. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

3. Hosting and server logs

This website is hosted on Firebase Hosting, a service of Google LLC (Google Ireland Ltd. for the EEA), delivered via a global content-delivery network. When you access the site, technical connection data (IP address, date and time, requested URL, user agent) is processed in server logs to deliver the site and to ensure its security and stability. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, reliable operation). Log data is retained only as long as technically required, at most 30 days, unless a security incident requires longer retention.

Google may process this connection data on servers outside the EU. Transfers are safeguarded by the EU standard contractual clauses and the EU–US Data Privacy Framework.

4. Fonts

All fonts on this website are self-hosted. No connection to Google Fonts or any other external font service is established when you view this site.

5. Contact and intake forms

If you contact us by email or through the forms on this website, the data you provide (name, company, role, country, email address, and the description of your enquiry) is processed solely to handle your enquiry and any resulting business relationship. Providing this data is voluntary; without it we cannot answer your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (responding to enquiries).

Form submissions run through a function we operate at Cloudflare, Inc.; the resulting email is sent via Resend, Inc. Both act as data processors. Application documents uploaded through the careers form travel the same route. We delete the data once the enquiry is concluded, unless statutory retention obligations apply.

6. Cookies and local storage

This website sets no cookies for analytics purposes and stores nothing in your browser's local storage. The audience measurement in use works without storing anything on your device (see section 7).

7. Audience measurement

We want to understand which content gets read and where technical problems occur. For this we use one method, which works without cookies and without storing anything on your device.

Cloudflare Web Analytics (no consent required): This service counts page views without setting cookies, without storing anything in your browser, and without recognising you across websites. It records the page, the referring source, an approximate country, device type, and load times. Because nothing is stored on or read from your device, § 25 TDDDG does not apply. The legal basis for processing your IP address is our legitimate interest in a working, comprehensible website (Art. 6(1)(f) GDPR). The provider is Cloudflare, Inc.; a data processing agreement is in place. Your IP address is used for counting and is not stored persistently.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interest (Art. 21). To exercise these rights, contact legal@attacan.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Bavarian Data Protection Authority (BayLDA), Ansbach.

9. Changes

We update this policy when the website or legal requirements change. The current version is always available on this page.