1. Controller

Atlas German Tech

2. General Information

We take the protection of your personal data very seriously. We process your personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and applicable national data protection laws.

3. Data Collection When Visiting Our Website

When you access our website, your browser establishes a connection with our hosting provider's infrastructure. This is necessary to deliver the website to your device. No personal data is actively logged by us.

4. Cookies

Our website uses only essential cookies:

• NEXT_LOCALE — Stores your language preference when you switch locales. This is a functional cookie set by the language switcher.

No analytics, tracking, or marketing cookies are used. The legal basis for essential cookies is Art. 6(1)(f) GDPR (legitimate interest).

5. Contact Form

When you send us a message through our contact form, we collect the following data:

• First and last name
• Email address
• Phone number (optional)
• Company name (optional)
• Subject
• Message content
• PGP public key (optional, for encrypted replies)

We process this data solely for the purpose of responding to your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Data transmitted via the contact form is encrypted in transit using TLS. The entire form data except the email input field is additionally encrypted with OpenPGP using our server's public key before being sent through the email delivery service (Brevo). Only your email address is transmitted in plaintext (required for SMTP delivery) — neither Brevo nor any intermediary can read the message body or any other submitted data. Only we can decrypt the content with our private key. You may optionally provide your own PGP public key to receive encrypted email replies.

You may use the end-to-end encrypted messaging options listed on our contact page instead of email or the contact form.

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction. Our website uses TLS encryption (SSL) to protect data transmitted between your browser and our servers.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

• Contact form inquiries: Retained for the duration of the correspondence plus a reasonable follow-up period, unless a contractual relationship is established.

8. Your Rights Under the GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR): Request information about the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction of processing (Art. 18 GDPR): Request restriction of processing under certain conditions.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time by emailing us at info@atlas-germantech.com. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint (Art. 77 GDPR): File a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or the place of the alleged infringement.

9. Third-Party Services

We use the following third-party services for website operation:

• Vercel Inc. — Hosting, content delivery network, database, and media storage. Privacy policy: vercel.com/privacy
• Brevo (Sendinblue) — Email delivery service for contact form submissions. Privacy policy: brevo.com/legal/privacypolicy
• ProtonMail (Proton AG) — Email inbox provider for receiving contact form submissions. Privacy policy: proton.me/legal/privacy
• Zoho Mail (Zoho Corporation) — Email service. Privacy policy: zoho.com/privacy.html
• Cloudflare, Inc. — DNS and network security. Privacy policy: cloudflare.com/privacypolicy

We do not use third-party analytics, tracking, or marketing services.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our data processing practices. The current version is always available on this page.

11. Contact

For questions about data protection or to exercise your rights, please visit our contact page.