Policy

Data Privacy Statement

Last Updated:February 18, 2026

1. Introduction

Data protection has a particularly high priority for Remazing GmBH (hereinafter: “we”, “us”). It is our primary responsibility to maintain the confidentiality of the personal data you provide to us and to protect it from unauthorised access. We, therefore, take the utmost care and apply the latest security standards to ensure maximum protection of your personal data.
With the information presented below, we provide you with an overview of processing your personal data on our website https://remazing.eu/en (hereinafter “website”). In addition, the privacy policy also applies to our presences in the social and professional networks, the newsletter distribution, and the application process.
We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the General Data Protection Regulation (hereinafter “GDPR”), the German Data Protection and Privacy in Telecommunications and Telemedia Act (Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei Telemedien, hereinafter “TTDSG”) and all applicable country-specific data protection regulations.

2. Controller

The controller in the sense of the GDPR is:

Remazing GmbH

Brandstwiete 1

20457 Hamburg

Germany

Telefonnummer: +49 40 421 002 82

Remazing GmbH operates the above-mentioned offers and services. Further contact details, contact persons, and mandatory information can be found in the imprint.

3. Data Protection Officer

You can reach our data protection officers as follows:

SECJUR GmbH

Steinhöft 9

20459 Hamburg

Germany

Telephone number: +49 40 228 599 520

You can contact our data protection officers directly with all questions and suggestions regarding data protection and exercising your rights.

4. Definitions

This privacy policy is based on the terminology of the GDPR. For your convenience, we would like to explain some crucial terms in this context in more detail:

Personal Data
Personal data is any information about an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data Subject

The data subject is any identified or identifiable natural person whose personal data is processed by the controller.
Processing
Processing means any operation or set of operations which is performed upon personal data, whether by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Recipient

A recipient is a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, for example, a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law are not considered recipients.

Third Party

A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.

Consent

Consent means any freely given indication of the data subject's wishes in an informed and unambiguous manner for the specific case in the form of a declaration or other unambiguous, affirmative action by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

5. Origin of Personal Data

We may obtain personal information in the following ways:

5.1 Information Provided by You

You can provide information (e.g., contact details) about yourself on our website.

5.2 Automatically Collected and Generated Data

By using our website, data is automatically collected and generated.

5.3 Data Collected by Third Parties

To the extent we maintain presences on social and professional networks, we may receive data from you through them (e.g., if you contact us through a social or professional network or respond to any of our content shared there).

5.3 Data Collected by Third Parties

In the following, we provide you with an overview of the personal data we process. For this purpose, we explain to what extent, for what purposes, and on what legal basis we process personal data. We also indicate – if available – which third-party providers we use to receive your data. Finally, we inform you whether a third-country transfer occurs in the third-party provider's respective processing.
The provision of your personal data information is always voluntary. However, it may be that the respective functionality only works with providing your information (e.g., contact form).
We will not disclose your personal data to third parties without your consent unless this is permitted by law (e.g., because it is necessary for the performance of the contract).

Legal Bases for Processing

The processing of your personal data may be based in particular on the following legal bases:

Art. 6 (1) a GDPR: Consent for a specific processing operation

Art. 6 (1) b GDPR: Performance of a contract or pre-contractual measures

Art. 6 (1) c GDPR: Compliance with legal obligations

Art. 6 (1) f GDPR: Legitimate interests, provided interests, fundamental rights, and freedoms do not override

If we transfer personal data to a third country for processing, we ensure compliance with Art. 44 et seq. GDPR. We check whether an adequate level of protection is ensured before each transfer of personal data to third parties in a country outside the European Union ("EU") or the European Economic Area ("EEA"). An adequate level of protection can be ensured by adequacy decisions, standard data protection clauses, or other guarantees regulated in Art. 46 et seq. GDPR.

6.2 Erasure of Data

Insofar as no specific storage period is specified within this data protection notice, the data processed by us will be erased in accordance with the legal requirements as soon as their consent permitted for processing is revoked or other permissions cease to apply. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be limited to these purposes.

6.3 Security Measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account state of the art, the implementation costs, and the nature, scope, circumstances, and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.

The measures include safeguarding the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and responses to data compromise. We consider the protection of personal data as early as the development or selection of hardware, software, and processes per the principle of data protection through technology design and data protection-friendly default settings.

6.4 Transmission of Personal Data

During our processing of personal data, the data may be transferred to or disclosed to other bodies, companies, legally independent organizational units, or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

6.5 Website in General

6.5.1 Provision of the Website and Server Log Files

Scope of Processing:

When you visit our website, data is automatically processed that your browser transmits to our server. The following data may be collected:

  • Browser type and browser version
  • Browser type and browser version
  • Browser type and browser version
  • Browser type and browser version
  • Browser type and browser version

Scope of Processing:

When you visit our website, data is automatically processed that your browser transmits to our server. The following data may be collected:

Purpose: Provision of website, ensuring smooth connection, problem analysis, and evaluation of system security and stability.

Legal Basis: Art. 6 (1) f GDPR - Legitimate interest in providing website services in a technically flawless manner.

Storage Period: Log files stored for maximum 7 days, then deleted. Data needed for evidence retained until final clarification.

Recipients Netlify (VeraSafe United Kingdom Ltd., 37 Albert Embankment London SE1 7TL, United Kingdom)

6.5.2 Use of Cookies

We use cookies on our website. These are files that your browser automatically creates and that are stored on your IT system when you visit our site. When you visit our website for the first time, you will be shown "data protection settings" where you can manage cookie preferences.

Essential Cookies: Required for website functionality, authentication, and security. These cannot be disabled. Legal basis: Art. 6 (1) f GDPR (legitimate interest).

Non-essential Cookies: Analysis and marketing cookies to understand behavior and improve services. Legal basis: Art. 6 (1) a GDPR (consent via cookie banner).

Storage Period: Temporary cookies (session cookies) are deleted after closing browser. Permanent cookies remain stored and can be stored for up to two years.

6.5.4 Contact Options

You have the possibility to contact us by e-mail, telephone, chatbot, or other communication channels. We process contact data including name, email, telephone number, company name, IP address, and other personal data you provide.

Legal Basis: If inquiry relates to pre-contractual measures or existing contract: Art. 6 (1) b GDPR. Otherwise: Art. 6 (1) f GDPR (legitimate interest in responding to your request).

Recipients: Netlify Inc. (USA, secured by standard contractual clauses), HubSpot Inc. (USA, secured by standard contractual clauses), Gmail/Google Inc. (USA, secured by standard contractual clauses), Intercom Inc. (for chat, USA)

6.5.5 Newsletter

You have the possibility to contact us by e-mail, telephone, chatbot, or other communication channels. We process contact data including name, email, telephone number, company name, IP address, and other personal data you provide.

Legal Basis: Newsletter distribution: Art. 6 (1) a GDPR (consent). Newsletter tracking: Art. 6 (1) f GDPR (legitimate interest).

Provider: Mailchimp (The Rocket Science Group, LLC, USA, secured by standard contractual clauses)

6.5.6 Marketing Activities

You can request marketing documents such as case studies or product demonstrations.

Legal Basis: Art. 6 (1) a GDPR (consent) or Art. 6 (1) b GDPR (pre-contractual measures).

6.5.7 Application

We offer online application for job vacancies. We process master data, contact data, and application documents (cover letter, CV, certificates).

Legal Basis: Art. 6 (1) b, Art. 88 (1) GDPR with Section 26 (1) BDSG

Storage: 6 months after application process unless hired or consent for applicant pool

Provider: Personio (Personio GmbH & Co. KG, Munich, Germany)

6.5.8 Our Presence in Social Networks

NetworkProviderThird CountryGuarantees
FacebookMeta Platforms Ireland LimitedUSAStandard Contractual Clauses
FacebookMeta Platforms Ireland LimitedUSAStandard Contractual Clauses
FacebookMeta Platforms Ireland LimitedUSAStandard Contractual Clauses
FacebookMeta Platforms Ireland LimitedUSAStandard Contractual Clauses
FacebookMeta Platforms Ireland Limited-Standard Contractual Clauses

6.5.9 Integration of Third-party Services and Content

Within our online offer, we use content or service offers of third parties based on your consent within the meaning of Art. 6 (1) a GDPR to integrate content and services, such as videos or fonts. Third-party providers may use pixel tags for statistical or marketing purposes.

Intercom: We use Intercom, a messenger and communication platform. Provider: Intercom Inc, 55 2nd Street, 4th Floor, San Francisco, California 94105, USA. Users can send messages via live chat, email, SMS, or push messages.

Legal basis: Art. 6 (1) f GDPR (legitimate interest in optimally tailoring website to client interests).

7. Your Rights

In this section, we inform you about your rights with regard to the processing of your data. The exact scope of the right mentioned in each case can be found in the corresponding article of the GDPR. If you wish to exercise any of your rights, please contact us via email (dsb@secjur.com).

7.1 Right to Confirmation (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed by us.

7.2 Access (Art. 15 GDPR)

You have the right to access the personal data we have stored about you free of charge at any time and to receive a copy of this data in accordance with the statutory provisions.

7.3 Rectification (Art. 16 GDPR)

You have the right to request that inaccurate personal data concerning you be rectified. Furthermore, taking into account the processing's purposes, you have the right to request the completion of incomplete personal data.

7.4 Erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be erased immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not required.

7.5 Restriction of Processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the legal requirements is met.

7.6 Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance by us.

7.7 Objection (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out based on data processing in the public interest or based on our legitimate interest.

7.9 Complaint to a Supervisory Authority (Art. 77 GDPR)

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

8. Changes of the Data Protection Information

This privacy notice is currently valid and has the following status: July 2023.

If we further develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this data protection notice. You can access the current data protection information at any time here.