Privacy Policy

atania GmbH Wirtschaftsprüfungsgesellschaft, Max-Herz-Ring 87, 22159 Hamburg (hereinafter referred to as “atania”), hereby provides information on the processing of personal data carried out by us.

Below, we have compiled the most important information regarding typical data processing activities, separated by categories of data subjects. For certain processing activities that only affect specific groups, the information obligation will be fulfilled separately.

Whenever the term “data” is used in the text, it exclusively refers to personal data within the meaning of the GDPR.

  1. Website Visitors
  2. Visitors of atania’s Social Media Profiles
  3. Communication partners and interested parties
  4. Rights of data subjects and additional information

 

1. Website Visitors

When using the website, certain information is automatically transmitted to the server of our website by the browser used on the end device for technical reasons.
These data are stored
and processed on our server.

We process the following data for the purpose of providing the requested website content,
ensuring the security of our IT infrastructure, troubleshooting,
enabling and simplifying searches on the website, and managing cookies.
A change of purpose is not planned.

The processed data is HTTP data: HTTP data is protocol data that
is generated for technical reasons when the Website is visited via the Hypertext Transfer Protocol (Secure) (HTTP(S)):
This includes IP address, type and version of your Internet browser,
operating system used, the page visited, the page previously visited (referrer URL),
date and time of the visit. HTTP(S) data also accumulates on the servers of service providers
(e.g. when requesting third-party content).

The legal basis for the processing is our legitimate interest in the technical operation
of an online presence (Art. 6(1)(f) GDPR).

The data are automatically provided by the browser of the data subject.

Recipients of the personal data are IT service providers which we use as processors within the
framework of a data processing agreement.

IP addresses are anonymized at the end of the session. Pseudonymized usage data are deleted no later
than 14 days thereafter.

Without the disclosure of personal data—such as the IP address— the use of the website
is not possible. Communication via the website is technically impossible without providing data.

 

2. Visitors of atania’s Social Media Profiles

atania maintains profiles on social media platforms. These platforms are operated by service providers
that process data necessary for the provision of such pages.

The purpose of data processing on our social media profiles is to provide engaging content
and interact with visitors on these platforms.
Depending on the service, usage data may also be analyzed to improve our social media
presence.

The processed data include content and usage data on the respective social media profiles.

Information and data displayed or shared on atania's social media profiles
may be accessible to the respective platform operator, its users,
or commissioned service providers.

Further details on data processing are described below:

2.1 LinkedIn

atania and LinkedIn (for users in the EU/EEA: LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Place, Dublin 2, Ireland) are joint controllers for the processing
of personal data related to the atania LinkedIn page.
The joint controller agreement
can be accessed here:


https://www.linkedin.com/legal/l/page-joint-controller-addendum
.

According to the agreement, LinkedIn is responsible for informing data subjects about the
processing activities.
The LinkedIn Privacy Policy is available
at:


https://www.linkedin.com/legal/privacy-policy
.

Data subjects may exercise their rights against either of the joint controllers
—atania and/or LinkedIn. Further information on the data
LinkedIn shares with atania can be found at:


https://www.linkedin.com/help/linkedin/answer/a547077/viewing-company-page-analytics?lang=en
.

The legal basis for processing is our legitimate interest
in analyzing usage data to improve the LinkedIn page (Art. 6(1)(f) GDPR).

 

3. Communication Partners and Interested Parties

The purpose of processing is the preparation and performance of a contractual relationship or
other communication. A change of purpose is not planned.

Processed data are name, contact details, communication content as well as time and
technical metadata of the communication.

The legal bases for processing your data are, in the case of contracts with natural persons, the
initiation of a contract or the performance of a contract (Art. 6 (1)(b) GDPR); in the case of contracts
with legal persons, our legitimate interest in communicating with the
relevant contractual contacts (Art. 6 (1)(f) GDPR); as well as, in all cases, compliance with legal obligations,
in particular tax and commercial law requirements (Art. 6 (1)(c) GDPR).
In the case of mere communication, the legal basis is our legitimate interest in
documenting communication processes (Art. 6 (1)(f) GDPR).

Contact details are actively provided by the data subject.
Communication metadata and communication data are collected automatically.

Contact and contract data may be transferred to other service providers, business partners
and authorities, insofar as this is necessary for the performance of the contract
or assignment. We also use service providers as processors within the framework of
a data processing agreement, especially for providing,
maintaining, and servicing IT systems.

Data of contracting parties and service providers will be deleted ten calendar years
after the termination of the contract or assignment. Inquiries and mere communications will be
automatically deleted after ten calendar years.

The processing of contact data for service providers and business partners is
necessary for the performance of the contract or assignment. If the data is not provided,
communication may be significantly impaired. For interested parties,
the provision of data is required. Without the provision of data, communication is not possible.

 

4. Rights of Data Subjects and Additional Information

  1. We do not use any methods of automated individual decision-making.
  2. You have the right to request information at any time about all your personal data which we are processing.
  3. If your personal data is incorrect or incomplete, you have the right to have it rectified and completed.
  4. You can request the erasure of your personal data at any time, as long as we are not bound by legal obligations that require or allow us to continue processing your data.
  5. If the applicable legal requirements are met, you can request a restriction to the processing of your personal data.
  6. You have the right to object to the processing, insofar as the data processing is based on profiling or direct marketing purposes.
  7. If the processing is carried out on the basis of the balancing of interests, you may object to the processing by stating reasons arising from your particular situation.
  8. If the data processing takes place on the basis of your consent or a contract, you have the right to a transfer of the data provided by you, insofar as the rights and freedoms of others are thereby not impaired.
  9. If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with future effect. The processing carried out prior to a revocation remains unaffected by the revocation.
  10. Moreover, you have the right to file a complaint at any time with a data protection supervisory authority,
  11. if you believe that data processing has been carried out in violation of the applicable law.


Last updated: December 2025