Privacy Policy

Draft for legal review. This policy is a draft based on our previous published policy and our current processing; it must be reviewed and approved by qualified legal counsel before publication. Last drafted: June 2026.

1. Controller

The controller responsible for the processing of personal data on this website is:

Perspectives Climate Group GmbH
Hugstetter Strasse 7
79106 Freiburg, Germany
Email: [email protected]

The controller has not designated a data protection officer. Questions about data protection reach the controller via the contact details above.

2. Personal data we collect

We collect personal data only when you actively provide it to us, in particular when you submit our contact form. The data we process in that case includes:

• your name;
• your email address;
• your organisation; and
• the content of your message.

We do not use tracking or advertising cookies. Our hosting provider may process limited technical data (such as your IP address and browser type) in server logs for the purpose of operating and securing the website. Specifically, server logs record the page visited, the date and time of access, the volume of data transferred, the referring source, the browser type, the operating system, and the IP address (where applicable, in shortened form). This processing is based on our legitimate interest in the stability and security of the website (Art. 6(1)(f) GDPR). The logs are not shared or used for any other purpose; we reserve the right to review them retrospectively if there are concrete indications of unlawful use.

3. Purposes and legal basis

We process contact-form data to receive and respond to your enquiry. The legal basis is your consent (Art. 6(1)(a) GDPR), given when you tick the consent checkbox, and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). If your enquiry relates to a contract or pre-contractual steps, the legal basis is Art. 6(1)(b) GDPR.

4. Service providers (processors)

We rely on the following third-party processors, each bound by a data processing agreement:

• Contact-form handling receives submissions from our contact form and forwards them to us. The form is handled on our own infrastructure (and our CRM for follow-up); we do not use a third-party form service. Our website and the systems that receive form submissions (workflow automation and CRM) run on a virtual server in Germany operated by our hosting provider, STRATO AG, Pascalstrasse 10, 10587 Berlin, Germany, under a data processing agreement pursuant to Art. 28 GDPR. Web analytics run on the same infrastructure (self-hosted Matomo, configured without cookies and with shortened IP addresses), so no analytics data leaves our systems.
• Mailchimp used to manage and send any newsletter or mailing-list communications you explicitly subscribe to. Mailchimp processes the email address and subscription data you provide. This website does not currently offer a newsletter sign-up; this applies only to mailing-list subscriptions made previously. Mailchimp (The Rocket Science Group LLC, USA) is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection on the basis of an adequacy decision of the European Commission.

Where a processor transfers data outside the European Economic Area, such transfers are safeguarded by appropriate measures (for example, the EU-US Data Privacy Framework or the EU Standard Contractual Clauses).

5. Retention

We retain contact-form data only for as long as necessary to handle your enquiry and any resulting correspondence, and thereafter for the periods required by applicable statutory retention obligations. When no longer required, the data is deleted.

6. Your rights

Subject to the conditions of the GDPR, you have the right to:

• Access to the personal data we hold about you (Art. 15 GDPR).
• Rectification of inaccurate or incomplete data (Art. 16 GDPR).
• Erasure of your data where legal grounds apply (Art. 17 GDPR).
• Restriction of processing in certain circumstances (Art. 18 GDPR).
• Notification of any rectification, erasure, or restriction to recipients of your data (Art. 19 GDPR).
• Data portability: receiving your data in a structured, machine-readable format (Art. 20 GDPR).
• Objection to processing based on legitimate interests (Art. 21 GDPR).
• Withdrawal of consent at any time, without affecting prior lawful processing (Art. 7(3) GDPR).
• Lodging a complaint with a supervisory authority (Art. 77 GDPR).

To exercise any of these rights, contact us at [email protected].

7. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Data submitted through this website is transmitted over an encrypted (TLS) connection.

8. Changes to this policy

We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available on this page.

9. Contact

For any questions about this privacy policy or our handling of personal data, please contact us at [email protected] or by post at the address listed under section 1.