Privacy Policy

Privacy Policy

This is a purely static website. It sets no cookies, embeds no analytics or tracking services, loads no fonts or other content from third-party servers and runs no JavaScript. A consent banner is therefore not required – there is nothing that consent could be given for.

1. Controller

RETIT GmbH Obere Lagerstr. 25 82178 Puchheim, Germany

Phone: +49 89 23964406 Email: info@retit.de

Managing Director: Prof. Dr. Andreas Brunnert

2. Visiting this website

Each time a page is requested, your browser transmits technically necessary data to the web server, which records it in a log file:

The IP address is shortened before it is written to the log file: for IPv4 the last block is dropped, for IPv6 everything from the fourth block onwards. What remains identifies the network, not the individual connection.

This data is processed solely to deliver the website, keep it stable and detect attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the site securely. The data is not combined with other sources and is not evaluated for advertising purposes.

Log files are deleted after 14 days at the latest.

3. Hosting

This website runs on a virtual server operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The provider processes the data described in section 2 on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Processing generally takes place within the European Union or the European Economic Area. Where a transfer to a third country is exceptionally required to deliver the service, the provider ensures that the conditions of Art. 44 et seq. GDPR are met.

There are no other recipients involved in operating this website. This website embeds no third-party content, sets no cookies, performs no audience measurement and does not pass your data on to third parties.

4. Contacting us

If you contact us by email or telephone, we process the information you provide in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding.

We use Microsoft 365 for our email mailboxes. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes contact and job application data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Mailbox content is stored and processed within the European Union and the EFTA states under Microsoft’s EU Data Boundary; for the mailboxes themselves, Microsoft has committed to Germany as the data region. Where data is nevertheless processed outside the European Union or European Economic Area in individual cases, for instance when a support request is handled, the transfer relies on the European Commission’s adequacy decision on the EU-US Data Privacy Framework, under which Microsoft Corporation is certified (Art. 45 GDPR), and additionally on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Telephony does not run through Microsoft. For our telephone line, our telecommunications provider is an independent controller under telecommunications law; it does not process data on our behalf. We do not record telephone calls.

We delete this data once your enquiry has been dealt with conclusively. Where the exchange constitutes business correspondence, the statutory retention period of six years under Section 257 HGB and Section 147 AO applies.

This website has no contact form.

5. Job applications

If you send us an application, we process the data submitted solely to carry out the application procedure. The legal basis for this is Section 26(1) BDSG in conjunction with Art. 88 GDPR.

If no employment relationship results, we delete the documents six months after the rejection decision is communicated to you. This retention period is based on Art. 6(1)(f) GDPR; our legitimate interest lies in defending against potential claims, in particular under the German General Equal Treatment Act.

We keep the documents longer only where you have consented, or where claims are actually asserted; in that case until the proceedings have concluded.

Applications reaching us by email are processed in the mailboxes named in section 4.

This website links to external resources such as GitHub or conference websites. These links are only followed when you click them; no data is transmitted to the respective provider beforehand. Data processing on the linked sites is the sole responsibility of their operators.

7. Your rights

You have the right to obtain information about the personal data we process (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing (Art. 21 GDPR).

Where you have consented to a processing operation – for example to the longer retention of application documents under section 5 – you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise these rights, contact info@retit.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

8. Right to object

Where we process data on the basis of a legitimate interest under Art. 6(1)(f) GDPR, you may object to that processing at any time. This concerns the server logs under section 2, the handling of enquiries under section 4 where it does not serve the initiation or performance of a contract, and the retention of application documents under section 5.

If you object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

No particular form is required. A message to info@retit.de is sufficient.

9. Automated decision-making

No automated decision-making, including profiling, takes place.

10. Status of this policy

This policy reflects the state of 1 September 2026. We update it when the website changes technically or when the legal requirements change. The current version is always available on this page.