1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Deal Engine GmbH, August-Bebel-Str. 26-53, 14482 Potsdam, Germany, email: hello@deal-engine.de, phone: +49 331 23 18 68 43.
2. Hosting and server log files
This website is hosted by Cloudflare (Cloudflare Germany GmbH, Rosental 7, 80331 Munich; parent company: Cloudflare, Inc., USA). When you visit the website, Cloudflare processes technically necessary data such as IP address, date and time of access, page accessed, browser type and operating system (server log files). Processing is based on our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR).
A data processing agreement is in place with Cloudflare. Where data is transferred to the USA, the transfer is based on the adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare is certified. Log data is stored only for as long as necessary for the purposes stated.
3. SSL encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in your browser bar.
4. Cookies and consent management
We use technically necessary storage to operate the website. Beyond that, we only use cookies and similar technologies for statistics and marketing if you have consented via our cookie banner (Art. 6 (1) (a) GDPR, Section 25 TDDDG).
Your choice is stored locally in your browser. You can withdraw consent at any time with effect for the future by deleting the website data in your browser or contacting us; the banner will appear again on your next visit.
5. Google Tag Manager and Google Analytics 4
We use Google Tag Manager and Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics and marketing tags are controlled via Google Consent Mode v2 and are only activated after you have given consent via the cookie banner (Art. 6 (1) (a) GDPR).
Google Analytics uses cookies and similar technologies to analyse the use of the website (e.g. pages visited, dwell time, approximate location based on truncated IP addresses). The IP address is truncated before storage. Data may be transferred to Google servers in the USA; Google LLC is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time (see Section 4).
6. Microsoft Clarity
With your consent we use Microsoft Clarity, a web analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA). Clarity creates anonymised heatmaps and session recordings (e.g. mouse and scroll movements, clicks) to understand and improve the use of the website. Input into form fields is automatically masked. Clarity is only loaded after you have given consent via the cookie banner (Art. 6 (1) (a) GDPR). Data may be transferred to Microsoft servers, including in the USA. You can withdraw your consent at any time (see Section 4).
7. Contact form and email contact
If you contact us via the contact form or by email, we process the data you provide (e.g. name, company, email address, message) to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
We use the Brevo service for the technical delivery of form messages (see Section 9).
8. Event registrations
When you register for our events (e.g. "KI & Croissants"), we process the data provided in the registration form (first name, last name, company, position, email address, optional details) to organise and run the event (Art. 6 (1) (b) GDPR). The data is stored in our email and contact management system Brevo; you will also receive a registration confirmation by email.
If you consent to photo and video recordings when registering, this processing is based on Art. 6 (1) (a) GDPR; consent can be withdrawn at any time with effect for the future. If you also wish to receive invitations to future events, we will use your email address for this purpose until you object.
9. Newsletter and email delivery via Brevo
We use Brevo, a service of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin (part of the Brevo group, Brevo SAS, Paris, France), to send our newsletter as well as system and confirmation emails. A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo; data is processed in the EU.
Newsletter sign-up uses a double opt-in process: you receive an email in which you confirm your registration. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the unsubscribe link at the end of each email. The newsletter is generally sent monthly.
10. Appointment booking via Calendly
Our contact page embeds the appointment booking tool Calendly by Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA. If you book an appointment, Calendly processes the data you enter (e.g. name, email address, selected time slot). The legal basis is Art. 6 (1) (b) GDPR (appointment scheduling at your request).
Calendly is certified under the EU-US Data Privacy Framework. Further information can be found in Calendly’s privacy policy at calendly.com/privacy.
11. Avatar videos (website-begruessung.de)
On some pages we embed personal welcome videos via the service website-begruessung.de. The video widget is only loaded once you have consented via the cookie banner or actively confirm loading at the respective location (two-click solution). Only then is data (e.g. your IP address) transferred to the provider. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time (see Section 4).
12. Fonts
The fonts used on this website are hosted locally on our server. No connection to servers of Google or other font providers is established when you visit the website.
13. Storage period
We process personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. The data is then deleted or anonymised. Where processing is based on consent, we process the data until you withdraw it.
14. Your rights
You have the following rights regarding your personal data: the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Access to Information of Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
As of: June 2026