Privacy Policy
How we collect, use, and protect your personal data in compliance with GDPR and applicable privacy laws.
Last updated: 16 September 2026
1. Controller and data protection officer
This policy explains what happens to personal data when you visit swobbee.com. It describes what we actually do — not what a website of this kind might do.
Controller under Art. 4(7) GDPR
Swobbee GmbH · Johann-Hittorf-Straße 8 · 12489 Berlin · Germany
Phone +49 30 587 04 70 00 · info@swobbee.com
Managing directors: Thomas Duscha, Ludwig Speidel · Amtsgericht Charlottenburg, HRB 185134 B
Data protection officer
Kevin Goebel · k.goebel@swobbee.com
Postal address as above, marked „Datenschutzbeauftragter“.
2. What this website does not do
We say this first because it answers most of the questions people have:
- No analytics and no tracking. There is no Google Analytics, no Matomo, no advertising pixel and no other measurement tool on this site.
- No cookies. The site does not set a single cookie.
- No geolocation. We do not look up your location from your IP address. Which region you see is decided by what you click, and by nothing else.
- No fonts or scripts from third parties. Fonts are served from our own domain. Nothing is loaded from Google.
- No profiling and no automated decision-making under Art. 22 GDPR.
3. Server log data
When you open a page, your browser necessarily transmits data to the server that delivers it. Our hosting provider records this in a log file: IP address, date and time, the page requested, the referring page, browser and operating system, and the amount of data transferred.
Purpose: delivering the site, operational security and error analysis. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a site that works and is not abused. Retention:
4. Storage on your device
Name: swobbee_region — stored in your browser’s sessionStorage, not as a cookie.
Content: the value eu or us — whichever region you selected.
Duration: until you close the browser tab. It is not transmitted to us and does not identify you.
Legal basis: § 25(2) no. 2 TDDDG. Storing the choice you just made is necessary to provide the service you asked for, so it needs no consent. You can clear it at any time in your browser settings.
Nothing else is written to your device.
5. Contact forms
On our contact and partner pages you can send us an enquiry. We process the details you enter there — name, organisation, email address, country, role and your message — solely in order to answer you.
Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a contract or its initiation, otherwise Art. 6(1)(f) GDPR — our legitimate interest in answering enquiries addressed to us. Providing the data is voluntary; without it we cannot reply.
Processor: Formspree, Inc., United States. The form is submitted to Formspree, which forwards it to us by email.
Transfer to a third country: this means your data is transferred to the United States. The transfer is based on the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR.
No data is transmitted before you press the send button.
Retention: we keep enquiries for as long as needed to deal with them, and afterwards for up to three years so that we can follow up on the exchange. Statutory retention obligations under commercial and tax law remain unaffected.
6. Job applications
Applications reach us by email at the address given in the job advertisement. We process the documents you send in order to assess your application. Legal basis: § 26(1) BDSG together with Art. 6(1)(b) GDPR.
Retention: if we do not make an offer, we delete your documents six months after the process ends. That period covers the limitation period under the German General Equal Treatment Act. We keep them longer only if you have agreed to be considered for future roles.
7. Video
Our European page embeds a video hosted on YouTube. It is not loaded when the page opens. You see a preview with a play button, and only when you press it does your browser connect to youtube-nocookie.com. From that moment YouTube receives your IP address and can store information on your device. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG — your consent, given by pressing play. You can withdraw it by reloading the page without pressing play.
8. Service providers
- Form delivery: Formspree, Inc., United States — see section 5
- Video: Google Ireland Limited — only after you press play, see section 7
Where a provider processes personal data on our behalf, we have a data processing agreement in place under Art. 28 GDPR.
9. Your rights
Under the GDPR you have the right to:
- Access (Art. 15) — ask what data we hold about you
- Rectification (Art. 16) — have inaccurate data corrected
- Erasure (Art. 17) — have data deleted
- Restriction (Art. 18) — have processing limited
- Data portability (Art. 20) — receive your data in a structured format
- Withdraw consent (Art. 7(3)) — with effect for the future
Right to object under Art. 21 GDPR. Where we process data on the basis of a legitimate interest — that is the server logs in section 3 and, in part, the contact forms in section 5 — you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, write to privacy@swobbee.com or to our data protection officer at k.goebel@swobbee.com.
Right to lodge a complaint (Art. 77 GDPR). You may complain to a supervisory authority, in particular in the member state of your residence or workplace. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit · Alt-Moabit 59–61 · 10555 Berlin · Germany
10. Data security
The site is delivered over an encrypted connection (HTTPS/TLS). We use access controls, keep our systems updated and train the people who work with personal data. No system can be fully secure; we continuously improve our safeguards.
11. Children
This website is not directed at children. We do not knowingly process data of persons under 16. If you believe we have, please tell us and we will delete it.
12. Changes to this policy
We update this policy when our processing changes or the legal position does. The current version always applies, and the date at the top of this page tells you when it was last revised.