Privacy policy

The controller within the meaning of the GDPR is Peak Atlas HQ GmbH, Eichhornstraße 5, 97070 Würzburg.

• Würzburg Local Court, HRB 17790
• Managing Director: Philipp Rückert
• VAT ID: DE456847573
• Email: contact@peak-atlas.com

Peak Atlas HQ GmbH is the management and operating services company of the Peak Atlas Group.

Depending on the processing, we rely in particular on the following legal bases:

• Art. 6(1)(a) GDPR — consent
• Art. 6(1)(b) GDPR — contract / pre-contractual
• Art. 6(1)(c) GDPR — legal obligation
• Art. 6(1)(f) GDPR — legitimate interests
• Art. 9(2) GDPR — special categories
• § 25(1) and (2) TDDDG — access to terminal equipment

We receive personal data in particular:

• Directly from you — forms, emails, appointments, contracts
• From your company or business partner
• From public business sources and registers
• From permitted B2B data and sales service providers
• From platform, payment and communication providers
• On behalf of our customers as part of projects

In the case of indirect collection, we provide information under Art. 14 GDPR within the statutory time limits.

Individual providers may process personal data outside the EU/EEA — only under Art. 44 et seq. GDPR.

• Adequacy decision of the EU Commission
• EU-U.S. Data Privacy Framework, where certified
• Standard contractual clauses of the EU Commission
• Additional technical and organizational safeguards
• Statutory exception in individual cases

When you visit our websites, technically necessary information is processed.

• IP address, date and time of access
• Page or file accessed, referrer URL
• Browser type, version, operating system
• Device and screen characteristics, data volume
• Access status and error messages

Legal basis: Art. 6(1)(f) GDPR — stability, security, abuse prevention. Tools used include Framer and Lovable.

If you contact us by form, email, phone or messenger, we process your details to handle your inquiry.

• Art. 6(1)(b) GDPR — pre-contractual/contractual
• Art. 6(1)(f) GDPR — other business inquiries
• Art. 6(1)(a) GDPR — where consent is given

Without the required contact details, we may not be able to handle the inquiry.

For online appointments, webinars and support, we use Google Meet, Zoom and Microsoft Teams, among others; for telephony, sipgate.

• Contact, participant and appointment data
• Communication content, audio, video and chat data
• Device, connection and quality data

Recordings only after clear information and with a sound legal basis.

We use business contact details to make potentially relevant companies aware of our B2B offerings.

• Publicly accessible company websites
• Professional networks and registers
• Referrals and existing contacts
• B2B data providers (including Apollo, Instantly, Pitchlane)

Object at any time at contact@peak-atlas.com — after an objection, no further marketing contact.

Analytics and marketing services that are not technically necessary are only activated after consent.

• § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR
• Where applicable, services from Google, Meta or LinkedIn
• Providers, purposes, cookies and retention periods in the CMP
• No profiling without consent

When you use a customer account, software or portal, we process in particular:

• Registration and account data
• Roles, permissions, security and log data
• Usage and function data
• Project, customer and financial data entered
• Support, billing and contract data

Tools used include Lovable, Softr, Framer, Notion, Google Workspace and Intercom.

When you use our Academy, community or event offerings, we may process:

• Registration and contact data
• Company and role details
• Participation, progress and usage data
• Posts, comments, audio, video and chat data
• Payment and contract data

Tools used include Memberspot, Google Workspace, Zoom, Softr and Notion.

For payments, we use in particular Stripe, banks and other payment service providers.

• Name and billing address, email
• Payment method and status
• Transaction and reference numbers
• Bank or card information
• Fraud and security features

Legal bases: Art. 6(1)(b), (c) and (f) GDPR.

In customer projects, we process data that the customer provides to us.

• As the customer’s processor
• As an independent controller
• Joint controllers in exceptional cases

For commissioned processing, we conclude a data processing agreement under Art. 28 GDPR.

Where applicable, we maintain public profiles on social and professional networks.

• For statistical evaluations, joint controllership may apply
• Processing by us: Art. 6(1)(f) or (b) GDPR
• The platforms’ own notices apply to platform processing
• Linking transmits data only when clicked

Under the GDPR, you have in particular the following rights:

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21)
• Withdrawal of consent
• Lodging a complaint with a supervisory authority (Art. 77)

To exercise your rights, a message to contact@peak-atlas.com is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority.

• Bavarian State Office for Data Protection Supervision (BayLDA)
• Promenade 18, 91522 Ansbach, Germany
• Alternatively, another competent authority

We update this policy when processing, the services used or legal requirements change.

The version published on our website at the relevant time applies.