Privacy Policy

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information, please refer to the sections below.

Data collection on this website

Data processing on this website is carried out by the website operator (see “Information about the responsible party”). Some data is collected when you provide it to us, for example via our contact form. Other data (primarily technical data such as your browser, operating system or the time of access) is collected automatically by our hosting provider’s IT systems when you visit the site.

This website does not use advertising or tracking cookies, no analytics such as Google Analytics, and does not embed fonts or maps from third-party servers. We do not use any technologies for cross-site or cross-device recognition.

What are your rights regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke it at any time with effect for the future. In addition, under certain circumstances you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding this and other questions on data protection.

We host the content of our website with the following provider:

Vercel

The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). When you visit our website, Vercel, acting as our processor, processes technical access data (including your IP address, the requested page, date and time of access, volume of data transferred, referrer, and browser and operating system type) in order to deliver the website, ensure its stability and security, and defend against attacks.

Vercel is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably, quickly and securely as possible.

Processing may also take place in the USA. Vercel is certified under the EU-US Data Privacy Framework (DPF); in addition, the transfer is based on the EU Commission’s Standard Contractual Clauses. For details, see Vercel’s privacy policy: https://vercel.com/legal/privacy-policy.

Data processing agreement

We have concluded a data processing agreement (DPA) with the provider named above. This is a contract required by data protection law which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. We point out that data transmission over the internet (e.g. communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information about the responsible party (controller)

The party responsible for processing data on this website is:

Habanero Networks GmbH Josef-Obenhin-Str. 4 80634 Munich Germany Email: info@habanero-networks.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted, unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once those reasons cease to apply.

Legal bases for processing

Where you have consented to processing, we process your personal data on the basis of Art. 6(1)(a) GDPR and/or § 25(1) TDDDG insofar as consent covers the storage of cookies or access to information on your device. Consent can be revoked at any time. Where your data is required for the performance of a contract or pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. To fulfil legal obligations, we process data on the basis of Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR.

Recipients of personal data

In the course of our business activities, we work with various external parties (e.g. our hosting provider and our email provider). This sometimes requires the transfer of personal data to these parties. We only pass on personal data where this is necessary for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest, or where another legal basis permits it. When using processors, we only pass on data on the basis of a valid data processing agreement.

Revocation of your consent

Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The lawfulness of the data processing carried out until revocation remains unaffected.

Right to object (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged breach. The authority responsible for Habanero Networks GmbH is the Bavarian State Office for Data Protection Supervision (BayLDA).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Information, correction and deletion

Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing and, where applicable, a right to correction or deletion of this data. You can contact us at any time regarding this and other questions.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing applies in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.
• If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the assertion, exercise, or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line.

Objection to promotional emails

We hereby object to the use of contact data published within the framework of the Impressum obligation for sending unsolicited advertising and information materials. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam emails.

Cookies

This website only uses technically necessary cookies. In particular, the language system may store a functional cookie (“NEXT_LOCALE”) that remembers your chosen language. This cookie is technically necessary to provide the service you expressly requested (display in your language); it is stored on the basis of § 25(2)(2) TDDDG and does not require consent. We do not use marketing or analytics cookies. A cookie banner is therefore not required.

Server log files

The provider of the pages (Vercel, see “Hosting”) automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. Collection takes place on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and security of our website.

Contact form

If you send us enquiries via the contact form, your details from the form (name, company, email address, telephone number, subject and message) will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. The enquiry is delivered via our own email system (Microsoft 365, see “Microsoft 365”); we do not use an external form or mail-delivery service for this. We do not pass on this data without your consent.

Processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR). The data remains with us until you request deletion, revoke your consent, or the purpose for storage ceases to apply; mandatory statutory retention periods remain unaffected.

Enquiry by email or telephone

If you contact us by email or telephone, your enquiry including all resulting personal data (name, request) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. Processing is based on the same legal bases as for the contact form.

Vercel Speed Insights

We use the “Speed Insights” service of Vercel Inc. (address see “Hosting”) to measure and improve the loading speed and rendering quality of our website (so-called Web Vitals). This records aggregated technical performance metrics as well as information such as the page accessed, the approximate connection type, and browser and device type.

Speed Insights works without cookies and without storing information on your device; there is no cross-site or cross-device recognition of individual users. Consent under § 25 TDDDG is therefore not required. Processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the fast and technically flawless provision of our website. The information in the “Hosting” section on third-country transfer and safeguards (DPF, Standard Contractual Clauses) applies accordingly. Further information: https://vercel.com/legal/privacy-policy.

Vercel Web Analytics

We also use the “Web Analytics” service of Vercel Inc. (address see “Hosting”) to statistically evaluate the use of our website, such as page views, referral sources, approximate region of origin, and browser and device type. The evaluation is carried out exclusively in aggregated, anonymous form; we cannot draw conclusions about individual persons.

Web Analytics works without cookies and without storing information on your device. To distinguish page views within a single visit, only a transient, non-traceable identifier is derived from transmitted request data, which expires after a short time; there is no cross-site or cross-device recognition of individual users. Consent under § 25 TDDDG is therefore not required. Processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in improving our information offering in line with demand. The information in the “Hosting” section on third-country transfer and safeguards (DPF, Standard Contractual Clauses) applies accordingly. Further information: https://vercel.com/docs/analytics/privacy-policy.

Storyblok (content management system)

We manage the editorial content of this website (text and images) via the content management system of Storyblok GmbH, Peter-Behrens-Platz 10, 4020 Linz, Austria. The content is retrieved server-side by us and delivered to you via our hosting provider; images are optimised and served via our own domain. During a normal visit, your browser does not establish a direct connection to Storyblok. Use is based on Art. 6(1)(f) GDPR (legitimate interest in efficiently maintaining our website); a data processing agreement is in place with Storyblok. The server location is within the European Union. Further information: https://www.storyblok.com/trust-center.

Microsoft 365

For receiving and sending email, for example to handle enquiries from the contact form, we use Microsoft 365 provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes the resulting communication data as our processor; processing in third countries (USA) cannot be excluded and is based on the DPF and Standard Contractual Clauses. The legal basis is Art. 6(1)(f) GDPR or, for contract-related enquiries, Art. 6(1)(b) GDPR.

External links (LinkedIn, Google Maps)

Our website contains links to external services, in particular to our LinkedIn profile and to Google Maps for directions. These are simple links and not embedded content (“plugins”), no scripts from these providers are loaded and no data is transferred to them unless you click the link. Only when you follow such a link do you reach the respective provider’s page, for which their own privacy policies apply (LinkedIn: LinkedIn Ireland Unlimited Company; Google Maps: Google Ireland Limited).

On our careers page we display open positions. We retrieve the job list server-side from the public feed of our applicant management system; no personal data about you is transferred to the provider in the process.

If you apply for a position, you will be redirected to the hosted careers portal of Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. You enter your application data there; it is processed by Personio on our behalf. We use this data exclusively to carry out the application process. The legal basis is § 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR (initiation of an employment relationship); otherwise Art. 6(1)(f) GDPR.

If no employment relationship is established, application data is generally deleted no later than six months after the process is concluded, unless you have consented to longer storage (e.g. for a talent pool) or statutory retention obligations apply.