Privacy Policy

Introduction

We comply with the requirements of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection regulations in Germany.

1. Data Controller

The data controller responsible for the processing of data on this website is:

Infinium Global GmbH
Adersstr. 59, 40215, Düsseldorf, Germany
Phone: +49 172 686 90 66
Email: info@infinium-global.de
VAT-ID: DE323119951

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the details above.

2. What Data We Collect

We collect the following types of personal data when you use our website:

• Contact Information: When you submit a contact form or make an inquiry, we collect your name, email address, and any other information you voluntarily provide.

• Usage Data: We automatically collect certain data when you visit our website, including your IP address, browser type, device information, pages viewed, and the date and time of your visit.

• Cookies: We use cookies and similar technologies to collect information about your browsing behavior. For more information, please see Section 10 (Cookies) below.

3. Purpose of Data Collection

We collect and process your personal data for the following purposes:

• Communication: To respond to your inquiries and provide customer support.

• Improvement of Website: We use usage data to analyze traffic, improve the functionality of our website, and provide a better user experience.

• Compliance: To comply with our legal obligations under applicable data protection and consumer protection laws.

4. Data Processing Agreements (DPAs)

We work with third-party service providers and have Data Processing Agreements (DPAs) in place to ensure compliance with Article 28 of the GDPR. These agreements govern how our service providers handle personal data on our behalf. We ensure that when data is transferred outside the European Economic Area (EEA), adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission. These measures ensure that your data is protected according to the same standards as within the EU.

5. Legal Basis for Data Processing

The legal basis for processing your personal data is as follows:

• Consent (Art. 6(1)(a) GDPR): Where you have given your consent, for example to analytics cookies via our cookie banner, we process your data on that basis. You can withdraw your consent at any time.

• Contractual Obligations (Art. 6(1)(b) GDPR): When you contact us or purchase services from us, we process your data to fulfill the contract or pre-contractual requests.

• Legitimate Interests (Art. 6(1)(f) GDPR): We process your usage data for website security and performance optimization based on our legitimate interest in improving our services.

• Legal Obligations (Art. 6(1)(c) GDPR): We may process your data to comply with legal obligations, such as tax and accounting regulations.

6. Data Retention

We store your personal data only as long as it is necessary for the purposes outlined in this privacy policy or as required by law.

For example:

• Contact Information: Stored until you request its deletion or the purpose for its collection is fulfilled.

• Usage Data: Stored for 14 months for analytical purposes unless a longer retention is required by law.

7. Data Sharing

We may share your personal data with third parties under the following circumstances:

• Service Providers: We work with third-party service providers (such as hosting providers or analytics tools) who process data on our behalf. We have data processing agreements (DPAs) in place with all third parties to ensure compliance with GDPR.

• Legal Obligations: We may share your data if required by law, such as for tax or legal reporting obligations.

8. Data Transfers Outside the EU

If we transfer your personal data to a third party outside the European Economic Area (EEA), we will ensure that the recipient provides an adequate level of data protection, either through EU Standard Contractual Clauses or by other means recognized under GDPR.

9. Your Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR): You have the right to request access to the personal data we hold about you.

• Rectification (Art. 16 GDPR): You can request that we correct any inaccurate or incomplete personal data.

• Erasure (Art. 17 GDPR): You can request the deletion of your personal data under certain conditions.

• Restriction of Processing (Art. 18 GDPR): You have the right to restrict the processing of your personal data in certain circumstances.

• Data Portability (Art. 20 GDPR): You can request that we provide your personal data in a structured, commonly used, and machine-readable format.

• Objection (Art. 21 GDPR): You have the right to object to the processing of your personal data based on our legitimate interests.

• Withdrawal of Consent: If you have given us consent to process your data, you can withdraw it at any time without affecting the lawfulness of the processing before the withdrawal.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.

To exercise these rights, please contact us at info@infinium-global.de

10. Cookies

Our website is hosted by Squarespace. Squarespace sets cookies that are strictly necessary for the website to function and to keep it secure (Section 25(2) TDDDG). These cookies do not require your consent. Any other cookies, for example for statistics or analytics, are only set if you have given your consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw or change your consent at any time using the cookie settings link at the bottom of the page, or by deleting cookies in your browser settings.

11. Security

We take appropriate technical and organizational measures to ensure the security of your personal data and to protect it from unauthorized access, loss, or disclosure. These measures include SSL encryption, secure storage, and regular security reviews.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via our website or by direct communication.

Last Updated: 30/10/2026