Privacy Policy

Privacy Policy
FGND Core GmbH

1. Controller

FGND Core GmbH
Kelvinstrasse 14, 50996 Cologne, Germany
Email: contact@core-privacy.com

2. Hosting

When you access our website, our website service provider processes server logs (e.g., IP address, date/time, URL/referrer, user agent, error codes) to ensure secure and stable operation (e.g., attack mitigation, troubleshooting).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).
Retention: Server logs are retained for up to 7 days and then deleted or anonymized. In case of specific security incidents, relevant logs may be retained only for the duration necessary to investigate and remedy the issue. Aggregated statistics without personal data may be kept longer.
Processor contract: We maintain a data processing agreement (Art. 28 GDPR).

3. Cookies & Consent

We use only technically necessary cookies unless stated otherwise. If we introduce analytics or other optional tools, we will ask for your consent first.

Legal bases: Necessary cookies: Art. 6(1)(f) GDPR
Analytics cookies: Art. 6(1)(a) GDPR (consent)
If enabled, we would process usage data with Google Analytics 4 (IP anonymization, EU-based processing where possible). Legal basis: consent (Art. 6(1)(a)). Transfers to the USA may occur under the EU–US Data Privacy Framework or Standard Contractual Clauses (Art. 46). You can withdraw consent anytime via the Cookie Settings.

5. Contact Form & Email

When you contact us (form or email), we process the data you provide (e.g., name, email, company, message) to handle your request and follow up.

Legal bases: Art. 6(1)(b) GDPR (pre-contractual steps/contract), and Art. 6(1)(f) GDPR (legitimate interest in efficient communication) where no contract exists.
Retention: We generally retain correspondence related to inquiries for up to 12 months after the matter is closed unless longer retention is required by law (e.g., commercial or tax records).

6. Careers / applications (Art. 88 GDPR; § 26 BDSG)

When you apply for a role with us, we process your application data (e.g., CV, cover letter, contact details, qualifications, references).

Purposes: Evaluation of your application, communication, possible hiring decision and onboarding.
Legal basis: § 26(1) BDSG (Germany; employment-related data), Art. 6(1)(b) GDPR (pre-contractual steps).
Recipients: Internal HR/management; processors (IT hosting/applicant-tracking if used).
Retention: Unsuccessful applications: 6 months after decision (defense of claims), then deletion.

7. Processors & Recipients

We use processors (Art. 28 GDPR) for hosting and operations (and, if applicable, applicant tracking, email delivery, analytics). We only share data with third parties where necessary for the purposes above or where we are legally obliged to do so.

8. International Transfers

If services process data outside the EU/EEA (especially the USA), transfers rely on an adequacy decision (e.g., EU–US Data Privacy Framework), Standard Contractual Clauses (Art. 46 GDPR), or other appropriate safeguards. Where necessary, we apply additional measures (e.g., access controls, pseudonymization).

9. Data Retention

We retain personal data only as long as necessary for the purposes described or as mandated by law; thereafter, data is deleted or anonymized. Specific periods are listed above for contact inquiries and applications.

10. Your Rights (GDPR)

You have the rights to access, rectification, erasure, restriction, data portability, and to object to processing based on Art. 6(1)(e)/(f) GDPR, as well as the right to withdraw consent at any time (without affecting prior lawfulness).

Direct marketing objection (Art. 21(2) GDPR): If we ever use your data for direct marketing, you can object at any time—we will then stop processing for marketing purposes.
Please contact: contact@core-privacy.com

11. Right to Lodge a Complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g., at your habitual residence or at our registered office.

12. Necessity of Providing Data

You are not legally required to provide personal data to merely visit the site; however, technical data is necessary for delivery. If you use the contact form or apply for a job, certain information is required to process your request/application; without it, we cannot handle your request.

13. No Automated Decision-Making

We do not use automated decision-making including profiling that produces legal effects concerning you or similarly significantly affects you.

14. Updates

We may update this Privacy Notice if services or legal requirements change. The version published here is the current one.