1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is centerbit UG (haftungsbeschränkt), Ganghoferstraße 67, 83059 Kolbermoor, Germany. Email: info@centerbit.co.
2. Server log data
When you access this website, the hosting system processes data required to deliver and secure the service. This can include the requested page, date and time, transferred data, referrer, browser, operating system, and IP address. Processing is based on Article 6 (1) (f) GDPR and our legitimate interest in stable, secure website operation and abuse prevention.
3. Hosting and transport security
The public website is operated on infrastructure located in the European Union. Service providers may process technical data on our behalf under data-processing agreements. Data is transmitted over TLS-encrypted connections. The exact production provider and subprocessors are documented and reviewed as part of the public deployment.
4. Cookies and local storage
The public marketing pages currently do not use optional analytics, advertising, or cross-site tracking cookies. Technically necessary session cookies may be used for authorized access to the protected editorial system. Further details are provided in the cookie information.
5. Contact by email or phone
If you contact us, we process the information you provide to respond to the request and manage the associated relationship. The legal basis is Article 6 (1) (f) GDPR; where a request concerns a contract or pre-contractual measures, Article 6 (1) (b) GDPR also applies. We delete the data when the purpose is complete unless statutory retention obligations or legitimate follow-up needs require longer storage.
6. Protected editorial access
The Payload CMS administration area is restricted to authorized editors. Account identifiers, password hashes, session information, and editorial activity are processed to authenticate users, secure the service, and attribute content changes. The legal basis is Article 6 (1) (b) or (f) GDPR, depending on the user relationship.
7. No automated advertising profiles
We currently do not use Google Analytics, Meta Pixel, advertising profiles, or comparable marketing trackers on this public website. If that changes, we will update this policy and introduce a consent mechanism before optional processing starts.
8. Retention
We retain personal data only for as long as necessary for the relevant purpose, security, legal claims, or statutory retention. Technical logs are retained for a limited operational period unless an incident requires longer investigation. Commercial correspondence can be subject to statutory retention periods.
9. Your rights
Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. Consent can be withdrawn with effect for the future. You also have the right to lodge a complaint with a competent data-protection authority.
10. Questions and updates
For privacy questions, contact info@centerbit.co. We update this notice when processing activities, providers, or legal requirements materially change.
Last updated: 21 August 2026