Privacy Policy
1. Introduction
The protection of your personal data is important to us. We process personal data confidentially and in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and the German Telecommunications and Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
This Privacy Policy explains what personal data we collect when you visit our website, how and why we process that data, the service providers we use, and the rights available to you.
2. Controller
The controller responsible for the processing of personal data on this website is:
makanta services GmbH
Meinekestr. 5
10719 Berlin, Germany
Represented by:
Silvana Marques Hensen
Email: silvana@makanta.com
3. Contact for Privacy Matters
If you have questions regarding privacy or the processing of your personal data, or wish to exercise any of your data protection rights, please contact:
Sven Hensen
makanta services GmbH
Meinekestr. 5
10719 BerlinGermany
Email: sven@makanta.com
4. General Information on Data Processing
Personal Data
“Personal data” means any information relating to an identified or identifiable individual within the meaning of Article 4 GDPR. This includes, for example, names, email addresses, IP addresses, device identifiers, and information about the use of a website where such information can be associated with an individual.
Legal Bases
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Article 6(1)(a) GDPR where you have given your consent;
Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract;
Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation; and
Article 6(1)(f) GDPR where processing is necessary for our legitimate interests or those of a third party, provided that your interests, fundamental rights, and freedoms do not override those interests.
Where information is stored on or accessed from your device through cookies or similar technologies, we also comply with Section 25 TDDDG. Non-essential cookies and similar technologies are used only where the required consent has been obtained.
Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or as required by applicable statutory retention obligations.
Once the purpose for processing no longer applies and no statutory retention obligation requires continued storage, the relevant data is deleted or anonymized.
5. Data Security
We use appropriate technical and organizational security measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorized disclosure, or access.
This website uses SSL/TLS encryption. You can generally recognize an encrypted connection by the “https://” prefix and the lock symbol displayed in your browser.
Please note that data transmission over the Internet, particularly email communication, cannot be guaranteed to be completely secure.
Website Operation and Hosting
6. Squarespace
Our website is created and hosted using services provided by:
Squarespace, Ireland Limited
Squarespace HouseShip Street GreatDublin 8, D08 N12C, Ireland
Squarespace provides the technical infrastructure required to operate and display this website.
When you visit our website, Squarespace may process technical information required to deliver, operate, secure, and maintain the website. This may include:
IP address;
browser type and version;
operating system and device information;
date and time of access;
pages and content accessed;
referring website or URL; and
technical information concerning the operation and security of the website.
We use Squarespace on the basis of our legitimate interest in providing a secure, reliable, and efficient website pursuant to Article 6(1)(f) GDPR.
Squarespace processes personal data on our behalf under a data processing agreement in accordance with Article 28 GDPR where it acts as our processor.
Squarespace may use affiliated companies and subprocessors, including entities located outside the European Economic Area. Where personal data is transferred internationally, appropriate safeguards are applied in accordance with applicable data protection laws.
Further information about Squarespace's processing of personal data is available in the Squarespace Privacy Policy:
https://www.squarespace.com/privacy
7. Squarespace Analytics and Website Usage Data
Squarespace may provide us with statistical information regarding the use of our website. Depending on our configuration and your cookie preferences, this may include information such as page views, traffic sources, approximate geographic information, browser and device information, and website interactions.
Where analytics require the storage of information on or access to information from your device, such processing takes place only after you have provided the required consent.
The legal basis for consent-based analytics is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time through the cookie settings available on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Cookies and Similar Technologies
8. Cookies
Our website uses cookies and similar technologies.
Cookies are small data files that are stored on your device when you visit a website. They may be necessary for a website to function or may be used for purposes such as remembering preferences, measuring website usage, or analyzing visitor activity.
We distinguish between:
Essential cookies, which are necessary to provide the website or a service expressly requested by you. These cookies may be used without consent where permitted under Section 25(2) TDDDG.
Analytics and tracking cookies, which are used to understand website usage or recognize visitors. These technologies are used only after you have given your consent where consent is legally required.
You can manage your cookie preferences through the cookie settings on our website. You may withdraw previously granted consent at any time.
You may also configure your browser to restrict or delete cookies. Please note that disabling essential cookies may affect the functionality of the website.
HubSpot
9. HubSpot CRM and Website Tracking
We use HubSpot as a customer relationship management (“CRM”) and sales and marketing platform.
Depending on the service and contractual arrangement, HubSpot services are provided by companies within the HubSpot group, including HubSpot entities in Germany, Ireland, and the United States.
We have integrated the HubSpot tracking code into our website. This enables us to understand how visitors use our website and, where applicable, to associate website activity with existing contacts in our CRM.
HubSpot may process information including:
IP address;
browser and device information;
date and time of visits;
pages viewed;
referring URLs;
session information;
cookie or visitor identifiers; and
interactions with our website.
HubSpot uses cookies and similar technologies to recognize a visitor across different visits to our website.
Where a visitor can be associated with an existing HubSpot contact, website activity may also be associated with that contact within our CRM. This allows us, for example, to understand whether existing business contacts have visited particular pages of our website and to better assess interest in our services.
We use non-essential HubSpot website tracking only on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time through the cookie settings on our website.
Typical HubSpot cookies may include cookies used to distinguish visitors, maintain sessions, and record website activity. The specific cookies used can change depending on the HubSpot configuration and services activated.
Further information about cookies used by HubSpot is available at:
10. Processing by HubSpot
Where HubSpot processes personal data on our behalf in connection with our CRM and subscription services, the processing is governed by a data processing agreement pursuant to Article 28 GDPR.
HubSpot may process personal data through affiliates and subprocessors in countries outside the European Economic Area, including the United States. International transfers are subject to appropriate safeguards under applicable data protection law, including, where applicable, European Commission Standard Contractual Clauses and other recognized transfer mechanisms.
In connection with certain services, including aspects of the HubSpot tracking code, HubSpot may also process certain information as an independent controller in accordance with its own privacy documentation.
Further information is available in:
HubSpot Privacy Policy:https://legal.hubspot.com/privacy-policy
HubSpot Data Processing Agreement:https://legal.hubspot.com/dpa
11. Calendly – Online Appointment Scheduling
We use Calendly to enable visitors to schedule meetings with us online.
The service is provided by:
Calendly LLC
United States
When you use the Calendly scheduling functionality on our website, Calendly may process personal data and technical information, including:
your name;
email address;
company or other information you choose to provide;
the date and time of the requested appointment;
information relating to the selected meeting type;
IP address;
browser and device information;
cookie and similar technology identifiers; and
information relating to your interaction with the Calendly scheduling interface.
The information you enter when scheduling an appointment is processed for the purpose of arranging, administering, and conducting the requested meeting.
Where the appointment relates to an existing or potential business relationship, the legal basis for processing is Article 6(1)(b) GDPR where the processing is necessary to take steps prior to entering into a contract or to perform a contract. In other cases, processing may be based on our legitimate interest in efficiently organizing and managing appointments pursuant to Article 6(1)(f) GDPR.
Calendly Cookies and Embedded Content
Calendly is integrated into our website and may use cookies and similar technologies when its scheduling functionality is displayed or used.
Where such technologies are not strictly necessary, Calendly is loaded and the relevant technologies are used only after you have provided the required consent.
The legal basis for such processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time through the cookie settings available on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Calendly may process certain data collected through cookies and similar technologies used in its embedded services as an independent controller.
International Data Transfers
Calendly is headquartered in the United States. Personal data may therefore be processed in the United States or other countries outside the European Economic Area.
Where required, international transfers are protected through appropriate safeguards under applicable data protection law, including the European Commission's Standard Contractual Clauses and other recognized transfer mechanisms.
Calendly's Data Processing Addendum forms part of its contractual terms and includes provisions governing international transfers and subprocessors.
Further information is available at:
Calendly Privacy Notice:https://calendly.com/legal/privacy-notice
Calendly Data Processing Addendum:https://calendly.com/legal/data-processing-addendum
Communications
12. Contacting Us
If you contact us by email, telephone, or another communication channel, we process the information you provide for the purpose of handling and responding to your inquiry.
This may include:
your name;
your email address;
your telephone number;
your company and position;
the content of your communication; and
any other information you choose to provide.
Where your communication relates to an existing contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.
For other business communications, processing may be based on our legitimate interest in responding to inquiries and maintaining business relationships pursuant to Article 6(1)(f) GDPR.
We retain correspondence only for as long as required for the relevant purpose and any applicable statutory retention obligations.
External Websites
13. Links to Third-Party Websites
Our website may contain links to external websites, including professional and social media platforms.
When you follow an external link, you leave our website. The operator of the external website is responsible for the processing of personal data on that website.
We have no control over the content, privacy practices, or data processing activities of third-party websites. Please consult the privacy information provided by the relevant website operator.
International Data Transfers
14. Processing Outside the European Economic Area
Some of our technology service providers or their subprocessors may process personal data outside the European Economic Area, including in the United States.
Where such transfers occur, we take appropriate measures to ensure a level of data protection consistent with the requirements of the GDPR.
Depending on the recipient and circumstances, such safeguards may include:
an adequacy decision of the European Commission;
participation in the EU-U.S. Data Privacy Framework where applicable;
European Commission Standard Contractual Clauses; or
other legally recognized transfer mechanisms.
Your Rights
15. Data Subject Rights
Subject to the applicable statutory requirements and limitations, you have the following rights regarding your personal data:
Right of access under Article 15 GDPR;
Right to rectification under Article 16 GDPR;
Right to erasure under Article 17 GDPR;
Right to restriction of processing under Article 18 GDPR;
Right to data portability under Article 20 GDPR;
Right to object under Article 21 GDPR; and
Right to withdraw consent at any time with effect for the future under Article 7(3) GDPR.
Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
To exercise your rights, please contact:
16. Right to Lodge a Complaint
You also have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Article 77 GDPR.
For makanta services GmbH, the relevant supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information(Berliner Beauftragte für Datenschutz und Informationsfreiheit)
You may also contact another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
Changes to this Privacy Policy
17. Updates
We may update this Privacy Policy from time to time to reflect changes in our website, services, technology providers, or applicable legal requirements.
The version published on this website is the current version.
Last updated: September 2026