Privacy Policy

Last updated: September 2026. This is a translation for convenience. In case of doubt the German version applies.

1. Controller

Caps & Collars GmbH
Geschwister-Scholl-Strasse 23
20251 Hamburg
Germany

Represented by its managing director Oliver Roessling
Email: [email protected]
Phone: +49 160 3460316

We have not appointed a data protection officer because the legal thresholds for doing so do not apply to us. For any privacy matter please write to the address above.

2. Hosting and delivery

This website runs on a server inside the European Union. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA sits in front of it as a content delivery network and reverse proxy. For technical reasons Cloudflare processes IP addresses and connection data in order to secure and speed up delivery.

The legal basis is our legitimate interest in secure and fast operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses are in place in addition.

3. No cookies, no tracking, no external fonts

This website sets no cookies. There are no analytics services, no ad networks and no social media plugins. Fonts are served from our own server only, there is no connection to Google Fonts or comparable services.

We store two settings in your browser's local storage, both chosen by you: your language and the light or dark colour scheme. They never leave your device and are required for the operation of the site as you requested it. You can delete them at any time in your browser settings.

4. Server log files

Every request is recorded with technical access data: IP address, time, requested address, amount of data transferred, browser type and operating system. This serves secure operation, troubleshooting and abuse prevention. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 30 days.

5. Contact form

When you use the contact form we process the data you enter: email address, chosen topic, your message and, if you provide one, a LinkedIn profile. We also store the time and the IP address of the request in order to detect abuse.

Your request is processed for two purposes:

It is stored on our server inside the European Union so that we can handle and track it.
It is delivered to us by email. For sending we use Resend (Plus Five Five, Inc., 2261 Market Street, San Francisco, CA 94114, USA) as a processor under Art. 28 GDPR. Your email address and the content of your message are transferred to the USA. The transfer is based on standard contractual clauses.

The legal basis is Art. 6(1)(f) GDPR (answering enquiries) and, where the enquiry concerns entering into a contract, also Art. 6(1)(b) GDPR.

We delete your request once it has been handled and no statutory retention obligations apply, at the latest six months after the last contact.

6. Applications

If you choose the topic "Application" we process your details solely to assess your application. The legal basis is Art. 6(1)(b) GDPR together with Section 26 BDSG. If we do not work together we delete your documents no later than six months after the process ends. If you would like us to keep your application longer, write to us and we will ask for your consent.

7. Recipients of your data

Your data is never sold and never passed on for advertising. Access is limited to the service providers named above within the scope of their task and to the people in our company who handle your request.

8. Your rights under the GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)

To exercise your rights please write to [email protected].

9. Right to lodge a complaint

You have the right to complain to a supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg, Germany.

10. Changes to this policy

We update this policy when the technology or the legal situation changes. The version published here applies.

Diese Datenschutzerklärung auf Deutsch