Privacy Policy
General information
This privacy policy explains which personal data is processed when you visit PathConnect websites or contact us. It applies to the website provided at pathconnect.de, pathconnect.eu, pathconnect.fr and pathconnect.nl.
Last updated: 21 September 2026
Controller
PathConnect GmbH
Zimmerstraße 3
76137 Karlsruhe
Germany
Managing directors authorised to represent the company: Joey Julian König and Moritz Busch
Email: info@pathconnect.de
Telephone: +49 1515 4184909
Hosting and server/access logs
We operate this website and the associated mail server on our own technical infrastructure in a data centre in Frankfurt am Main, Germany.
Data processed
Whenever a page is requested, the server infrastructure processes access data that is technically necessary. This may include the IP address, date and time, requested URL, HTTP method, response status and amount of data transferred, as well as the referrer, browser type and operating system.
Purposes and legal basis
Processing is necessary to deliver the website, ensure stable and secure operation, and detect attacks or misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our online service.
Retention
Server and access logs are generally deleted after no more than 30 days. Data required to investigate a specific security incident may be retained until the investigation and any follow-up measures are complete.
Contact form, email and telephone
The email address, subject and message are required in the contact form. Salutation, first name, last name and telephone number are optional. The information is transferred through a same-origin interface to our self-operated mail service, delivered to us by email and used to answer your enquiry. A confirmation of receipt is also sent to the email address provided.
To protect against automated submissions, we use the self-hosted, privacy-friendly ALTCHA security check. Your browser retrieves a short-lived computational challenge from captcha.pathconnect.de, solves it locally and sends the solution to captcha.pathconnect.de for verification. After successful verification, a signed confirmation is submitted with the form to our mail service and cryptographically checked again before the message is delivered. ALTCHA does not set tracking cookies or create user profiles. The IP address is processed temporarily for rate limiting and anonymized in access logs. For operation and error analysis, the mail service also logs the email address and subject; the retention period stated above applies to these application logs.
The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual measures. Other enquiries and protection against misuse are processed on the basis of Art. 6(1)(f) GDPR.
We generally delete non-contractual enquiries no later than twelve months after they have been finally dealt with. If a contract results or the message is business correspondence subject to retention requirements, the statutory retention periods apply. Data is disclosed only where necessary to handle the enquiry or where required by law.
Cookies and local storage
The website does not use analytics, marketing or tracking cookies and does not use services that require consent.
- NEXT_LOCALE: a technically necessary session cookie that stores the selected or detected language. It is deleted when the browser is closed.
- theme: an entry in the browser's localStorage that stores the selected light or dark display on the device. It remains until it is deleted through the browser settings.
These storage operations are used only to provide the explicitly requested display and language selection. They are permitted without consent under section 25(2)(2) TDDDG; where personal data is processed, the legal basis is Art. 6(1)(f) GDPR.
External content and links
The website does not load external scripts, web fonts, analytics tools, social-media plugins or embedded videos. Fonts and images are served by our own web server. A normal page view therefore does not transmit data to providers of such services.
The website contains links to additional services, including our LinkedIn and Mastodon profiles and appointment booking at hub.pathconnect.de. When you open a link, the destination receives connection data such as your IP address. LinkedIn and Mastodon are governed by the respective provider’s privacy policy; hub.pathconnect.de is operated by us and is covered by this privacy policy.
Data security
This website is transmitted in encrypted form via HTTPS. We use appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse.
Your rights
Subject to the statutory requirements, you have in particular the rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests.
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. To exercise your rights, contact info@pathconnect.de.
Changes to this privacy policy
We update this privacy policy when the website or the applicable legal requirements change.