Last updated: 24th September 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. The Company is the controller responsible for the processing described in this Privacy Policy under the General Data Protection Regulation (GDPR). This Privacy Policy applies to the public Website and related communications.
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. The information collected depends on what You provide through Our website forms or by email and may include:
Providing information is voluntary and is not a statutory requirement. Fields marked as required are needed to handle Your request; without them, We may be unable to respond or provide the requested service. Other fields are optional.
Usage Data
Technical Usage Data is processed automatically when using the Service. Additional data for website analytics is collected only with Your consent, as explained below.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of Our Service that You visit, the time and date of Your visit, referring page where transmitted, operating-system information and other diagnostic or security data. For consent-based analytics, this also includes time spent on pages, interactions, approximate location and pseudonymous browser identifiers.
When You access the Service by or through a mobile device, technical information may include the type of mobile device You use, its operating system and the type of mobile Internet browser You use.
We may also collect information that Your browser sends whenever You visit Our Service or submit a form, including the submission time and originating page.
We use Cookies and similar technologies to operate Our Service, remember Your privacy choices and, with Your consent, understand how the Website is used.
Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device for their stated lifetime or until deleted, while Session Cookies are deleted as soon as You close Your web browser.
The purposes and legal bases are as follows:
You may accept or reject optional Cookies and change or withdraw Your consent at any time through Cookie settings in the Website footer. Withdrawal does not affect the lawfulness of processing before withdrawal. Optional analytics consent is not required to contact Us or submit a request.
For information about the Cookies in use, including their providers, purposes and lifetimes, please open Cookie settings.
The Company may use Personal Data for the following purposes:
We may share Your personal information in the following situations:
For the Website and related communications, We use the following Service Providers:
| Service Provider | Purpose |
|---|---|
| Cloudflare, Inc. (United States) | Website hosting, content delivery, security and form-processing infrastructure, including the Cloudflare Turnstile check that distinguishes people from automated programs when a form is submitted. |
| Plus Five Five, Inc., trading as Resend (United States) | Delivery of website-enquiry emails, including message contents and delivery information. |
| Attio Limited (United Kingdom) | Customer relationship management, including contact details, enquiries and related correspondence. Company names may be supplied by Attio using the company domain You provide. |
| Usercentrics A/S, providing Cookiebot (Denmark) | Cookie-consent management and consent records. |
| Google Ireland Limited (Ireland), with Google LLC (United States) | Google Analytics 4 and Google Tag Manager. |
| Providers of hosted business email and associated IT administration services | Receipt, storage and administration of business correspondence. |
Personal Data is accessible to authorised Company personnel where needed for these purposes. Where Service Providers process Personal Data on Our behalf, the processing is governed by arrangements under Article 28 GDPR. Their authorised subprocessors may provide supporting services. International processing is described in "Transfer of Your Personal Data" below.
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with Our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes, and enforce Our legal agreements and policies.
The retention period depends on the type of information and the purpose:
Where records are subject to mandatory commercial or tax retention under Section 257 HGB or Section 147 AO, We retain the relevant records for the applicable statutory period. Qualifying commercial or business correspondence is generally retained for six years from the end of the calendar year in which it was received or sent. Other information is not retained solely because a related record is subject to such a duty.
Limited records necessary for legal claims may be retained until the applicable limitation period expires or relevant proceedings conclude. Records retained solely for a legal obligation or claim are restricted to those purposes.
Your information, including Personal Data, is processed at the Company's operating offices and in other places where the parties involved in the processing are located. The Service Providers described above operate internationally. Processing may therefore involve transfers outside the European Economic Area, particularly to the United States and the United Kingdom.
Where Personal Data is transferred outside the European Economic Area, We rely on an applicable European Commission adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR:
You may contact Us at security@cellbyte.com for information about the safeguards relevant to Your data or to request a copy.
You have the right to request deletion of the Personal Data that We have collected about You, subject to the conditions in Article 17 GDPR. Please note, however, that We may need to retain certain information where a legal exception applies, including a legal obligation or the establishment, exercise or defence of legal claims.
You may contact Us using the details below to request deletion or exercise Your other data protection rights.
Subject to the conditions in the GDPR, You also have the right to:
Where We process Your Personal Data under Article 6(1)(f) GDPR, You have the right to object on grounds relating to Your particular situation under Article 21 GDPR. We will stop that processing unless We demonstrate compelling legitimate grounds that override Your interests, rights and freedoms, or the processing is necessary for legal claims.
You may lodge a complaint with a data protection supervisory authority, particularly in the EU country of Your habitual residence, place of work or the alleged infringement. The supervisory authority responsible for private-sector organisations in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred where necessary and legally permitted. Such processing is based on Our legitimate interests under Article 6(1)(f) GDPR, subject to Your rights and interests. We will provide any information required by applicable data protection law.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency). Such disclosure takes place only where permitted or required by applicable law, including Article 6(1)(c) GDPR for a legal obligation.
The Company may disclose Your Personal Data where necessary and legally permitted to:
Depending on the circumstances, the legal basis is Article 6(1)(c) GDPR for legal obligations or Article 6(1)(f) GDPR for Our legitimate interests in protecting rights, preventing misuse and establishing, exercising or defending legal claims, subject to Your rights and interests.
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. We use appropriate technical and organisational measures to protect Your Personal Data in accordance with Article 32 GDPR, but cannot guarantee absolute security.
Our Service is intended for business professionals and is not directed to children. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy. Where applicable law requires additional information or consent, We will provide that information or obtain that consent.
You are advised to review this Privacy Policy periodically for any changes.
If You have any questions about this Privacy Policy, You can contact Us by email at info@cellbyte.com.
For data protection enquiries or to exercise Your rights, contact Our Data Protection Officer, Samuel Moreira, at security@cellbyte.com. You may also write to the Company at Westenriederstraße 10-12, 80331 Munich, Germany, marked "Data Protection Officer".