We only set technically necessary cookies. The Spotify podcast player is loaded only with your consent. Privacy ·

Skip to content
IMBEO
deen

Privacy policy

Thank you for your interest in this privacy policy. It applies to imbeo.de (as well as imbeo.eu and imbeo.com.tr), operated by IMBEO®, İlkay Özkısaoğlu, Burgstallring 35b, 95517 Seybothenreuth, Germany ("we", "us"). We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG, TDDDG).

1. Controller

İlkay Özkısaoğlu, Burgstallring 35b, 95517 Seybothenreuth, Germany.
Phone: +49 (9275) 972 441 · E-mail: info@imbeo.de

2. Hosting and server log files

This website is hosted by Netlify, Inc., San Francisco, USA ("Netlify") and delivered via its content delivery network. When you visit it, Netlify automatically processes information transmitted by your browser (IP address, date and time, page accessed, referrer URL, browser type and version, operating system). This data is processed solely to ensure trouble-free operation and to improve security (Art. 6 (1) (f) GDPR) and is deleted after a short period.

Netlify acts as our processor under Art. 28 GDPR. Any resulting transfer to the USA is safeguarded by the EU-U.S. Data Privacy Framework and EU standard contractual clauses. We serve fonts, images and scripts ourselves via this hosting; no external font or icon services are loaded.

3. Cookies and consent management

On your first visit, a cookie banner asks for your consent to the use of non-essential cookies. Your choice is stored in the technically necessary cookie "imbeo_cookie_consent" for 180 days. We use the following categories:

  • Technically necessary – required to operate the website and to store your cookie preferences (cookie: imbeo_cookie_consent). Legal basis: Art. 6 (1) (f) GDPR and Section 25 (2) TDDDG.
  • External media – only with your consent: the embedded Spotify podcast player (see below). Without consent, a placeholder is shown.

You can change or withdraw your consent at any time with effect for the future via the button, which is also available in the footer of every page.

4. Analytics and marketing

We currently do not use any analytics, tracking or advertising tools on this website (e.g. no Google Analytics and no advertising pixels). Should we use such services in the future, we will ask for your consent beforehand and update this privacy policy.

5. Embedded podcast player (Spotify)

On the "Media" page we embed the podcast player of Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden ("Spotify"). It is only loaded once you consent to the "External media" category or load the content once. When loading, data (e.g. IP address, browser data, page visited) is transmitted to Spotify, and Spotify may set cookies (e.g. sp_t, sp_landing). A transfer to the USA cannot be ruled out; Spotify bases it on EU standard contractual clauses. More information: Spotify Privacy Policy.

Legal basis: your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG), revocable at any time via the cookie settings.

6. Contact form and e-mail contact

If you contact us via the contact form or by e-mail, we process your details (name, company, e-mail, phone, topic, message) to handle your enquiry and for follow-up questions. The transmission to our mailbox is encrypted. Name, e-mail address and message are required; without them we cannot answer your enquiry. All other details are optional. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in answering). The form contains a field invisible to humans for spam protection; no captcha service is used. To prevent abuse, requests are limited per IP address. We store the enquiry until it has been fully processed and no statutory retention obligations apply.

We run our mailbox on Microsoft 365 by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as our processor (Art. 28 GDPR). Any resulting transfer to the USA is safeguarded by the EU-U.S. Data Privacy Framework and EU standard contractual clauses.

7. Campaign parameters (UTM)

If you reach our website via a link containing campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, li_fat_id), we store these parameters in your browser's session storage for the duration of your visit. They are deleted automatically when you close the tab. If you send us a message via the contact form, the parameters are attached so that we can understand through which campaign you found us. Legal basis: legitimate interest in measuring the effectiveness of our marketing activities (Art. 6 (1) (f) GDPR). No cookies are used for this and no data is shared with third parties.

8. Social media presences

We maintain presences on LinkedIn®, YouTube, Spotify and letscast.fm on the basis of our legitimate interest. Our website merely links to these presences; no social media plugins that transmit data on page load are embedded. The only embed is the Spotify player described above, and only after your consent. Only when you click a link does the respective platform process your data according to its own terms. For interactions via LinkedIn® we are joint controllers with LinkedIn® (Art. 26 GDPR) with regard to page insights.

9. Recipients and third-country transfers

We only pass on your data where this is necessary to provide our services, on the basis of your consent or a legal obligation – to our processors under Art. 28 GDPR (hosting: Netlify; e-mail: Microsoft 365) and, where you have consented, to the providers named above. Transfers to third countries only take place on the basis of an adequacy decision or appropriate safeguards (Art. 44 et seq. GDPR).

10. Retention

We process personal data only for as long as necessary for the stated purposes or as required by statutory retention periods. Afterwards the data is deleted or anonymised. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

11. Your rights

Under the GDPR and BDSG you have the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR)

To exercise your rights, an e-mail to info@imbeo.de is sufficient.

12. Supervisory authority

The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de. We would appreciate it if you clarified your concern with us first.

13. Data security

This website uses TLS encryption (HTTPS) as well as technical and organisational measures such as strict Content Security Policy headers to protect your data against manipulation, loss and unauthorised access.

14. Children

Our offer is aimed at companies and professionals. We do not knowingly collect data from children.

15. Changes

We adapt this privacy policy when our practices or the legal situation change. The version published on this page applies.

Effective: November 2026