--- title: Legal & Privacy | Carolin Desirée Toepfer description: Legal & Privacy | Carolin Desirée Toepfer --- [Skip to content](https://cdtoepfer.com/legal-privacy-carolin-desir%C3%A9e-toepfer#main-content) ![cyttraction-logo-hdpi](https://cdtoepfer.com/hs-fs/hubfs/cyttraction-logo-hdpi.jpg?width=751&height=839&name=cyttraction-logo-hdpi.jpg)Homepage - [Home](https://cdtoepfer.com?hsLang=en) - [Mailing List](https://cdtoepfer.com/en/mailing-list-carolin-desir%C3%A9e-toepfer?hsLang=en) - [Contact](https://cdtoepfer.com/en/contact-carolin-desir%C3%A9e-toepfer?hsLang=en) - [Legal & Privacy](https://cdtoepfer.com/legal-privacy-carolin-desirée-toepfer) English Select a language ✕ - [Deutsch](https://cdtoepfer.com/de/legal-privacy-carolin-desirée-toepfer) - [English](https://cdtoepfer.com/legal-privacy-carolin-desirée-toepfer) - [Home](https://cdtoepfer.com?hsLang=en) - [Mailing List](https://cdtoepfer.com/en/mailing-list-carolin-desir%C3%A9e-toepfer?hsLang=en) - [Contact](https://cdtoepfer.com/en/contact-carolin-desir%C3%A9e-toepfer?hsLang=en) - [Legal & Privacy](https://cdtoepfer.com/legal-privacy-carolin-desirée-toepfer) English Select a language - [Deutsch](https://cdtoepfer.com/de/legal-privacy-carolin-desirée-toepfer) - [English](https://cdtoepfer.com/legal-privacy-carolin-desirée-toepfer) # Legal & Privacy **Last updated: 2 October 2026** ## 1. Legal Notice / Impressum ### Website operator **Cyttraction GmbH** Am Ziegelfeld 17 50226 Frechen Germany Represented by: **Carolin Desirée Toepfer** Managing Director Commercial Register: Amtsgericht Köln HRB 99779 Email: team @ cyttraction.com ### Responsible person for editorial content Responsible for the content of this website pursuant to applicable German law: **Carolin Desirée Toepfer** c/o Cyttraction GmbH Am Ziegelfeld 17 50226 Frechen Germany ### Disclaimer The contents of this website have been prepared with due care and are intended to provide general information about Cyttraction GmbH, its activities, services and related topics. We make reasonable efforts to ensure that the information provided is accurate and up to date. However, we do not guarantee the completeness, accuracy or timeliness of the information. We reserve the right to modify, supplement or remove content at any time without prior notice. The information provided on this website does not constitute legal, financial, tax, security or other professional advice unless expressly stated otherwise. ### External links This website may contain links to websites operated by third parties. We have no control over the content, availability or data-processing practices of those websites. The respective provider or operator is responsible for the content and processing activities of the linked website. ### Copyright Unless otherwise stated, all content published on this website, including texts, graphics, logos, photographs, illustrations and other materials, is protected by applicable copyright and intellectual-property laws. Any use beyond the limits permitted by law requires the prior written consent of Cyttraction GmbH or the respective rights holder. --- # 2. Privacy Policy ## 2.1 Controller The controller responsible for processing personal data in connection with this website is: **Cyttraction GmbH** Am Ziegelfeld 17 50226 Frechen Germany Represented by: **Carolin Desirée Toepfer, Managing Director** Email: team @ cyttraction.com ## 2.2 Data Protection Officer Unless legally required otherwise, Cyttraction GmbH has not appointed a Data Protection Officer. For all privacy-related questions, please contact us using the contact details above. --- ## 2.3 General information We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data-protection legislation. Personal data means any information relating to an identified or identifiable individual. Depending on how you use our website, we may process, in particular: - IP address; - browser and device information; - date and time of access; - pages and content accessed; - technical log information; - information voluntarily provided when contacting us; - professional contact information; - information stored in our CRM; - cookie and online-identification information; and - information generated through HubSpot's website and CRM functions. We do not operate an online shop through this website and do not process online payments or orders through the website. --- # 3. Hosting and HubSpot ## 3.1 Website hosting Our website is hosted using services provided by **HubSpot**. HubSpot may process technical information required to deliver, secure and maintain the website, including IP addresses and technical connection information. Where HubSpot processes personal data on our behalf, it acts as a processor within the meaning of Article 4(8) GDPR. The processing is governed by the applicable Data Processing Agreement between Cyttraction GmbH and HubSpot. Further information is available in HubSpot's privacy documentation: [HubSpot Privacy Policy](https://legal.hubspot.com/privacy-policy) [HubSpot Data Processing Agreement](https://legal.hubspot.com/dpa) ## 3.2 HubSpot CRM We use HubSpot as our customer relationship management (CRM) platform. Where you contact us, communicate with us, or otherwise provide us with your business contact information, we may process and store relevant information in HubSpot. This may include: - name; - company; - professional position; - business email address; - telephone number; - correspondence; - communication history; - information relating to business enquiries or relationships; and - other information voluntarily provided by you. The purposes of processing include managing business contacts, responding to enquiries, maintaining business relationships and organising communications. Depending on the circumstances, the legal basis is **Article 6(1)(b) GDPR** where processing is necessary for contractual or pre-contractual purposes, **Article 6(1)(f) GDPR** where processing is based on our legitimate interests, or **Article 6(1)(a) GDPR** where we rely on your consent. --- # 4. HubSpot Tracking, Cookies and Consent We use HubSpot's website and data-protection functionality, including its mechanisms for managing cookies and visitor consent. Depending on your choices and our current configuration, HubSpot may use cookies and similar technologies to recognise returning visitors, remember consent preferences, analyse website usage and support our communication and marketing activities. ### Necessary technologies Certain cookies or similar technologies may be necessary for the operation, security and basic functionality of the website. Where such technologies are technically necessary to provide a service explicitly requested by you, they may be used without separate consent where permitted by applicable law. The legal basis for associated personal-data processing may be **Article 6(1)(f) GDPR**, based on our legitimate interest in providing a secure and functional website. ### Optional analytics and marketing technologies Where HubSpot cookies or similar technologies are used for analytics, visitor tracking, marketing or other purposes that require consent, they are activated only after you have provided the required consent. The legal basis for such processing is **Article 6(1)(a) GDPR**. You can accept or reject optional categories of cookies through the cookie-consent mechanism provided on our website. You can withdraw or change your consent at any time with effect for the future by reopening the cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. ### HubSpot cookie and tracking information HubSpot may process information such as: - IP address; - browser and device information; - pages visited; - referring pages; - interaction with website content; - dates and times of visits; - cookie identifiers; - consent preferences; and - information associated with a HubSpot contact record where applicable. The exact information processed depends on the HubSpot services and features activated on our website and your individual consent choices. HubSpot may combine information collected through its services with information already stored in its CRM where this is permitted and appropriately disclosed. --- # 5. Legal bases for processing Depending on the specific processing activity, we rely on one or more of the following legal bases under Article 6(1) GDPR: **Article 6(1)(a) GDPR — Consent** Where you have given consent to a specific processing activity, such as certain non-essential cookies or marketing activities. **Article 6(1)(b) GDPR — Contract / pre-contractual measures** Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. **Article 6(1)(c) GDPR — Legal obligation** Where processing is necessary to comply with a legal obligation. **Article 6(1)(f) GDPR — Legitimate interests** Where processing is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your interests or fundamental rights and freedoms. Our legitimate interests may include operating, securing and improving our website, maintaining business relationships, responding to enquiries and protecting our IT systems against misuse. --- # 6. Contacting us If you contact us by email or another communication channel, we process the information you provide in order to handle and respond to your enquiry. Depending on the nature of the enquiry, this information may be stored in our HubSpot CRM. The legal basis may be **Article 6(1)(b) GDPR** where the enquiry concerns a contract or pre-contractual measures, or **Article 6(1)(f) GDPR** where we have a legitimate interest in responding to your enquiry. If you voluntarily provide consent for a particular processing activity, the legal basis is **Article 6(1)(a) GDPR**. --- # 7. External links Our website contains links to external websites and online services. When you click an external link, you leave our website and the privacy policy of the respective third-party provider applies. We have no control over the processing of personal data by external providers and recommend reviewing their privacy policies before submitting personal data. --- # 8. Recipients of personal data Depending on the circumstances, personal data may be accessible to: - authorised employees and representatives of Cyttraction GmbH; - HubSpot and its relevant subprocessors; - hosting and IT service providers; - professional advisers where necessary; - service providers supporting our business operations; and - public authorities where required by law. Where service providers process personal data on our behalf, appropriate contractual and technical safeguards are implemented in accordance with applicable data-protection law. --- # 9. International data transfers Where personal data is transferred to recipients outside the European Economic Area (EEA), we ensure that an appropriate legal mechanism is in place where required by GDPR. Depending on the circumstances, this may include: - an adequacy decision of the European Commission; - the EU Standard Contractual Clauses; - the EU-U.S. Data Privacy Framework where applicable; or - another legally recognised transfer mechanism. HubSpot's contractual documentation contains provisions governing international data transfers and applicable safeguards. --- # 10. Data retention We retain personal data only for as long as necessary for the purposes for which it was collected. Where statutory retention obligations apply, the relevant data may be retained for the legally prescribed period. After the applicable retention period has expired, personal data will generally be deleted unless another lawful basis permits or requires continued storage. Cookie and tracking information may have different retention periods depending on the particular technology and your consent choices. --- # 11. Your rights under the GDPR Subject to the applicable legal requirements, you have the following rights: ### Right of access — Article 15 GDPR You may request information about whether we process personal data concerning you and, where applicable, request access to that data. ### Right to rectification — Article 16 GDPR You may request correction of inaccurate personal data or completion of incomplete personal data. ### Right to erasure — Article 17 GDPR You may request deletion of your personal data where the legal requirements are met. ### Right to restriction — Article 18 GDPR You may request restriction of processing in certain circumstances. ### Right to data portability — Article 20 GDPR Where applicable, you may receive personal data that you have provided to us in a structured, commonly used and machine-readable format. ### Right to object — Article 21 GDPR You may object to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR on grounds relating to your particular situation. You have an unconditional right to object to the processing of personal data for direct marketing purposes. ### Right to withdraw consent Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To exercise any of these rights, please contact us using the contact details provided above. --- # 12. Right to lodge a complaint You have the right to lodge a complaint with a competent data-protection supervisory authority if you believe that the processing of your personal data violates applicable data-protection law. The supervisory authority responsible for Cyttraction GmbH's location is: **Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)** Kavalleriestraße 2–4 40213 Düsseldorf Germany Website: [https://www.ldi.nrw.de/](https://www.ldi.nrw.de/) You may also contact another competent supervisory authority where permitted by the GDPR. --- # 13. Data security We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access. These measures are reviewed and updated as appropriate, taking into account technological developments, the nature of the processing and the risks involved. --- # 14. Automated decision-making We do not use personal data collected through this website for automated decision-making that produces legal effects concerning you or similarly significantly affects you. HubSpot may provide functionality involving automated processing, segmentation or profiling. Where such functionality is used by us in a manner subject to specific GDPR requirements, we will provide the information and obtain consent where legally required. --- # 15. No online shop This website does not provide an online shop. There are no online payment functions, shopping carts or direct online order processing facilities. If you enter into a contractual relationship with Cyttraction GmbH through another channel, additional information concerning the processing of personal data may apply. --- # 16. Changes to this Privacy Policy We may update this Privacy Policy from time to time to reflect changes to our website, the services we use, our processing activities or applicable legal requirements. The version published on this website is the current version. **Last updated: 2 October 2026** - [Home](https://cdtoepfer.com?hsLang=en) - [Mailing List](https://cdtoepfer.com/en/mailing-list-carolin-desir%C3%A9e-toepfer?hsLang=en) - [Contact](https://cdtoepfer.com/en/contact-carolin-desir%C3%A9e-toepfer?hsLang=en) - [Legal & Privacy](https://cdtoepfer.com/legal-privacy-carolin-desirée-toepfer) --- Carolin Desirée Toepfer, Cyttraction GmbH © 2026. All rights reserved.