1. Introduction
At variate.energy, we handle your personal data confidentially and in accordance with the statutory data protection regulations as well as this Privacy Policy.

2. Controller
ReinhardtHuang GmbH
Waitzstr. 24
10629 Berlin
Germany

Contact Information for Data Protection Inquiries:
Email: privacy@variate.energy
Phone: +49 30 65214182

3. Collection and Processing of Personal Data and the Purpose of Their Use

3.1 Hosting
Our website is hosted by Microsoft Azure. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter referred to as Microsoft Azure).

When you visit our website, your personal data is processed on the servers of Microsoft Azure. In this process, personal data may also be transferred to Microsoft's parent company in the United States. The transfer of data to the USA is based on the EU Standard Contractual Clauses. Details can be found here: https://learn.microsoft.com/compliance/regulatory/offering-eu-model-clauses

For more information, please refer to Microsoft Azure's privacy site: https://azure.microsoft.com/explore/trusted-cloud/privacy

Legal Basis
The use of Microsoft Azure is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR) (legitimate interest). We have a legitimate interest in ensuring the reliable operation of our website.

Access by Third Parties, Data Processing and Retention
We have entered into a Data Processing Agreement (DPA) for the use of Microsoft Azure. This is a contract required by data protection law that ensures Microsoft Azure processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR. IP addresses and similar data are deleted according to Azure's standard settings and policies.

3.2 Contact Form
Through our contact form on the website, the following personal data is collected:

• Name
• Email Address
• Message

Purpose of Data Processing
The collected data is used exclusively to respond to your inquiries and improve customer service.

Legal Basis
The processing is based on Article 6(1)(f) GDPR (legitimate interest), as we have a legitimate interest in providing you with efficient and effective customer service.

Data Processing and Retention
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Access by Third Parties:
There is no access by third parties to the transmitted data, except through Microsoft Azure as a data processor.

3.3 Applications via career@variate.energy
We encourage voluntary applications and provide you with the opportunity to apply to us via the email address career@variate.energy. In doing so, we collect and process the following personal data you provide to us:

• Name
• Address
• Email Address
• Phone Number
• Resume (CV)
• Cover Letter
• Additional relevant application documents (e.g., certificates, diplomas)

Purpose of Data Processing
The collected data is used exclusively for processing and evaluating applications, contacting applicants during the recruitment process, and for potential future employment opportunities.

Legal Basis
The processing is based on Article 6(1)(a) GDPR (consent) in conjunction with Article 6(1)(f) GDPR (legitimate interest). Your consent to process your personal data for the application process serves as the legal basis, while the legitimate interest lies in the effective conduct of our recruitment process.

Data Processing and Retention
Your application documents are stored electronically and accessed solely by authorized personnel involved in the selection process. Application data is stored for the duration of the application process and, subsequently, in accordance with statutory retention periods (generally up to 6 months after the completion of the application process).

Access by Third Parties
There is no access by third parties to the submitted application data.

3.4 Analytics
We use anonymous metrics to understand how you use our website and where our traffic comes from. We use this insight to improve our website and create a better experience for visitors. We use Simple Analytics, a privacy-friendly web analytics provider. This analytics software gives us insight about our visitors only in general, but not about individuals per se, as it does not track visitors and does not store any personal identifiable information. You can learn more about Simple Analytics on its website: https://www.simpleanalytics.com/

3.5 LinkedIn
We maintain a company page on LinkedIn to strengthen our corporate presence on social networks and communicate with business partners and interested parties.

Purpose of Data Processing
By using our LinkedIn page, we can share content, disseminate company news, and interact with our followers. LinkedIn may process personal data when you interact with our page (e.g., by following our page, liking or commenting on posts).

Legal Basis
The processing is based on Article 6(1)(f) GDPR (legitimate interest), as we have a legitimate interest in presenting our company on social networks and engaging with the public.

Access by Third Parties
LinkedIn, as an independent service provider, processes data independently of us. We do not have direct access to personal data you provide through LinkedIn. For more information on data processing by LinkedIn, please refer to LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy and LinkedIn's European Regional Privacy Notice: https://www.linkedin.com/legal/privacy/eu.

4. Cookies and Tracking Technologies
Use of Cookies
We do not use cookies or similar technologies on our website.

Cookie Consent
Since no cookies are used, no consent from users is required.

5. Security
We use SSL encryption to ensure the security of your data during transmission.

6. Your Rights as Data Subject
You have the right to obtain, at any time and free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can withdraw this consent at any time for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Additionally, you have the right to file a complaint with the competent supervisory authority. For this and any other questions regarding data protection, you can contact us at any time.

7. Changes to the Privacy Policy
We reserve the right to regularly update this Privacy Policy to reflect changes in legal requirements or modifications to our services. Therefore, please regularly review our Privacy Policy for the most current information.

8. Contact
For further information or if you have any questions regarding data protection, you can reach us at the contact information provided above.