Privacy policy
Version: October 2026
1. Controller
DBG Deutschland GmbH, Am Meerkamp 21, 40667 Meerbusch, Germany
Phone: +49 2132 137829-0 · E-mail: dispo@dbg-bioenergy.de
Represented by its Managing Director, Berkay Güres.
Please send any data protection questions to the contact details above.
2. Overview
This policy describes which personal data is processed when you visit this website, contact us by e-mail or phone, or apply for a job, for what purposes, on which legal basis and for how long. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual steps), (c) (legal obligation) and (f) (legitimate interests).
3. Hosting by Squarespace
This website is run on Squarespace. Squarespace processes the data arising from visits to the website on our behalf (Art. 28 GDPR) under Squarespace’s Data Processing Addendum, which forms part of the Squarespace terms of service. For customers in the EU this is Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08 N12C, Ireland; Squarespace, Inc. in the USA acts as a sub-processor. Transfers to the USA rely on Squarespace, Inc.’s certification under the EU-U.S. Data Privacy Framework and, in addition, on the European Commission’s standard contractual clauses. We use Squarespace on the basis of our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Where Squarespace processes data for its own purposes, Squarespace is responsible for that processing itself; details are in Squarespace’s privacy policy (squarespace.com/privacy).
Page content, images, fonts and program code are loaded from Squarespace servers (including assets.squarespace.com, static1.squarespace.com, images.squarespace-cdn.com, file.squarespace-cdn.com and definitions.sqspcdn.com). The fonts Poppins and Inter are also delivered by Squarespace; Google Fonts servers are not contacted.
When a page is opened, the Squarespace platform also sends technical measurement and error data to monitor the operation and display of the platform: loading and display data to Squarespace servers (for example performance.squarespace.com) and, where applicable, error reports to the Sentry service of Functional Software, Inc., USA. These transfers are triggered by the platform, cannot be switched off in the website settings and take place regardless of your choice in the cookie banner; no cookies are set in the process. We base this processing on our legitimate interest in a stable and error-free website (Art. 6(1)(f) GDPR).
4. Visiting the website
When you visit the website, data sent by your browser is processed automatically: IP address, date and time of access, page requested, previously visited page, browser type and version, and operating system. This data is needed to deliver the website and keep it secure, for example to fend off attacks (Art. 6(1)(f) GDPR). Squarespace determines how long these log data are kept; we do not see individual page visits ourselves and do not combine the data with other data sources.
5. Cookies and visitor statistics
We set strictly necessary cookies without consent because they are essential for the website you have requested (Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR). The provider in each case is Squarespace:
crumb – protection against forged requests to the website; valid until the end of the browser session.
ss_performanceCookiesAllowed and ss_marketingCookiesAllowed – store your choice in the cookie banner; valid for 30 days according to Squarespace.
Only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR) does Squarespace Analytics also set these statistics cookies:
ss_cvr – recognises returning visitors; valid for two years according to Squarespace.
ss_cvt – groups the page views of one visit; valid for 30 minutes according to Squarespace.
With these cookies Squarespace recognises individual browsers and their visits. From this, Squarespace provides us with aggregated reports such as numbers of visits and page views, where visits come from, and the devices and browsers used; we do not see individual visitors. If you decline the statistics cookies, Squarespace Analytics still records page views without cookies; each page view then counts as a separate visit and returning visitors are not recognised. We base this cookieless counting on our legitimate interest in information about how our website is used (Art. 6(1)(f) GDPR). Squarespace determines how long the statistics data are kept. We set no cookies in the “Advertising” category.
You can change your choice at any time under “Cookie settings” at the end of each page and withdraw your consent with effect for the future.
6. Contact by e-mail or phone
When you contact us by e-mail or phone, we process your details – for example name, company, e-mail address, phone number, the content of your message and any documents you attach – to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). The website has no contact form; e-mail links open your own e-mail program.
Our e-mails are processed with Microsoft 365 (Exchange Online) of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Data may also be transferred to Microsoft Corporation in the USA; according to Microsoft, such transfers rely on the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses. Our Microsoft 365 environment is administered and supported by our IT service provider Dutchwyse B.V., Roelofarendsveen, the Netherlands, which may have access to stored e-mails to the extent necessary.
Retention: We keep your enquiry as long as we need it to handle it and for any business relationship resulting from it. After that, the retention period depends on these criteria:
Statutory retention obligations (Art. 6(1)(c) GDPR): commercial and business letters six years, invoices and other accounting vouchers eight years, accounting books and annual financial statements ten years (Section 257 HGB, Section 147 AO), each counted from the end of the calendar year in which the document was created.
Legal claims (Art. 6(1)(f) GDPR): documents we need to establish, exercise or defend legal claims are kept until the relevant limitation period ends; the standard limitation period is three years from the end of the year in which the claim arose (Sections 195, 199 BGB).
Enquiries that do not lead to a business relationship and are not subject to a retention obligation are deleted as soon as we no longer need them to handle the enquiry.
7. Applications
Please send applications by e-mail directly to our Managing Director (berkay@dbg-bioenergy.nl). We process your details – for example CV, certificates, earliest possible start date and salary expectations – to decide on an employment relationship (Art. 6(1)(b) GDPR). Access to your application is limited to the Managing Director and, where necessary for the selection, the people in our company involved in the procedure. If you call with questions, you speak to the contacts named in the job advertisement. E-mails are transmitted with transport encryption where your e-mail provider supports it; we do not offer end-to-end encryption.
Retention: If you are employed, we transfer the documents needed for this to your personnel file. Otherwise we keep your documents after the end of the procedure only as long as we need them to defend against possible claims arising from the application procedure (Art. 6(1)(f) GDPR): claims under the German General Equal Treatment Act must be asserted in writing within two months of receiving the rejection (Section 15(4) AGG), and an action must be brought within three months of that claim (Section 61b(1) ArbGG). After that we delete the documents, unless you have agreed to longer storage (Art. 6(1)(a) GDPR) or legal proceedings are still pending.
8. Recipients and transfers to third countries
Within our company, your data is available only to the people who need it for the task concerned. Outside our company, data is received to the extent described: Squarespace (website), Microsoft (e-mail) and Dutchwyse (IT support), and – where necessary in an individual case – our tax advisers and auditors, banks for payments, lawyers and courts in legal disputes, and authorities where we are legally obliged to disclose data. Transfers to the USA take place with Squarespace, Microsoft and the error service Sentry, as described in sections 3 and 6.
9. Provision of data and automated decisions
You are not legally or contractually obliged to provide us with personal data. Without the data transmitted technically, such as the IP address, the website cannot be delivered; without your contact details we cannot answer your enquiry, and without application documents we cannot assess your application. There is no automated decision-making, including profiling (Art. 22 GDPR).
10. Links to other websites
The website contains links to other websites, for example LinkedIn. Data is transferred to the provider concerned only when you follow a link; that provider is responsible for its own processing. We do not use embedded content or social media plug-ins.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). Please use the contact details above.
Right to object: Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
12. Security
The website is transmitted in encrypted form (HTTPS).
13. Changes
We update this privacy policy when the website, our procedures or the legal requirements change. The version published here applies.