Privacy policy

1. Controller

Tracium GmbH
Alte Hafenstraße 22
28757 Bremen
Germany
Represented by the managing directors Ahsan Bilal and Madiha Khalid
Email: moin [at] tracium.co

2. In short

This website sets no cookies, uses no tracking or analytics, and loads nothing from other servers: no third-party fonts, scripts or embeds. We process personal data only as far as is technically necessary to deliver the site, and when you write to us through the request form or by email.

3. Hosting and visiting the website

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its data centre in Nuremberg. Hetzner processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

When you open a page, your browser transmits technically necessary data, in particular your IP address, the address requested, and information about your browser and operating system. We use this data only to deliver the page to you. We do not keep access logs (server log files). The connection is encrypted with TLS.

To protect the request form against abuse, the server counts how often an IP address uses the form within an hour. This count is held in memory only, is never written to disk, and is deleted after about an hour at the latest.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is delivering the website securely and reliably.

4. Request form

When you use the form, we process your name, company, email address, what you are asking for (demo, pilot, investor deck or meeting) and your message. If you reach the site through a link with a campaign code (for example “?src=…”), we also receive that code, so we know where your request came from. Before the form is sent, your browser solves a small computational puzzle to keep out spam; no further data about you is collected in the process.

Your request is not stored on the web server. It is sent as an email to our mailbox (see section 6), and one of our founders will contact you to arrange a call.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or steps prior to entering into one, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your request. We delete your request once it has been dealt with, unless statutory retention obligations, for example for business correspondence, require us to keep it longer.

5. Contact by email

If you email us, we process your email address and the content of your message in order to reply. The legal basis and retention period are as described in section 4.

6. Email provider: Microsoft 365

Our mailbox, to which the request form also sends, is hosted by Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Microsoft processes the data on our behalf under a data processing agreement. A transfer to the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework, and the European Commission's Standard Contractual Clauses also apply.

7. Links to other websites

The website contains links, among others to our LinkedIn page, to job postings on JOIN and, in the blog articles, to sources. These are plain links: only when you click one do you leave our website, and the provider concerned then processes data under its own privacy policy. The links for sharing blog articles on LinkedIn are plain links too; nothing is sent to LinkedIn when you open our pages.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). To exercise these rights, write to us at moin [at] tracium.co.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen (Der Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen), Georgstraße 122-124, 27570 Bremerhaven, Germany.

9. No automated decision-making

We do not make automated decisions or create profiles.

10. Changes

We update this privacy policy when the website or the law changes. Last updated: November 2026.