Privacy Policy
ravespace.io | Last updated: January 2026
1. Controller and Contact Information
The controller responsible for data processing on this website pursuant to the General Data Protection Regulation (GDPR) is:
RAVE.SPACE GmbH
Koepenickerstr. 7
10997 Berlin, Germany
Phone: +49 171 2069066
Email: frank@ravespace.io
Commercial Register: HRB 225112 B, Amtsgericht Charlottenburg
2. Overview of Data Processing
When you visit our website, we process personal data to provide our services, ensure website functionality, and improve user experience. This privacy policy explains what data we collect, how we use it, and your rights regarding your personal data.
3. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR): You may request information about your stored personal data.
Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate data.
Right to Erasure (Art. 17 GDPR): You may request deletion of your data under certain conditions.
Right to Restriction (Art. 18 GDPR): You may request restriction of processing.
Right to Data Portability (Art. 20 GDPR): You may receive your data in a machine-readable format.
Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests.
Right to Lodge a Complaint: You may lodge a complaint with a supervisory authority. The competent authority in Berlin is: Berliner Beauftragte fuer Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin.
4. Legal Basis for Processing
We process personal data based on the following legal grounds:
Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, e.g., for analytics cookies or newsletters.
Contract Performance (Art. 6(1)(b) GDPR): Where processing is necessary to fulfill a contract or pre-contractual measures.
Legal Obligation (Art. 6(1)(c) GDPR): Where we are legally required to process data.
Legitimate Interests (Art. 6(1)(f) GDPR): Where processing serves our legitimate interests, such as website security and optimization.
5. Website Hosting
Our website is hosted on external servers. When you access our website, technical data is automatically transmitted to our hosting provider, including your IP address, browser type, operating system, referring URL, and access time. This data is necessary for the technical provision of our website and is processed based on our legitimate interest in providing a secure and functional website (Art. 6(1)(f) GDPR). Our hosting provider processes data only on our behalf and according to our instructions.
6. Content Delivery Network (CDN)
We use Amazon CloudFront, a content delivery network operated by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg. CloudFront distributes website content through a global server network to improve loading speed and performance. When you access our website, your request may be routed through CloudFront servers. This processing is based on our legitimate interest in fast and secure website delivery (Art. 6(1)(f) GDPR). Data transfers to the USA are covered by EU Standard Contractual Clauses. For more information, see Amazon's privacy policy at aws.amazon.com/privacy.
7. SSL/TLS Encryption
This website uses SSL/TLS encryption for security. You can recognize an encrypted connection by the lock symbol in your browser address bar and the 'https://' prefix. When encryption is active, data transmitted between your browser and our server cannot be read by third parties.
8. Cookies and Consent Management
Our website uses cookies - small text files stored on your device. Some cookies are technically necessary for website functionality (essential cookies), while others help us analyze usage or display personalized content (optional cookies).
We use Usercentrics (Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich, Germany) as our consent management platform. When you first visit our website, Usercentrics displays a consent banner allowing you to accept or reject non-essential cookies. Your consent preferences are stored in a cookie. Essential cookies are set based on our legitimate interest (Art. 6(1)(f) GDPR). Optional cookies are only set after you provide consent (Art. 6(1)(a) GDPR). You can modify your cookie preferences at any time through our cookie settings.
You can also configure your browser to block or delete cookies. Note that blocking essential cookies may affect website functionality.
9. Website Analytics
9.1 Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage website tags. Google Tag Manager itself does not collect personal data or set cookies. It triggers other tools based on your consent preferences. The use of Google Tag Manager is based on our legitimate interest in efficient tag management (Art. 6(1)(f) GDPR).
9.2 Google Analytics
With your consent, we use Google Analytics (Google Ireland Limited) to analyze website usage. Google Analytics uses cookies to collect information about your visit, including pages viewed, time spent, and your approximate location. We have enabled IP anonymization, so your IP address is truncated within the EU before transmission to Google servers. Google Analytics is only activated after you consent via our cookie banner (Art. 6(1)(a) GDPR). You can withdraw consent at any time through our cookie settings or install the Google Analytics opt-out browser add-on. Data transfers to the USA are covered by EU Standard Contractual Clauses.
10. Contact Forms and Email Communication
When you contact us via email or contact form, we process the data you provide (name, email address, message content) to respond to your inquiry. This processing is based on your consent by initiating contact (Art. 6(1)(a) GDPR) or, if your inquiry relates to a contract, on contract performance (Art. 6(1)(b) GDPR). We retain correspondence until your inquiry is fully resolved and delete it thereafter, unless legal retention periods apply.
11. Appointment Scheduling (Calendly)
We use Calendly (Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA) for appointment booking. When you schedule an appointment, Calendly processes your name, email address, and selected time slot. This data is stored on Calendly's servers. The processing is based on our legitimate interest in efficient appointment management (Art. 6(1)(f) GDPR) or, where you provide explicit consent, Art. 6(1)(a) GDPR. Data transfers to the USA are covered by EU Standard Contractual Clauses. For more information, see Calendly's privacy policy at calendly.com/privacy.
12. Newsletter
If you subscribe to our newsletter, we collect your email address and optionally your name. We use Mailchimp (Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) to send newsletters. Your data is stored on Mailchimp's servers. Newsletter subscription is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in each newsletter. After unsubscription, your email may be stored in a blacklist to prevent future unwanted mailings. Data transfers to the USA are covered by EU Standard Contractual Clauses. For more information, see Mailchimp's privacy policy at mailchimp.com/legal/privacy.
13. Embedded Videos (YouTube)
Our website embeds videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We use YouTube's enhanced privacy mode, which means YouTube does not store cookies for tracking purposes until you click play on a video. When you play a video, YouTube receives information that you have accessed the corresponding page. If you are logged into your YouTube account, YouTube can associate your viewing behavior with your profile. You can prevent this by logging out before watching videos. The embedding is based on our legitimate interest in presenting multimedia content (Art. 6(1)(f) GDPR) or your consent if required by the cookie banner (Art. 6(1)(a) GDPR). For more information, see Google's privacy policy at policies.google.com/privacy.
14. Web Fonts
Our website uses web fonts for consistent typography. These fonts are either hosted locally on our server or loaded from external providers. When fonts are loaded from external servers (such as Google Fonts), your browser establishes a connection to that server, transmitting your IP address. Where external fonts are used, this is based on our legitimate interest in consistent visual presentation (Art. 6(1)(f) GDPR) or your consent where required.
15. Job Applications
When you submit a job application, we process your application documents (CV, cover letter, references) and contact information for the purpose of the application process. This processing is based on Section 26 BDSG (German Federal Data Protection Act) and Art. 6(1)(b) GDPR for pre-contractual measures. If you are hired, your data becomes part of your personnel file. If your application is unsuccessful, we retain your data for up to 6 months after rejection to defend against potential legal claims, unless you consent to longer retention for future opportunities.
16. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy or as required by law. When data is no longer needed and no legal retention periods apply, we delete or anonymize it. Legal retention periods (e.g., commercial and tax law) may require retention for up to 10 years.
17. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA), particularly in the USA. For such transfers, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses approved by the European Commission. You can request a copy of these safeguards by contacting us.
18. Updates to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available on our website. Significant changes will be communicated appropriately.
---
RAVE.SPACE GmbH | Koepenickerstr. 7 | 10997 Berlin | frank@ravespace.io
