Privacy Policy eightbit experts GmbH
Effective: April 2026

Contact Details of the Data Controller

eightbit experts GmbH
Borselstraße 26
22765 Hamburg
Phone: +49 40 42925700
Email: info@eightbitexperts.com

eightbit talent GmbH
Konsul-Smidt-Str. 8f
28217 Bremen
Phone: +49 421 8350490
Email: talent@eightbitexperts.com

Contact Details of the GroupData Protection Officer

DPO

Orizon Holding GmbH
Berliner Allee 28c
86153 Augsburg
Email: dsb@orizon.de

Contact Details of the internal Data Protection Coordinator

Stefanie Strohmeier
eightbit experts GmbH
Borselstr. 26
22765 Hamburg

Phone: +49 151 22813939
Email: datenschutz@eightbitexperts.com

We process personal data on our website in accordance with the provisions of the European General Data Protection Regulation (GDPR) and German data protection regulations.

Contact details of the internal data protection coordinator

Stefanie Strohmeier
eightbit experts GmbH
Borselstr. 26
22765 Hamburg

Phone: +49 151 22813939
E-mail: datenschutz@eightbitexperts.com

We process personal data on our website in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German data protection regulations.

1. Log data when visiting our websites

For technical reasons, your web browser or mobile device automatically transmits the following data to our web server when you access our websites:

Data processed:

– Your device’s IP address
– Date and time of access
– Address of the requesting webpage
– HTTP response code

Name of the file accessed

– Amount of data sent
– Browser type and version
– Device operating system

Purpose of processing:
We use this data to enable the use of our websites and their technical administration, to ensure the security of our IT systems, to prevent misuse of our websites, and to optimize our websites.

Legal basis:
Art. 6 (1) f) GDPR

Retention period:
The data is deleted after 8 weeks.

2. Cookies

We use the following essential cookies on our website:

Name: Polylang pll_language

Purpose of processing:
We use the Polylang plugin to offer our website in multiple languages. This cookie simply stores your language selection. Your data is not transferred to the plugin’s developer.

Legal basis:
Art. 6 (1) f) GDPR in conjunction with § 25 (2) TTDSG. We do not require consent for this cookie.

Provider: WP Syntex
Privacy Policy: https://polylang.pro/privacy-policy/

Storage period:
The storage period is 6 months.

3. Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s location. This data is aggregated into a user ID and assigned to the website visitor’s respective device.

Furthermore, Google Analytics allows us to track your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data sets and employs machine learning technologies in data analysis.

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent pursuant to Art. 6 (1) a) GDPR and § 25 (1) TDDDG. Consent may be revoked at any time.

Data transfer to the United States is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.

IP Anonymization: 
Google Analytics IP anonymization is enabled. This means that your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. 

Browser Plugin:
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please refer to Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

Google Signals:
We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, and YouTube history, as well as demographic data (visitor data). This data may be used for personalized advertising via Google Signals. If you have a Google account, the visitor data from Google Signals is linked to your Google account and used for personalized advertising. The data is also used to generate anonymized statistics on our users’ behavior.

Data Processing:
We have entered into a data processing agreement with Google and fully comply with the strict requirements of German data protection authorities regarding the use of Google Analytics.

4. Contact via email

When you send us information via the email address info@eightbitexperts.com, we process this data as follows:

Data processed:

Your email address

The information you provide in the email subject line and body

Purpose of processing:
To address the matter you have raised in the email and to contact you

Legal basis:
Article 6 (1) f) of the GDPR; our legitimate interest lies in addressing your inquiry or contacting you.

Retention period:
The data will be stored until your request has been fully processed.

Disclosure of data:
The data will not be disclosed to third parties unless you have consented to such disclosure.

5. Website hosting

Our web server is hosted by neusta infrastructure services GmbH, Am Wall 196, 28195 Bremen.

6. Processing of personal data of contractors

If you apply to us for a position as a freelancer, temporary employee, or permanent employee, or if you work for us as a freelancer or temporary employee, we process your personal data for the following purposes:

a) For referral to our clients

Data Processed:
– Your personal information, including your name and, if applicable, your position within the company

– Your contact information, including your current business address, phone numbers, and email addresses

– Your application materials, including your resume or qualifications profile

– Data related to the processing of placements

We will delete your data in the CV Transformer tool as soon as the placement activity for the respective project is completed. If you request the deletion of your personal data prior to this, we will immediately remove all data from the tool.

Data Processing:
We use the Salesforce database system from Salesforce, Inc., San Francisco, USA, to process your data. You can find information about Salesforce’s privacy policy here.

In some cases, we use the CV Transformer tool from CV Transformer B.V., Nieuwe Erven 3, 5431 NV Cuijk, Netherlands, to process your application documents. We use this tool to process your application documents as quickly and effectively as possible, thereby gaining a competitive advantage for both you and us. Your data is processed in accordance with all data protection regulations on the basis of a data processing agreement pursuant to Art. 28 GDPR. You can find more information about CV Transformer’s data protection policies here.

Data Disclosure:
We disclose the processed data to our clients to the extent necessary for the placement process. Additionally, CV Transformer B.V. receives your data. No data is transferred to third countries.

Use of Artificial Intelligence:
When processing your application documents using the CV Transformer tool, certain AI components are utilized. These are intended to streamline the processing of your documents and thereby enhance both your and our competitive prospects. All AI components are used in accordance with applicable data protection regulations and, based on CV Transformer B.V.’s risk analysis, do not constitute high-risk processing as defined by the EU AI Act. Your data is not used for AI training purposes and can be completely deleted at any time. Automated decision-making does not take place at any time. Here you can learn more about the legally compliant use of AI components at CV Transformer.

b) For the execution of contracts between you, us, and our customers

Data Processed:

Contractual data (e.g., service periods, work location)

Data related to the billing of your services (e.g., time tracking, bank account information)

Purpose of Processing:
Handling all aspects related to the contract

Legal Basis:
Article 6 (1) b) of the GDPR for the performance of a contract

Retention Period:
We process this personal data only for as long as we need it to fulfill contractual or legal obligations. We delete this data after the statutory retention periods have expired.

Data processing:
We use the Salesforce database system from Salesforce, Inc., San Francisco, USA, to process the data. You can find information on data protection at Salesforce here.

Disclosure of data:
We disclose this data to third parties only to the extent necessary to process your assignment with our clients, or if we are authorized or required to do so by law and/or by official or court orders.

Regarding your rights as a data subject, please refer to Section 7 of this Privacy Policy.

c) Incentives

Data Processed:

First Name

Last Name

Mailing Address

Purpose of Processing:
This data is used to take advantage of services offered by external partners (such as the “Aktion Mensch Prize Draw”) as part of incentive programs.

Legal basis:
Article 6 (1) f) of the GDPR; our legitimate interest lies in providing incentives and recognizing the existing business relationship.

Retention period:
The data is stored only for the duration of the respective campaign and deleted after the applicable statutory retention periods have expired.

Disclosure of data:
The data listed above is disclosed to external partners for the purpose of providing the service. The partners process the data in accordance with applicable data protection laws. The data is stored and processed on secure systems. Data processing may be carried out by contractors in accordance with Article 28 of the GDPR. The data will not be used for advertising purposes, but exclusively for the agreed-upon purpose. The partner undertakes not to transfer or disclose the personal data to third parties.

Regarding your rights as a data subject, please refer to Section 7 of this Privacy Policy.

d) Contract-based email reminders

Data processed:

Placement ID

Email address

Purpose of processing:
We will only send you relevant information or reminders via email if you have an ongoing contractual relationship with us. Our emails are not sent for advertising purposes but provide up-to-date information regarding order processing. You can unsubscribe from these reminder emails at any time by clicking a link in the messages.

Legal basis:
Art. 6 (1) b) GDPR, as we use the reminder emails to inform you about relevant topics related to contract or order processing and do not send you any advertising messages.

Retention period:
We use your data to send reminder emails only for as long as an ongoing contractual relationship with us exists. After that, your data will be processed in accordance with Section 6. a) and b) and deleted from rapidmail’s servers. You also have the option to opt out of receiving further emails with every reminder email. If you use this option, we will no longer send you reminder emails. In this case, your data will be deleted from rapidmail’s servers.

Data Processing:
We use rapidmail to send reminder emails. The provider is Positive Group Deutschland GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany. Rapidmail is used, among other things, to organize and analyze the sending of reminder emails. The data you provide for these reminder emails is stored on Rapidmail’s servers in Germany. For more details, please refer to Rapidmail’s data security guidelines at: https://www.rapidmail.de/datensicherheit.

Data Transfer:
The recipient of the data is Positive Group Deutschland GmbH. The data is not transferred to third countries.

Regarding your rights as a data subject, please refer to Section 7 of this Privacy Policy.

e) For the handling of complaints

If you submit a complaint through one of our reporting channels, we will process the personal data provided in connection with that complaint.

Data processed:

Data provided (e.g., contact information of the individuals involved in the matter of the complaint)

Purpose of processing:
We process your personal data exclusively for the purpose of handling your complaint.

Legal basis:
The legal basis for the processing of your data is Article 6 (1) c) of the GDPR.

Retention period:
Your data will be deleted in accordance with legal requirements once your report has been processed.

Disclosure of data:
If you use our osapiens reporting portal, the recipient of the data is osapiens Holding GmbH, Julius-Hatry-Straße 1, 68163 Mannheim. Further information on data processing at osapiens can be found here.

Regarding your rights as a data subject, please refer to Section 7 of this Privacy Policy.

7. Your rights

In accordance with the GDPR, you have the following rights regarding the processing of your data.

Right of access:
You may request information from us at any time regarding what data we process about you (Art. 15 GDPR).

Right to rectification:
You may request that inaccurate data about you be corrected (Art. 16 GDPR).

Right to erasure:
You have the right to have your data that is being processed unlawfully erased (Art. 17 GDPR).

Right to restriction:
If data cannot be erased, you may request that processing be restricted (Art. 18 GDPR).

Right to object:
Under certain conditions, you may object to the processing of your data (Art. 21 GDPR).

Right to withdraw your consent:
If you have provided consent for the processing of your data, you may withdraw it at any time with future effect (Art. 7 GDPR).

Right to lodge a complaint with a supervisory authority:
In the event of violations of the GDPR, you, as the data subject, have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your workplace, or the place of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

To exercise your rights, please contact the Data Protection Coordinator at eightbit experts GmbH or our Group Data Protection Officer (contact details at the top of this page).

8. Updates

We reserve the right to update this Privacy Policy from time to time.

If you have any questions or comments regarding this Privacy Policy, please feel free to contact us (contact information is provided at the top of this page).