Privacy Policy
Version: July 2026
1. The essentials at a glance
This website is deliberately built to be data-minimal:
- Without your consent, no tracking cookies are set and no analytics tools are loaded.
- Fonts, scripts and images are served entirely from our own server — no content is loaded from third-party servers. Web analytics with Matomo (see section 5) also runs via our own server and is activated exclusively after your consent via the cookie banner.
- Beyond that, personal data only arises when you contact us by email, and in the technically necessary server log files of our hosting provider.
2. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Simon Bassermann
Postfach 7111 (P.O. Box)
53071 Bonn, Germany
Email: contact@vibrantcluster.com
3. Hosting with netcup
This website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany (“netcup”). When you visit this website, your personal data (e.g. IP addresses) are processed on netcup's servers in Germany.
netcup is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in providing our website as reliably, securely and quickly as possible. We have concluded a data processing agreement (DPA) with netcup in accordance with Art. 28 GDPR.
For further information, please refer to netcup's privacy policy: https://www.netcup.de/kontakt/datenschutzerklaerung.php
Server log files
When this website is accessed, the server automatically collects and stores information in so-called server log files, which your browser transmits automatically:
- IP address of the requesting device
- date and time of the request
- requested file or page
- volume of data transferred and HTTP status code
- referrer URL (the previously visited page)
- browser type and version as well as operating system
These data are not merged with other data sources. They are collected on the basis of Art. 6(1)(f) GDPR: we have a legitimate interest in the technically error-free presentation, operational security and defence against attacks on this website. Log files are stored only for as long as necessary for these purposes and are then deleted.
4. Consent management (cookie banner)
This website uses the open-source consent tool “CookieConsent” (Orest Bida). The tool is served locally from our own server; no connection to third-party servers takes place. It stores your selection in a cookie (“cc_cookie”, lifetime approx. 6 months) on your device so that your decision is respected on future visits.
The legal bases are § 25(2) no. 2 TDDDG (strictly necessary storage) and Art. 6(1)(c) and (f) GDPR — we are legally required to be able to demonstrate consent that has been given. You can change or withdraw your selection at any time via the “Cookie settings” link in the footer of this website.
5. Web analytics with Matomo
If you have given your consent via the cookie banner, we use the open-source web analytics service Matomo, integrated via the Matomo Tag Manager. The associated scripts are also loaded from our own server (vibrantcluster.com); no third-party analytics services are embedded.
With Matomo we collect information about the use of this website (e.g. pages visited, time spent, browser and device type, approximate origin). Matomo may store cookies on your device for this purpose (e.g. “_pk_…”). We use the collected data exclusively to analyse the use of the website and improve our services; the data are not passed on to third parties.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without your consent, Matomo is not loaded. You can withdraw your consent at any time with effect for the future by opening the “Cookie settings” in the footer and deactivating the “Analytics” category; any analytics cookies that have been set are then deleted automatically.
6. Local storage of your language preference (localStorage)
When you switch between German and English using the language toggle, your browser stores your choice locally on your device (localStorage entry “vc-lang”). This entry contains no personal data, is not transmitted to us or to third parties, and serves solely to display the website in your preferred language on your next visit.
This storage is strictly necessary for the service you have expressly requested (§ 25(2) no. 2 of the German TDDDG) and therefore does not require consent. You can delete the entry at any time via your browser settings.
7. Contact by email
If you contact us by email, your enquiry including all personal data arising from it (e.g. name, email address, content of the message) will be stored and processed by us for the purpose of handling your request. We do not pass on these data without your consent.
Processing is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.
The data you send us remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions — in particular retention periods under tax and commercial law — remain unaffected.
8. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser bar. When encryption is activated, the data you transmit to us cannot be read by third parties.
9. Your rights
You have the following rights with regard to your personal data:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, an informal email to contact@vibrantcluster.com is sufficient.
Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
10. No automated decision-making
Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place.
11. Changes to this privacy policy
We will amend this privacy policy whenever changes to the website or the legal situation make this necessary. The current version published here applies in each case.