Skip to content

Privacy policy

Last updated: October 2026. This English version is a translation for convenience; the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

diafania GmbHAgnes-Pockels-Bogen 180992 Munich, GermanyPhone: +49 155 63155229Email: info@diafania.deRepresented by: Vera Meinert and Michael Brunzel

We are not legally required to appoint a data protection officer. If you have any questions about data protection, please contact us using the details above.

2. Overview

This website is purely informational. We do not set cookies, do not use analytics or tracking tools, and do not embed content from third parties. Fonts are delivered together with the website; no connection is made to third-party servers (e.g. Google Fonts).

We only process personal data where this is technically necessary to deliver the website, or when you contact us by email or phone on your own initiative.

3. Hosting and delivery of the website

This website is hosted by Amazon Web Services (AWS). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The website's files are stored in a data centre in Frankfurt am Main and delivered via the Amazon CloudFront content delivery network.

When you visit the website, AWS necessarily processes technical data, in particular your IP address, the page requested, the date and time of the request, and information about your browser and operating system. This data is needed to deliver the website to your device and to protect it against attacks such as denial-of-service attacks. We ourselves do not store access logs (server log files) and do not combine this data with other data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, quickly and reliably.

We have a data processing agreement with AWS pursuant to Art. 28 GDPR (AWS GDPR Data Processing Addendum). Depending on your location, the website may be delivered via CloudFront servers outside the EU; in addition, the parent company Amazon Web Services, Inc. is based in the USA. For transfers to the USA, we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Amazon is certified. AWS has additionally agreed to the European Commission's standard contractual clauses. Further information: https://aws.amazon.com/compliance/gdpr-center/

4. No cookies

This website does not set cookies and does not use comparable technologies that store or read information on your device (e.g. local storage or fingerprinting). Consent under Section 25 of the German TDDDG is therefore not required, and no cookie banner is shown.

5. Contact by email or phone

If you contact us by email or phone, we process the information you provide (e.g. your name, contact details and the content of your enquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We delete this data once your enquiry has been fully dealt with, unless statutory retention obligations (e.g. under commercial or tax law) apply. We do not pass this data on without your consent.

6. Applications

You can apply to us by email at karriere@diafania.de. We process the data you send us (e.g. contact details, CV, certificates) solely to carry out the application process. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship). If you are hired, your data will be transferred to your personnel file.

If your application is unsuccessful, we delete your documents no later than six months after the process ends. Until then, we keep them on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in defending ourselves against possible claims under the German General Equal Treatment Act (AGG). We only keep your data longer, for example for future vacancies, with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

7. Retention period

Unless a more specific retention period is stated in this privacy policy, we only store personal data for as long as is necessary for the respective purpose. Statutory retention periods remain unaffected; in that case, we delete the data once the period has expired.

8. Your rights

Within the limits of the law, you have the right at any time to

  • access the data we hold about you (Art. 15 GDPR),
  • have inaccurate data corrected (Art. 16 GDPR),
  • have your data erased (Art. 17 GDPR),
  • restrict processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR), and
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

To exercise these rights, simply contact info@diafania.de.

Right to object (Art. 21 GDPR): Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, https://www.lda.bayern.de.

9. SSL/TLS encryption

This website is delivered exclusively over an encrypted connection (HTTPS). You can recognise it by the “https://” in the address bar and the padlock icon in your browser.

10. Changes

We will update this privacy policy whenever the website or our data processing changes, for example if we introduce a contact form or analytics tools.