Privacy policy
This is a translation. The German version is legally binding.
Controller
Elba Technologies GmbH, Industriestraße 23, 70565 Stuttgart, Germany
Represented by Hatice Kqiku (managing director)
Phone: +49 174 3500313 · Email: mail@elba-tech.com
You can reach our data protection officer at dpo@elba-tech.com.
In short
Without your consent, this website sets no cookies and loads nothing from third parties. Fonts are served from our own server, and no maps or videos are embedded.
We use Google Analytics (statistics) and Google Ads (marketing) only if you consent in the cookie banner. You can change your choice at any time through the “Cookie settings” link in the footer of every page. The cookies involved are listed in our cookie policy.
Hosting and server log files
The website runs on shared web hosting from Bluehost, a service of Newfold Digital, Inc., USA. When you visit the website, the web server processes technically necessary data: IP address, date and time, the page requested, browser identifier and referrer. This keeps the website secure and running (Art. 6(1)(f) GDPR). The log files are not archived and are deleted regularly.
This involves a transfer of data to the USA. It takes place on the basis of standard contractual clauses (Art. 46 GDPR) or the EU-US Data Privacy Framework, insofar as the provider is listed under the Data Privacy Framework.
Cookie banner and your choice
On your first visit, a banner asks whether you agree to the optional categories “Statistics” and “Marketing”. The banner is our own code and is served from our own server. Nothing from Google loads before you agree.
We store your choice in your browser’s local storage (localStorage) under the key elba-consent, together with the date. This is not a cookie. The entry is strictly necessary so that the website can respect your decision (§ 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act). It stays until you delete it in your browser; after 12 months we ask again.
You can change or withdraw your consent at any time through the “Cookie settings” link in the footer of every page. When you withdraw, we delete the Google cookies on our domain and stop loading Google’s scripts. Withdrawal applies to the future; processing carried out before then remains lawful (Art. 7(3) GDPR).
Google Tag Manager
If you agree to at least one of the two categories, we load Google Tag Manager. It controls which Google services load according to your choice and sets no cookies itself. Loading it transmits your IP address to Google.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
Google Analytics (statistics)
With your consent to “Statistics”, we use Google Analytics 4 to understand how our website is used, for example which pages are viewed and where visitors come from. For this, Google Analytics sets cookies that recognise your browser and processes usage data such as pages viewed, device and browser information and approximate location.
According to Google, Google Analytics 4 does not log or store IP addresses for users in the EU.
The provider is Google Ireland Limited. The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). In Google Consent Mode, this category corresponds to the setting analytics_storage.
Google Ads (marketing)
With your consent to “Marketing”, we use Google Ads conversion tracking and remarketing. Conversion tracking shows us whether a visit through one of our ads led to an enquiry or another action on the website. With remarketing, Google can show you ads for our offerings on other websites and in Google services after you have visited our website.
For this, Google processes online identifiers from cookies, your IP address, device and browser information and your interactions with our website. We pass on your choice through Google Consent Mode v2 (ad_storage, ad_user_data, ad_personalization). Without your consent to “Marketing”, these settings remain denied.
The provider is Google Ireland Limited. The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
Transfers to the USA by Google
Google may transfer data to Google LLC in the USA. This takes place on the basis of the European Commission’s adequacy decision on the EU-US Data Privacy Framework, insofar as the provider is listed under the Data Privacy Framework. Details are given in Google’s privacy policy.
Contact form
When you send the contact form, we process your name, your email address and your message and, if you provide them, your company, phone number and topic. We need your name, email address and message to answer your enquiry; the other details are optional.
The details are sent by email through our hosting provider’s mail system to mail@elba-tech.com and are not stored on the web server.
The legal basis is Art. 6(1)(b) GDPR if your enquiry concerns a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your enquiry. We delete the details once your enquiry has been fully handled, unless statutory retention obligations (for example under the German Commercial Code or Fiscal Code) require us to keep them. The same applies to enquiries by email or phone.
Protection against misuse
To protect the form against automated requests, we keep a non-reversible hash of your IP address for at most 24 hours (Art. 6(1)(f) GDPR).
Email mailboxes
We run our email mailboxes on Microsoft 365. The provider is Microsoft Ireland Operations Limited, Ireland, which processes the data on our behalf as a processor (Art. 28 GDPR). Where data is transferred to the USA in this context, this takes place on the basis of standard contractual clauses (Art. 46 GDPR) or the EU-US Data Privacy Framework, insofar as the provider is listed under the Data Privacy Framework.
Job applications
We accept applications by email to jobs@elba-tech.com. We process your details and documents to decide on your application (Art. 6(1)(b) GDPR, § 26 BDSG, German Federal Data Protection Act). We delete them six months after the application process ends, unless you consent to longer storage.
Links to social networks
We refer to our profiles on LinkedIn, Facebook and Instagram with plain links. As long as you do not click one of them, no data is transferred to these networks. Once you click, the privacy terms of the respective network apply.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR); for cookies, use the “Cookie settings” link. Write to mail@elba-tech.com or to our data protection officer.
You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
No automated individual decision-making within the meaning of Art. 22 GDPR takes place.
Right to object
Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
Last updated
13 October 2026