Gemba back
gdpr

Privacy policy

How personal data is processed on this website. Last updated April 2026.

01

General information

controller
Curavani GmbH
Jülicher Str. 72a
52070 Aachen
Germany
emailinfo@withgemba.com phone+49 151 46359691
external data protection officer
IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 München
emailemail@iitr.de phone089-18917360
02

How data is processed in general

Personal data is only collected when you give it to us yourself or when it is technically necessary. Beyond that, no personal data is collected. Any processing that goes further than the legal grounds allow only happens with your explicit consent.

03

Usage data on the website

When you open our pages, your browser sends data to our web server because it has to. The following is recorded while your browser and our server are talking to each other:

date and time of the request
name of the requested file
page from which the file was requested
access status (file transferred, file not found, and so on)
browser and operating system used
full IP address of the requesting computer
volume of data transferred

We store this data for a short time for technical security, in particular to fend off attacks on our web server. We cannot identify individual people from it. After 30 days at the latest the data is anonymised by shortening the IP address to domain level, so no link to a single user remains. In anonymised form it is also processed for statistics. It is not matched against other data sets and not passed on to third parties, not even in part.

04

Specific to this website

Booking a call

The “book a call” button leads to a Google Calendar appointment page operated by Google Ireland Limited. If you book a slot there, Google processes the data you enter under its own privacy policy.

data concernedname, email address, and what you enter in the booking form purposearranging and holding the call legal basisArt. 6 (1) (b) and (f) GDPR recipientsGoogle Ireland Limited third-country transferspossible, on EU standard contractual clauses retentionuntil the request is settled, then in the calendar record
Contact by email

If you write to info@withgemba.com, we process your address and the content of your message to answer it. Legal basis: legitimate interest, Art. 6 (1) (f) GDPR. The mailbox runs on Google Workspace.

Hosting

This website is hosted inside the European Union. All data processed on the site is stored and processed on servers within the EU.

Web analytics with PostHog

We use PostHog for web analytics, on PostHog Cloud EU in Frankfurt. Data is stored and processed on servers inside the European Union.

data collectedpages viewed, referrer, browser and operating system, screen size, approximate location from the IP address, date and time legal basisArt. 6 (1) (f) GDPR — statistical analysis to improve the site retention12 months
The film

The film is hosted by Mux, Inc. Nothing is loaded from Mux until you click play. From that moment your IP address reaches Mux so the video can be delivered.

05

Your rights as a data subject

Right of access to the data storedArt. 15 GDPR
Right to rectification of incorrect dataArt. 16 GDPR
Right to erasureArt. 17 GDPR
Right to restriction of processingArt. 18 GDPR
Right to data portabilityArt. 20 GDPR
Right to object to processingArt. 21 GDPR
Right to withdraw consentArt. 7 GDPR

To exercise your rights, write to us at any time at info@withgemba.com or by post.

You also have the right to complain to the competent data protection supervisory authority. The one responsible for us is:

supervisory authority
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
websitewww.ldi.nrw.de
06

Changes to this policy

This privacy policy is dated April 2026. As our website and our offering keep changing, or as legal requirements change, it may need to be updated. The current version is always available on this website.