Privacy Policy
Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.
Data collection on this website
Who is responsible for data collection?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice (Impressum) of this website.
How do we collect your data?
Some of your data is collected when you provide it to us (e.g. via the contact form). Other data is collected automatically or with your consent when you visit the website, by means of our IT systems (e.g. browser type, operating system, or the time the page was accessed).
What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour, provided you have given your consent.
Your rights
You have the right at any time to receive information, free of charge, about the origin, recipients, and purpose of your stored personal data, as well as a right to have this data corrected or deleted. If you have given consent to data processing, you can withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data, as well as a right to lodge a complaint with the competent supervisory authority.
For any questions, please contact datenschutz@blue-silver.com.
Analytics tools and third-party content
When you visit this website, your browsing behaviour may be analysed statistically. This is done partly on the basis of your consent (e.g. Google Analytics 4, HubSpot Analytics) and partly on the basis of our legitimate interest in a technically error-free provision of the website (Wix Analytics). Google Analytics 4 is served via the Google tag together with Google’s advertising services. Details can be found in the sections below.
General information and mandatory disclosures
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
We would like to point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the controller
The controller responsible for data processing on this website is:
BLUE SILVER GmbH
Carl-Zeiss-Ring 21
85737 Ismaning, Germany
Phone: +49 (89) 622994-0
Email: datenschutz@blue-silver.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Protection Officer
We have appointed a Data Protection Officer for our company:
PROLIANCE GmbH
Leopoldstr. 21, 80802 Munich, Germany
Email: datenschutzbeauftragter@datenschutzexperte.de
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted, unless there are other legally permissible grounds for storing it (e.g. retention periods under tax or commercial law).
Information on data transfers to third countries
Our website incorporates services from companies whose servers are located in part outside the EU/EEA. Specifically:
Wix.com Ltd. (host, Israel): Israel is covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR (Decision 2011/61/EU). The transfer of data to Israel is therefore permitted without additional safeguards. Wix may engage sub-processors in, among other places, the USA; these transfers are based on EU Standard Contractual Clauses.
Google Ireland Limited / Google LLC (USA and other countries): For transfers to the USA, Google is certified under the EU-US Data Privacy Framework (DPF). For DPF-certified US companies, the European Commission established an adequate level of protection by decision of 10 July 2023. Data may additionally be transferred to other countries without an adequacy decision (including Singapore, Taiwan, and Chile); Google bases these transfers on EU Standard Contractual Clauses.
HubSpot, Inc. (USA): HubSpot is certified under the EU-US Data Privacy Framework (DPF) (decision of 10 July 2023). EU Standard Contractual Clauses are used in addition.
Where no adequacy decision exists for individual services, data transfers are based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Withdrawal of your consent
Many data processing operations are only possible with your express consent. You can withdraw consent you have given at any time via our consent banner. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.
Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged breach.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.
SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in the browser bar.
Information, deletion, and correction
Within the framework of the applicable legal provisions, you have the right at any time to receive information, free of charge, about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to have this data corrected or deleted. For this purpose, please contact datenschutz@blue-silver.com.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data if:
you contest the accuracy of the data we have stored about you (for the duration of the verification);
the processing of your personal data was unlawful and you request the restriction of its use instead of erasure;
we no longer need the data, but you require it to assert, exercise, or defend legal claims;
you have lodged an objection pursuant to Art. 21(1) GDPR and it has not yet been determined whose interests prevail.
Hosting
Wix.com Ltd.
This website is hosted by Wix.com Ltd., Nevatim 40, Tel Aviv-Yafo 6971024, Israel (hereinafter “Wix”). Wix is an Israeli company. Israel is covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR (Decision 2011/61/EU). The transfer of personal data to Wix in Israel is therefore permissible under data protection law without additional safeguards.
As a processor, Wix processes website visitors’ data on our behalf. A data processing agreement (Data Processing Addendum, DPA) has been concluded with Wix.
Wix engages sub-processors that may operate worldwide, including in the USA; processing on servers in the USA is therefore possible. For data transfers to countries without an adequacy decision, Wix relies on EU Standard Contractual Clauses. A current list of sub-processors can be found at: https://support.wix.com/de/article/liste-der-unterauftragsverarbeiter-von-wix
Legal basis: Art. 6(1)(b) GDPR (initiation and performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in the secure, fast, and efficient provision of our online offering by a professional provider).
Consent management
Usercentrics
This website uses Usercentrics for Wix to obtain and document consents. The provider is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.
When you visit our website, a Usercentrics cookie is stored in your browser, in which the consents you have given, or their withdrawal, are recorded. This data is not passed on to third parties.
Legal basis: Art. 6(1)(c) GDPR (legal obligation to obtain and document consent for non-essential cookies) and Art. 6(1)(f) GDPR (legitimate interest in a legally compliant consent management).
Usercentrics privacy policy: https://usercentrics.com/de/datenschutzerklaerung/
Data collection on this website
Cookies
Our web pages use so-called “cookies”. Cookies are small text files and do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself.
Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. All other cookies are stored exclusively on the basis of your consent (Art. 6(1)(a) GDPR), which you can give or withdraw via our consent banner.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files. These are:
browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address
This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and optimisation of the website).
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry. We do not pass on this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (initiation of a contract), Art. 6(1)(f) GDPR (legitimate interest in efficient processing), or Art. 6(1)(a) GDPR (where consent was requested). The data remains with us until you request its deletion or the purpose for storing it no longer applies.
Analytics tools and advertising
Wix Analytics
As part of the Wix platform, integrated analytics functions are available to us (Wix Analytics). These collect aggregated visitor statistics (e.g. page views, device types, countries of origin) within the framework of the data processing agreement with Wix.
In addition, the Wix platform collects technical operational and performance telemetry that is necessary for the secure and stable operation of the website and runs technically as a necessary component of the platform. This processing also serves to analyse and optimise the operation of the platform.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free and optimised provision of the online offering).
Google Tag Manager
This website uses Google Tag Manager. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tag management system through which integrated tags (in particular the Google tag for analytics and advertising) are centrally managed and controlled. Tag Manager itself does not collect any personal data for analytics or advertising purposes; it merely controls when other tags are triggered. These tags are only triggered after the respective required consent has been given.
In connection with Google Tag Manager, the Google AJAX service may be used, which delivers JavaScript libraries via a content delivery network. In doing so, your IP address is transmitted to Google and may be sent to the USA as well as to other countries (including Singapore, Taiwan, and Chile). For the USA, Google is certified under the EU-US Data Privacy Framework (DPF); for transfers to countries without an adequacy decision, Google relies on EU Standard Contractual Clauses.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via our consent banner.
Google privacy policy: https://policies.google.com/privacy?hl=de
Google Analytics 4
This website uses Google Analytics 4. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 makes it possible to analyse the behaviour of website visitors (e.g. page views, time spent, origin, devices used). Unlike earlier versions, Google Analytics 4 does not store IP addresses permanently. The collected data may be transferred to Google servers in the USA as well as to other countries (including Singapore, Taiwan, and Chile). For the USA, Google is certified under the EU-US Data Privacy Framework (DPF); for transfers to countries without an adequacy decision, Google relies on EU Standard Contractual Clauses.
Google Analytics 4 is integrated via the Google tag and technically runs in the same consent category as Google’s advertising services (Google Ads). The data collected via Google Analytics 4 may therefore also be used for advertising purposes. We use Google Analytics 4 with Consent Mode v2 (Basic Mode). Data is collected exclusively if you have actively given consent. Without consent, no data is transmitted to Google.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via our consent banner.
We have concluded a data processing agreement with Google.
Google privacy policy: https://policies.google.com/privacy?hl=de
Google Ads, conversion tracking, and DoubleClick
This website integrates Google’s advertising services via the Google tag. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. These services include Google Ads, the Conversion Linker, and DoubleClick Ad.
As soon as you have consented to the relevant category (Marketing), advertising and conversion signals are transmitted to Google via the Google tag. We use these services to serve ads in Google Search and the Google advertising network, to measure the success of ads (conversion tracking), and to build audiences (remarketing).
The Conversion Linker stores click information in order to measure conversions. DoubleClick Ad is used to deliver and evaluate ads. For this purpose, Google uses cookies and comparable recognition technologies (e.g. gclaw, __gads, NID, IDE). In doing so, we do not receive any information that would allow us to identify you personally.
The collected data may be transferred to Google servers in the USA as well as to other countries (including Singapore, Taiwan, and Chile). For the USA, Google is certified under the EU-US Data Privacy Framework (DPF); for transfers to countries without an adequacy decision, Google relies on EU Standard Contractual Clauses.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via our consent banner.
Google privacy policy: https://policies.google.com/privacy?hl=de
HubSpot Analytics
This website uses HubSpot’s analytics tracking code. The provider is HubSpot, Inc., Two Canal Park, 02141 Cambridge, Massachusetts, USA (data protection contact: Nicholas Knoop).
With the help of HubSpot Analytics, we can analyse the behaviour of website visitors and measure marketing activities (e.g. pages accessed, origin, time spent). The following data, among others, is processed in this context: IP address, browser type, operating system, referrer URL, as well as pages accessed and interactions.
For this purpose, HubSpot sets first-party cookies on the domain blue-silver.com: hstc and hubspotutk with a lifetime of 6 months each, hssc with a lifetime of 30 minutes, and __hssrc for the duration of the session. These cookies are only set after you have consented to the Analytics category.
The collected data is transferred to HubSpot servers in the USA. HubSpot is certified under the EU-US Data Privacy Framework (DPF) (adequacy decision of the European Commission of 10 July 2023). EU Standard Contractual Clauses are used in addition.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via our consent banner.
We have concluded a data processing agreement with HubSpot.
HubSpot privacy policy: https://legal.hubspot.com/de/privacy-policy
Social media
Our social media profiles
We maintain public profiles on the following social networks:
YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
As the operator of these profiles, we are jointly responsible under data protection law together with the respective platform operator (Art. 26 GDPR). When you visit our profiles, the platform operators automatically collect data (e.g. IP address, device information, usage behaviour) for their own purposes, including for analytics and advertising purposes. We have no influence over these processing operations.
Privacy policies of the providers:
YouTube/Google: https://policies.google.com/privacy?hl=de
Instagram/Meta: https://privacycenter.instagram.com/policy/
LinkedIn and Meta (Instagram) provide joint controller agreements that govern the shared responsibilities under data protection law:
LinkedIn Page Insights Joint Controller Addendum: https://legal.linkedin.com/pages-joint-controller-addendum
Meta Page Controller Addendum: https://www.facebook.com/legal/terms/page_controller_addendum
Data subject rights can be asserted both against us and against the respective platform operator.
Social media links on this website
Our website includes text and image links to our profiles on YouTube, LinkedIn, and Instagram. These are simple links, not embedded content or plugins. No data is transmitted to the social networks merely by visiting our website. Data is only transmitted to the platform operator once you click on a link and are redirected to the respective platform.
Payment providers
Processing of data (customer and contract data)
We collect, process, and use personal data only insofar as it is necessary for the establishment, content, or modification of the legal relationship (master data). This is done on the basis of Art. 6(1)(b) GDPR. The customer data collected is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Handling of applicant data
We offer you the opportunity to apply to us (e.g. by email, by post, or via an online application form). Below we inform you about the scope, purpose, and use of the personal data collected from you in the course of the application process.
Scope and purpose of data collection
When you send us an application, we process the associated personal data (e.g. contact and communication data, application documents, notes from job interviews) insofar as this is necessary to decide on the establishment of an employment relationship. Legal basis: Section 26 of the new German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Art. 6(1)(b) GDPR, and, where consent is given, Art. 6(1)(a) GDPR. Your data will be passed on exclusively to persons involved in processing your application.
Retention period of the data
If we are unable to make you a job offer, if you reject a job offer, or if you withdraw your application, the data you have submitted will be retained for up to 6 months after completion of the application process and then deleted (Art. 6(1)(f) GDPR). Longer retention is possible with corresponding consent or where there is a statutory retention obligation.
Changes to our privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services, e.g. when introducing new services. The most recent version applies to your visit.
Questions about data protection
If you have any questions about data protection, please contact us by email at datenschutz@blue-silver.com or contact our Data Protection Officer directly.
Last updated: 2026-06-18