Privacy Policy
Privacy Policy
Last updated: August 2026
Panosome GmbH takes the protection of your personal data seriously. This Privacy Policy explains how personal data is processed when you visit and use our website.
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Panosome GmbH
Carl-Friedrich-Gauß-Ring 5
69124 Heidelberg
Germany
Email: panosome@panosome.com
2. General Information on Data Processing
We process personal data only where necessary to provide and operate our website, ensure its security and functionality, communicate with visitors, comply with legal obligations, or where you have provided your consent.
Personal data means any information relating to an identified or identifiable natural person.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
3. Website Hosting – Vercel
This website is hosted using services provided by Vercel Inc.
When you access our website, technical information may be processed by Vercel in order to deliver the website and ensure its security and operation.
Such information may include, in particular:
- IP address
- Date and time of access
- Requested page or resource
- Browser type and version
- Operating system
- Referrer URL
- HTTP status and similar technical information
The processing of this information is necessary for the secure, stable, and efficient provision of the website.
Where this processing is necessary for these purposes, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, reliable, and technically functional website.
Where Vercel processes personal data on our behalf, it acts as a service provider/data processor in accordance with applicable data protection requirements.
Due to Vercel's international infrastructure, personal data may be processed outside the European Economic Area. Where required, appropriate safeguards for international data transfers are applied in accordance with applicable data protection law.
Further information regarding Vercel's data protection practices is available in Vercel's Privacy Notice.
4. Content Management – Sanity
We use Sanity as the Content Management System (CMS) for this website.
Sanity is used to manage and provide website content, including text, images, news, team information, and other website content.
Depending on how website content is delivered and accessed, technical information may be transmitted to or processed through Sanity's infrastructure.
Where personal data is processed in connection with the provision of website content, the processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient management and delivery of our website content.
Where Sanity processes personal data on our behalf, appropriate contractual and organizational safeguards are implemented where required by applicable data protection law.
Further information regarding Sanity's data protection practices is available in Sanity's Privacy Policy.
5. Contacting Us
If you contact us by email or through a contact form provided on this website, we may process the information you provide.
This may include:
- Your name
- Email address
- Organization or company
- Any other information you voluntarily provide
- The content of your message
We use this information solely for the purpose of processing and responding to your inquiry.
Where your inquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR.
For other inquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in responding to communications and inquiries addressed to Panosome GmbH.
We retain such information only for as long as necessary to process the relevant inquiry, unless statutory retention obligations or another legal basis require longer storage.
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small data files that may be stored on your device when you visit a website.
Some technologies may be technically necessary to provide the website or functionality explicitly requested by you. Other technologies, particularly those used for analytics, are activated only where the required consent has been provided.
Where consent is required, the relevant technologies are used only after you have made your selection through our consent management system.
You may manage or withdraw your consent at any time through the Cookie Settings available on our website.
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
The legal basis for processing based on consent is Article 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG.
Technically necessary storage or access may take place without consent where the requirements of § 25(2) TDDDG are met.
7. Google Analytics 4
Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google.
Google Analytics enables us to understand how visitors interact with our website and helps us improve its content, usability, and performance.
Depending on the configuration and your consent settings, Google Analytics may process information such as:
- Pages visited
- Website interactions and events
- Session information
- Approximate geographical location
- Browser and device information
- Referrer information
- Technical information relating to your visit
Google Analytics may also use cookies or similar identifiers, including the _ga cookie, where you have consented to analytics storage.
Google Analytics is used only in accordance with the consent choices made through our consent management system.
The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG.
You may withdraw or modify your consent at any time through the Cookie Settings available on our website.
Depending on the configuration and services used, data processed by Google may be transferred to countries outside the European Economic Area. Where required, such transfers are subject to appropriate safeguards under applicable data protection law.
Further information about Google's processing of personal data is available in Google's privacy information.
8. Consent Management
We use a consent management mechanism to obtain and manage your choices regarding optional cookies and technologies.
Your consent preferences may be stored so that the website can remember your selection during subsequent visits.
Where such storage is strictly necessary to record and respect your privacy choices, processing is based on Article 6(1)(f) GDPR and § 25(2) TDDDG.
You can review and modify your choices at any time through the Cookie Settings available on the website.
9. External Links and Social Media
Our website may contain links to external websites or social media platforms, including LinkedIn.
When these are provided solely as links, no personal data is transmitted to the respective provider merely because the link is displayed on our website.
If you choose to follow an external link, you leave our website and the processing of personal data on the destination website is governed by the privacy practices of the respective provider.
Panosome GmbH is not responsible for the privacy practices or content of external third-party websites.
10. Data Recipients and Service Providers
We may use external service providers to operate, maintain, secure, and analyze our website.
Depending on the services used, recipients or processors of personal data may include providers responsible for:
- Website hosting and infrastructure
- Content management
- Website analytics
- Consent management
- Technical maintenance and security
Where service providers process personal data on our behalf, appropriate data processing agreements and other safeguards are implemented where required under Article 28 GDPR.
We do not sell personal data collected through this website.
11. International Data Transfers
Some of our service providers may process personal data outside Germany or the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, such transfers are made only where the requirements of Chapter V GDPR are met.
Depending on the recipient and destination country, this may include an adequacy decision of the European Commission, approved Standard Contractual Clauses, or another legally recognized transfer mechanism.
12. Legal Bases for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Article 6(1)(a) GDPR – where you have provided consent.
Article 6(1)(b) GDPR – where processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.
Article 6(1)(c) GDPR – where processing is necessary to comply with a legal obligation.
Article 6(1)(f) GDPR – where processing is necessary for our legitimate interests or those of a third party, provided that your interests, rights, and freedoms do not override those interests.
Where information is stored on or accessed from your device, § 25 TDDDG applies where relevant.
13. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.
The applicable retention period depends on the nature of the data and the purpose for which it is processed.
Where processing is based on consent, we will no longer process the relevant data for that purpose after consent is withdrawn, unless another legal basis permits or requires continued processing.
Statutory retention obligations remain unaffected.
14. Your Rights
Subject to the applicable legal requirements, you have the following rights regarding your personal data:
- Right of access pursuant to Article 15 GDPR
- Right to rectification pursuant to Article 16 GDPR
- Right to erasure pursuant to Article 17 GDPR
- Right to restriction of processing pursuant to Article 18 GDPR
- Right to data portability pursuant to Article 20 GDPR
- Right to object pursuant to Article 21 GDPR
- Right to withdraw consent at any time pursuant to Article 7(3) GDPR
Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation in accordance with Article 21 GDPR.
To exercise your rights, please contact us at:
15. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
You may contact the supervisory authority responsible for Panosome GmbH or another competent supervisory authority in accordance with Article 77 GDPR.
16. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Our website is provided using encrypted HTTPS connections.
17. Changes to This Privacy Policy
We may update this Privacy Policy where necessary to reflect changes to our website, technologies, service providers, data processing activities, or applicable legal requirements.
The current version of this Privacy Policy is always available on this website.