Privacy notice

This notice explains how personal data is processed when you visit our website, contact us or apply using the embedded form.

1. Data controller

Amicon Partners GmbH, Mühlenkamp 31, 22303 Hamburg, Germany. Phone: +49 (0)40 60 77 40 18 0. Email: kontakt@amicon-partners.de. You can also use these details to exercise your data protection rights.

2. Providing this website

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When pages are requested, the hosting provider processes technical connection data, in particular IP addresses, requested content and browser information. This supports delivery, secure operation and troubleshooting. The legal basis is our legitimate interest in a functional and secure website under Article 6(1)(f) GDPR.

Vercel also processes data outside the European Union. Further details are available in Vercel’s privacy notice. Fonts and images are delivered through our website host. Your browser does not connect to an external font provider or our internal employee database for these assets.

3. Contacting us

When you select “Continue” after the first step, we save the company details as an enquiry draft in our CRM and locally in your browser so you can continue later. The browser draft expires after seven days. Unfinished CRM drafts expire after seven days and are removed in the next daily cleanup. Selecting “Choose a time” in the second step also transmits your contact details to complete the enquiry. You can then book an introductory call directly in the third form step. The calendar loads only in that step and is provided through meet.amicon.tools. Loading it connects your browser to that service. When you book an appointment, the details entered for that purpose are processed.

When you contact us through the form, by email or phone, we process your contact details and the information you provide to answer your enquiry. Where it concerns entering into or performing a contract, Article 6(1)(b) GDPR applies. Other enquiries are handled on the basis of our legitimate interest in communicating with you under Article 6(1)(f) GDPR.

4. Applications

Our application form collects your contact details, the role you are applying for, your CV and any additional information you choose to provide. Submissions are transmitted through our website server over an encrypted connection. We use n8n and Google Workspace to forward applications to our recruiting team and also send them to the import address of our applicant management system in Personio.

We use application data to decide whether to establish an employment relationship, based on Section 26(1) of the German Federal Data Protection Act (BDSG). People involved in recruitment within our organisation receive the information required for that process.

5. Cookies, audience measurement and consent

We use self-hosted Umami at analytics.amicon.tools for limited basic measurement of page views, form starts, saved company steps, confirmed enquiries and applications, completed bookings and technical submission errors. Independently of statistics consent, we use random form identifiers and opaque identifiers for confirmed submissions that allow us to associate an event with the underlying enquiry. Umami does not set tracking cookies; our integration does not store additional analytics identifiers in the browser. We honour Do Not Track, Global Privacy Control and an existing Umami opt-out, including when consent has been given.

Basic measurement relies on our legitimate interest in improving the website and its contact channels under Article 6(1)(f) GDPR. The service processes technical connection data to derive time-limited session identifiers; according to Umami, IP addresses are not stored in plain text in analytics data. These data should therefore not be considered completely anonymous. We do not identify visitors across websites. You may object by enabling Do Not Track or contacting us above.

Only with your explicit statistics consent do we additionally collect click and scroll heatmaps and session replays on public content pages. These include positions, scroll depth, page and viewport dimensions, public page structures and website text. Inputs and text explicitly marked for masking are masked. Contact, application and booking pages, forms, embedded calendars and private areas are excluded from recording. Recording is limited to five minutes per content page. The retention criteria described below apply to stored recordings.

Confirmed submissions and booking completions carry an opaque identifier as part of basic measurement, independently of consent to heatmaps and replays. We do not send names, email addresses, telephone numbers, field contents or documents from your submissions to Umami. Public website content may remain visible in a consented session replay. Analytics URLs are limited to known paths and approved campaign codes; heatmaps and replays contain no query parameters. Page titles and referring URLs are not sent. Heatmaps and replays rely on Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Cookiebot, provided by Usercentrics A/S in Denmark, manages your choice. It processes technical connection data, the domain, time and content of your decision and a consent identifier. The CookieConsent cookie stores your choice. This is used to respect and demonstrate your decision under Article 6(1)(c) GDPR. You can change or withdraw consent at any time using Privacy settings on this page. Withdrawal stops additional recording for the future; basic measurement remains independent of this choice. See the Cookiebot privacy policy.

When you select a language, we store the preference for one year in the “amicon-language” cookie. Your appearance preference (Light, Dark or System) is stored locally in your browser under “amicon-theme”. These settings only preserve your choices for later visits. Without a manual selection, the website starts in German and the colour scheme follows your system settings.

6. Retention

We keep personal data for as long as needed for its purpose. When that purpose no longer applies, data is deleted unless statutory retention requirements or other lawful reasons justify continued storage. These may include retaining business correspondence or establishing and defending legal claims.

7. Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time for the future without affecting the lawfulness of prior processing.

Where processing relies on legitimate interests, you may object under Article 21 GDPR on grounds relating to your particular situation. You also have the right to complain to a data protection authority, particularly in the place of your habitual residence, work or the alleged infringement.

8. Encrypted transmission

The public website uses HTTPS for encrypted transmission. For email contact, transmission also depends on the email services involved.

Last updated: 9 October 2026