Privacy Policy

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data when visiting and using our website.

Controller: Diverse GmbH

Address: Am Weichselgarten 7, 91058 Erlangen, Germany

Email: info@diverseltd.com

Website: https://diverseltd.com

The controller within the meaning of the General Data Protection Regulation (GDPR) is Diverse GmbH.

This Privacy Policy covers:

• Account registration (/Identity/Account/Register)
• Contact form (/Contactus)
• General browsing of our website

When you access our website, the hosting provider automatically processes technical data required to deliver the website.

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Accessed page/file
• HTTP status code

Purpose: Ensuring stable operation, IT security and system integrity, prevention of misuse

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation)

Retention period: Server log files are stored for a maximum of 14 days, unless longer retention is necessary for security investigations.

When you register an account, we process:

• First name
• Last name
• Email address
• Password (stored securely in encrypted/hashed form)

Purpose: Creation and management of user accounts, authentication and secure login access

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)

Retention period: Data is stored for the duration of the account. Upon deletion of the account, personal data will be deleted within 30 days, unless statutory retention obligations apply.

When you contact us via our contact form, we process:

• Full name
• Email address
• Subject
• Message content

Purpose: Processing and responding to your inquiry

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in business communication)

Retention period: Contact requests are stored for 12 months after final response, unless legal retention obligations require longer storage.

Our website uses only technically necessary cookies required for the operation and security of the website.

• Session cookies (e.g., authentication cookies)
• Cookie consent preference storage

Legal basis: § 25(2) TDDDG (formerly TTDSG) — technically necessary storage; Art. 6(1)(f) GDPR — legitimate interest in website functionality

We do not use:

• Google Analytics
• Tracking pixels
• Marketing cookies
• Social media tracking
• Profiling technologies
• No non-essential cookies are set.

Users may decline non-essential cookies via the consent banner; however, since only essential cookies are used, no tracking takes place.

Our website contains a simple hyperlink to our LinkedIn company page.

This link does not embed LinkedIn scripts or transfer personal data automatically. Data is only transmitted to LinkedIn if you actively click the link and are redirected to their platform. LinkedIn is solely responsible for data processing on its platform.

We may share personal data with:

• Hosting providers
• IT service providers

All service providers are contractually bound under Art. 28 GDPR (Data Processing Agreement).

We do not sell or commercially distribute personal data.

Personal data is processed within the European Union. If, in exceptional cases, processing occurs outside the EU/EEA, it will be based on appropriate safeguards (e.g., EU Standard Contractual Clauses).

We implement appropriate technical and organizational security measures including:

• SSL/TLS encryption
• Secure password hashing
• Access control mechanisms
• Role-based authorization
• Firewall and infrastructure protection

These measures protect data against unauthorized access, alteration, disclosure, or destruction.

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

If processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact: info@diverseltd.com

You have the right to lodge a complaint with a supervisory authority.

For Diverse GmbH (Bavaria), the competent authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de

We reserve the right to update this Privacy Policy in order to reflect legal or technical changes. The current version is always available on our website.