As of 12 October 2026
Privacy
CipherCell takes data protection seriously and collects, processes and uses your personal data exclusively in accordance with the principles described below and in compliance with applicable data protection law.
Privacy Notice
This notice explains how CipherCell processes personal data when you visit our website, contact us, subscribe to the CipherVerifier alpha notification, or choose to display embedded LinkedIn posts.
1. Controller and contact
The controller responsible for this website is:
Dr. Felix Klement
CipherCell
Innstr. 43
94032 Passau
Germany
Email: office@ciphercell.de
2. Website delivery and security
When you visit our website, technical information is processed to deliver the pages you request and maintain the website’s availability and security.
This includes the IP address, request date and time, requested URL, response status, browser information, and referring page.
Hosting is provided by Dr. Felix Klement, adddress as above, Germany.
We process these data under Article 6(1)(f) GDPR. Our legitimate interests are operating a functional website, identifying faults, and preventing misuse and attacks.
Server logs are deleted after 7 days. Where specific records are needed to investigate a security incident or establish, exercise, or defend legal claims, we retain those records for as long as they are needed for the described purpose.
The technical information needed to deliver a requested page must be processed for the website to function.
3. Contact enquiries
If you contact us by email or telephone, we process the contact details, message content, and attachments you provide to respond to your enquiry.
Where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is responding to communications addressed to us.
Our email service is provided by uberspace, Jonas Pasche, Germany. More information: https://uberspace.de.
We delete ordinary enquiries after 30 days. Where correspondence must be retained under applicable legal obligations, we retain the necessary records for as long as we are obligated, based on Article 6(1)(c) GDPR.
Providing information is voluntary. However, we need sufficient information and a way to contact you to answer your enquiry.
4. Website analytics with Matomo
We use Matomo to understand how visitors use our website and to improve its content and technical performance.
Our installation is configured without analytics cookies and masks IP addresses.
Matomo is hosted by Dr. Felix Klement, address as above, Germany. Only CipherCell recieves analytics data.
The legal basis is Article 6(1)(a) GDPR. Where analytics involves storing information on or accessing information from your device, we also obtain consent under §25(1) TDDDG.
If your browser supports and has activated the "Do Not Track" function, your visit will be automatically ignored by Matomo. You can still object to the anonymized analysis of your visit at any time. To do so, please use the opt-out below.
Checking whether your visits are counted.
5. CipherVerifier alpha notification
You can register to receive one email announcing the first CipherVerifier alpha release. We do not use this registration for a general newsletter or unrelated advertising.
We process your email address to send a confirmation email. Your address is added to the active notification list only after you confirm using the link in that email.
The confirmation link expires after seven days. If not confirmed in time, the data from your registration is deleted immediately.
For confirmed registrations, we keep your email address and the additional data that you submitted during the registration.
The legal basis for registration and the notification is your consent under Article 6(1)(a) GDPR.
Our email delivery provider is uberspace, Jonas Pasche, Germany. More information: https://uberspace.de
You may withdraw your consent at any time through clicking the unsubscribe link in any of our emails related to the CipherVerifier alpha notification or by emailing office@ciphercell.de. We then remove your address from the active notification list.
We also remove your address from that list after sending the notification or if the release is cancelled whichever occurs first.
Registration is optional. Without your email address and confirmation, we cannot send you the notification.
6. Embedded LinkedIn posts
Some pages offer posts hosted by LinkedIn Ireland Unlimited Company, Ireland. These posts are initially displayed as placeholders. LinkedIn content is loaded only when you select “Load post from LinkedIn.”
Before loading a post, we inform you that doing so connects your browser to LinkedIn and that LinkedIn may set cookies. The placeholder also links to this privacy notice.
By selecting “Load post from LinkedIn,” you consent to loading the selected post and the associated transmission of personal data to LinkedIn. Your browser sends LinkedIn technical information, including your IP address and browser information, and may disclose the page you are visiting. LinkedIn may set or read cookies or use similar technologies. If you are logged in to LinkedIn, it may associate this interaction with your account.
Our purpose is to display the LinkedIn post you choose to view. The legal basis for the processing for which we are responsible is your consent under Article 6(1)(a) GDPR. Consent also covers associated storage of information on, or access to information from, your device under §25(1) TDDDG.
You can leave the post unloaded and continue using our website.
You can withdraw your consent at any time by reloading the page. Withdrawal prevents further loading and transmission through the affected embed. It does not affect the lawfulness of processing before withdrawal or undo information already transmitted to LinkedIn.
LinkedIn may process data outside the European Economic Area, including in the United States.
Details about LinkedIn’s purposes, retention practices, international transfers, and privacy rights are available in LinkedIn’s Privacy Policy.
7. Service providers and international transfers
The providers identified above receive personal data only as needed for their respective services. Where they process data on our behalf, we engage them under data processing agreements and instructions.
8. Your rights
Subject to the conditions set out in the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, and restriction of processing.
Where processing is automated and based on consent or a contract, you may also have the right to receive data you provided in a structured, commonly used, machine-readable format and to transmit those data to another controller.
Right to object: Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or need the data for legal claims. You may object to processing for direct marketing at any time; we will then stop that processing.
Withdrawal of consent: You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact office@ciphercell.de or write to the address above. Requests are normally free of charge. We generally respond within one month; if a legally permitted extension is necessary, we will explain this within that month.
You may also complain to a supervisory authority, particularly in the EU Member State where you habitually live or work, or where you consider an infringement occurred.
For private-sector controllers in Bavaria, the relevant authority is the Bavarian State Office for Data Protection Supervision (BayLDA). Information and complaint options are available on the BayLDA website.
9. Automated decisions
We do not currently make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
10. Data security
We use TLS encryption for connections to our website and maintain technical and organisational safeguards appropriate to the risks of processing personal data.
11. Changes to this notice
We update this notice when our processing practices or applicable requirements change. The revision date appears above.
If we intend to use personal data for a new purpose, we will provide the required information before doing so and obtain new consent where necessary.