Legal Notice & Privacy Policy

Legal Notice

Information pursuant to Section 5 of the German Digital Services Act (DDG)

galaniprojects GmbH
Keithstraße 2–4
10787 Berlin
Germany

Commercial register
Registered in the German Commercial Register
Register court: Amtsgericht Berlin-Charlottenburg
Registration number: HRB 175723 B

Represented by

Anastasia Galani

Person responsible for editorial content pursuant to Section 18(2) MStV

Anastasia Galani
Keithstraße 2–4
10787 Berlin

Contact

Phone: +49 (0) 30 2123 2827
Fax: +49 (0) 30 2191 3767
Email: info@galaniprojects.de

VAT identification number pursuant to Section 27a UStG

DE306245726

Liability for content

Under Section 7(1) TMG / Section 8 DDG, we are responsible for our own content on these pages in accordance with general legislation. However, we cannot guarantee that the content is accurate, complete or up to date.

Liability for links

Our website contains links to third-party websites over whose content we have no control. We therefore assume no liability for such external content. The respective providers or operators are responsible for the content of linked websites.

Copyright

The content and works created by us on these pages are subject to German copyright law. Any use beyond the limits of copyright law requires our prior written consent. Downloads and copies of this website are permitted for private, non-commercial use only.

Privacy Policy

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable national data protection laws is:

galaniprojects GmbH
Keithstraße 2–4
10787 Berlin
Germany

Phone: +49 (0) 30 2123 2827
Email: info@galaniprojects.de
Website: https://galaniprojects.de

2. General information on data processing

We process personal data only to the extent necessary to provide our website, content and services, or where another legal basis applies (such as consent or legitimate interests). The relevant legal bases include Article 6(1)(a), (b), (c) and (f) GDPR.

Where we use external service providers (such as hosting providers), processing is governed by data processing agreements pursuant to Article 28 GDPR.

3. Hosting

Our website is hosted by an external provider located within the European Union/European Economic Area. The hosting provider supplies infrastructure and platform services, computing capacity, storage, database services, security services and technical maintenance.

Purpose and legal basis

Secure and efficient operation of this website. Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Provision of the website and server log files

When you visit our website, our system automatically collects data and information from the device used to access it. This may include:

This data is stored in system log files.

Purposes of processing

Legal basis

Article 6(1)(f) GDPR (legitimate interest in secure and technically reliable website operation).

Retention period

Log files are generally retained for no longer than 7–14 days and then deleted or anonymized, unless longer retention is necessary to preserve evidence in connection with security incidents.

5. Contacting us (email, telephone, contact form)

You can contact us through the options provided on the website (email, telephone or contact form). We process the information you provide, in particular:

Purpose of processing

Handling your enquiry and corresponding with you.

Legal bases

Retention period

We retain enquiries and the associated personal data for as long as necessary to process and resolve them. The data is then deleted unless statutory retention obligations apply or the data is needed to establish, exercise or defend legal claims.

6. Job applications

If you apply for a vacancy or submit an unsolicited application (for example by email), we process the application data you provide, such as contact details, CVs and certificates.

Purpose of processing

Retention period

Application data is generally deleted no later than six months after the recruitment process ends if no employment relationship is established, unless further legitimate interests apply (such as preserving evidence in proceedings under the German General Equal Treatment Act (AGG)) or you have expressly consented to longer retention (such as inclusion in an applicant pool).

7. Blog and comments (blog.galaniprojects.de)

On our blog, you may be able to post comments or subscribe to comment notifications.

Data processed

Purposes of processing

Legal bases

Retention period

Comments generally remain visible for as long as the associated post is online, unless removal is necessary for legal or editorial reasons. You can unsubscribe from comment notifications at any time using the link provided in the notification email.

8. Cookies and similar technologies

Our website uses cookies and similar technologies only where technically necessary to provide essential website functions (such as language settings, navigation or form protection). Data stored in technically necessary cookies is not used to identify website visitors or analyze their behavior.

Legal bases

No tracking or marketing cookies

We currently do not use cookies for analytics, tracking or marketing purposes. Nor do we use tools such as Google Analytics, Facebook Pixel or comparable services. If such services are introduced in the future, we will obtain your consent beforehand and update this privacy policy accordingly.

9. Embedded content and third-party links

Our website may contain links to third-party content (such as references, service providers or review portals). When you click such a link, you leave our website. The respective third-party providers are solely responsible for processing personal data on their websites.

Where embedded content (such as videos or maps) is used, we seek to integrate it so that data is transmitted only after you actively click. If services involve transfers to third countries (such as the United States), we will inform you transparently and obtain consent where required.

10. Recipients of personal data

Within our company, only those personnel who need your data to fulfil contractual and legal obligations have access to it.

We use selected external service providers (such as hosting and IT providers) to operate the website and manage our processes. Where they act as processors under Article 28 GDPR, they have been carefully selected, contractually bound and may process data only on our instructions.

Otherwise, data is shared with third parties only where required to perform a contract with you, where we are legally obliged to do so, or where you have expressly consented.

11. Transfers to third countries

Personal data is transferred to countries outside the European Union (EU) or European Economic Area (EEA) only where necessary to perform a contract, where you have consented, or where another legal authorization applies, and only subject to the requirements of Articles 44 et seq. GDPR (such as an EU adequacy decision or standard contractual clauses).

If we use services involving such transfers, we will provide separate information in this privacy policy.

12. Retention periods

Unless stated otherwise for specific processing activities, the following applies:

13. Your rights as a data subject

Under the GDPR, you have the following rights in relation to your personal data in particular:

You may exercise your rights at any time using the contact details provided above.

14. Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data (Article 77 GDPR).

The authority particularly responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de

15. Obligation to provide data

In general, there is no legal or contractual obligation to provide personal data when using our website. However, some functions (such as the contact form) cannot be used without certain details, such as your name or email address.

16. No automated decision-making or profiling

We do not use your data for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

17. Validity and changes to this privacy policy

This privacy policy is currently valid (as of November 2025). Further development of our website or changes to legal or regulatory requirements may make updates necessary. The current version can always be accessed on our website under “Legal Notice & Privacy Policy”.