Last updated: September 25, 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
CircularTree GmbH
Fehrbelliner Str. 50, 10119 Berlin, Germany
Phone: +49 30 91528404
Email: info@circulartree.com
Data Protection Lead: Gunther Walden, reachable at info@circulartree.com.
This privacy policy informs you about the nature, scope and purpose of the processing of personal data on our website. We process personal data only where necessary to provide a functional website and our content and services, or where you have given consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (performance of a contract), (c) (legal obligation) and (f) (legitimate interest).
Our website is hosted by UAB “Hostinger” (Švitrigailos g. 34, 03230 Vilnius, Lithuania). Hostinger processes, on our behalf, the data required to operate and deliver the website. The legal basis is our legitimate interest in the secure and efficient provision of our website (Art. 6(1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider.
For acceleration and caching we also use QUIC.cloud, which temporarily stores content in a cache. Further information: https://quic.cloud/privacy-policy/
Each time our website is accessed, our system automatically collects data from the accessing device (e.g. IP address, date and time of access, page accessed, volume of data transferred, browser type and operating system). The legal basis is our legitimate interest in the technical provision and security of the website (Art. 6(1)(f) GDPR). This data is deleted after a short period unless required to investigate security incidents.
Our website uses cookies and comparable technologies. Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG. All non-essential cookies – in particular for analytics, statistics and marketing – are only set after you have given express consent via our cookie consent banner (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).
To manage your consent we use the consent management solution WPConsent. Your consent choice is stored in a cookie so that your selection can be taken into account on future visits. You can change or withdraw your consent at any time with effect for the future via the settings of the consent banner. A detailed list of the cookies we use can be found in our Cookie Policy. Further information about the provider: https://wpconsent.com/
Where you have given consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is integrated via Google Tag Manager. Google Analytics uses cookies and similar technologies to evaluate the use of our website (e.g. browser type/version, operating system, referrer URL, time of access). In Google Analytics 4, IP addresses are anonymised by default and are not stored permanently.
The legal basis is solely your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. A data processing agreement is in place with Google. Data may be transferred to Google servers in the USA; such transfers are based on the EU Standard Contractual Clauses and supplementary safeguards. Collected data is automatically deleted in Google Analytics 4 according to the retention settings (event data after 2 months, user data after 14 months).
You can withdraw your consent at any time via our consent banner. Further information: https://policies.google.com/privacy
Where you have given consent, we also use Matomo, a web analytics service provided by InnoCraft Ltd. (150 Willis Street, 6011 Wellington, New Zealand), in its “Matomo Cloud” edition. Data of European customers is hosted in the EU (Germany). Matomo uses cookies (e.g. “_pk_id”, “_pk_ses”) to evaluate the use of our website. The legal basis is solely your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. A data processing agreement is in place with the provider. New Zealand benefits from an EU Commission adequacy decision, ensuring an adequate level of data protection. You can withdraw your consent at any time via our consent banner. Further information: https://matomo.org/privacy-policy/
For our newsletter, some of our forms and our contact management we use HubSpot, a service provided by HubSpot, Inc. (2 Canal Park, Cambridge, MA 02141, USA). HubSpot processes the data you provide in forms or when subscribing to the newsletter (e.g. name, email address) as well as technical usage data.
Where HubSpot sets cookies or comparable tracking technologies, this only occurs after your consent via our consent banner (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). The processing of data to handle your enquiry or to initiate a contract is based on Art. 6(1)(b) or (f) GDPR.
A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot. As HubSpot also processes data in the USA, any third-country transfer is based on the EU Standard Contractual Clauses and supplementary safeguards. Further information: https://legal.hubspot.com/privacy-policy
Some of our forms are built with the WordPress plugin Forminator (WPMU DEV / Incsub, LLC). The data you enter into the form is processed to handle your enquiry and stored in our WordPress database on our server (see section 3). The legal basis is Art. 6(1)(b) or (f) GDPR. The data is deleted once it is no longer required to achieve the purpose, provided no statutory retention obligations apply.
When you subscribe to our newsletter, we process the data you provide (in particular your email address) to send the newsletter. Subscription uses the double opt-in procedure: after signing up you receive a confirmation email with which you confirm your subscription. The legal basis is your consent (Art. 6(1)(a) GDPR).
You can unsubscribe at any time and withdraw your consent with effect for the future, e.g. via the unsubscribe link in every newsletter email. Technical distribution is handled via HubSpot (see section 8).
We use the live chat service Tidio on our website (provider: Tidio; further details on the provider and contracting structure are available in Tidio’s privacy policy). When you use the chat, the data you enter and technical usage data are processed to answer your enquiry. Tidio sets cookies or comparable technologies for this purpose, which are only loaded after your consent via our consent banner (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG); handling your enquiry is based on Art. 6(1)(b) or (f) GDPR. A data processing agreement is in place with the provider. Where personal data is transferred to a third country outside the EU/EEA, this is based on appropriate safeguards, in particular the EU Standard Contractual Clauses. Further information: https://www.tidio.com/privacy-policy/
We embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The YouTube content is only loaded after you have given consent via our consent banner (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). When playing a video, YouTube may set cookies and transfer data – including to the USA; this is based on the EU Standard Contractual Clauses. Further information: https://policies.google.com/privacy
To display fonts consistently we use Google Fonts, which we have integrated locally on our server (self-hosting). No data is transmitted to Google when the fonts are delivered; in particular, your IP address is not passed on to Google.
We maintain a profile on LinkedIn to communicate with users and provide information about our services. Responsibility for the data processing there lies with the respective platform operator alongside us; in part this constitutes joint controllership (Art. 26 GDPR). We point out that your data may also be processed outside the EU/EEA. The legal basis is our legitimate interest in an effective public presence (Art. 6(1)(f) GDPR) or, where required, the consent you have given to the platform operator (Art. 6(1)(a) GDPR).
Our website allows you to share content via LinkedIn. To protect your data we use the “Shariff” solution: the share button is embedded as a static image containing only a link to LinkedIn. Data (e.g. your IP address) is only transmitted to LinkedIn once you actively click the button. If you do not click it, no data is transferred.
If we process your personal data, you have the following rights under the General Data Protection Regulation (GDPR), subject to the applicable legal requirements:
To exercise any of these rights, please contact us using the contact details provided in this Privacy Policy.
We take appropriate technical and organisational measures to protect your data. Please note that data transmission over the internet (e.g. by email) may have security gaps; complete protection against access by third parties is not possible.
This privacy policy is currently valid. As our website develops or legal requirements change, it may become necessary to amend it.
Products
Legal
We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Matomo is an open-source web analytics platform that provides detailed insights into website traffic and user behavior.
Service URL: matomo.org (opens in a new window)
Marketing cookies are used to follow visitors to websites. The intention is to show ads that are relevant and engaging to the individual user.
HubSpot is an all-in-one marketing, sales, and customer service platform that streamlines business growth.
Service URL: legal.hubspot.com (opens in a new window)
You can find more information in our Cookie Policy and Privacy Policy.
