1. Controller
The controller for the processing of personal data on this website is:
PIM - Project Initiation Management GmbH
Bonifatiusweg 46, 48155 Muenster, Germany
E-mail: corp.office@pim-germany.eu
Phone: +49 251 92 87 39 37
We have not appointed a data protection officer; the legal conditions requiring one are not met. For any data protection matter, please use the address above.
2. Principle
We process personal data only where this is necessary to operate this website, to handle your enquiry, or to meet contractual and legal obligations. Personal data means any information relating to an identified or identifiable person, such as name, address, e-mail address or IP address.
3. Legal bases
Processing is based on one of the following:
- Consent (Art. 6(1)(a) GDPR), for example for non-essential cookies
- Contract or pre-contractual steps (Art. 6(1)(b) GDPR), for example when you send an enquiry
- Legal obligation (Art. 6(1)(c) GDPR), for example commercial and tax retention duties
- Legitimate interest (Art. 6(1)(f) GDPR), for example the secure and stable operation of this website
4. Hosting and server log files
This website is hosted by Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany. The provider processes data as our processor under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.
When you access the website, the server automatically records access data (server log files), in particular:
- IP address of the requesting device
- date and time of access
- the address requested and the volume of data transferred
- server status message
- referring page and browser used
This processing is technically necessary to deliver the website and to keep it secure. The legal basis is Art. 6(1)(f) GDPR. Retention: log files are deleted after 14 days at the latest, unless they are needed to investigate a specific security incident.
5. No web analytics, no tracking
This website uses no analytics or tracking services. In particular, there is no Google Analytics, no tag manager, and no advertising or profiling tracking. We also embed no external fonts, maps, videos or third-party content that would transfer data to third parties when the page loads. There is no transfer to third countries.
6. Cookies and consent
We use very few cookies. Essential cookies are needed to operate the site and are set without consent (Art. 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG); all others only with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
- pll_language (Polylang): stores your language choice. Essential, valid for one year.
- cmplz_* (Complianz): stores your cookie decision so we do not ask again. Essential, valid for up to one year.
- wordpress_*, wp-settings-*: only when logging in to the editorial area, not for visitors.
You can withdraw your consent at any time with effect for the future via the cookie settings on this website. You can also delete cookies in your browser or restrict their storage.
7. Contacting us
If you write to us by e-mail or through a contact form, we process the data you provide (in particular name, e-mail address and the content of your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry serves to initiate or perform a contract, otherwise Art. 6(1)(f) GDPR.
Messages sent through a contact form are additionally stored in the website system so that no enquiry is lost. Retention: we delete enquiries once they have been dealt with conclusively and no statutory retention periods apply; records relevant under commercial or tax law are kept for six and ten years respectively.
8. Website security
To protect against attacks we use security software (Wordfence). It inspects requests, logs IP addresses in doing so, and blocks suspicious traffic. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR). Security logs are deleted regularly, after 30 days at the latest, unless needed to investigate an incident.
The website is transmitted exclusively over an encrypted connection (TLS/HTTPS).
9. Recipients of your data
Personal data is disclosed only where necessary to handle your enquiry or to meet contractual or legal obligations. Processors, such as our hosting provider, are bound by contract under Art. 28 GDPR and may process the data only on our documented instructions.
10. Your rights
Under the General Data Protection Regulation you have the following rights:
- Access to the data we process about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
An informal message to the address above is sufficient.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The authority responsible for us is:
Landesbeauftragte fuer Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestrasse 2 to 4
40213 Duesseldorf, Germany
You may also contact the supervisory authority of your habitual residence.
12. Obligation to provide data
Providing personal data is neither required by law nor by contract. However, without the details needed to contact you we cannot deal with your enquiry. No automated decision-making, including profiling, takes place.
13. Changes to this privacy policy
We update this privacy policy when the legal situation, our services or the technology we use changes. The version published here applies. Last updated: August 2026.