The protection of your personal data is an important concern for us.
On this page, we inform you about what data we collect when you visit our website, newsletters, Perseus services, webinars and job applications, how we use it and what rights you have in relation to your data.
This data protection declaration informs you about the type, scope and purpose of the processing of your personal data by the data controller in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).
The definitions of terms in accordance with Art. 4 GDPR are used.
The data controller is Perseus Technologies GmbH (“Perseus“, “we“) with its registered office at Hagelberger Straße 53-54 in 10965 Berlin.
We have appointed a data protection officer. This can be reached in writing at the address of the company’s registered office with the note “Data Protection Officer” or by e-mail at datenschutz@perseus.de.
If you are a visitor to our website under perseus.de (“Website”), we process your personal data as follows.
We use third-party services to do so. These services also include the use of cookies (essential, functional, marketing). Specific information on the individual cookies and individual setting options can be found under “Details” in our consent management platform Usercentrics.
There you can consent to processing and object to processing on the basis of legitimate interest. You can also use the “shield” symbol at the bottom left of the website to adjust your preferences at a later date or revoke your consent with effect for the future. Please note that without your consent, individual functions of the websites can only function to a limited extent.
Purpose:
Category of processed data:
Third country data transfer:
Storage period or its criteria:
Legal basis:
As a visitor to our websites, you can contact us via online form and request an initial offer.
–> Processing: Quotation Forms
Purpose:
Categories of processed data:
Categories of recipients:
Third country data transfer:
Storage period or its criteria:
Legal basis:
For appointment bookings for a non-binding consultation on the services we offer via our website, we use the Calendly service.
–>Processing: Appointment booking via Calendly
Purpose:
Category of processed data:
Category of recipients:
Third country data transfer:
Storage period or its criteria:
Legal basis:
We process personal data of website visitors for the purposes of website optimisation and reach analysis, as well as for the integration of marketing and social media functionalities. Detailed information on this data processing can be found in the Consent Management Platform under “Details”.
The legal basis for the processing for these purposes is Art. 6 para. 1 a) GDPR (consent). Consent to this processing may be withdrawn at any time during the duration of this browser session in which these settings are used.
incl. sending of simulated phishing e-mails (order processing)
Purpose:
Categories of processed data:
Categories of recipients:
Third country data transfer:
Storage period or its criteria:
Legal basis:
Purpose:
Categories of processed data:
Categories of recipients:
Third country data transfer:
Storage period or its criteria:
Legal basis:
–> Incident Response Management
Purpose:
There is no targeted access to this data, but access may occasionally take place as part of the provision of services.
Categories of processed data:
In the case of incident management, there is potential access to all (personal) data contained in the Client’s data records that must be accessed by the Contractor and its subcontractors as part of incident management. These can be:
Categories of recipients:
Third country data transfer:
Storage period or its criteria:
Legal basis:
For the purpose of payment processing, we use the external payment services Stripe, Quaderno and FastBill.
–> Processing: Payment processing for Perseus services
Purpose:
Categories of processed data:
Categories of recipients:
Invoicing and payment processing
Third country data transfer:
Storage period or its criteria:
Legal basis:
If you are a newsletter subscriber, we process your personal data. We send newsletters to the e-mail addresses provided by subscribers through the use of the provider Brevo.
–> Processing: Newsletter subscription
Purpose:
Categories of processed data:
Categories of recipients:
Third country data transfer:
Storage period or its criteria:
Legal basis:
We use a double opt-in process to ensure that you only receive our newsletter when you really want to. For this purpose, we will send you a notification e-mail in which you confirm that you actually want to receive our promotional e-mails or newsletter by clicking on a link contained in this e-mail.
If your personal data is processed, you are a data subject within the meaning of the GDPR. You are therefore entitled to the following rights vis-à-vis the controller:
In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you can request the following information from us about the following information: Processing purposes; category of personal data that will be processed; Recipients or categories of recipients to whom your data has been or will be disclosed; planned storage period or, if concrete information is not possible, criteria for determining the storage period; existence of a right to rectification, erasure, restriction of processing or objection; existence of a right of appeal to a supervisory authority; Origin of your data, if it has not been collected by us; Existence of automated decision-making, including profiling and, where applicable, meaningful information on its details; transfer of personal data to a third country or to an international organisation; suitable safeguards in accordance with Art. 46 GDPR in connection with the transfer.
In accordance with Art. 16 GDPR, you have the right to demand the correction or completion of your personal data stored by us without undue delay.
In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have objected to the processing in accordance with Art. 21 GDPR.
In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
If you have asserted the right to rectification, deletion or restriction of processing vis-à-vis Perseus as the responsible body, we are obliged in accordance with Art. 19 GDPR to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right vis-à-vis Perseus to be informed about these recipients.
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
In accordance with Art. 21 GDPR, you have the right to revoke your consent at any time vis-à-vis us. We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to “profiling”, insofar as it is related to such direct advertising. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In accordance with Art. 7 (3) GDPR, you have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the revocation.
In accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, place of work or the place of the alleged infringement for this purpose.
This privacy policy applies in its current version. The current data protection declaration can be accessed and printed out at any time on the website under https://www.perseus.de/en/privacy-policy/ .
As of: May 2026