Privacy policy

As of November 2026.

1. Controller

The controller for personal data processed on this website is the company named in the legal notice (Impressum):

Bridge Point UG (haftungsbeschränkt)
Karl-von-Roth-Str. 25A
80997 Munich
Germany
Email: [email protected]
Managing director: Alison Collins

2. General

We process personal data only as needed to provide this website, to respond to enquiries, or to meet legal obligations. We do not use analytics or marketing cookies, tracking, embedded maps, or fonts or other assets from third-party CDNs. The typefaces used on this website are self-hosted and are served only from this site.

3. Hosting and server logs

When you visit this website, the hosting provider automatically processes connection data that a web server typically stores in log files. This may include the IP address, date and time of access, the page requested, the volume of data transferred, the HTTP status code, and browser and operating-system identifiers (user agent).

This processing is based on Article 6(1)(f) GDPR (our legitimate interest in providing a stable and secure website). Logs are kept only as long as needed for those purposes and are then deleted, unless a longer retention is required by law.

This website is hosted on Cloudflare Pages by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the server-log data described above, including IP addresses, in order to deliver the website and to maintain its security and stability. We have a data-processing agreement with Cloudflare under Article 28 GDPR. Because Cloudflare is established in the United States, personal data — in particular IP addresses in server logs — may be transferred to the USA. That transfer is based on Cloudflare’s certification under the EU-US Data Privacy Framework (Article 45 GDPR) and on the EU Standard Contractual Clauses.

4. Contact by email

This website does not use a contact form. If you write to us at [email protected], or use the email button on the contact page, we process the personal data you send in that email — at least your email address and the message, and any name, company or other details you include — in order to conduct the correspondence and handle your enquiry.

The legal basis is Article 6(1)(b) GDPR where the message relates to a contract or to steps prior to entering one, and otherwise Article 6(1)(f) GDPR (our legitimate interest in answering incoming mail). Email is processed through Google Workspace. The email provider and processor is Google Cloud EMEA Ltd / Google Ireland, under a data-processing agreement pursuant to Article 28 GDPR. Where a transfer to the United States takes place (for example to Google LLC as a sub-processor), it is based on the EU-US Data Privacy Framework (Article 45 GDPR) and the EU Standard Contractual Clauses.

We use the data only to respond to your enquiry. It is not used for marketing and is not shared with unrelated third parties. It is deleted when the purpose has ended, unless a legal retention duty applies (for example if a business relationship follows).

5. No tracking or marketing cookies

This website does not use tracking, analytics, or marketing cookies. We do not use tools such as Google Analytics, the Meta pixel, or comparable services. Technical operations of the hosting provider remain as described in section 3.

6. Recipients and transfers outside the EU

Recipients are we ourselves and the processors we appoint. The website is hosted by Cloudflare, Inc. (see section 3). Email sent to [email protected] is processed by Google Workspace (Google Cloud EMEA Ltd / Google Ireland) as described in section 4. A transfer to a country outside the EU or EEA takes place only where it is necessary for these providers and only if an adequate level of protection exists (an adequacy decision, including the EU-US Data Privacy Framework, or appropriate safeguards under Article 46 GDPR, in particular standard contractual clauses).

7. Retention

We keep personal data only as long as needed for the relevant purpose, or as required by law. See section 3 for server logs and section 4 for email enquiries.

8. Your rights

Under the GDPR you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and the right to object to processing based on Article 6(1)(f) (Article 21). To exercise these rights, email [email protected].

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). For us, that is in particular the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Postfach 1349, 91504 Ansbach, Germany, www.lda.bayern.de.

9. Obligation to provide data

You are under no legal obligation to give us personal data by email. Without the details we need (in particular a working email address and the content of your message), we cannot respond.

10. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.