Privacy policy. Information under Art. 13 GDPR.

Hosting and server logs

Our website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the website via its content delivery network and protects it against attacks. When you open a page, your browser automatically transmits data that Cloudflare processes: IP address, date and time, requested page, referrer URL, browser and operating system.

We need this data to deliver the website and to keep it secure. The legal basis is Art. 6 (1) (f) GDPR. Data may also be processed in the USA; Cloudflare is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Cloudflare.

Contact and forms

If you contact us by email or use one of our forms (contact, free test shoot, pop-up space request), we process the data you provide, such as name, email address, brand, message and requested dates, to answer your request.

When you submit a form, Cloudflare (see “Hosting and server logs”) processes your entries and forwards them to us by email via our email provider DomainFactory GmbH, Neuturmstraße 5, 80331 Munich, Germany. We have concluded a data processing agreement with DomainFactory.

The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data once your request is completed, unless statutory retention obligations apply.

Cookies and consent

We only use cookies and similar technologies that are not technically necessary with your consent: to analyse how our website is used (Google Analytics, Microsoft Clarity) and for marketing (Google Ads, LinkedIn Insight Tag, Meta Pixel). You give consent in the banner that appears on your first visit, for both purposes together or individually under “Settings”, where you can also refuse it. You can change your choice at any time via “Cookie settings” at the bottom of each page; a withdrawal applies to the future. Without cookies and without consent, we only count page views and individual actions, see “Audience measurement without cookies”.

The legal basis for storing information on your device is § 25 (1) TDDDG, and for the subsequent processing Art. 6 (1) (a) GDPR. Technically necessary storage, such as saving your consent decision, is based on § 25 (2) No. 2 TDDDG.

Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse how visitors use our website, for example which pages are viewed and for how long. Google Analytics 4 does not log or store IP addresses.

We also measure individual actions on the website, such as submitting a form, clicks on email addresses, the use of filters and page load times. We do not transmit names, email addresses or messages to Google Analytics. If Google Signals is enabled, Google can combine visits across devices for users who have allowed personalised advertising in their Google account; we only receive aggregated reports.

Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Google. The data is deleted after 14 months. The legal basis is your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time via “Cookie settings”.

Audience measurement without cookies

If you have not consented in the banner, we still count page views and individual actions such as submitting a form: without cookies, without an identifier and without storing anything on your device. To do this, your browser sends the address of the page, the referring page, the page title, the time spent on the page and the measured actions to our server at Cloudflare when you leave a page, together with whether you rejected in the banner or have not decided yet and whether you arrived via an ad.

Our server forwards this information to Google Analytics 4 of Google Ireland Limited without your IP address. It only adds the country and the device type (computer, tablet or smartphone), which it derives from the connection. We do not count page views from data centre networks or from automated browsers, as they almost always come from programs. Each page view receives a random number that expires afterwards; you are not recognised across pages or visits. The data is deleted after 14 months.

The legal basis is our legitimate interest in measuring the reach of our website and the impact of our content completely, Art. 6 (1) (f) GDPR. If Global Privacy Control or “Do Not Track” is enabled in your browser, we do not count. You can also object at any time, see “Right to object”.

Google Ads

With your consent, we use Google Ads, an advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us measure whether an enquiry via our website goes back to one of our ads (conversion tracking) and show our ads to visitors of our website later on Google services and partner sites (remarketing). For this, Google sets cookies and processes, among other things, your IP address, information about your device and the pages you visit.

Enhanced conversions: When you submit a form, we transmit your email address to Google in encrypted form (as a hash value). Google matches this value with signed-in Google accounts to attribute the enquiry to an ad, even if no cookie is present. The email address cannot be derived from the hash value.

Ad click ID: If you come to our website via an ad, we store the ID of this click in your browser’s local storage for up to 90 days and send it to us with your enquiry. This allows us to tell Google Ads which enquiries were a good fit for us.

Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Google processes some of the data under its own responsibility. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, which you can withdraw at any time via “Cookie settings”. More information: policies.google.com/privacy.

LinkedIn Insight Tag

With your consent, we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It sets cookies and transmits to LinkedIn which pages you visit, together with information about your device and browser. If you are signed in to LinkedIn, LinkedIn can associate the visit with your profile.

We only receive aggregated reports, for example on the industries, job titles and company sizes of our visitors, and no information about individual people. We also use it to measure the success of ads on LinkedIn and to show our ads there to visitors of our website.

Data may be transferred to LinkedIn Corporation in the USA; it is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, which you can withdraw at any time via “Cookie settings”. More information: linkedin.com/legal/privacy-policy.

Microsoft Clarity

With your consent, we use Microsoft Clarity of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how visitors use our website, such as mouse movements, clicks and scrolling, and creates session recordings and heatmaps from this. This shows us where we can improve the website. Entries in our forms are masked before transmission.

Clarity sets cookies. Microsoft stores recordings for 30 days and aggregated reports for 13 months. Data may be transferred to Microsoft Corporation in the USA; it is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, which you can withdraw at any time via “Cookie settings”. More information: privacy.microsoft.com.

Meta Pixel

With your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It sets cookies and transmits to Meta which pages you visit and whether you send an enquiry, together with information about your device. If you are signed in to Facebook or Instagram, Meta can associate the visit with your account. This lets us measure the success of ads on Facebook and Instagram and show our ads there to visitors of our website.

We are jointly responsible with Meta for collecting and transmitting the data (Art. 26 GDPR); the agreement on this is part of Meta’s terms. Meta alone is responsible for any further processing. Data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, which you can withdraw at any time via “Cookie settings”. More information: facebook.com/privacy/policy.

YouTube videos

The team film on our About page is embedded via YouTube in privacy-enhanced mode (youtube-nocookie.com), a service of Google Ireland Limited. The video only loads when you click on it.

With the click, your IP address and information about the page are transmitted to YouTube. YouTube may set cookies and process data in the USA. The legal basis is your consent given by clicking, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Local storage

On the Work and News pages, we store your selected view and filter in your browser’s local storage, so the setting is kept for your next visit. The entry contains no personal data and is not transmitted to us. You can delete it at any time in your browser settings. The legal basis is § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR.

Social media links

Our website links to our profiles on Instagram and LinkedIn. These are simple links: no data is transmitted to the networks until you click on them. After clicking, the privacy policy of the respective network applies.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR). To exercise your rights, write to hi@benchmarked.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Right to object

If we process your data on the basis of Art. 6 (1) (f) GDPR, you can object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR). Send your objection to hi@benchmarked.de.

Data security

This website uses TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser.

Status

This privacy policy is valid as of October 2026. We update it when our website or the legal requirements change.