Atheniks

Privacy Policy

Last updated: April 2026 · In accordance with the GDPR and BDSG

Note on company status: Atheniks UG (haftungsbeschränkt) is currently in the process of being incorporated (i.G. – in Gründung). This privacy policy applies to the company in its pre-incorporation stage.

1. Data Controller

Atheniks UG (haftungsbeschränkt) i.G.
Hansastraße 23
80686 Munich
Germany
E-mail: info@atheniks.com

Data Protection Officer (upon registration):
A Data Protection Officer will be appointed after the company is entered into the commercial register, where required by law.

2. Categories of Personal Data Processed

We collect the following personal data on this website:

  • HubSpot forms: Name, e-mail address, telephone number, company name, and your message in the free-text field – depending on the form completed
  • Discovery call booking: Name, e-mail address, and preferred appointment time
  • Newsletter sign-up (planned): Name and e-mail address
  • Google Fonts: IP address of the visitor when loading typefaces from Google servers
  • Google Maps: IP address and, where applicable, location data when accessing embedded maps
  • Technical access data: IP address, browser type, date and time of page visit
Note on cookies: We do not use advertising cookies or social media plug-ins. HubSpot forms set functional cookies for form processing and visitor recognition (e.g. hubspotutk, __hstc, __hssc). Further details are provided in Section 7.

3. Purposes and Legal Bases of Processing

3.1 HubSpot contact forms & lead generation: Processing your enquiry, establishing initial contact, and CRM-based contact management. Data collected: name, e-mail address, telephone number, company name, message. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). You may withdraw your consent at any time by e-mailing info@atheniks.com.

3.2 HubSpot forms for content & downloads: Providing documents, resources, or other content in exchange for contact details. Legal basis: Art. 6(1)(a) GDPR (consent given by active use). You may withdraw your consent at any time by e-mailing info@atheniks.com.

3.3 Newsletter sign-up (planned, via HubSpot): Sending marketing e-mails to individuals who have actively opted in. Legal basis: Art. 6(1)(a) GDPR (explicit consent, double opt-in). You may withdraw your consent at any time by clicking the unsubscribe link in any e-mail or by e-mailing info@atheniks.com.

3.4 HubSpot cookies: Cookies set by HubSpot serve the technical processing of forms and cross-session visitor recognition. Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time by deleting the cookies in your browser or by contacting us at info@atheniks.com.

3.5 Google Fonts: Loading typefaces from Google servers to ensure consistent rendering of the website. This transmits your IP address to Google. Legal basis: Art. 6(1)(a) GDPR (consent). Further details in Section 8.

3.6 Google Maps: Embedding interactive maps for location display. When accessed, your IP address and potentially further data are transmitted to Google. Legal basis: Art. 6(1)(a) GDPR (consent). Further details in Section 9.

3.7 Discovery call booking (Cal.com): Scheduling a no-obligation introductory call. Legal basis: Art. 6(1)(a) GDPR (consent given by active use). You may withdraw your consent at any time by e-mailing info@atheniks.com.

3.8 Server logs: Operational security and error analysis. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Deleted after 7 days.

4. Hosting

This website is hosted by Amazon Web Services (AWS). Provider: AWS EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Processing takes place primarily within the EU (Frankfurt data centre). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is in place.

5. Cal.com (Discovery Call Booking)

We use Cal.com for booking discovery calls. Provider: Cal.com, Inc., San Francisco, CA 94114, USA. Cal.com processes the data you enter. Data may be processed on servers in the United States. Transfers to third countries are governed by the EU Standard Contractual Clauses. Further information: https://cal.com/privacy

6. HubSpot (Forms, CRM & E-mail Marketing)

We use HubSpot for our contact forms, lead capture, content downloads, and the planned newsletter service. Provider: HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland (for users in the EU); HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. HubSpot processes the data you enter and stores it in its CRM system. The data collected (name, e-mail, telephone, company, message) is forwarded internally to our team for the purpose of handling your enquiry. Data may be processed on servers in the United States; such transfers to third countries are governed by the EU Standard Contractual Clauses. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is being concluded with HubSpot.

HubSpot sets the following cookies on pages that contain embedded forms:

  • hubspotutk: Unique visitor ID for cross-session recognition (duration: 13 months)
  • __hstc: Tracking cookie for visitor history (duration: 13 months)
  • __hssc: Session cookie for session measurement (duration: 30 minutes)
  • __hssrc: Identifies new sessions (session cookie)

These cookies are only set when you visit a page containing a HubSpot form. Legal basis: Art. 6(1)(a) GDPR. Further information: https://legal.hubspot.com/privacy-policy

7. Retention Periods

  • HubSpot contact & lead data (CRM): Until your enquiry has been fully processed, and deleted no later than 24 months thereafter, unless a business relationship is established
  • HubSpot newsletter data (planned): Until consent is withdrawn (unsubscription); after unsubscription, data is blocked for e-mail sending and deleted after 12 months
  • HubSpot cookies: In accordance with the cookie durations stated above (max. 13 months)
  • Discovery call data: In accordance with Cal.com’s retention periods, following conclusion of the call
  • Google Fonts / Google Maps: In accordance with Google’s privacy policy; further information at https://policies.google.com/privacy
  • Server logs: Maximum 7 days

8. Google Fonts

This website uses Google Fonts to ensure consistent display of typefaces. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When the typefaces are loaded, your IP address is transmitted to Google servers, which may include processing in the United States. Transfers to third countries are governed by the EU Standard Contractual Clauses.

Google Fonts is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via our cookie consent banner. Further information: https://policies.google.com/privacy

9. Google Maps

This website embeds maps provided by Google Maps. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When a page containing Google Maps is accessed, your IP address is transmitted to Google. In addition, Google may capture your location if you have enabled this on your device. Data may be processed in the United States; such transfers are governed by the EU Standard Contractual Clauses.

Google Maps is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via our cookie consent banner. Further information: https://policies.google.com/privacy

10. YouTube (Planned)

We plan to embed videos via YouTube on this website. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When embedded videos are accessed, data (including IP address and browser information) is transmitted to YouTube/Google. We will use privacy-enhanced mode (youtube-nocookie.com) and a consent-based solution. This Privacy Policy will be updated accordingly once YouTube is actively used. Legal basis: Art. 6(1)(a) GDPR (consent). Further information: https://policies.google.com/privacy

11. No Sale of Personal Data

We do not sell personal data. Data is only shared with processors (AWS, HubSpot, Cal.com, Google) as described in this Privacy Policy, or where required by law.

12. No Automated Decision-Making

We do not use automated decision-making processes or profiling within the meaning of Art. 22 GDPR.

13. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact: info@atheniks.com

Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). The supervisory authority competent for us is: Bayerischer Landesbeauftragter für den Datenschutz (BayLfD – Bavarian State Commissioner for Data Protection): www.datenschutz-bayern.de

14. External Links

Our website contains links to external third-party websites. We have no influence over their content and accept no liability for it. The respective provider is always responsible for the content of linked pages.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as necessary. The current version is always available on this page. Last updated: April 2026.

Atheniks UG (haftungsbeschränkt) i.G. · Hansastraße 23, 80686 Munich, Germany · info@atheniks.com