The protection of your personal data is very important to us. Below, we inform you about the collection, processing, and use of your personal data when you visit our website.

1. Responsible Party

The responsible party for data processing on this website is:

Cogu GmbH
 Bruno Leal
Johann-Hittorf-Straße 8
12489 Adlershof
Berlin, Germany

Email: hello@coguberlin.com
Telephone: +491737093571

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

2. Collection and Storage of Personal Data and the Nature and Purpose of Use

a) When visiting the website

When you access our website www.coguberlin.com, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

  • IP address of the requesting computer

  • Date and time of access

  • Name and URL of the retrieved file

  • Website from which access is made (referrer URL)

  • Browser used and, if applicable, the operating system of your computer and the name of your access provider

This data is processed by us for the following purposes:

  • Ensuring a smooth connection to the website

  • Ensuring comfortable use of our website

  • Evaluating system security and stability

  • For other administrative purposes

The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you personally.

b) When subscribing to our newsletter

If you have given your express consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, we use your email address to regularly send you our newsletter. To receive the newsletter, providing an email address is sufficient.

Newsletter subscription can be canceled at any time by clicking the unsubscribe link provided in each newsletter email. Your email address will then be immediately removed from our distribution list.

c) When using our contact form

If you have questions of any kind, we offer you the opportunity to contact us via a form provided on the website. Providing a valid email address is required so that we know from whom the inquiry came and can respond to it. Additional information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR based on your voluntarily given consent.

The personal data collected by us for using the contact form will be automatically deleted after your inquiry has been processed.

3. Use of Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans, or other malware.

Information is stored in the cookie that arises in connection with the specific terminal device used. However, this does not mean that we directly gain knowledge of your identity.

The use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our page.

We also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made, so that you do not have to enter them again.

The data processed by cookies is necessary for the purposes mentioned to protect our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a notification always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all functions of our website.

4. Web Analytics and Tracking Tools

a) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For users in the European Economic Area and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland acts as the data controller.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP Anonymization:
 We have activated IP anonymization on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Purpose of Data Processing:
 On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator.

Legal Basis:
 The legal basis for using Google Analytics is your consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a GDPR. Your data will only be processed after you have given explicit consent via our cookie banner.

Data Retention:
 We have configured Google Analytics to automatically delete user data after 14 months.

Data Transfer to Third Countries:
 Google processes data in the United States under the EU-U.S. Data Privacy Framework. Google is certified under this framework, which provides adequate protection for data transfers.

Opt-Out:
 You can prevent the storage of cookies by adjusting your browser settings accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

Data Processing Agreement:
 We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

More information:
 For more information about Google Analytics and data protection, please visit: https://support.google.com/analytics/answer/6004245

b) Meta Pixel (Facebook and Instagram)

Our website uses the Meta Pixel (formerly Facebook Pixel) from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). This tool allows us to track the actions of users after they have been redirected to our website by clicking on a Facebook or Instagram advertisement.

Purpose:
 We use the Meta Pixel to measure the effectiveness of our advertising campaigns, create custom audiences for targeted advertising, and analyze user behavior to improve our services.

Data Collected:
 The Meta Pixel collects the following data:

  • IP address (anonymized)

  • Browser information and device type

  • Pages visited on our website

  • Actions taken (e.g., button clicks, form submissions)

  • Facebook Cookie ID (if you are logged into Facebook)

Legal Basis:
 The legal basis for using the Meta Pixel is your consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a GDPR, which you provide through our cookie consent banner.

Data Transfer to Third Countries:
 Data collected by the Meta Pixel may be transferred to Meta's servers in the United States. Meta is certified under the EU-U.S. Data Privacy Framework, which provides adequate protection for these transfers. However, we inform you that data transfers to the USA involve certain risks regarding access by U.S. authorities.

Opt-Out:
 You can object to the collection of your data by Meta Pixel and the use of your data for displaying Facebook and Instagram ads by:

Data Processing Agreement:
 We have concluded a data processing agreement with Meta regarding the use of the Meta Pixel.

More information:
 For more information about Meta's privacy practices, please visit: https://www.facebook.com/policy.php

5. E-Commerce Platform and Payment Processing

a) Shopify (Future Implementation)

When we launch our online shop, we will use Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada, as our e-commerce platform. For users in the European Economic Area, Shopify International Limited, 2nd Floor, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland acts as the data controller.

Purpose:
 Shopify provides the technical infrastructure for our online shop, including order processing, payment handling, inventory management, and customer account management.

Data Collected:
 When you place an order, Shopify processes:

  • Name and contact information

  • Billing and shipping addresses

  • Payment information

  • Order details and purchase history

  • IP address and browser information

Legal Basis:
 The processing is necessary for the performance of a contract to which you are party (Art. 6 Para. 1 Sentence 1 lit. b GDPR) and based on your consent for optional services (Art. 6 Para. 1 Sentence 1 lit. a GDPR).

Data Transfer:
 Shopify stores data on servers located in the United States and other countries. Shopify is certified under the EU-U.S. Data Privacy Framework and implements Standard Contractual Clauses to ensure adequate protection.

Data Retention:
 We retain order data as long as required by law (typically 10 years for tax purposes in Germany).

Data Processing Agreement:
 We have concluded Shopify's Data Processing Addendum to ensure GDPR compliance.

More information:
 Shopify Privacy Policy: https://www.shopify.com/legal/privacy
 Shopify GDPR Information: https://www.shopify.com/legal/gdpr

b) Odoo (Business Management System)

We use Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, for internal business management, including customer relationship management (CRM), inventory management, and order processing.

Purpose:
 Odoo helps us manage customer inquiries, process orders, track inventory, and maintain business operations efficiently.

Data Collected:

  • Customer contact information

  • Order history and preferences

  • Communication history

  • Business transaction records

Legal Basis:
 The processing is necessary for the performance of a contract (Art. 6 Para. 1 Sentence 1 lit. b GDPR) and for our legitimate business interests in efficient business management (Art. 6 Para. 1 Sentence 1 lit. f GDPR).

Data Security:
 Odoo implements industry-standard security measures including encryption, access controls, and regular security audits. Data is stored on secure servers within the European Union.

Data Processing Agreement:
 We have concluded a data processing agreement with Odoo ensuring GDPR compliance.

More information:
 Odoo Privacy Policy: https://www.odoo.com/privacy

6. Social Media Integration

Facebook and Instagram

Our website contains links to our social media profiles on Facebook and Instagram (operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).

When you click on these links, you will be redirected to the respective social media platform. Meta may collect data about this interaction, including your IP address and the fact that you came from our website.

Legal Basis:
 The integration is based on our legitimate interest in promoting our business and engaging with customers (Art. 6 Para. 1 Sentence 1 lit. f GDPR).

Data Control:
 Please note that once you leave our website and access Meta's platforms, Meta's privacy policy applies. We have no control over how Meta processes your data.

For more information about Meta's data practices:

7. Disclosure of Data

We will not transfer your personal data to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

  • You have given your express consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR

  • Disclosure pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR is necessary to assert, exercise, or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data

  • There is a legal obligation for disclosure pursuant to Art. 6 Para. 1 Sentence 1 lit. c GDPR

  • This is legally permissible and necessary pursuant to Art. 6 Para. 1 Sentence 1 lit. b GDPR for the performance of contractual relationships with you

Third-Party Service Providers:
 We work with trusted service providers who process data on our behalf, including:

  • Google LLC (Analytics)

  • Meta Platforms Ireland Limited (Marketing)

  • Shopify Inc. (E-commerce platform - future)

  • Odoo S.A. (Business management)

All service providers are carefully selected, contractually bound to comply with GDPR, and process data only according to our instructions.

8. Your Rights

You have the following rights regarding the personal data concerning you:

  • Right to information (Art. 15 GDPR): You can request confirmation as to whether we process personal data concerning you and, if so, request information about this personal data.

  • Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data.

  • Right to erasure (Art. 17 GDPR): You have the right to request the immediate deletion of personal data concerning you, and we are obliged to delete personal data immediately under certain conditions.

  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain conditions.

  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller.

  • Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 Para. 1 Sentence 1 lit. f GDPR (data processing on the basis of a balance of interests).

  • Right to withdraw consent (Art. 7 Para. 3 GDPR): If you have given consent to the processing of your data, you can withdraw this consent at any time with effect for the future. The lawfulness of data processing carried out on the basis of the consent until withdrawal remains unaffected.

Right to lodge a complaint:
 You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

You can contact the supervisory authority responsible for us:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
 Friedrichstr. 219
 10969 Berlin, Germany
 Telephone: +49 30 13889-0
 Email: mailbox@datenschutz-berlin.de
 Website: https://www.datenschutz-berlin.de

9. Data Security

We use the widespread SSL (Secure Socket Layer) method within our website visit, in conjunction with the highest level of encryption supported by your browser. Usually, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page of our website is transmitted in encrypted form by the closed key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Security Measures Include:

  • SSL/TLS encryption for data transmission

  • Secure servers with restricted access

  • Regular security updates and patches

  • Employee training on data protection

  • Regular backups of data

  • Firewalls and antivirus protection

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Retention Periods:

  • Contact form inquiries: Deleted after processing, unless further correspondence is needed

  • Newsletter subscriptions: Until you unsubscribe

  • Customer orders (future): 10 years (required by German tax law - § 147 AO, § 257 HGB)

  • Google Analytics data: 14 months

  • Cookie consent records: 5 years (for documentation purposes)

  • Business correspondence: According to statutory retention obligations

After the retention period expires, your data will be securely deleted unless we are legally obligated to retain it longer.

11. Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete the information.

12. Updates to this Privacy Policy

We reserve the right to update this privacy policy from time to time to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. Your new visit will be subject to the new privacy policy.

We will inform you of significant changes to this privacy policy through a prominent notice on our website or via email if you have provided us with your email address.

13. Contact for Data Protection Inquiries

If you have questions about data protection, wish to exercise your rights, or have concerns about how we handle your data, please contact us:

Email: info@coguberlin.com
Postal Address:
 Cogu GmbH
 Attn: Data Protection
 Thiemmannstr. 12
 12059 Neukölln
 Berlin, Germany

We will respond to your inquiry within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you accordingly.

Last updated: December, 2025

14. Consent Management

By using our website, you can choose which cookies and tracking technologies you wish to allow. You can manage your consent preferences at any time by:

  • Clicking on the cookie settings link in our website footer

  • Adjusting your browser settings

  • Contacting us directly at info@coguberlin.com

Your choices will be stored for 12 months. You can change your preferences at any time.

Note: We prioritize transparency and your privacy. If you have any questions or concerns, please don't hesitate to reach out to us.