Last updated: September 2026

‍
This Privacy Policy explains how we process personal data when you visit the ThirdShift website or contact us through it.

‍
1. Controller
The controller responsible for the processing of personal data in connection with this website is:
ThirdShift Technology GmbH i.G.
Zukunftspark 4
74076 Heilbronn
Germany
Email: info@thirdshift.tech
‍

2. General Information
We process personal data only where necessary to provide and secure our website, communicate with visitors, understand how our website is used, and comply with applicable legal obligations.
Depending on the relevant processing activity, processing is based on:

• your consent pursuant to Art. 6(1)(a) GDPR;.
• steps taken at your request prior to entering into a contract pursuant to Art. 6(1)(b) GDPR;.
• compliance with legal obligations pursuant to Art. 6(1)(c) GDPR; or.
• our legitimate interests pursuant to Art. 6(1)(f) GDPR, in particular our interest in providing, securing, and improving our website and communicating with interested parties..
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.
‍

3. Website Hosting and Webflow
Our website is created and hosted using services provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (“Webflow”).
When you access our website, technical information may be processed as necessary to deliver and secure the website. This may include:

• IP address;.
• date and time of access;.
• browser and device information;.
• operating system;.
• requested pages or resources;.
• referring website; and.
• technical connection and log data..
We use Webflow to provide, secure, and maintain our website. The legal basis for this processing is Art. 6(1)(f) GDPR.
Webflow may process personal data in the United States. Where required, such transfers are based on applicable safeguards under data protection law, including the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
‍

4. Custom Website Components and Netlify
Certain custom animations and technical website components are deployed or delivered using services provided by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA (“Netlify”).
When these components are loaded, technical data such as your IP address, browser information, request information, and timestamps may be processed as technically necessary to provide the relevant resources.
The legal basis for this processing is Art. 6(1)(f) GDPR.
Netlify may process personal data in the United States. Where required, appropriate safeguards for international data transfers apply, including the EU-U.S. Data Privacy Framework and/or other legally recognized transfer mechanisms.
‍

5. Contact Forms
You may contact us using forms provided on this website.
When you submit a contact form, we process the information you provide, which may include your name, email address, company or organization, message content, and any other information you voluntarily provide.
Information submitted through the contact form is processed through Webflow and forwarded to us by email.
We process this information to respond to your inquiry and, where applicable, to take steps requested by you in connection with a potential business relationship.
Depending on the nature of your inquiry, the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
We retain correspondence only for as long as necessary to process your inquiry and any resulting business relationship, or for as long as required by applicable legal retention obligations.
‍

6. Google Analytics
Subject to your consent, we use Google Analytics 4 (“Google Analytics”), a web analytics service provided by Google, to understand how visitors use our website and to improve its content, performance, and user experience.
Google Analytics may process information such as:

• pages visited and interactions with the website;.
• device and browser information;.
• approximate geographic information;.
• referring sources;.
• session and timestamp information; and.
• online identifiers..
Google Analytics is activated only after you have provided the relevant consent through our cookie consent mechanism.
The legal basis for processing personal data is your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your device, this is based on your consent pursuant to Section 25(1) TDDDG.
You may refuse or withdraw your consent at any time through the cookie settings available on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Google may process data in the United States and other countries. Where required, international data transfers are protected through legally recognized transfer mechanisms.
‍

7. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Technologies that are strictly necessary for the operation, security, or functionality of the website may be used without consent where permitted by applicable law. Optional analytics technologies are activated only with your consent.
We use a custom consent mechanism that allows you to accept or reject analytics. We store your choice locally in your browser so that the website can remember your decision. This storage is necessary to operate our consent mechanism.
You can change or withdraw your consent at any time through the Cookie Settings available in the website footer.
‍

8. International Data Transfers
Some service providers used in connection with our website are located in or may process personal data outside the European Union or European Economic Area, including in the United States.
Where required, we rely on legally recognized safeguards for such transfers, including adequacy decisions such as the EU-U.S. Data Privacy Framework, where applicable, and/or the European Commission’s Standard Contractual Clauses.
‍

9. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
The applicable retention period depends on the nature of the data, the purpose of processing, statutory retention obligations, and whether the data is required for the establishment, exercise, or defense of legal claims.
‍

10. Your Rights
Subject to the requirements of applicable data protection law, you have the right to:

• request access to your personal data;.
• request correction of inaccurate or incomplete personal data;.
• request deletion of your personal data;.
• request restriction of processing;.
• receive certain personal data in a portable format;.
• object to processing based on legitimate interests;.
• withdraw consent at any time with effect for the future; and.
• lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact:
info@thirdshift.tech
‍

11. Automated Decision-Making
We do not use personal data collected through this public website for decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Art. 22 GDPR.
This statement relates only to the public ThirdShift website and not to ThirdShift products or services provided under separate agreements.
‍

12. Security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
‍

13. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our website, technologies, processing activities, or applicable legal requirements.
The current version will be made available on this website.

‍