Privacy Policy

1. Overview

This privacy policy explains what personal data is processed when you visit www.theion.de, why, on what legal basis, and what rights you have. Personal data is any information that can be used to identify you personally.

2. Controller

theion GmbH, Gerhard-Sedlmayr-Strasse 31, 12487 Berlin, Germany. Phone +49 30 221829140, e-mail info@theion.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes the data your browser transmits automatically: IP address, date and time of the request, requested page, referrer URL, browser type and version, operating system. This data is stored in server log files to deliver the site reliably and securely and is not merged with other data. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in the secure and efficient provision of the website. Server-side functions run in Vercel's Frankfurt region. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are additionally covered by the European Commission's standard contractual clauses. We have concluded a data processing agreement with Vercel.

4. Content management

The content of this website is managed with Sanity, a service of Sanity AS, Oslo, Norway. Sanity stores data on Google Cloud Platform infrastructure, which may include servers outside the EU/EEA; transfers are covered by the European Commission's standard contractual clauses. Visitor data is not transmitted to Sanity when you view the site. If you subscribe to our newsletter, your e-mail address and the time of subscription are stored in our Sanity dataset (see section 6). We have concluded a data processing agreement with Sanity.

5. Cookies

This website does not use tracking, analytics or advertising cookies. The only cookie set is a technically necessary session cookie when you unlock the password-protected Scientific Corner; it stores nothing but the fact that access was granted and expires when you close your browser. Legal basis: § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR. No consent is required for strictly necessary cookies.

6. Newsletter

If you subscribe to our newsletter, we process your e-mail address and the time and source of your subscription. We use double opt-in: you receive a confirmation e-mail and are only added to the list once you click the confirmation link. Legal basis: your consent, Art. 6 (1) (a) GDPR. You can withdraw consent at any time via the unsubscribe link in every newsletter or by e-mail to info@theion.de; the lawfulness of processing before withdrawal is unaffected.

The newsletter is sent via Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp (an Intuit company), 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Your e-mail address and subscription status are stored on Mailchimp servers in the USA. Mailchimp is certified under the EU-US Data Privacy Framework; transfers are additionally covered by standard contractual clauses. We have concluded a data processing agreement with Mailchimp. Mailchimp's privacy policy: https://www.intuit.com/privacy/statement/

7. Careers

Open positions on our careers page are loaded from our applicant management system Personio (Personio SE & Co. KG, Seidlstrasse 3, 80335 Munich, Germany). Viewing the positions transmits no personal data to Personio. If you apply, you leave our website and Personio's own privacy policy applies.

8. Contact by e-mail

If you contact us by e-mail, we store your message and the contact details you provide to handle your enquiry and any follow-up questions. Legal basis: Art. 6 (1) (b) GDPR where the enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering enquiries. We delete the data once the enquiry is settled, unless statutory retention periods apply.

9. Fonts and media

Fonts, images and videos are delivered from our own hosting. No connection to Google Fonts or other third-party font or media servers is established.

10. Encryption

This site uses TLS encryption. You can recognise an encrypted connection by the https:// prefix and the lock symbol in your browser.

11. Your rights

You have the right to information about your stored personal data, its origin, recipients and purpose (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, e-mail info@theion.de.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, https://www.datenschutz-berlin.de.

12. Changes

We update this privacy policy when the website or legal requirements change. Last updated: November 2026.