Privacy policy – Metrilus GmbH

AI-generated

Last updated: 10 November 2026. This English version is provided for convenience; the German version is legally binding.

Privacy at a glance

This policy explains which personal data we process when you visit metrilus.com or contact us, why we do so, and what rights you have.

In short:

1. Controller

The controller responsible for data processing on this website is:

Metrilus GmbH
Gräfenberger Str. 32
91080 Uttenreuth
Germany

Represented by the managing directors Dr.-Ing. Christian Schaller and Dr.-Ing. Michael Balda

Phone: +49 9131 9189771
Email:

You can reach us at this address for any questions about data protection and to exercise your rights.

2. Hosting and server logs

This website is hosted on a server operated by Host Europe GmbH, Hansestraße 111, 51149 Köln, Germany. The server is located in a data centre in Germany.

When you open a page, the server automatically processes:

We need this data to deliver the website, operate it reliably and detect attacks. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). The log files are deleted automatically at regular intervals. Apart from the analysis below, we do not combine them with other data.

Analysis of the server logs

We analyse the log files to improve our website and to see which companies visit it and are interested in our products. We pass such signs of interest to our sales team. We do not store IP addresses in doing so, only counts and shortened network ranges with the pages requested and the days of the visits. To match them to companies, we compare them on our own computers with public directories of network operators. We do not pass any data to third parties in doing so. We delete the stored monthly data after 24 months. The legal basis is our legitimate interest in these purposes (Art. 6(1)(f) GDPR). You can object at any time (section 10).

We have concluded a data processing agreement with Host Europe.

3. Cookies

This website sets no cookies and stores nothing in your browser. We embed no analytics, tracking or advertising services in the site, so we do not ask for consent. The analysis of the server logs (section 2) works without cookies and without access to your browser.

4. Forms and customer management (HubSpot)

Our contact, partner, trade fair and application forms are provided via HubSpot. The provider is HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland. Our HubSpot data is stored in HubSpot's EU data centre.

When a page with a form loads, your browser fetches the form from HubSpot servers. For technical reasons, HubSpot receives your IP address and browser data. The form sets no cookies on metrilus.com.

When you submit a form, we store your details in HubSpot, such as name, email address, company, job title, phone number, product interest and message. We use them to answer your request, make you an offer and maintain the business relationship. HubSpot serves as our customer relationship management (CRM) system. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in handling requests (Art. 6(1)(f) GDPR).

Newsletters and further communications are sent only if you explicitly tick the box in the form (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or by emailing us.

We delete your data once your request has been dealt with and no business relationship arises, or earlier if you ask us to. Statutory retention obligations remain unaffected (e.g. 6 years for business letters under Section 257 HGB).

We have concluded a data processing agreement with HubSpot. HubSpot may also transfer data to HubSpot, Inc. in the USA; such transfers are based on the EU-US Data Privacy Framework and additionally on the European Commission's standard contractual clauses. More: HubSpot privacy policy.

5. Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, contact details, request) to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contract or its initiation is concerned, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Retention is the same as in section 4.

6. Applications

You can apply via the form on our job pages (provided via HubSpot, see section 4) or by email. We then process your details and documents, such as contact details, CV, references and interview notes, to decide on your application. The legal basis is the initiation of an employment relationship (Art. 6(1)(b) GDPR). Only the people involved in the selection process have access.

If we hire you, your data becomes part of your personnel file. If not, we delete it 6 months after the process ends. We keep it that long so we can defend ourselves against possible claims under the German General Equal Treatment Act (Art. 6(1)(f) GDPR).

If you would like us to contact you about suitable future positions, we add you to our applicant pool with your explicit consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time. We delete the data no later than 2 years after you consented.

7. Video conferences

For meetings with customers, partners and applicants we use Google Meet, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data needed for the call: name, email address, video and audio, start and end time, IP address and device information. We do not record calls without announcing it beforehand. The legal basis is Art. 6(1)(b) GDPR, otherwise our legitimate interest in simple communication (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Google. Data may be transferred to the USA; such transfers are based on the EU-US Data Privacy Framework, under which Google LLC is certified, and additionally on the European Commission's standard contractual clauses.

8. Links to social networks

The page footer links to our pages on YouTube and LinkedIn. These are plain links: only when you click one do you leave metrilus.com, and the provider's own privacy policy then applies. No data is sent to YouTube or LinkedIn before that. Videos on our website play from our own hosting, not via YouTube.

9. Recipients and retention

Within metrilus, only the people who need your data for their task can see it. External recipients are the service providers named above (Host Europe for hosting, HubSpot for forms and CRM, Google for video conferencing), who work on our behalf, and authorities where we are legally required to disclose data. We do not sell data.

Where no specific period is stated above, we store your data until the purpose no longer applies or you object or withdraw your consent, unless a statutory retention obligation applies (e.g. 6 or 8 years under Section 257 HGB, Section 147 AO).

10. Your rights

You have the right at any time to

Just write to us at .

Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You can object to the use of your data for direct marketing at any time without giving reasons.

Right to lodge a complaint (Art. 77 GDPR): You can complain to a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

You are not obliged to provide us with data, but without it we cannot handle a request or application. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

11. Encryption

This website is delivered exclusively over encrypted HTTPS (TLS). Third parties cannot read what you enter in forms while it is in transit.