Privacy Policy
1. Controller
DLR Gesellschaft für Raumfahrtanwendungen (GfR) mbH
Galileo Control Center
Münchener Straße 20
82234 Weßling, Germany
Email: Hover to Show
The DLR GfR mbH (hereinafter “we” or “us”) is the controller within the meaning of Article 4(7) GDPR for the processing of personal data on this website.
2. General Information on Data Processing
We process personal data of our website visitors only to the extent necessary to provide a functional website, our content and services. The processing of personal data takes place in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
3. Hosting
Our website is hosted on servers provided by Hetzner Online GmbH, located in Germany (EU). All data is processed within the European Union. A data processing agreement (DPA) has been concluded with Hetzner in accordance with Article 28 GDPR.
4. Provision of the Website and Log Files
When you visit our website, our servers automatically collect the following data:
IP address of the requesting device
Date and time of access
URL of the accessed page
Referrer URL (previously visited page)
Browser type and version
Operating system used
This data is temporarily stored in log files to ensure website functionality, system security and troubleshooting. The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest).
5. Use of Cookies
We use cookies to ensure the proper functionality of our website and to analyze its use. The management of cookies is carried out via Borlabs Cookie.
When you first visit the website, a consent banner allows you to choose which categories of cookies (e.g. essential, statistics, marketing) you wish to enable.
Legal bases:
Article 6(1)(a) GDPR for consent-based cookies
Article 6(1)(f) GDPR for technically necessary cookies
6. Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to help analyze website usage.
Data processed may include:
IP address (shortened/anonymized)
Browser and device information
Pages visited, dwell time, and interactions
The processing is based on your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time via the cookie settings. Data may be transferred to the USA under the EU-US Data Privacy Framework.
7. Meta (Facebook) Pixel
We use the Meta Pixel (formerly Facebook Pixel) to measure the effectiveness of our advertising campaigns and to display interest-based ads on Facebook and Instagram.
This involves processing of:
Actions on our website (page views, conversions, form submissions)
Browser and device information
Potential user ID matching with Meta accounts
Processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time via the cookie settings. Data may be transferred to the USA under the EU-US Data Privacy Framework.
8. Contact Forms (Contact Form 7)
When contacting us via our contact form, the data you provide (e.g. name, email address, message) will be processed solely for the purpose of handling your inquiry.
Legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
9. Newsletter (future functionality)
If you subscribe to our newsletter, we will store your email address and potentially your name for sending regular updates.
You can unsubscribe at any time.
Legal basis: Article 6(1)(a) GDPR (consent).
10. Embedded Content and Third-Party Services
Google Maps
Used for displaying interactive maps (Article 6(1)(a) GDPR).
Provider: Google Ireland Limited. Data may be transmitted to the USA.
OpenStreetMap
Used for displaying maps without commercial tracking. Data is processed by the OpenStreetMap Foundation, UK, based on legitimate interest (Article 6(1)(f) GDPR).
YouTube
We embed videos from YouTube, a service of Google Ireland Limited. When you play a video, data may be transmitted to Google servers, including in the USA. Legal basis: consent under Article 6(1)(a) GDPR.
Google Fonts
We use Google Fonts locally hosted on our servers to ensure GDPR compliance. No connection to Google servers is established when fonts are loaded.
11. Social Media Links
Our website contains links (not plugins) to our profiles on Facebook, Instagram and LinkedIn. When you click these icons, you are redirected to the respective platform, where their privacy policies apply.
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access. All data transfers are encrypted via SSL/TLS.
13. Data Retention
We store personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by legal retention periods.
14. Your Rights under GDPR
You have the following rights under applicable data protection law:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
15. Data Protection Officer
DLR GfR mbH has appointed a Data Protection Officer:
Data Protection Officer
DLR Gesellschaft für Raumfahrtanwendungen (GfR) mbH
Münchener Straße 20, 82234 Weßling, Germany
Email: Hover to Show
16. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy in compliance with current legal requirements or to reflect new services on our website.
Last updated: 10/2025
