Privacy Policy

Last updated: September 2026

1. Controller and data protection contact

The controller responsible for this processing is:

Metycle GmbH
Venloer Str. 301-303
50823 Cologne
Germany

Email: info@metycle.com

You can use these contact details for privacy enquiries and requests concerning your personal data.

2. Website hosting and security

Our website is hosted by Webflow, Inc., USA. Its infrastructure includes Cloudflare, Inc., USA, for content delivery and website security.

These services process technical information, including your IP address, requested pages, access times, referring website, and browser, device and operating system information, to deliver the website and protect it against technical faults and misuse.

The legal basis is our legitimate interest in operating a secure and functional website pursuant to Art. 6(1)(f) of the General Data Protection Regulation (GDPR).

Technical data is retained for the time needed to deliver and secure the website and investigate faults or misuse. Records relating to specific incidents may be retained until the investigation and associated measures are complete, subject to Section 8.

3. Cookies and consent management

We use necessary cookies for website security and consent management. Statistics cookies require your consent.

Cookiebot by Usercentrics, provided by Usercentrics A/S, Denmark, collects, applies and documents your choices. To display the consent interface, it processes technical information such as your IP address, browser information, browser language and website address. It records your selection, including acceptance or rejection, together with a consent identifier and information about when and where the selection was made.

The "CookieConsent" cookie remembers your selection for 12 months, unless deleted earlier or shortened by browser restrictions. Separately, Cookiebot states that its server-side end-user data is deleted on a rolling basis 12 months after it is recorded.

Documenting consent is based on Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. Operating the consent controls and applying your choices is based on our legitimate interest in managing privacy preferences reliably pursuant to Art. 6(1)(f) GDPR.

Strictly necessary storage of or access to information on your device is based on Section 25(2), no. 2 of the German Telecommunications and Digital Services Data Protection Act (TDDDG). Optional storage or access requires consent under Section 25(1) TDDDG.

You can reject optional cookies, allow selected categories or accept optional cookies through the banner. You can change your choices or withdraw consent at any time using the cookie icon in the bottom-left corner of the website.

The Cookie Declaration under "Details" in the consent interface lists individual cookies, their providers, purposes and storage periods. It supplements this Privacy Policy.

4. Google Analytics 4

With your consent, we use Google Analytics 4 (GA4), provided by Google Ireland Limited, Ireland, to understand how visitors find and use our website and improve its content.

GA4 uses cookies and processes pseudonymous usage data, including page views, website interactions, referral sources, visit times and duration, browser and device information, approximate location, and browser or session identifiers. Pseudonymous data is not necessarily anonymous.

Your IP address is processed to establish the connection and derive approximate location information. Google states that IP addresses from users in the EU, Switzerland and the UK are discarded before being logged or stored in Google Analytics.

GA4 is blocked from loading until you consent to statistics cookies. Processing is based on Art. 6(1)(a) GDPR; storing or accessing information on your device is based on Section 25(1) TDDDG. You can withdraw consent as described in Section 3 and use the website without consenting to analytics.

Our GA4 retention setting is 14 months for the user-level and event-level data covered by that setting. "Reset user data on new activity" is disabled, so new activity does not restart the retention period associated with an existing user identifier. Data is deleted through Google's monthly deletion process after the applicable period expires.

Standard aggregated reports are not subject to this retention setting and may remain available for longer. Cookie lifetimes are separate and are listed in the Cookie Declaration.

Google's processing may involve Google LLC and other service providers outside the European Economic Area, as described in Section 7.

Further information:
https://policies.google.com/technologies/partner-sites

5. Contact forms and enquiries

When you contact us, we process the information you provide, such as your name, company, email address, phone number and message, to review, respond to and follow up on your enquiry.

Form submissions are processed through Webflow and may be stored within Webflow. They are forwarded internally to the Metycle personnel responsible for handling your enquiry.

Where processing is necessary to take steps at your request before entering into a contract with you personally, or to perform that contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, including those made on behalf of a company, the legal basis is our legitimate interest in handling business communications pursuant to Art. 6(1)(f) GDPR.

Providing information is voluntary. Fields marked as required are needed to process your enquiry; without them, we may be unable to handle your request.

Enquiry data is retained until the matter and related follow-up are complete, unless it remains necessary for an ongoing business relationship or must be retained under Section 8.

Contacting us does not automatically register you for marketing emails.

6. Registration for future email updates

You can register to receive future Metycle news and insights by email. We currently collect and store registrations through Webflow only. No newsletter distribution platform is connected, and newsletters are not currently sent through this registration process.

We process your email address and registration information to record and manage your request. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Registration is voluntary and is not required to use the website or contact us. You can withdraw consent at any time by contacting info@metycle.com.

Registration data is deleted when you withdraw consent or it is no longer needed for the requested updates, subject to necessary retention of consent evidence under Section 8.

Before introducing a newsletter distribution provider, we will update this Privacy Policy to explain the additional processing, recipients and any international transfers. Future newsletters will include an unsubscribe option.

7. Recipients and international transfers

The providers identified above, their authorised subprocessors, and providers supporting our business email and IT infrastructure process personal data as necessary for the stated purposes. Providers acting as processors handle data on our behalf under applicable data processing terms.

Data may also be disclosed to authorities or other recipients where required by law or necessary to establish, exercise or defend legal claims.

The use of these services may involve processing outside the European Economic Area, particularly in the United States.

Webflow, Inc., Cloudflare, Inc. and Google LLC state that they are certified under the EU-US Data Privacy Framework. Transfers covered by their valid certifications rely on the European Commission's adequacy decision pursuant to Art. 45 GDPR.

For transfers not covered by an adequacy decision, the relevant providers' processing arrangements provide for appropriate safeguards, including the European Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR and supplementary measures where required.

You can contact info@metycle.com for further information about the safeguards applicable to your data and how to obtain a copy.

8. Retention requirements

The retention periods and criteria for each processing activity are described above.

Correspondence qualifying as commercial or business letters under German statutory retention requirements is generally retained for six years from the end of the calendar year in which it was received or sent. Other applicable legal requirements may require longer retention. The legal basis is Art. 6(1)(c) GDPR.

Limited records may also be retained where necessary to demonstrate consent under Art. 6(1)(c) in conjunction with Art. 7(1) GDPR, or to establish, exercise or defend legal claims under Art. 6(1)(f) GDPR. Retention for legal claims is limited to what is necessary in view of the applicable limitation periods and any proceedings.

Data is deleted or anonymised when its purpose and applicable retention requirements no longer apply.

9. Your rights

Subject to the applicable legal conditions, you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability.

You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Right to object

You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

You may object to processing for direct marketing at any time without giving reasons, including related profiling. We will then stop processing your data for those purposes.

Contact and complaints

To exercise your rights, contact us using the details in Section 1.

You may also lodge a complaint with a data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement.

The supervisory authority responsible for Metycle is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany

https://www.ldi.nrw.de

10. Other information

We do not use personal data collected through this website for decisions based solely on automated processing that produce legal or similarly significant effects on you within the meaning of Art. 22 GDPR.

Applications through our careers portal are covered by the separate recruitment privacy information:
https://metycle.jobs.personio.com/privacy-policy

We update this Privacy Policy when our processing activities or applicable requirements change. Where required, we provide additional information or obtain consent before introducing the relevant processing.