Skip to content
Pivotum Capital

Privacy Policy

Effective: 27 August 2026

1. Controller

The controller responsible for data processing on this website is:

Pivotum Capital GmbH & Co. KG
Grosostr. 27, 82166 Gräfelfing, Germany
E-mail:

The contact for data protection matters is Björn Jopen. We are not legally required to appoint a data protection officer.

2. Principle

We process personal data only to the extent necessary to operate a functional website and to respond to your enquiries. This website uses no analytics or tracking services, embeds no advertising networks and creates no user profiles.

3. Visiting the website (server log files)

When you access this website, your browser transmits technically necessary data which our hosting provider stores in server log files:

  • shortened IP address
  • date and time of access
  • page requested and volume of data transferred
  • referrer URL, browser type and operating system

This data is required to deliver the page and to defend against attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and stable operation of the website. Log files are deleted after seven days at the latest. This data is not merged with other data sources.

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the data listed above on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Delivery takes place via servers in the European Union. Where data is transferred to the USA in individual cases, the transfer is based on the European Commission's standard contractual clauses and on Vercel's certification under the EU-U.S. Data Privacy Framework.

4. Contact form and e-mail

If you contact us via the contact form or by e-mail, we process the data you provide — your name, e-mail address, optionally your company and the content of your message — solely in order to handle your enquiry.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.

Providing your name, e-mail address and message is necessary for us to answer your enquiry; all other details are voluntary. We delete your enquiry once it has been dealt with conclusively and no statutory retention obligations apply.

Delivery service provider

For the technical delivery of form messages to our mailbox we use Resend (Plus Five Five, Inc.), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the content of your message on our behalf under a data processing agreement pursuant to Art. 28 GDPR; the transfer to the USA is based on the European Commission's standard contractual clauses.

Please note that the transmission of content by e-mail may have security gaps. Complete protection against access by third parties is not possible with e-mail.

5. Storage on your device

This website uses no cookies for analytics or advertising purposes. We store only those settings that you trigger through your own choice:

  • Colour scheme: if you select the light or dark appearance, we store this preference under the key pivotum-theme in your browser's local storage.
  • Language: if you switch between German and English, your language choice is stored in a cookie (NEXT_LOCALE) so that the site appears in the chosen language on your next visit.

Both are strictly necessary for the function you have expressly requested and therefore do not require consent under § 25 (2) no. 2 TDDDG. They contain no personal identifiers and are not transmitted to third parties. You can delete them at any time via your browser settings.

6. Fonts and media

The Inter typeface is bundled at build time and served from our own server. No connection to Google servers is made when you visit this site. Likewise, all images and the video on the home page are served from our own server; we embed no external video or image services.

7. Your rights

You have the right at any time to

  • access the data we hold about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR), and
  • object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

You may withdraw any consent given at any time with effect for the future. A message to is sufficient to exercise your rights.

8. Right to lodge a complaint

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Changes to this privacy policy

We will adapt this privacy policy as soon as changes to our website or the legal situation require it. The version published here applies in each case.

Back to home