Privacy notice

Information under Articles 13 and 14 of the General Data Protection Regulation (GDPR) · Deutsche Fassung · Last updated: 29 October 2026

1. Controller

Unity M&A Management GmbH, Ludwigsplatz 5, 67547 Worms, Germany
Represented by the managing director, Dr. Cem Wald
Phone: +49 6241 39519 60 · Email: [email protected]

We are not required to appoint a data protection officer. For all data protection questions please contact us at the address above.

2. Visiting this website

Server log files. When you visit the site, the web server automatically records technical data your browser sends: IP address, date and time, page requested, referring page, browser type and operating system. We need this data to deliver the website and keep it secure (legal basis: Art. 6(1)(f) GDPR, legitimate interest in a secure, working website). Log files are deleted after no more than 14 days, unless an individual entry is needed to investigate a security incident.

Hosting. The website runs on a server in Germany operated for us by a hosting provider under a data processing agreement (Art. 28 GDPR).

Cloudflare. The website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare protects the site against attacks and speeds up delivery; to do this it processes your IP address and the technical request data. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and we have concluded a data processing agreement with Cloudflare that includes the EU Standard Contractual Clauses (legal basis: Art. 6(1)(f) GDPR, legitimate interest in a secure and fast website).

Security plugin. A security plugin on our server checks requests for attacks (for example repeated failed login attempts) and may temporarily block IP addresses. This happens on our server (legal basis: Art. 6(1)(f) GDPR).

Fonts and icons are loaded from our own server. No connection to Google or other font providers is made.

Cookies. We only use technically necessary cookies, such as a session cookie that is deleted when you close your browser. We do not use analytics, advertising or tracking cookies, so no consent banner is needed (§ 25(2) German TDDDG).

3. Contacting us

If you contact us using the contact form, by email or by phone, we process the information you provide (for example name, email address, phone number and your message) to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Form messages are sent to us by email; to prevent spam the form uses invisible checks on our own server and no external service. We delete your data when it is no longer needed for your enquiry, unless statutory retention periods apply (for example six or ten years for business correspondence under German commercial and tax law). Our email is hosted by email service providers under data processing agreements.

4. Links to other websites

Our pages contain links, for example to Google Maps or to social networks. Data is only transferred to these providers if you click the link and open their website; their privacy policies then apply.

5. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data based on Art. 6(1)(f) GDPR, you have the right to object at any time for reasons arising from your particular situation (Art. 21). Where processing is based on your consent, you can withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.

6. Automated decisions

We do not use automated decision-making or profiling.