Privacy Policy

Learn how we handle your personal information and ensure your privacy and data security on our platform.

Last updated: 23 October 2026.

1) Introduction and Contact

Information of the Data Controller

1.1 Thank you for visiting our website. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is Layer One GmbH, Warmbüchenstraße 30, 30159 Hannover, Germany, Tel.: +49 511 12290323, Email: hello@mail.layer-one.io. The controller decides alone or jointly with others on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes, we collect only the data that your browser automatically transmits to our server (so-called "server log files"). This includes: - Pages visited - Date and time of access - Amount of data sent (in bytes) - Source or reference from which you accessed the page - Browser used - Operating system used - IP address (possibly anonymized) The processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in ensuring the stability and functionality of the website. 2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

3) Hosting

This website is hosted on Google Cloud Platform in Germany. Its static pages, fonts, images, scripts and 3D scene are delivered from our website address. To deliver a page, the hosting server processes technical request information such as the IP address, requested URL, request time and browser information. IONOS provides our email services. The booking calendar is provided separately by Cal.com, as described in section 14.

4) Analytics and advertising

Optional analytics and advertising run only after your consent. Analytics uses Google Analytics 4; marketing uses Google Ads. If you enable both categories, our existing Google Tag Manager configuration also loads Meta Pixel and Microsoft Clarity, including usage analysis and session recordings, and sends measurement data through our existing Google Cloud endpoint in europe-west3. These services may process page views, interactions, device and browser information, IP addresses and cookie identifiers. Providers include Google Ireland Limited, Meta Platforms Ireland Limited and Microsoft Ireland Operations Limited; processing outside the EEA, including in the USA, may occur. Consent is the basis for these optional services. You can refuse them without losing access to the website and withdraw consent using Cookie settings in the footer.

For Meta measurement, the browser also contacts a gateway hosted on Amazon Web Services (AWS) in the USA (us-east-1) and loads a helper library from AWS in the USA (us-east-2). These connections are enabled only when both optional categories are accepted. AWS information about hosted data: https://aws.amazon.com/compliance/data-privacy-faq/.

5) Cookies and browser storage

The locally hosted CookieConsent banner stores your choice in the l1_consent cookie for up to 182 days. Analytics and marketing are off until you opt in; refusing optional services does not load their scripts or send consent pings to them. Optional provider cookies can include _ga, _gcl_, _fbp and _clck. Cookie settings in the footer lets you review or withdraw your choices. On withdrawal, matching accessible first-party cookies are cleared and the page reloads without the refused scripts; this does not erase data already held by providers or third-party cookies that this website cannot access. The Cal.com calendar loads only when you open it; section 14 describes this separate service.

6) Contact

If you contact us via email or contact form, we process your personal data solely for the purpose of handling your request. Legal basis: Art. 6 (1)(b) GDPR (contract) or Art. 6 (1)(f) GDPR (legitimate interest).

7) Use of Customer Data for Direct Advertising

We use your data for sending newsletters and other marketing measures, provided you have explicitly given your consent (double opt-in procedure). You can withdraw your consent at any time.

8) Web analytics services

Google Analytics 4 is loaded only with analytics consent. Marketing-only consent loads Google Ads, not our multi-vendor Tag Manager bundle. If you enable both analytics and marketing, the existing Tag Manager container supplies Google Analytics, Google Ads, Meta Pixel and Microsoft Clarity. Microsoft Clarity may record page interactions for usage analysis. Provider information: https://policies.google.com/privacy, https://www.facebook.com/privacy/policy/ and https://privacy.microsoft.com/privacystatement. The tracking configuration is not activated on our preview domains.

9) Website functionalities

We do not embed a map or customer review service. The contact page links to a map provider; that provider is contacted only when you follow the link. Optional analytics and advertising are described separately in sections 4, 5 and 8. The booking calendar is described in section 14.

10) Rights of Data Subjects

You have the following rights: - Right to access your data - Right to rectification and deletion - Right to restrict processing - Right to data portability - Right to object to the processing of your data - Right to lodge a complaint with a supervisory authority

11) Duration of Storage

Personal data is stored only as long as necessary for the respective purpose or as required by statutory retention periods.

12) Changes to the Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available on our website.

13) 3D Graphic in the Page Header (Spline)

The header of our start page shows an interactive 3D graphic. It is displayed by the Spline viewer. Both the viewer program and the scene file are stored on this website and are delivered from our own address. Your browser does not contact Spline, unpkg or any other outside provider in order to show the graphic.

This was measured on 3 August 2026 against the delivered website, including the four preview pages on which the 3D scene runs: no request went to unpkg.com, none to prod.spline.design, and none to any other outside address. An earlier version of this website loaded both files from those two addresses, which meant that your IP address reached them. That is no longer the case.

The 3D graphic starts loading as soon as the page structure is ready, and it is loaded on every visit to a page that shows it. There is no fallback still image: if your browser cannot display the scene, the header keeps its plain background. Loading it contacts no address other than this website.

14) Booking appointments with Cal.com

We use the existing Layer One account on Cal.com for appointment bookings. The calendar connects to Cal.com only after you open it. Cal.com then receives technical information such as your IP address and browser information. If you book an appointment, the details you enter, such as your name, email address and message, are sent to Cal.com for that booking. This is the Cal.com cloud service, not a server operated by Layer One. Information from the provider is available at https://cal.com/privacy. You can instead contact us using the contact form or hello@mail.layer-one.io.