Privacy Policy

1. Controller and Contact

(1) The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

44.moles operations GmbH

Reinhard-Rube-Straße 4
37077 Göttingen

Telefon: +49 551 27072312
E-Mail: hello@44moles.com

Registered in the Commercial Register of the Local Court of Göttingen under HRB 207518
Represented by Managing Director Sebastian Seidel

(hereinafter “44moles operations”).

44moles operations is part of the group of companies of 44.moles GmbH, Reinhard-Rube-Straße 4, 37077 Göttingen, Germany, registered in the Commercial Register of the Local Court of Göttingen under HRB 206845 (hereinafter “44moles”; 44moles operations and 44moles jointly also referred to as the “44moles Group”). On the website and in its brand communications, the 44moles Group consistently uses the designation “44moles”.

External Data Protection Officer:

(2) External Data Protection Officer:

Kivanc Semen
DataCo GmbH
Sandstraße 33, 80335 Munich
E-Mail: behoerdenmeldung@dataguard.de
Telefon: +49 89 7400 4584-0

For data subject requests, you can also contact us at datenschutz@44moles.com.

2. Definitions

This Privacy Notice uses the terms defined by the GDPR, in particular:

“Personal data” (Art. 4 No. 1 GDPR): any information relating to an identified or identifiable natural person.
“Processing” (Art. 4 No. 2 GDPR): any operation performed on personal data, whether or not by automated means.
“Controller” (Art. 4 No. 7 GDPR): the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing.
“Processor” (Art. 4 No. 8 GDPR): an entity that processes personal data on behalf of the controller.
“Consent” (Art. 4 No. 11 GDPR): any freely given, specific, informed and unambiguous indication of the data subject’s wishes.

3. General Information on Data Processing

(1) Scope of the processing of personal data. As a rule, we collect and use the personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The collection and use of our users’ personal data generally takes place only after the user has given their consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and where the processing of the data is permitted by statutory provisions.

(2) Categories of personal data processed. When you visit our website, we process in particular the following categories of personal data:

Master data (e.g. name, company affiliation);
Contact data (e.g. email address);
Content data (e.g. text entered in the contact form);
Usage data (e.g. websites visited, access times);
Meta and communication data (e.g. IP address, device information).

(3) Legal bases for the processing of personal data. Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis. For the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

(4) Data erasure and storage period. The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Data may also be stored beyond this if provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. Blocking or erasure of the data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

(5) Data security. We take technical and organisational measures to protect the personal data of our users against loss, alteration or unauthorised access by third parties. In any case, the data transmitted are encrypted by means of TLS (recognisable by the “https://” at the beginning of the URL or by the lock symbol in the browser).

4. Provision of the Website and Creation of Log Files

(1) Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

a) IP address of the user
b) Date and time of access
c) Information about the browser type and the version used
d) Operating system of the user
e) Internet service provider of the user
f) Websites from which the user’s system reaches our website
g) Websites accessed by the user’s system via our website
h) The data is also stored in the log files of our system.

(2) The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR. Our legitimate interest is to ensure the functionality of our website and to protect our website against attacks.

(3) The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In the case of storage in log files, this is the case after no later than 7 days.

5. Use of Cookies and Tracking Technologies

(1) Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the unique identification of the browser when the website is accessed again.

(2) We use cookies and comparable tracking technologies for various purposes. In particular, the following categories are used:

a) Technically necessary cookies

We use technically necessary cookies to enable the operation of our website. These cookies are required to provide the basic functions of our website (e.g. security features, storage of language settings).

The legal basis is Art. 6(1)(f) GDPR in conjunction with Sec. 25(2)(2) TDDDG (German Telecommunications and Telemedia Data Protection Act). Our legitimate interest lies in providing a functional and user-friendly website.

b) Web analytics with Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (with transfer to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies and similar technologies to analyse the use of the website and to measure reach and, on this basis, to create pseudonymous usage profiles.
In particular, the following data is recorded: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request, geolocation at city level, as well as time spent on the site and subpages visited. We use Google Analytics with IP anonymisation activated (anonymizeIp function), so that your IP address is truncated within the EU/EEA before any further processing. The data collected by Google Analytics is not merged with other personal data.
We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. For the third-country transfer to Google LLC, USA, please see Sec. 10(2).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) TDDDG, which you may withdraw at any time via the cookie consent tool.

(3) When our website is accessed, the user is informed about the use of cookies and tracking technologies by a cookie consent tool (Usercentrics). Consent is given actively by clicking the corresponding button. A consent once given may be withdrawn at any time via the privacy settings (link “Privacy Policy & Settings” in the footer of the website).

(4) A detailed overview of the specific cookies used (name, provider, purpose, storage period) can be found in the settings of our cookie consent tool.

(5) The usage data collected by the aforementioned analytics tools is stored for a maximum of three months. Cookies each have different lifespans; please refer to the settings of our cookie consent tool for the specific lifespan of the individual cookies.

6. Contact Form and Contact by Email

(1) A contact form is available on our website which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. This data is:

a) Name

b) Email address

c) Company (if specified)

d) Content of the enquiry

(2) At the time the message is sent, the following data is also stored:

a) IP address of the user

b) Date and time of submission

(3) Alternatively, contact can be made via the email address provided. In this case, the user’s personal data transmitted with the email will be stored.

(4) The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of contact for the purpose of initiating a contractual relationship is Art. 6(1)(b) GDPR. The legal basis for the processing of data for pure communication purposes is otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in the targeted response to the enquiry.

(5) The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and the data sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. Any statutory retention periods remain unaffected.

7. Newsletter

(1) Our website offers the option to subscribe to a free newsletter. When signing up for the newsletter, the data from the input mask is transmitted to us. This is:

Email address

(2) Your consent for the processing of the data is obtained during the sign-up process, with reference to this Privacy Notice.

(3) Sign-up to the newsletter takes place via the so-called double opt-in procedure. After entering your email address, you will receive a confirmation email; your sign-up only becomes effective upon clicking the confirmation link contained therein. This ensures that only the actual owner of the email address can initiate the sign-up.

(4) The legal basis for the processing of the data following sign-up to the newsletter by the user, where the user has given consent, is Art. 6(1)(a) GDPR.

(5) The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored for as long as the newsletter subscription is active. You may unsubscribe from the newsletter at any time by clicking the unsubscribe link in any newsletter email or by sending a notification to the contact details provided in the legal notice (Impressum).

(6) The newsletter is sent via the Mailchimp service provided by The Rocket Science Group LLC d/b/a Mailchimp (Intuit Inc.), 405 N Angier Ave NE, Atlanta, GA 30308, USA. Mailchimp is a processor pursuant to Art. 28 GDPR; a corresponding data processing agreement has been concluded with the provider. Mailchimp processes your data in the USA. We base the transfer on the EU-US Data Privacy Framework adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR); Intuit Inc. is certified under the Data Privacy Framework. Standard Contractual Clauses apply in addition (Art. 46(2)(c) GDPR). As part of the newsletter dispatch, Mailchimp may collect usage data (e.g. open and click rates) insofar as you have consented to this.

8. Free Demo Sign-up

(1) Our website offers the option to sign up for a free demonstration of our software (“Free Demo”). Sign-up takes place by creating a user account with the following information:

a) Username,

b) Password,

c) User type.

No further data (in particular, real name, email address, postal address, telephone number) is collected on the public website.

(2) The legal basis for the processing of the data required to create the user account is Art. 6(1)(b) GDPR (performance of pre-contractual measures at the request of the user).

(3) Further data processing within the protected area after successful login is governed by the separate privacy notices provided there.

9. Embedded Third-Party Content

(1) Our website contains embedded third-party content. When you access a page containing such content, data may be transmitted to the respective providers, in particular your IP address.

(2) In particular, the following content is embedded:

a) YouTube

Videos from the YouTube platform are embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page with an embedded YouTube video, a connection is established with YouTube’s servers. The integration takes place in the enhanced data protection mode (no-cookie mode), in which no cookies are set as long as the video is not actively played.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, insofar as you have consented via the cookie consent tool.
You can find further information on data protection at YouTube in Google’s privacy policy at https://policies.google.com/privacy.

b) LiDAR-Punktwolken-Viewer

3D visualisations of LiDAR point clouds are displayed on our website via an open-source “Model Viewer” (Apache License 2.0). The visualisations are delivered via our own infrastructure. No personal data is transmitted to third parties as a result.

c) Social media links

In the footer of our website, you will find links to our profiles on LinkedIn and Instagram. These are exclusively passive links (linked icons), not embedded plugins. Data is only transmitted to the respective providers when you click on the icons and open the respective page. The privacy notices of the respective provider then apply:

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy policy at https://www.linkedin.com/legal/privacy-policy.
Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Privacy policy at https://privacycenter.instagram.com/policy.

10. Recipients of Personal Data and Third-Country Transfers

(1) We disclose personal data to the following recipients or categories of recipients:

Hosting service providers: The website is operated on 44moles operations’ own infrastructure. Insofar as subcontracted service providers are used for individual components, processing takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Cookie consent tool: Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
Web analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics) – with transfer to Google LLC, USA.
External Data Protection Officer: DataCo GmbH, Sandstraße 33, 80335 Munich, Germany.
Newsletter dispatch: The Rocket Science Group LLC d/b/a Mailchimp (Intuit Inc.), 405 N Angier Ave NE, Atlanta, GA 30308, USA.
Providers of embedded video content: Google Ireland Limited (for YouTube).
Authorities and government agencies, insofar as this is necessary to comply with legal obligations.
Advisory professions (legal advisors, tax advisors, auditors), insofar as this is necessary within the scope of our business operations.

(2) A transfer of your personal data to recipients outside the European Union (EU) or the European Economic Area (EEA) takes place in the context of the following processing operations:

Google Analytics (Google LLC, USA) – insofar as you have consented via the cookie consent tool (see Sec. 5(b));
Mailchimp (Intuit Inc., USA) – in connection with the newsletter dispatch (see Sec. 7(6)).

We base the transfer on the following safeguards:

Adequacy decision: The EU-US Data Privacy Framework adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR) permits transfers to US recipients certified under the Data Privacy Framework. Google LLC and Intuit Inc. are certified under the Data Privacy Framework.
Standard Contractual Clauses (SCCs): Insofar as a recipient is not, or no longer, certified under the Data Privacy Framework, we base the transfer on the Standard Contractual Clauses issued by the European Commission (Art. 46(2)(c) GDPR).
Consent: Insofar as the transfer is linked to data processing by a tool that is subject to your consent (in particular Google Analytics), we additionally base the transfer on your consent pursuant to Art. 49(1)(a) GDPR.

You may request a copy of the Standard Contractual Clauses we have concluded by using the contact details provided above.

11. Rights of the Data Subject

As a data subject, you have the following rights against us with regard to the personal data concerning you:

pursuant to Art. 15 GDPR, to request information about the personal data we process concerning you;
pursuant to Art. 16 GDPR, to request without delay the rectification of inaccurate personal data or the completion of the personal data stored by us;
pursuant to Art. 17 GDPR, to request the erasure of the personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data;
pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
pursuant to Art. 21 GDPR, to object to the processing, provided that the processing is based on Art. 6(1)(e) or (f) GDPR;
pursuant to Art. 7(3) GDPR, to withdraw your consent once given to us at any time. As a consequence, we may no longer continue the data processing based on this consent for the future; and
pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual place of residence, your place of work or our company’s registered office. The supervisory authority responsible for 44moles operations is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hanover, Germany.

12. Scope of this Privacy Notice and Changes

(1) This Privacy Notice applies to the website 44moles.com. It does not apply to data processing in the protected area after login (DFI Dashboard, mobile app, plot management, inventory results); separate privacy notices apply to these, which are made available to users upon registration.

(2) Due to the further development of our website or changed legal or regulatory requirements, it may become necessary to amend this Privacy Notice. The current version is available at any time at https://44moles.com/de/privacy-policy and can be printed out.

Last updated: May 2026