crosstab group DE

Privacy policy

This English version is provided for convenience. The German version is legally binding.

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

crosstab Service GmbH
Fritz-Winter-Straße 10
80807 Munich, Germany
Represented by its Managing Director Dr. Jarg Temme
Email: info [at] crosstab.de

2. General

This website uses no cookies, no analytics or tracking tools, no social media plugins and no externally embedded content such as fonts, maps or videos. No data is transferred to third parties when you visit, except to the hosting provider named below.

3. Hosting and server log files

This website is hosted by: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you access the website, the server automatically processes information transmitted by your browser: IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser type and operating system. This data is technically necessary to deliver the website and to ensure its security and stability.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and error-free operation of the website. According to IONOS, the IP address is stored only in anonymised form, and log data is kept for a maximum of 8 weeks. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. Contact form, deal submission and email

If you write to us via the contact form or by email, we process your details (name, email address, optionally company and role, content of the message) to handle your enquiry. Form data is forwarded to us by email and is not stored on the web server.

The “Submit a deal” form additionally lets you send details of a transaction (project name, transaction type, sector, revenue range, description) and up to three files. On receipt, the files are checked for file type and size, forwarded together with your details by email to deals [at] crosstab.de and then deleted from the web server. If your documents contain personal data of third parties, please make sure you are entitled to share it.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to enquiries. We delete the data once it is no longer needed for processing, unless statutory retention obligations (e.g. under the German Commercial Code or Tax Code) apply.

For an initial assessment, please send us anonymised company information only. We exchange confidential documents only after a non-disclosure agreement has been signed.

Protection against misuse

To protect against automated spam, we use only our own technical measures and no external services such as captchas. For this purpose, we store an encrypted hash of your IP address together with the time of the request for no more than one hour in order to limit the number of requests per sender. The IP address cannot be derived from the hash. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the form against misuse.

5. Your rights

You have the following rights towards us regarding your personal data:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)

Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. An informal message to info [at] crosstab.de is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

6. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

7. Data security

This website is delivered exclusively in encrypted form via HTTPS.

Last updated: October 2026. This is a translation for convenience. In case of doubt, the German version prevails.