Privacy

The following legally independent companies are joint controllers within the meaning of Article 26 GDPR for the processing of personal data on this website:

Joint contact point for data protection requests: contact@marlean.com

When you access this website, the following technically necessary connection data are processed: IP address, date and time of access, requested address, referrer, browser and operating-system information, language settings, HTTP status, and the volume of data transferred.

These data are processed to deliver the website, maintain its stability and security, and detect misuse and technical faults.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable, and efficient operation of this website.

Nibiru Systems GmbH delivers the website through a Vercel Pro account. A data processing agreement under Article 28 GDPR is in place with Vercel. For transfers outside the European Economic Area that require safeguards, Vercel provides contractual protections, including the EU Standard Contractual Clauses. Further information is available in the Vercel Data Processing Addendum.

We do not maintain a separate visitor database or create usage profiles. Hosting and security data are deleted when they are no longer required for delivery, troubleshooting, or security. The retention periods under the subscribed Vercel plan and any mandatory legal obligations also apply.

When a page loads, the navigation checks whether a signed-in session already exists for mar:val or mar:ker. Both product systems are technically operated by Nibiru Systems GmbH and delivered through Vercel Pro accounts. Signed-in users are then shown a direct link to the relevant product.

• mar:val session check through the product system technically operated by Nibiru Systems GmbH and hosted by Vercel
• mar:ker session check through the product system technically operated by Nibiru Systems GmbH and hosted by Vercel

Technically necessary connection data are transmitted. If a valid session cookie already exists for the relevant path, that cookie is also sent. The response contains only the session status required for navigation. The marketing website does not set an additional sign-in cookie as part of this check.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is consistent navigation between the website and the products. Access to an existing, necessary session cookie is based on Section 25(2) no. 2 TDDDG.

The marketing website stores the result only while the relevant page remains open. Existing product sessions are also subject to the privacy notice for the relevant product.

When you change the language, we store your selection in a first-party cookie. This allows the website to be delivered immediately in your chosen language on later visits.

Name

marlean-language

Content

de / en

Duration

400 days. The period restarts on a later visit if the cookie is still present.

Storage is necessary to provide the language version you selected (Section 25(2) no. 2 TDDDG). Where the selection is processed as personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a consistent language setting.

In addition to this language preference, the website accesses only existing, technically necessary product sessions. These operations do not require consent under Section 25(1) TDDDG. We therefore do not display a consent banner.

If you contact us by email or submit a demo form, we process the data you provide to handle and respond to your enquiry. Depending on the method of contact, these data include your name, business email address, company or firm, field of work, intended use, message content, and communication metadata.

Where your enquiry relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. We process other business correspondence under Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of your enquiry.

Emails and form submissions are sent to the joint mailbox contact@marlean.com, which is used by both controllers. We use Microsoft 365 as our email service.

Microsoft processes email data as a technical service provider. Microsoft provides contractual safeguards for transfers to third countries, including the EU Standard Contractual Clauses. Further information is available in the Microsoft Products and Services Data Protection Addendum.

We delete enquiries once they have been fully handled, unless contractual or statutory retention obligations apply or the data are required for the establishment, exercise, or defence of legal claims. If an enquiry results in a contract, the necessary data continue to be processed within that contractual relationship and for the applicable statutory retention periods.

Data entered in the demo forms are sent to our joint contact mailbox when submitted. The email is dispatched through Amazon Simple Email Service (Amazon SES) from our own sender address, and the same request is mirrored as an internal notification to our Slack workspace so that we can respond quickly. We use these data solely to respond to the request and arrange a demo.

Within the two controller companies, access is limited to staff who require it for the purposes described above. Data are also disclosed to the following service providers and systems:

• Vercel Inc. for website hosting, delivery, and technical security. Processing in the United States is possible.
• Microsoft Ireland Operations Limited and affiliated Microsoft companies for Microsoft 365 and email communication. Transfers to third countries are possible.
• Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, for sending form submissions by email through Amazon Simple Email Service (Amazon SES). The service is operated in the AWS region Frankfurt (eu-central-1). A data processing agreement under Article 28 GDPR is in place. Processing in the United States, for example for support and security purposes, is possible and is protected by the EU Standard Contractual Clauses.
• Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland, for the internal notification of form submissions in our Slack workspace. Transfers to the United States are possible; contractual safeguards apply, including the EU Standard Contractual Clauses.
• The mar:val and mar:ker product systems technically operated by Nibiru Systems GmbH and delivered through Vercel Pro accounts for the session checks described above.

We do not use audience analytics, advertising trackers, social-media pixels, or externally loaded web fonts on this website.

Subject to the statutory requirements, you have the following rights in particular:

• Access to your data and rectification of inaccurate data (Articles 15 and 16 GDPR)
• Erasure or restriction of processing (Articles 17 and 18 GDPR)
• Data portability where the requirements are met (Article 20 GDPR)
• Objection to processing based on legitimate interests (Article 21 GDPR)
• Withdrawal of consent with effect for the future (Article 7(3) GDPR)

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place on this website.

To exercise your rights, send a message to contact@marlean.com.

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for both companies is:

You may also lodge a complaint with another authority competent under Article 77 GDPR, particularly in the Member State of your habitual residence or place of work.