DE Get access

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

MKBurg Process Experiences GmbH
Fahrenkrön 122a
22179 Hamburg, Germany
Represented by the managing director: Mirko Kloppenburg
Phone: +49 40 414319081
Email: info@mkburg.de

For any data protection questions you can contact us at info@mkburg.de at any time.

2. Principles of processing

We process personal data only to the extent necessary for the technical provision and secure operation of this website, the handling of enquiries and the needs-based improvement of our offering.

This website is intentionally data-minimal. We set no cookies, operate no cross-site tracking, and load no fonts, icons or scripts from external third parties. Fonts, icons and scripts are provided exclusively from our own server.

3. Hosting and server log data

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS.

When the website is accessed, the IP address of your device must technically be transmitted to the web server so that the requested content can be delivered.

Within the IONOS web hosting we use, according to IONOS, visitor data is stored in anonymised form directly upon collection. This includes in particular the requested web page or file, the referrer, browser type and version, operating system, device type, time of access and an anonymised IP address. IONOS stores this data for eight weeks.

The processing serves the technical provision as well as the security and stability of the website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and trouble-free operation of our web offering.

IONOS WebAnalytics is deactivated for this website.

4. No cookies and no cross-device tracking

We do not use cookies on this website. Local storage or comparable storage technologies are not used for analytics or tracking purposes.

In particular, no services such as Google Analytics, Google Fonts, Meta Pixel or comparable third-party trackers are used.

As no storage or access technologies requiring consent are used on this website for analytics or marketing purposes, we do not use a cookie consent banner.

5. Fonts and icons

For a consistent presentation we use, among others, Poppins, Font Awesome and our own brand typeface.

All files required for this are loaded exclusively from our own server. When loading these resources, no connection is therefore made to Google Fonts, Font Awesome CDNs or other external providers.

6. Own reach measurement without cookies

To improve our offering we carry out our own, data-minimal reach measurement. It runs server-side on our own hosting environment and uses no cookies.

For the statistics, daily aggregated counts are stored. The analysis may be performed by the following characteristics:

  • requested page path,
  • language,
  • domain of a referring page,
  • campaign parameters (UTM) from the link used,
  • the number of certain clicks, for example on "Book a demo" or "Request access".

For these statistics we store no IP address, no visitor or session identifier and no user agent. No individual user profiles are created and individual page views are not merged across websites.

UTM parameters are used solely to attribute campaigns. We do not use them to mark or recognise individual persons.

If your browser transmits a Global Privacy Control signal (Sec-GPC), no counting takes place.

Where personal data is technically processed when a page view is received server-side, this takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in understanding the reach and use of our website in a data-minimal form and improving our offering as needed.

7. Contact form

When you use our contact form, we process the data you provide:

  • first name,
  • last name,
  • email address,
  • company (optional),
  • message.

The data is transmitted via our own server to Zoho Flow. Zoho Flow acts as an automation and workflow service and forwards the enquiry to us by email.

Zoho Flow stores an execution history of the workflows. This may contain the input and output data processed during transmission. According to Zoho, this flow history is retained for up to 100 days from creation of the execution data.

To protect the form against automated abuse we use an invisible additional field (honeypot), a minimum completion time and a limit on the number of submissions. For rate limiting, the IP address is processed technically but not stored in clear text. For this purpose only a pseudonymised value is used, for the duration of the respective rate-limit time window.

The legal basis for handling an enquiry relating to a possible or existing contractual relationship is Art. 6(1)(b) GDPR. For general enquiries and for measures to protect the form against abuse, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to enquiries and protecting our website against automated abuse.

The fields marked as mandatory in the form are required for us to handle your enquiry. Without this information we cannot process your enquiry. Optional information is voluntary.

We store the enquiry forwarded to us only for as long as necessary to handle it. Where a contractual relationship results from the enquiry or statutory retention obligations apply, the relevant data may be stored correspondingly longer. The additional flow history at Zoho is deleted after the period stated above.

8. Support form

Our support form lets you report technical or organisational matters. We process the data you provide in the form, in particular:

  • first name,
  • last name,
  • email address,
  • company (optional),
  • a differing account email, where applicable,
  • the URL of the affected process world, where applicable,
  • topic,
  • message.

The processing, forwarding via Zoho Flow, storage in the flow history, spam-protection measures, legal bases and retention period correspond to section 7.

The fields marked as mandatory are required in order to handle your support request. Optional information is voluntary.

9. "Request access" form

You can submit a request for access to RocketBPM via the website. For this we process your first name, last name and email address.

The data is transmitted via our server to Zoho Flow and forwarded to us by email. The information in section 7 applies accordingly to the processing by Zoho Flow, the flow history, spam protection and the retention period.

The legal basis is Art. 6(1)(b) GDPR where the request serves to initiate a usage or contractual relationship. Where the request is made outside a specific pre-contractual relationship, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in handling access and product enquiries.

The required mandatory fields are marked accordingly in the form. Without this information we cannot process the access request.

10. Redirects and external links

Some buttons on this website lead, via an internal redirect — for example a path under /go/… — to external services. These include, among others, demo booking at booking.mkburg.de and the RocketBPM application at app.rocketbpm.com.

We count the calling of such internal redirects solely within the server-side reach measurement described in section 6.

As soon as you access an external service, the privacy notices of the respective service apply. We have no influence over data processing that takes place there under its own responsibility.

The same applies to other external links, for example to New Process Lab or to podcast offerings.

11. Recipients and processors

For the operation of this website and the handling of enquiries we use service providers:

  • IONOS SE, Germany: hosting, web server and standard hosting log data.
  • Zoho group of companies / Zoho Flow: receiving and automated forwarding of form enquiries. For customers in Germany, according to Zoho's current information, the contracting entity is Zoho Corporation GmbH; the EU data centre is operated within the Zoho group by Zoho Corporation B.V. in the Netherlands.
  • Email service provider: insofar as technically required for the delivery of the enquiry forwarded to us by Zoho Flow.

With the service providers we engage as processors, agreements pursuant to Art. 28 GDPR are in place where required. Processors may engage further sub-processors within the scope of the contractual agreements.

Any disclosure of personal data beyond this takes place only where there is a legal basis for it or we are legally obliged to do so.

12. Possible third-country access at Zoho

Our Zoho account is operated in the EU region. According to Zoho, the service data of EU accounts is generally stored and processed in the EU data centre.

In certain cases, for technical support or maintenance purposes, access by authorised staff of Zoho companies outside the European Economic Area — in particular in India — may take place. According to its own information, Zoho bases such access on the European Commission's Standard Contractual Clauses and supplementary protective measures.

Where a transfer or access from a third country within the meaning of Art. 44 et seq. GDPR takes place, the safeguards required for this pursuant to Art. 46 GDPR are used. You can request further information on the safeguards used at info@mkburg.de.

13. Your rights

Where the respective legal requirements are met, you have in particular the following rights:

  • right of access under Art. 15 GDPR,
  • right to rectification under Art. 16 GDPR,
  • right to erasure under Art. 17 GDPR,
  • right to restriction of processing under Art. 18 GDPR,
  • right to data portability under Art. 20 GDPR,
  • right to object under Art. 21 GDPR.

To exercise your rights, an informal message to info@mkburg.de is sufficient.

14. Right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object at any time, on grounds relating to your particular situation, to this processing.

15. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany

16. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

17. Currency and changes

We update this privacy policy when changes to the website or the data processing taking place on it make it necessary. The version published on this website at the time applies.

Last updated: 20 August 2026