Privacy Policy

Last updated: September 2026

We take the protection of your personal data very seriously. This privacy policy explains what personal data we collect when you visit this website, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

SERBAN DC GmbH
Bremer Str. 11, 80807 Munich, Germany
Managing Directors: Selim Kuzu, Serdal Güzel, Bedrettin Altay
Email: info@serbandc.com

2. Server log files

When you access this website, the hosting provider automatically collects and stores information in server log files that your browser transmits. This includes the browser type and version, the operating system, the referrer URL, the host name of the accessing computer, the time of the server request and the IP address.

This data is not merged with other data sources. It is processed on the basis of Art. 6(1)(f) GDPR (our legitimate interest in the technically error-free presentation and security of our website) and is deleted after a short period.

3. Cookies

This website uses cookies. Cookies are small text files stored on your device. We use essential cookies without consent because the website does not work without them (Section 25(2) no. 2 TDDDG). Analytics cookies (Google Analytics) and marketing cookies (Google Ads; Meta: Facebook and Instagram) are only set with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

You decide about the use of non-essential cookies via our cookie notice ("Options", "Reject", "Accept"); under "Options" you can choose the "Analytics" and "Marketing" categories individually. We store your choice for one year in the essential ck_consent_v2 cookie. You can change or withdraw it at any time using the "Cookie Preferences" link in the footer; the cookies of any category you switch off (_ga, _ga_* or _gcl_au, _fbp, _fbc) are then deleted from our domain. You can also delete cookies in your browser settings or block them entirely. A detailed overview of the cookies we use, their storage periods and legal bases (Section 25 TDDDG) can be found in our Cookie Policy.

4. Web analytics — Google Analytics

Subject to your consent, this website uses Google Analytics 4 (measurement ID G-J3SP341KDQ), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies (_ga, _ga_*) to help us analyse how visitors use our website.

Analytics is loaded only after you have consented to the "Analytics" category via the cookie notice. IP anonymisation is active, so your IP address is truncated by Google within the EU/EEA before transmission. Data may be transferred to servers of Google LLC in the USA; such transfers are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework (DPF) of 10 July 2023, under which Google is certified, supplemented by standard contractual clauses (Art. 46(2)(c) GDPR).

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie Preferences" link in the footer.

5. Marketing — Google Ads and Meta (Facebook, Instagram)

Only with your consent to the "Marketing" category may we use Google Ads (ad conversion measurement) provided by Google Ireland Limited and the Meta Pixel provided by Meta Platforms Ireland Limited, Dublin, Ireland ("Meta"), for our advertising on Facebook and Instagram. These services help us measure the impact of our ads and show you relevant ads. In doing so, the cookies _gcl_au (Google Ads) and _fbp and _fbc (Meta) may be set, and usage data (e.g. IP address, pages visited, device and browser information) may be transmitted to Google or Meta.

Without your consent, no marketing scripts are loaded and no marketing cookies are set. Where we use the Meta Pixel, we are jointly responsible with Meta for the collection and transmission of the data to Meta (Art. 26 GDPR); any further processing is the sole responsibility of Meta. Data may be transferred to Google LLC or Meta Platforms, Inc. in the USA; such transfers are based on the adequacy decision on the EU-US Data Privacy Framework, under which both companies are certified. Further information: Google's privacy policy, Meta's privacy policy.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie Preferences" link in the footer.

6. Contact by email

If you contact us by email (info@serbandc.com), the information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR (for enquiries relating to a contract) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). This data is deleted once it is no longer required and there are no statutory retention obligations to the contrary.

7. Hosting

This website is hosted by an external service provider (hoster). The personal data processed on this website is stored on the servers of the hoster. Processing is carried out on the basis of Art. 6(1)(f) GDPR and, where applicable, a data processing agreement pursuant to Art. 28 GDPR.

8. Transfers to third countries

Where we transfer personal data to countries outside the EU/EEA, we do so only under the conditions of Art. 44 et seq. GDPR. Transfers to Google LLC and Meta Platforms, Inc. in the USA are based on the adequacy decision on the EU-US Data Privacy Framework (see sections 4 and 5). Where personal data is transferred to our parent company in Türkiye — for example in the context of job applications or intra-group cooperation — such transfers are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), as there is no EU adequacy decision for Türkiye.

9. Job applications

For the processing of personal data in recruitment procedures (Art. 88 GDPR, Section 26 of the German Federal Data Protection Act, BDSG), our Privacy Notice for Job Candidates applies in addition, together with — for voluntary extended retention in our talent pool — our Consent Declaration for Applicants.

10. Your rights

Under the GDPR you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, please contact us at info@serbandc.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. Data security (SSL/TLS)

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

13. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to reflect changes to our services. The current version applies to your next visit.