Privacy Policy

1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Notice concerning the responsible party (controller)” in this privacy policy.

How do we collect your data?
On the one hand, your data is collected when you provide it to us — for example, data you enter into a contact form. Other data is collected automatically, or after your consent, by our IT systems when you visit the website. This is primarily technical data (e.g. browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may — with your consent — be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. Details can be found in the section “Your rights”.

2. Hosting

Vercel

We host our website with Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access our website, information is automatically transmitted to Vercel servers and stored in server log files. This includes in particular the IP address of the requesting device, the date and time of the request, the name and URL of the retrieved file, the amount of data transferred, browser type and version, the operating system, and the referrer URL.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and optimization of our website. Vercel is certified under the EU-US Data Privacy Framework; in addition, we base data transfers to the USA on the EU Standard Contractual Clauses.

Vercel Web Analytics and Speed Insights

To measure the use and technical performance of our website, we also use Vercel Web Analytics and Vercel Speed Insights. Both services operate without cookies and without cross-site identifiers: they collect anonymized page views and technical performance metrics (web vitals, e.g. loading times), which are transmitted to Vercel via our own domain. Individual visitors are not recognized across different websites. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the stability and performance of our website.

For more information, please refer to Vercel’s privacy policy: https://vercel.com/legal/privacy-policy.

3. General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Notice concerning the responsible party (controller)

The controller responsible for data processing on this website is:

Future Machine Labs GmbH
Zimmerstraße 79-80
10117 Berlin

Phone: +49 30 7566 8290
Email: info@fm-labs.de

For privacy inquiries, you can reach us at: datenschutz@fm-labs.de

Retention period

We store your personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations:

  • Contact form inquiries and leads: 12 months after last contact
  • Support requests: 6 months after the request has been resolved
  • Application data: 6 months after the application process is completed (24 months with consent for the talent pool)
  • Server log files: 30 days
  • Web analytics data: 26 months

After the respective retention period expires, your data is routinely deleted or anonymized, unless statutory retention obligations prevent this.

Your rights

You have the right at any time to:

  • obtain information about the data we hold about you (Art. 15 GDPR)
  • request the correction of inaccurate data (Art. 16 GDPR)
  • request the deletion of your data (Art. 17 GDPR)
  • request the restriction of processing (Art. 18 GDPR)
  • request data portability (Art. 20 GDPR)
  • object to the processing (Art. 21 GDPR)
  • withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR)
  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

Deletion requests: To exercise your right to deletion, contact us at datenschutz@fm-labs.de. We will process your request within 30 days and also arrange for deletion by any processors we use, unless statutory retention obligations prevent this.

Competent supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin
www.datenschutz-berlin.de

4. Data collection on this website

Contact form / quote requests

If you send us inquiries via a contact form, the details you provide in the form, including the contact data you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. For processing, the form data is forwarded to our internal CRM and sales systems. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).

Inquiries by email or phone

If you contact us by email or phone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. The legal basis for processing is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

Job applications

If you apply via our careers page, we process your application data (name, contact details, CV, cover letter, and any other documents you provide) for the purpose of conducting the application process. The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) in conjunction with Art. 88 GDPR (decision on the establishment of an employment relationship) and Art. 6(1)(b) GDPR.

Application data is deleted 6 months after the application process is completed, unless statutory retention obligations apply. With your express consent, we retain your data in our talent pool for up to 24 months (Art. 6(1)(a) GDPR); you can withdraw this consent at any time.

5. Plugins and tools

Fonts (locally hosted)

For a consistent appearance, this website uses fonts that are hosted locally on our own servers (self-hosting). No connection to servers of Google or other third parties is established when the fonts are loaded; no data is transferred to third parties in the process.

Google Tag Manager / Google Analytics

This website uses Google Tag Manager and Google Analytics 4, services of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. They are only loaded after your express consent via our consent management tool (Usercentrics); before you consent, no Google scripts are loaded and no cookies are set. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG.

In the process, personal data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, EU Standard Contractual Clauses are in place. For the retention period of web analytics data, see the section “Retention period”. You can withdraw your consent at any time via the “Cookie settings” link in the footer.

Google Ads / conversion tracking

We use Google Ads and, as part of it, Google’s conversion measurement (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The conversion tag is loaded via Google Tag Manager only after your express consent via our consent management tool. If you reach our website via an ad placed by Google and have given consent, Google can recognize whether certain actions (e.g. submitting an inquiry) were carried out. We do not receive any information that allows us to identify you personally.

The legal basis is Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG. Data may be transferred to servers of Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses are additionally in place. You can withdraw your consent at any time via the “Cookie settings” link in the footer.

YouTube (videos)

This website embeds videos from YouTube, a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Videos are embedded using a two-click (click-to-load) pattern: when the page loads, only a static preview surface served entirely from our own servers is displayed — no connection to YouTube is established. Only when you actively click the video surface is the video loaded via the domain youtube-nocookie.com in privacy-enhanced mode, establishing a connection to Google/YouTube servers. In the process, your IP address and device information, among other data, may be transmitted to YouTube.

The legal basis is your consent, which you give by actively clicking the video surface (Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG). Data may be transferred to servers of Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses are additionally in place. More information: https://policies.google.com/privacy.

6. Spare parts shop (Shopify)

Our spare parts shop is available as a separate offering at shop.fm-labs.de and is operated on the Shopify e-commerce platform (Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). This website merely links to the shop; by clicking a shop link, you leave this website.

If you place an order in the shop, the data you enter there (e.g. name, address, email, payment data) is processed on Shopify’s servers. Processing is based on Art. 6(1)(b) GDPR (performance of a contract). Shopify is certified under the EU-US Data Privacy Framework. More information: https://www.shopify.com/legal/privacy.

7. Airtable

We use Airtable (Formagrid Inc., 799 Market Street, 8th Floor, San Francisco, CA 94103, USA) to manage inquiries, customer data, job postings, and applications. Application data you submit via our application form is stored in Airtable.

Processing is based on Art. 6(1)(b) and (f) GDPR and, for application data, additionally on Art. 88 GDPR in conjunction with Section 26 BDSG. Airtable is certified under the EU-US Data Privacy Framework; in addition, data transfers to the USA are based on the EU Standard Contractual Clauses. More information: https://www.airtable.com/privacy.

8. Consent management (Usercentrics)

This website uses the consent management platform Usercentrics (Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany) to obtain and document your consent to the use of cookies and similar technologies and to data processing. The legal basis is Art. 6(1)(c) GDPR (legal obligation, Section 25 TDDDG) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management).

You can adjust or withdraw consents you have given at any time with effect for the future — via the “Cookie settings” link in the footer of every page, or directly here:

A complete and up-to-date overview of all services used on this website can be found below:

Last updated: July 2026