Privacy Policy
Last updated: October 16, 2026
A. General Information on Data Protection and Data Subject Rights
I. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the EU Member States and other data protection provisions is:
Hive Robotics GmbH
Blieskastelstrasse 7, 81379 Munich, Germany
Email: info@hive-robotics.com
If you have any questions about data protection, please contact us using the contact details above. You can reach our Data Protection Officer at:
IITR Datenschutz GmbH
Email: email@iitr.de
II. Your Rights as a Data Subject
You have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). You may object to the future use of your data pursuant to Article 21 GDPR.
To exercise your rights, please contact info@hive-robotics.com or our Data Protection Officer.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG)).
The supervisory authority competent for us based on our registered office is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), P.O. Box 1349, 91504 Ansbach, Germany.
III. Storage Period
We erase your data or restrict its processing as soon as the purpose of storage no longer applies or you ask us to erase it.
As a rule, we process, and in particular store, your data no longer than until the end of the business relationship or until the applicable guarantee, warranty and limitation periods have expired. For example, the limitation period under Sections 195 et seq. of the German Civil Code (BGB) is generally three years, but in certain cases may be up to thirty years. In addition, it may be necessary to retain data until the final conclusion of any legal disputes in which the data is required as evidence.
We are also subject to statutory documentation and retention obligations, e.g. under the German Commercial Code (e.g. Section 257 HGB), the German Anti-Money Laundering Act (GwG) or the German Fiscal Code (e.g. Section 147 AO). The retention and documentation periods specified there range from two to ten years. For example, even after a contract with you has ended, we may have to retain your data until the tax audit for the last calendar year in which you were our customer has been completed.
IV. Transfer of Data to Third Countries
In the course of our processing operations, personal data may, for certain business transactions or areas of activity, also be transferred to recipients in so-called third countries outside the EU or the EEA for which the European Commission has not yet confirmed an adequate level of data protection, for example the USA. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that are not considered safe under data protection law. Where such a transfer becomes necessary in an individual case, it only takes place on the basis of an adequacy decision of the European Commission, Standard Contractual Clauses, other appropriate safeguards for data protection or your explicit consent.
Further information on transfers to third countries, including the recipients concerned, can be found in this Privacy Policy.
B. Use of Our Website and Online Presences
In principle, you can visit our online presences (our website and related external online presences, such as our social media profiles from which we refer to this Privacy Policy) and use them for information purposes without having to provide any personal details (e.g. registering, placing orders or otherwise submitting information about yourself). In this case, we only process personal data of our users to the extent necessary to provide a functional website and our content and services. This website does not use cookies or analytics or tracking tools and does not embed content from third-party providers.
I. Provision of the Website and Creation of Log Files
Description of Data Processing
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, which acts as our processor (Art. 28 GDPR). When you visit the website, the following data is processed automatically: IP address, date and time of access, page requested, and browser type, browser version and operating system (user agent). The data is stored in the log files of our hosting provider.
Legal Basis and Purpose of Data Processing
We process this data to provide the website and to ensure its security and stability, including protection against attacks. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR).
The data is also processed in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR). In addition, the EU Standard Contractual Clauses apply (Art. 46(2)(c) GDPR).
Storage Period and Options to Object or Request Removal
Providing this data is necessary to access the website; without it, the website cannot be displayed. Consequently, users have no option to object. Log data is deleted automatically after one day.
II. Website Analytics
Description of Data Processing
We use Vercel Web Analytics, a service provided by our hosting provider, to record which pages of this website are accessed. No cookies are set, no data is stored on your device and no user profiles are created. Visits are counted using a pseudonymous value that is derived from the request and deleted after 24 hours; we only see aggregated figures such as page views, approximate region and device type.
Legal Basis and Purpose of Data Processing
The legal basis is our legitimate interest in designing the website to meet the needs of its visitors (Art. 6(1)(f) GDPR). The data is also processed in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR). In addition, the EU Standard Contractual Clauses apply (Art. 46(2)(c) GDPR).
Storage Period and Options to Object or Request Removal
The pseudonymized visitor data is deleted automatically after one day.
III. Contact by Email
Description of Data Processing
If you contact us by email, we process the data you provide (such as your name, email address and the content of your message) in order to handle your inquiry.
We use email services provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Emails are therefore also stored on Microsoft servers. We have selected “Europe/Germany” as the server location and have concluded a data processing agreement with Microsoft. Emails are not transferred beyond this to third countries, in particular to the USA, which Microsoft also guarantees contractually.
Legal Basis and Purpose of Data Processing
The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract or to steps prior to entering into a contract, and otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). Our email provider processes this data on our behalf as a processor.
Storage Period and Options to Object or Request Removal
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided that no statutory requirements or limitation periods require continued storage, in particular once the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved and no statutory requirements call for longer storage.
IV. Job Applications
Description of Data Processing
From time to time, we provide information on our website about vacancies and, where applicable, about opportunities to complete an internship or vocational training with us, or to work with us as part of a dual study program or as a working student.
In this context, we process contact details (in particular first name and surname, email address and telephone number), CV, information on professional development, qualifications or language skills in order to contact you about job offers or to verify the accuracy of the information in your application documents.
We use online application forms provided by Personio via its platform. The provider is Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. Applicants can submit their applications to us using an online form provided by Personio. This information is transferred to a Personio server and stored there in a database. Further information on the processing of information by the external software provider Personio can be found at the following link: https://www.personio.de/datenschutzerklaerung/.
From time to time, we also work with recruitment agencies (headhunters) who introduce suitable candidates to us and, if there is mutual interest, send us their applicant data.
If you send us your application in response to a job offer or as an unsolicited application, we regularly process master and contact data such as first name and surname, address, email address, telephone number and date of birth, as well as the data you send us with your application documents (CV, photographs, references, certificates, etc.). Where you provide us with data, the scope of the data processed in each case depends largely on the position to be filled. As a minimum, we require data on your educational and professional background, your qualifications, your skills and personal details in order to assess whether your application matches the vacancy. In this context, the processing of your data is generally essential for preparing and completing the application process. If you do not provide us with any data or with insufficient data, we may not be able to consider you for the position, may have to reject your application or may no longer be able to carry out the application process.
We do not require any information from you that may not be used under the German General Equal Treatment Act (AGG) or any other national or international equal treatment legislation. Please also do not pass on any confidential information or trade secrets of your former or current employer.
Within our company, your data is received by those employees and organizational units that need it to fulfill our contractual and legal obligations or to pursue our legitimate interests, primarily our People (HR) team and the managers of the department in which the position is to be filled.
Pursuant to Section 164(1) sentence 4 of Book IX of the German Social Code (SGB IX), we are obliged to inform the competent representative body for severely disabled employees (Schwerbehindertenvertretung) of every application received from persons with a severe disability and to share the applicant’s relevant data with it.
Legal Basis and Purpose of Data Processing / Recipients
Personal data is processed primarily for the purpose of selecting personnel to fill vacancies with a view to entering into an employment relationship (Art. 6(1)(b) GDPR).
On the basis of a balancing of interests, data may also be processed beyond the actual initiation of an employment contract to safeguard our legitimate interests in selecting personnel and assessing whether an applicant and the position to be filled are a good match (Art. 6(1)(f) GDPR). This is permissible unless your interests or fundamental rights and freedoms which require protection of personal data override these interests. Data is processed to safeguard legitimate interests where job boards, recruitment agencies or service providers are used to carry out recruitment procedures.
CVs, references and other data you send us may contain particularly sensitive information about mental and physical health, racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union or political party, or sex life. If you voluntarily provide us with such special categories of personal data (see Art. 9(1) GDPR), they are processed subject to the additional requirements of Art. 9(2) GDPR.
We use Personio in the interest of an appealing presentation of our online offering and of a GDPR-compliant application process for the job advertisements we publish. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. We have also concluded a data processing agreement with Personio pursuant to Art. 28 GDPR.
Storage Period and Options to Object or Request Removal
Pursuant to Section 164(1) sentence 8 SGB IX, severely disabled applicants have the right to refuse the involvement of the competent representative body for severely disabled employees and thus prevent it from being notified. Please let us know in your application whether you refuse the involvement of the competent representative body for severely disabled employees.
If your application is unsuccessful at the end of the application process, or if you withdraw your application beforehand, we store your data for a period of six months from that date in order to meet any burden-of-proof obligations under the German General Equal Treatment Act (AGG) and to defend ourselves against any legal claims.
If your application is successful, we store the applicant data provided in your personnel file for the purposes and for the duration of the employment relationship.
V. Online Presences on Social Networks and Platforms
1. Social Media
Description of Data Processing
We maintain further online presences within social networks and industry networks (hereinafter also “SN”) and platforms, and link to them from our website. By clicking on the respective buttons (recognizable by the logos of the respective social networks or platforms), you are taken to our respective online presence on the SN. The purpose of these online presences is to communicate with interested parties and users active there and to inform them about our services.
When you access the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
As SN are used outside our website and services, we have no influence on this unless stated otherwise below. However, please note that when you use the platforms and networks mentioned above to which we link, data may also be processed in the USA by these SN companies and may also be processed by the respective operators for market research and advertising purposes, including the creation of user profiles. If you are logged in to the respective networks and platforms, they may also store cookies on your device that track your use of our platform or services as well as other information about your usage behavior.
Unless otherwise stated in this Privacy Policy, we only process users’ data if they communicate with us within the social networks and platforms, e.g. by writing comments or sending us messages.
To make it easier for you to obtain information about the respective data processing and the options to object offered by the respective operators, we refer below to the privacy policies and information of the operators of the respective networks.
Legal Basis and Purpose of Data Processing
We only process your personal data when you contact us directly via the respective SN or interact with our presence there or its content. Unless otherwise stated in this Privacy Policy, we process users’ data on the basis of our legitimate interests under Art. 6(1)(f) GDPR in effectively informing and communicating with users, and only if they communicate with us within the social networks and platforms (e.g. when users write posts on our online presences or send us messages). If your inquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for the processing.
Where further personal data is processed in connection with our presence on an SN and the respective SN alone determines the purposes and means of the processing, the respective SN is the sole controller for that processing. Please check carefully which personal data you share with us via an SN presence. If you want to prevent an SN from processing personal data you send to us, please contact us by other means.
Storage Period and Options to Object or Request Removal
If you are a member of one of the SN on which we maintain online presences and do not want the SN to collect data about you via our offering and link it to the data it holds about you, you must log out of your SN before visiting our offering. For a detailed description of the respective processing, information on how long the respective SN stores data and the options to object (opt-out), please refer to the providers’ information linked below.
With regard to access requests and the exercise of other user rights, please note that these can be asserted most effectively with the providers. Only the providers have access to users’ data and can take appropriate action and provide information directly. If you nevertheless need assistance, you are welcome to contact us.
LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, operated in Europe by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and to make new business contacts.
If the data subject is logged in to LinkedIn at the same time, LinkedIn recognizes, each time the data subject accesses our website and for the entire duration of their visit, which specific subpage of our website the data subject is visiting. This information is collected by the LinkedIn component and assigned by LinkedIn to the data subject’s LinkedIn account. If the data subject clicks a LinkedIn button integrated on our website (“Recommend button”), LinkedIn assigns this information to the data subject’s personal LinkedIn user account and stores this personal data.
Via the LinkedIn component, LinkedIn receives information that the data subject has visited our website whenever the data subject is logged in to LinkedIn at the time of accessing our website; this happens regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, they can prevent the transmission by logging out of their LinkedIn account before accessing our website.
At https://www.linkedin.com/psettings/guest-controls, LinkedIn offers the option to unsubscribe from email messages, text messages and targeted advertising and to manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies can be refused at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.
The transfer of data to the USA is based on the Standard Contractual Clauses of the European Commission. Details can be found here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de
The company is also certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards.
Option to object: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
C. Miscellaneous
As our website, services or other offerings evolve, or as a result of changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. You can access and print the current version of this Privacy Policy on our website at any time.