Privacy Policy
This policy explains what personal data Level Nine Labs GmbH collects when you visit this website or get in touch with us, why we collect it, and the rights you have over it.
In short
This website doesn't use cookies, analytics or advertising trackers. We process personal data to deliver the website securely and to reply when you contact us. We don't sell your data or use it for advertising.
Who is responsible
Level Nine Labs GmbH
Johann-Hittorf-Straße 8
12489 Berlin
Germany
Managing directors: Seadna Quigley, Emily Sheridan
Email: info@levelninelabs.com
For any questions about data protection, email us at the address above.
Visiting this website
Hosting. This website is hosted by Vercel Inc. (USA). When you open a page, your browser sends the technical information every website receives: your IP address, the date and time, the page you requested, the page you came from, and your browser and operating system. Vercel processes this to deliver the website and to protect it against attacks and misuse, and keeps it in server logs for a limited period. We don't combine it with other data or use it to identify you. See Vercel's privacy policy.
Images and videos. Images and videos on this website are delivered by Sanity, the content management system we use to run the website. Your browser loads them directly from Sanity's servers (cdn.sanity.io), so Sanity also receives your IP address and the technical information above. See Sanity's privacy policy.
Fonts. Our fonts are stored on this website. Your browser doesn't connect to any font provider.
The legal basis is our legitimate interest in providing a secure and working website (Art. 6(1)(f) GDPR).
Cookies
This website doesn't set cookies or store information in your browser, and it doesn't use analytics, advertising or tracking tools. Cookies can only come from the video providers described below, and only after you press play. If this changes, we'll update this policy and ask for your consent where the law requires it. More detail is on our Cookies page.
Contact form
When you send a message through our contact form, we receive your first and last name, your email address, the subject (if you enter one) and your message. We use them only to reply to you and to deal with your enquiry.
The form is run by Web3Forms (web3forms.com), which receives your message on servers in the USA and forwards it to us by email. Web3Forms also keeps a copy in our account for 30 days, after which it's deleted automatically. See Web3Forms' privacy policy.
Before a message is sent, simple checks in your browser filter out automated spam. They don't send any data anywhere.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or to steps before entering into one, and otherwise our legitimate interest in answering the enquiries we receive (Art. 6(1)(f) GDPR).
We delete your message once your enquiry has been dealt with, unless commercial or tax law requires us to keep it for longer (business correspondence, for example, for up to six years).
If you email us, we process your email address, your message and any other details you include, to reply to you. The legal bases and retention periods are the same as for the contact form.
Job applications
If you send us an application, for example through the contact form or by email, we process the details you give us (such as your contact details, CV and references) to assess your application and get back to you. The legal basis is Art. 6(1)(b) GDPR (steps before entering into an employment contract).
If we can't offer you a position, we delete your application six months after the process ends, unless you agree to us keeping it for longer. Job listings on our Careers page may link to an external application platform, where that platform's own privacy policy applies.
Videos in articles
Some articles may include videos from YouTube or Vimeo. These only load when you press play: until then, your browser doesn't connect to either provider. When you press play, the video loads from the provider, which receives your IP address and technical information and may set cookies or use similar technologies. YouTube videos load in its privacy-enhanced mode, and Vimeo videos with its “Do Not Track” setting.
YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy); Vimeo by Vimeo.com, Inc., USA (privacy policy). Both may transfer data to the USA.
The legal basis is your consent, which you give by pressing play (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time for the future, for example by deleting the provider's cookies in your browser.
This website links to our LinkedIn page. These are plain links: LinkedIn receives no data from this website unless you click one.
Transfers outside the EU
Some of the providers named above are based in, or process data in, the USA. Where a provider is certified under the EU-US Data Privacy Framework, transfers rely on the European Commission's adequacy decision (Art. 45 GDPR). Otherwise, they rely on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Your rights
You have the right to access the personal data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16 GDPR) or deleted (Art. 17 GDPR), to restrict how we process it (Art. 18 GDPR), and to receive it in a commonly used, machine-readable format (Art. 20 GDPR).
Right to object. Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We'll then stop, unless we have compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims.
Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. This doesn't affect anything we did on the basis of your consent before you withdrew it.
To exercise any of these rights, email us at info@levelninelabs.com.
You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Do you have to give us your data?
You don't need to give us any personal data to use this website. To reply to your message, we need your name, email address and message. We don't make automated decisions about you or create profiles.
Security
This website is only served over an encrypted connection (HTTPS).
Changes to this policy
We update this policy when our website, our services or the law change. This version is from October 2026.