Introduction

We take data privacy seriously. This Privacy Policy explains when, why and how we collect and use personal data relating to visitors to our website, users of our products and services, business contacts, applicants and other individuals who interact with us.

It also explains what rights you may have in relation to your personal data and how you can contact us if you have questions.

This Privacy Policy applies to ObjectBox’s own collection and use of personal data. It does not apply to our customers’ own use of ObjectBox technologies to collect, store or otherwise process personal data in their own applications or services. If you have questions about how one of our customers uses your data, please contact that customer directly.

Controller

The controller responsible for the processing described in this Privacy Policy is:

For privacy-related questions, please contact:

When do we collect information?

We may collect information about you when you interact with us, including when:

On our website

you browse our website;
you contact us;
you subscribe to newsletters or other communications;
you register for an account, where available;
you leave a comment on our blog or otherwise interact with website features.

In relation to our products and services

you use ObjectBox products, services or related tooling;
you run a build with ObjectBox or otherwise use our technologies in a way that generates technical or usage information;
you request support, documentation, updates or other services from us.

In a business or recruiting context

you contact us as a customer, prospective customer, supplier, partner or other business contact;
you apply for a job or otherwise participate in a recruiting process.

What information do we collect?

Depending on your interaction with us, we may collect and process the following categories of personal data:

contact details such as your name, email address, postal address, company name or telephone number;
account or registration information, where relevant;
communication content that you send to us;
newsletter subscription and preference information;
application and recruiting information;
technical data such as IP address, browser type, device information, operating system, referring pages, timestamps and similar website or service usage information;
product and usage-related information, including information about how our products or services are used, where this qualifies as personal data.

Where possible and appropriate, we seek to minimise the amount of personal data processed.

How do we use your information?

We may use your personal data to:

provide and operate our website, products and services;
respond to inquiries, requests and support communications;
send you communications you have requested or consented to receive;
manage accounts or subscriptions;
process job applications and carry out recruiting activities;
improve, secure and analyse our website, products and services;
protect our rights, property, systems, users and business operations;
comply with legal obligations and enforce applicable terms.

Legal bases for processing

Depending on the context, we process personal data on one or more of the following legal bases:

performance of a contract or steps taken before entering into a contract;
our legitimate interests, for example in operating, securing and improving our website, products and business communications;
your consent, where consent is required, for example for certain marketing communications or non-essential cookies;
compliance with legal obligations;
in exceptional cases, another lawful basis recognised under applicable law.

Where we rely on consent, you may withdraw that consent at any time with effect for the future.

Who can access your information?

We do not sell or rent your personal data to third parties.

We may share personal data with:

service providers who process data on our behalf and under appropriate contractual safeguards;
professional advisers, auditors or legal representatives where necessary;
public authorities, courts, regulators or law enforcement bodies where we are legally required or permitted to do so;
a purchaser, investor or successor entity in connection with a corporate transaction such as a reorganisation, merger, sale or acquisition, subject to appropriate safeguards.

Where we use service providers, we disclose only the information that is necessary for the relevant purpose and require appropriate security and confidentiality measures.

Processors and service providers

We may use third-party providers to support website hosting, analytics, communications, customer management, recruiting or other business operations.

Where such providers process personal data on our behalf, we require them to process it only on our instructions, to protect it appropriately, and not to use it for their own incompatible purposes.

Newsletters and marketing

If you subscribe to our newsletter or otherwise request marketing communications, we will process your contact details and subscription information in order to send you the requested communications.

Where required by law, we will do this only on the basis of your prior consent. You may unsubscribe at any time by using the unsubscribe link in the relevant communication or by contacting us.

We do not send marketing communications by email, phone or text without an appropriate legal basis.

Product and usage analytics

We may process technical and usage information relating to the use of our website, products and services in order to operate, secure, analyse and improve them.

Where such information does not identify you and cannot reasonably be linked to you, it is not personal data. Where it does or may do so, we process it in accordance with this Privacy Policy.

We aim to limit such processing to what is necessary and proportionate.

Cookies and similar technologies

Our website uses cookies and similar technologies. Some are technically necessary for the operation of the website, while others may help us analyse usage, improve performance or remember preferences.

Where legally required, we will request your consent before using non-essential cookies or similar technologies. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

Google Analytics

We may use Google Analytics or comparable analytics services to understand how our website is used and to improve its performance and content.

These services may process technical data such as IP address, browser or device information, pages viewed, approximate location derived from IP address, timestamps and interaction data.

Where legally required, we will use such analytics tools only on the basis of consent. Where such providers process data outside the EEA, we will use an appropriate transfer mechanism as described below.

You can also control certain analytics settings through your browser or the consent tools made available on our website, where applicable.

Mixpanel

We may use Mixpanel or comparable analytics tools to understand the use of ObjectBox technologies and related services.

This may include individual or aggregated analytics metrics about the use of our products or services where this is necessary for operation, support, security, quality assurance or improvement.

Where legally required, we will rely on consent before collecting non-essential analytics data. Where data is transferred outside the EEA, we will use an appropriate transfer mechanism as described below.

Job applications

If you apply for a position with us, we will process the information you provide in connection with your application in order to assess your suitability, communicate with you, manage the recruitment process and, where appropriate, prepare for an employment relationship.

This may include your contact details, CV, qualifications, employment history, correspondence and other information you submit.

If we wish to retain your application for future opportunities beyond the current process, we will do so only where permitted by law or on the basis of your consent.

Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on the type of data and the purpose of processing. For example:

newsletter data is generally retained until you unsubscribe or object;
contact and inquiry data is retained for as long as necessary to handle the request and any related follow-up;
account or contract-related data may be retained for the duration of the relationship and any applicable statutory retention periods;
application data is retained for the duration of the recruiting process and any legally required or justified follow-up period;
certain technical logs and security-related records may be retained for a limited period as required for security, troubleshooting and legal compliance.

We may retain data for longer where necessary to establish, exercise or defend legal claims, to comply with legal obligations, or where the data has been anonymised.

Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful or accidental disclosure, loss, alteration or destruction.

These measures may include access controls, secure system configuration, encryption in transit where appropriate, authentication measures, logging, backup, patching and internal incident management procedures.

No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

If you receive or use credentials for any part of our website or services, you are responsible for keeping them confidential and for choosing a strong password.

International transfers

We prefer to process personal data within the EEA. However, some of our service providers or technical operations may involve access to or processing of personal data outside the EEA.

Where personal data is transferred outside the EEA, we will ensure that an appropriate legal transfer mechanism is in place, for example:

an adequacy decision by the European Commission; or
the European Commission’s standard contractual clauses together with any supplementary measures required by law.

You may contact us if you would like further information on the safeguards used for a particular transfer, where applicable.

Your data protection rights

Under applicable law, you may have the following rights:

the right to request access to your personal data;
the right to request rectification of inaccurate or incomplete data;
the right to request erasure of your personal data in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to processing in certain circumstances;
the right to data portability in certain circumstances;
the right to withdraw consent at any time where processing is based on consent;
the right to lodge a complaint with a supervisory authority.

If you would like to exercise any of these rights, please contact us at:

We may need to verify your identity before responding to your request.

We will respond within the time periods required by applicable law.

We do not generally charge a fee for handling rights requests unless a request is manifestly unfounded or excessive or another legal exception applies.

Children

Our website and services are not directed to children who are too young to provide valid consent under applicable law.

If you are under the age at which you can validly consent under applicable law, please do not provide us with personal data without the involvement of your parent or legal guardian.

If we become aware that we have collected personal data from a child in breach of applicable law, we will take appropriate steps to delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business developments.

When we make material changes, we will update the “last updated” date and, where appropriate, provide additional notice.

Last updated: 04/2026