Privacy Statement

With this Privacy Statement, we inform you about the personal data we process when you visit coera.co, why we process it, how long we retain it, what rights you have and how you can exercise them.

This Privacy Statement applies to the website coera.co, which is operated by coera GmbH, Berlin. “coera”, “we”, “us” and “our” refer to coera GmbH as the controller of personal data processed through this website.

Controller

The controller responsible for processing personal data through coera.co is:

coera GmbH
Kolonnenstraße 8
10827 Berlin
Germany

Commercial register: Amtsgericht Charlottenburg, HRB 289255 B
Email: privacy@coera.co

For questions about this Privacy Statement or to exercise your data-protection rights, please contact us at privacy@coera.co.

Change of controller

This website was previously operated by IMEC VZW. With effect from 24 June 2026, coera GmbH became the controller for the processing of personal data collected through the website.

Personal data collected before 24 June 2026 was transferred to coera GmbH for the purpose of continuing the business, research and other relationships initiated through the website. The data is processed by coera GmbH for compatible purposes and in accordance with applicable data-protection law.

For questions concerning processing carried out by IMEC VZW before 24 June 2026, please contact IMEC VZW at privacy@imec.be.

Data protection officer

coera GmbH has not appointed a data protection officer. For questions about our processing of personal data, please contact us at privacy@coera.co.

Personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

  • your name;
  • your professional email address;
  • your company name;
  • your job title or role;
  • your country;
  • information contained in a message or enquiry;
  • your communication preferences;
  • information about your interaction with our communications, where this processing is lawfully enabled; and
  • technical information relating to your visit to the website, such as your IP address, browser type, device type, operating system, pages viewed, referring page, date and time of access, and security or server-log information.

Please do not submit special categories of personal data, such as health information, biometric information, information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, or information concerning sex life or sexual orientation, unless we specifically request it and provide an appropriate legal basis and notice.

How we collect personal data

We collect personal data:

  • directly from you when you complete a contact or lead-capture form;
  • directly from you when you contact us by email;
  • when you subscribe to updates;
  • automatically through technically necessary website functions and server logs; and
  • through analytics, advertising or similar technologies where you have given the required consent.

Purposes and legal bases

We process personal data only for specified purposes and on an applicable legal basis.

Operating and securing the website

We process technical information, including IP addresses and server-log information, to:

  • provide and operate the website;
  • maintain its availability, stability and security;
  • detect, prevent and investigate misuse, attacks and technical failures; and
  • diagnose and resolve technical problems.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR in operating a secure and reliable website. Where processing is necessary to provide a digital service expressly requested by you, the legal basis may also be Article 6(1)(b) GDPR.

Server and security logs are generally retained for up to seven days. A longer retention period may apply where necessary to investigate a security incident, establish, exercise or defend legal claims, or comply with a legal obligation.

Responding to enquiries

If you contact us or submit a contact form, we process the information you provide to:

  • respond to your enquiry;
  • provide information about coera, our technology and our services;
  • communicate with you about a possible business, research or investment relationship; and
  • take steps at your request before entering into a possible business relationship.

The legal basis is:

  • Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a possible business relationship; or
  • Article 6(1)(f) GDPR where the enquiry concerns general business correspondence or relationship management and our legitimate interest in responding to and managing the enquiry outweighs your applicable privacy interests.

We generally retain contact-enquiry data for up to 12 months after the enquiry has been closed. We may retain it for longer where necessary for an ongoing relationship, to comply with a legal obligation, or to establish, exercise or defend legal claims.

Lead capture and customer-relationship management

If you submit your details through a lead-capture form, we process the information to:

  • record and manage your enquiry;
  • assess whether coera’s products or services may be relevant to your organisation;
  • communicate with you about a possible business relationship;
  • coordinate communications within our team; and
  • maintain records of our business contacts.

The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in developing and managing relevant business relationships.

We do not use lead information to make decisions producing legal effects or similarly significant effects concerning you.

Lead and customer-relationship records are retained for up to three years after the last meaningful interaction. A shorter period may apply where the information is no longer relevant. A longer period may apply where necessary for an ongoing relationship, to comply with a legal obligation, or to establish, exercise or defend legal claims.

Newsletters and updates

If you subscribe to updates, we process your email address and any information you provide to send you the communications you requested.

The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by using the unsubscribe link in the relevant communication or by contacting privacy@coera.co.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We retain your subscription data while you remain subscribed. After you unsubscribe, we may retain limited information for up to three years where necessary to record and respect your withdrawal, prevent unwanted communications and demonstrate compliance.

Submitting a general contact or lead-capture form does not, by itself, constitute consent to receive marketing communications.

Website analytics

With your consent, we use Google Analytics 4 to understand how visitors use our website and to improve its content, structure and performance.

Google Analytics is activated only after you have selected the relevant analytics category in our consent-management banner. Before consent, Google Analytics cookies, tags and similar technologies are blocked.

The legal bases are:

  • your consent under Article 6(1)(a) GDPR for the processing of personal data; and
  • your consent under § 25(1) of the Telecommunications-Digital-Services Data Protection Act (TDDDG) for storing or accessing information on your device, unless a statutory exception applies.

You may withdraw your consent at any time through the “Cookie settings.” link in the website footer.

Analytics data is retained for the period specified in our Cookie Policy and in the applicable Google Analytics configuration.

LinkedIn Insight Tag and retargeting

With your consent, we use the LinkedIn Insight Tag for campaign measurement, conversion measurement and retargeting.

The LinkedIn Insight Tag is activated only after you have selected the relevant marketing category in our consent-management banner. Before consent, the tag, cookies and similar technologies are blocked.

The legal bases are:

  • your consent under Article 6(1)(a) GDPR for the processing of personal data; and
  • your consent under § 25(1) TDDDG for storing or accessing information on your device, unless a statutory exception applies.

For certain processing activities involving the LinkedIn Insight Tag, coera and LinkedIn may act as joint controllers. LinkedIn’s privacy policy is available at:

https://www.linkedin.com/legal/privacy-policy

You may withdraw your consent at any time through the “Cookie settings” link in the website footer.

Legal obligations and legal claims

We may process personal data where necessary:

  • to comply with a legal obligation;
  • to respond to lawful requests from competent authorities;
  • to maintain legally required business records; or
  • to establish, exercise or defend legal claims.

The legal basis is Article 6(1)(c) GDPR where a legal obligation applies, or Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in protecting and enforcing our legal rights.

Providing personal data

Providing the information marked as mandatory in a contact or lead-capture form is necessary for us to process and respond to your enquiry. If you do not provide that information, we may be unable to respond fully or at all.

Providing other information is voluntary.

Cookies and similar technologies

We use technically necessary cookies and similar technologies to operate and secure the website.

We use analytics, advertising and retargeting technologies only after you have given the relevant consent, unless a statutory exception applies.

Before consent is given, non-essential cookies, tags, pixels and similar technologies are blocked. You can accept or reject non-essential technologies and change or withdraw your choices at any time through the “Cookie settings” link in the website footer.

Our Cookie Policy lists the technologies used on coera.co, their purposes, providers, duration, categories, processing locations and applicable transfer safeguards. The Cookie Policy is maintained and updated when the technologies used on the website change.

Recipients and service providers

Personal data collected through this website may be shared with:

  • authorised members of our team who need the information for the purposes described in this Privacy Statement;
  • professional advisers, auditors and insurers where necessary;
  • courts, regulators, law-enforcement authorities or other public bodies where required or permitted by law;
  • service providers acting on our documented instructions as processors; and
  • third parties acting as independent or joint controllers for particular processing activities.

We do not sell your personal data.

Processors

Depending on the services and configuration actually used, our processors may include:

  • HubSpot — contact and lead-capture forms, customer-relationship management and marketing automation;
  • CookieYes — consent management;
  • Netlify — website hosting, deployment and content delivery; and
  • Amazon Web Services — cloud infrastructure, hosting and storage services.

Analytics and advertising providers

  • Google — Google Analytics 4, activated only after the relevant consent has been obtained; and
  • LinkedIn — LinkedIn Insight Tag, campaign measurement and retargeting, activated only after the relevant consent has been obtained.

LinkedIn may act as a joint controller with coera for certain processing activities involving the LinkedIn Insight Tag. LinkedIn is not a processor for those activities.

International data transfers

Some of our service providers or their subprocessors may process personal data outside the European Economic Area.

Where this occurs, we rely on an applicable transfer mechanism under Chapter V GDPR, such as:

  • an adequacy decision of the European Commission;
  • the EU–U.S. Data Privacy Framework, where the relevant U.S. organisation is certified and the transfer is covered by that certification; or
  • Standard Contractual Clauses adopted by the European Commission, together with supplementary measures where required following an assessment of the transfer.

The applicable transfer mechanism is assessed separately for each provider and processing activity. Further information about the safeguards used for a particular transfer is available by contacting privacy@coera.co.

Job applications

If you apply for a position with us, your application is handled through our careers process. A separate privacy statement applies to job applications and is available on the careers page.

Retention periods

We retain personal data only for as long as necessary for the relevant purpose.

Unless a different period is stated above:

  • contact-enquiry data is retained for up to 12 months after the enquiry has been closed;
  • lead and customer-relationship records are retained for up to three years after the last meaningful interaction;
  • newsletter data is retained while you remain subscribed and, in limited form, for up to three years after you unsubscribe where necessary to record and respect your withdrawal;
  • server and security logs are generally retained for up to seven days;
  • consent records are retained for up to three years after the relevant consent or preference has expired or been withdrawn; and
  • analytics and marketing data is retained for the period specified in our Cookie Policy and in the applicable provider configuration.

A longer retention period may apply where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

After the applicable retention period, personal data is deleted or anonymised unless continued retention is legally justified.

Automated decision-making and profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

The use of LinkedIn retargeting or website analytics does not, by itself, result in a decision producing legal effects or similarly significant effects concerning you.

Your rights

Subject to the conditions and exceptions provided by applicable law, you may have the right to:

  • obtain confirmation as to whether we process personal data concerning you and request access to that data under Article 15 GDPR;
  • request correction of inaccurate or incomplete personal data under Article 16 GDPR;
  • request erasure of personal data under Article 17 GDPR;
  • request restriction of processing under Article 18 GDPR;
  • receive personal data that you have provided to us in a structured, commonly used and machine-readable format, and request its transmission to another controller, where the right to data portability applies under Article 20 GDPR;
  • object to processing based on our legitimate interests under Article 21 GDPR;
  • object at any time to the processing of personal data for direct marketing purposes, including related profiling;
  • withdraw consent at any time where processing is based on consent; and
  • lodge a complaint with a data-protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us at privacy@coera.co. We may request information reasonably necessary to verify your identity and protect personal data from unauthorised disclosure.

You may lodge a complaint with the supervisory authority responsible for coera, in particular:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

Website: https://www.datenschutz-berlin.de

You may also contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

Security

We implement technical and organisational measures appropriate to the risks associated with processing personal data. These measures may include:

  • encryption of data in transit;
  • access controls and authentication;
  • access limited to personnel who need the data for their work;
  • confidentiality obligations;
  • contractual data-processing obligations for processors;
  • security monitoring and incident-management procedures; and
  • measures designed to support the availability, integrity and confidentiality of our systems.

No method of transmission or storage can be guaranteed to be completely secure. We regularly review and improve our security measures as appropriate.

Changes to this Privacy Statement

We may update this Privacy Statement when our processing activities, service providers or legal obligations change.

The current version will be published on this page. If a change materially affects your rights or the way we process your personal data, we will provide additional notice where required by law.

Last updated: 23 July 2026