Privacy Policy of
Ferroelectric Memory GmbH

Ferroelectric Memory GmbH | Last updated: 16 September 2026

1. Overview and general information

This Privacy Policy explains how Ferroelectric Memory GmbH processes personal data when you visit our website, contact us, request information about our technologies and products, subscribe to our newsletter, or apply for a position with us.

Ferroelectric Memory GmbH is a semiconductor and memory technology company based in Dresden, Germany. Through our website, we provide information in particular about our DRAM+ and CACHE+ technologies, application areas, company news, partnerships and career opportunities. Depending on how you use the website, different processing activities may therefore take place.

Personal data means any information relating to an identified or identifiable natural person. This may include contact details, communication content, technical usage data, online identifiers and documents submitted during an application process.

You can generally use our website without actively providing personal data. However, technical data is processed when the website is accessed to the extent necessary for secure and functional delivery. Analytics, marketing and external media services are activated only after your consent where consent is legally required.

2. Controller and Data Protection Officer

2.1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Ferroelectric Memory GmbH
Charlotte-Bühler-Straße 12
01099 Dresden
Germany
Phone: +49 351 2718830
E-mail: info@ferroelectric-memory.com
Managing Director: Thomas Rueckes

2.2 Data Protection Officer

You can contact our Data Protection Officer at:

Vetter Consulting
Steve Vetter
Oschatzer Straße 46
01127 Dresden
Germany
Phone: +49 351 5008 1750
E-mail: steve.vetter@vc-datenschutz.de

You may contact the Data Protection Officer directly with any questions regarding data protection or the exercise of your data subject rights.

3. Hosting, server log files and transport encryption

3.1 Hosting with Microsoft Azure

Our website content is delivered using Microsoft Azure infrastructure. The provider for the European region is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

When the website is accessed, the hosting infrastructure processes technically necessary data, in particular the IP address, date and time of access, requested address or file, referrer URL, browser type and version, operating system, and technical status and security information. The processing is used to deliver the website, ensure stability and availability, analyse errors and defend against attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, efficient and reliable operation of our online services. Where data is transferred to third countries in connection with the service, the transfer is based on the applicable safeguards under Chapter V GDPR, in particular adequacy decisions or Standard Contractual Clauses.

Further information: Microsoft Privacy Statement

3.2 SSL/TLS encryption

Our website uses SSL/TLS encryption. This protects data transmitted to us against unauthorised access while in transit. An encrypted connection can generally be identified by “https://” and the lock symbol in your browser.

4. General legal bases, retention, recipients and international transfers

4.1 Legal bases

Unless a more specific legal basis is stated below, we process personal data in particular on the following grounds:

4.2 Retention

We generally retain personal data only for as long as necessary for the relevant purpose. The data is then deleted or anonymised unless statutory retention requirements, legitimate evidentiary interests, or the establishment, exercise or defence of legal claims require a longer period. Where specific retention periods apply to individual services, they are stated below.

4.3 Recipients and processors

We use service providers for the operation of the website and individual functions. Where they act as processors, they process data on the basis of agreements pursuant to Art. 28 GDPR and only on our instructions. In some situations, providers may have their own responsibilities under data protection law; this is explained in the relevant sections.

4.4 Transfers to third countries

Some providers we use belong to corporate groups with headquarters or infrastructure outside the European Economic Area, in particular in the United States. Transfers to certified U.S. companies may be based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework under Art. 45 GDPR. Where this mechanism does not apply, we use in particular Standard Contractual Clauses under Art. 46(2)(c) GDPR and, where appropriate, supplementary safeguards. Services that require consent are activated only after you have given your consent.

Our services are primarily aimed at business customers, industry professionals, partners and applicants. They are not specifically directed at children.

5. Cookies and consent management with Complianz

We use the consent management solution “Complianz GDPR/CCPA Cookie Consent” provided by Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, the Netherlands. Complianz enables us to control which consent-based technologies are activated on our website and to document your choices.

In connection with your consent decision, browser and device information, date and time, the page URL, banner language, a consent ID and your consent status may be processed. The consent status is also stored on your device so that your choice can be applied to subsequent visits.

Storage of or access to technically necessary consent information is based on Section 25(2) TDDDG. Where processing is required to demonstrate consent or withdrawal, we rely on Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR. In addition, we have a legitimate interest under Art. 6(1)(f) GDPR in legally compliant and user-friendly consent management.

The consent preference stored in the browser may be retained for up to 12 months. Evidence of consent and withdrawal may be retained for up to three years where necessary to comply with our accountability obligations and defend legal claims.

You can change or withdraw your consent at any time with effect for the future using the “Manage permissions” function.

Further information: Complianz Legal Center

6. Contact, technology enquiries, demo/briefing requests and downloads

If you contact us by e-mail, through a contact or enquiry form, or through functions such as “Request a demo”, “Schedule a technology briefing”, “Partner with FMC” or a white paper download, we process the data you provide. This may include your name, business contact details, company, job title, content of your enquiry and any other information you voluntarily provide.

We use this data to handle your enquiry, communicate about our technologies and products, establish or manage business relationships and provide requested information or content.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract. In other cases, processing is based on our legitimate interest in properly handling business and professional enquiries under Art. 6(1)(f) GDPR. Where separate consent is requested, Art. 6(1)(a) GDPR is the legal basis.

We delete the data once the matter has been finally resolved unless statutory retention requirements or ongoing business purposes require continued storage.

7. Newsletter and marketing communications

You can subscribe to the FMC newsletter on our website. For this purpose, we process your e-mail address and, where requested, your name, company and other voluntary information. We use the data to send you company news, technology updates and professional content.

The newsletter is sent only on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where appropriate, we use a double opt-in process to document the subscription. You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link in each newsletter e-mail.

Where newsletter reach or interaction measurement is used, for example to record opens or link clicks, this takes place only where valid consent has been obtained. Without such consent, we do not conduct personalised usage analysis for marketing purposes.

After withdrawal of consent, we remove your data from the active mailing list. Limited evidence of the previously given consent may be retained for the applicable statutory limitation and accountability periods.

8. HubSpot

We use services from HubSpot on our website. Depending on the contractual setup, the provider for European customers is HubSpot Ireland Limited; the HubSpot group also includes HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.

HubSpot may be used in particular for forms, contact and lead management, delivery of requested content, newsletter and marketing processes and – after consent – analytics and tracking functions.

When you submit a form, the data you enter is processed and may be matched with an existing contact profile where one already exists. If you have also consented to HubSpot tracking, website visits, form submissions and interactions with tracked marketing e-mails may be linked.

Technically necessary processing for submitting a form is based, depending on the context, on Art. 6(1)(b) or Art. 6(1)(f) GDPR. Analytics, tracking and profiling functions are activated only after your consent pursuant to Art. 6(1)(a) GDPR and, where device information is involved, Section 25(1) TDDDG.

HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework. HubSpot also provides Standard Contractual Clauses for other international transfers.

Further information: HubSpot Privacy Policy

9. Web analytics with Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 helps us understand how our website is used and which content is particularly relevant to visitors.

The service may process, among other things, a truncated or technically processed IP address, approximate location data, browser and device information, operating system, referrer URL, pages visited, interactions and time of access. Google may link this information to pseudonymous online identifiers.

GA4 is activated only after your express consent. The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw consent at any time via the consent settings.

Where data is transferred to Google LLC in the United States, Google relies on the EU-U.S. Data Privacy Framework. Google LLC is certified under the framework. Contractual safeguards may also be used.

The specific retention period depends on the period configured in our Analytics account. After expiry, data is automatically deleted or aggregated.

Further information: Google Analytics privacy information

10. Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited to centrally manage website tags and scripts. The Tag Manager is used in particular to control the activation of other services in accordance with your consent choices.

Google Tag Manager generally does not itself set the analytics cookies used by the services it manages, but technical connection data such as your IP address may be transmitted to Google when it is loaded. Where it is used for non-essential tags, we therefore activate it only after your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Where additional services are loaded through Tag Manager, the relevant sections of this Privacy Policy also apply.

Further information: Google Privacy Policy

11. Embedded content, videos, fonts and Google infrastructure

11.1 bunny.net

Individual pages may embed videos or other media files using bunny.net. The provider is BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia. When embedded media is loaded, the service may process in particular your IP address, device and browser information, the page visited and interactions with the media content.

The media is activated only after your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.

Further information: bunny.net Privacy Policy

11.2 YouTube

We may embed videos from YouTube. The provider for the European region is Google Ireland Limited; YouTube is part of the Google group. When a YouTube video is loaded, Google may process in particular your IP address, device and browser information, the page visited and usage and interaction data. If you are signed in to Google or YouTube, the data may be associated with your account.

YouTube content is loaded only after your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Transfers to the United States may be based on the EU-U.S. Data Privacy Framework.

Further information: Google/YouTube Privacy Policy

11.3 Google Photos and supporting Google domains

Where images or other content are delivered via Google Photos or supporting Google infrastructure, your browser may establish a direct connection to Google. This may involve processing of your IP address, browser and device information, time of access and the page visited.

Google services may also use technical domains such as csp.withgoogle.com for security and Content Security Policy reporting. From a data protection perspective, such connections are attributed to the Google service that triggered them and follow the same legal basis.

Where the integration is not technically necessary, it takes place only after your consent pursuant to Art. 6(1)(a) GDPR.

11.4 Google Web Fonts

Where fonts are dynamically loaded from Google servers, your browser establishes a connection to Google and your IP address is transmitted. Dynamic loading takes place only after your consent pursuant to Art. 6(1)(a) GDPR. If the fonts are hosted locally on our server, no connection to Google takes place for this purpose.

Further information: Google Fonts FAQ

11.5 Font Awesome

Font Awesome provided by Fonticons, Inc., USA, may be used to display icons and fonts consistently. If Font Awesome resources are retrieved dynamically, the provider will technically receive, in particular, your IP address and browser information.

External retrieval takes place only after your consent pursuant to Art. 6(1)(a) GDPR. If the required files are hosted locally, no data is transmitted to Fonticons as a result of loading the page.

Further information: Font Awesome Privacy Policy

12. Google reCAPTCHA

Google reCAPTCHA may be used to protect forms against automated input and abuse. The provider is Google Ireland Limited. reCAPTCHA analyses technical and usage-related information to distinguish human input from automated access. This may include your IP address, device and browser information, mouse and keyboard interactions and other data required by Google for the security check.

The service is activated only where the relevant form uses it and the required consent has been given. The legal bases are Art. 6(1)(a) GDPR and, where device information is accessed, Section 25(1) TDDDG. Transfers to Google LLC in the United States may be based on the EU-U.S. Data Privacy Framework.

Further information: Google Privacy Policy

13. Careers portal and applications via Personio

13.1 Embedding the Personio careers portal

On our careers page, we embed the job listing provided by Personio via an iframe. The provider is Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. When the careers portal is loaded, technical data such as your IP address, browser type and version, operating system, language settings, timestamp and requested content may be processed.

Where cookies or device storage access are technically necessary for operating the careers portal, this is based on Section 25(2) TDDDG. Non-essential analytics or performance technologies should be activated only after the consent required for those technologies.

13.2 Processing applicant data

If you apply through Personio, by e-mail or through another channel, we process the data required for the application process. This may include your name, e-mail address, telephone number, professional history, application documents, interview notes and voluntarily provided profiles such as LinkedIn or GitHub.

The purpose is to conduct the recruitment process and decide whether to establish an employment relationship. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) and, additionally, Art. 6(1)(b) GDPR. Where you voluntarily consent to additional processing, for example inclusion in a talent pool, the legal basis is Art. 6(1)(a) GDPR.

Applicant data is accessible only to persons involved in the relevant selection and hiring process. Personio processes applicant data on our behalf on the basis of a processing agreement pursuant to Art. 28 GDPR.

If no employment relationship is established, we generally retain the application data for up to 180 days after completion of the recruitment process, in particular to defend potential legal claims. Longer storage takes place only where there is a legal reason or where you have given separate consent. Data in a talent pool is retained in accordance with the consent given for that purpose and deleted after withdrawal or expiry of the specified period.

Further information: Personio privacy notice for the FMC careers portal

14. Your rights

Subject to the statutory requirements, you have in particular the following rights:

The Saxon Commissioner for Data Protection and Transparency is generally the competent supervisory authority for Ferroelectric Memory GmbH. However, you may also contact any other supervisory authority competent under Art. 77 GDPR.

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. Where personal data is processed for direct marketing, you may object to that processing at any time without having to state particular grounds.

15. Updates to this Privacy Policy

This Privacy Policy is current as of 16 September 2026. Technical developments of our website, new functions, changes of service providers or changes in legal or regulatory requirements may make updates necessary. The current version is available on our website.

https://www.ferroelectric-memory.com/privacy-policy/