Privacy Policy
1. Data Protection at a Glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section “Information on the responsible party” in this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This may be data that you send to us by email or via the contact workflow on this website. Other data is collected automatically or after your consent when you visit the website by our IT systems. This is primarily technical data such as browser, operating system, or time of page access.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to answer your inquiry.
What rights do you have regarding your data?
You have the right to receive information free of charge about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request correction or deletion of this data, to restrict processing, to object to processing, and to lodge a complaint with the competent supervisory authority.
2. Hosting
External hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact requests, meta and communication data, contract data, names, website access data, and other data generated via a website.
The external hosting is carried out for the purpose of fulfilling contracts with potential and existing customers and in the interest of secure, fast, and efficient provision of our online offer by a professional provider. Our host will only process your data to the extent necessary to fulfill its service obligations and follow our instructions with regard to this data.
We use Hostinger as hosting provider. The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable presentation and secure operation of this website.
Data processing agreement
We have concluded or will conclude a data processing agreement with the provider named above. This is a contract required by data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Notes and Required Information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data may be collected. This privacy policy explains what data we collect, how we use it, and for what purpose.
Information on the responsible party
The responsible party for data processing on this website is:
Hyfion UG (haftungsbeschränkt) An den Äckern 2 38446 Wolfsburg Germany
E-mail: kontakt@hyfion.com
Storage duration
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have legally permissible reasons for storing it.
General notes on the legal basis for data processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If your data is required for the fulfillment of a contract or for pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. If data processing is necessary to fulfill a legal obligation, processing is based on Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Recipients of personal data
In the course of our business activities, we work with various external parties. Personal data is only transferred if this is necessary for contract fulfillment, if we are legally obliged to do so, if we have a legitimate interest, or if another legal basis permits the transfer.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke consent that you have already given at any time. The legality of data processing carried out before revocation remains unaffected by the revocation.
Right to object to data collection in special cases
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged violation.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format.
Information, correction, and deletion
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing. You also have the right to correction or deletion of this data.
Right to restriction of processing
You have the right to request the restriction of processing of your personal data. You can contact us at any time for this purpose.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the lock symbol in your browser line.
4. Data Collection on This Website
Cookies and local storage
This website is designed to be data-minimal and does not use tracking or analytics cookies. The only information stored on your device is a technically necessary entry in your browser's local storage that remembers whether you have dismissed our cookie notice. This entry contains no personal data, is not transmitted to us or to any third party, and you can remove it at any time by clearing your browser data. If technically necessary cookies are introduced later, they will be documented here.
Contact form
If you send us inquiries via the contact form, your details from the inquiry, including the contact details you provide there, will be processed by us for the purpose of handling the inquiry and in case of follow-up questions. Your message is transmitted to us by e-mail via our hosting provider; it is not stored in a database on this website. The processing is based on Art. 6(1)(b) GDPR, insofar as your inquiry is related to the performance of a contract or pre-contractual measures, and otherwise on our legitimate interest in the effective handling of inquiries (Art. 6(1)(f) GDPR).
Inquiry by email, telephone, or fax
If you contact us by email, telephone, or fax, your inquiry including all resulting personal data will be stored and processed by us for the purpose of processing your request. We do not pass this data on without your consent unless a legal basis permits it.
Source: eRecht24 template structure, adapted to this website.
