Privacy Policy

⚠️ This translation is provided for information only. The German version is legally authoritative.

1. Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data here refers to all data with which you can be personally identified.

1.2 Person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

2. Data collection when visiting our website

For purely informational use of our website, that is, if you do not register or otherwise provide us with information, we only collect those data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Used browser
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to retrospectively review the server log files if there are concrete indications of illegal use.

3. Cookies

3.1 Our website completely refrains from using cookies. We do not use cookies, neither technically necessary nor optional cookies for analysis or marketing purposes. This means that no small text files will be stored on your device when you visit our website.

3.2 By foregoing cookies, we can offer you a particularly privacy-friendly user experience without compromising your privacy. Therefore, you do not need to confirm cookie banners or adjust cookie settings.

3.3 Since our website does not use cookies, no consent is required in accordance with Art. 6 para. 1 lit. a GDPR. The functionality of our website is not impaired by the omission of cookies.

3.4 Should you still notice cookies in your browser that could be related to your visit to our website, these come from third parties (e.g., embedded videos or external services), about which we inform you in the corresponding sections of this privacy policy.

For language selection, we store the selected language as a functional setting in your browser's sessionStorage. The setting applies only to the current tab and is deleted when it is closed. It is not used for tracking and is not stored across sessions.

4. Contact

As part of contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen in the respective contact form. These data are used and stored exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been finally processed. This is the case when the circumstances indicate that the matter in question has been finally clarified and provided that no statutory retention obligations prevent this.

5. Data processing when opening a customer account and for contract processing

According to Art. 6 para. 1 lit. b GDPR, personal data continue to be collected and processed when you provide them to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the aforementioned address of the controller. We store and use the data you provide for contract processing. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use of data by us has been reserved.

6. Use of your data for direct advertising

6.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have explicitly confirmed that you agree to receive the newsletter. We will then send you a confirmation email, asking you to confirm by clicking on a corresponding link that you want to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store the IP address provided by your Internet Service Provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when registering for the newsletter is used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending an appropriate message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this statement.

6.2 Newsletter delivery via MailChimp

The sending of our email newsletters is carried out by the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer is carried out in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a MailChimp server in the USA and stored there.

MailChimp uses this information to send and statistically analyze the newsletters on our behalf. For the analysis, the sent emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows it to be determined whether a newsletter message was opened and which links, if any, were clicked. Using the web beacons, Mailchimp automatically generates general, non-personal statistics about the response behavior to newsletter campaigns. Based on our legitimate interest in the statistical analysis of newsletter campaigns to optimize advertising communication and better align with recipient interests, data from the respective newsletter recipient is also collected (email address, time of retrieval, IP address, browser type, and operating system) and processed via the web beacons in accordance with Art. 6 Para. 1 lit f GDPR. These data allow for an individual conclusion about the newsletter recipient and are processed by Mailchimp for the automated creation of a statistic that shows whether a specific recipient has opened a newsletter message.

If you want to disable data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. MailChimp may also use this data in accordance with Art. 6 para. 1 lit. f GDPR based on its own legitimate interest in the needs-based design and optimization of the service as well as for market research purposes, for example, to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to contact them itself or to pass it on to third parties.

To protect your data in the USA, we have concluded a data processing agreement ("Data-Processing-Agreement") with MailChimp based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following internet address if you are interested: https://mailchimp.com/legal/data-processing-addendum/

MailChimp is furthermore certified under the US-European data protection agreement "Privacy Shield" and thus commits to complying with EU data protection regulations. You can view MailChimp's privacy policy here:

7. Data processing for order processing

For the processing of your order, we work with the following service provider(s), who assist us entirely or partially with the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

The personal data we collect is passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, if this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8. Tools and Miscellaneous

8.1 Web Analysis by Plausible Analytics

This website uses Plausible Analytics, a privacy-friendly web analytics service from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia (https://plausible.io/). Plausible Analytics allows us to analyze the use of our website without collecting personal data or violating the privacy of our visitors.

Data processing by Plausible Analytics:

• There are no cookies stored by law or personal data
• IP addresses are not recorded or stored
• There is no tracking across several websites instead
• All data is recorded anonymously and in an aggregated manner
• The processing is carried out exclusively for statistical purposes
• Opt-out mechanism: If you disable analytics, a local storage entry ("plausible_ignore") will be set in your browser to respect your decision. This entry contains no personal data and is used solely to prevent further data collection.

Collected information: Plausible Analytics collects only aggregated and anonymized data about page views, referring websites, browsers and operating systems used, as well as the approximate geographic area (only country/region). This information allows us to understand and improve the usage and performance of our website.

Legal basis: The processing is carried out on the basis of our legitimate interest in the analysis and optimization of our website in accordance with Art. 6(1)(f) GDPR.

Data location: All data collected by Plausible Analytics is processed and stored exclusively on servers within the European Union.

Your control over data processing: You have the possibility at any time to object to the statistical recording of your website visits. Please use the following setting option for this:

Further information about Plausible Analytics and its data protection practices can be found in Plausible's privacy policy: https://plausible.io/privacy

8.2 Use of the Hypercode AI Assistant

On our website, we offer an AI Assistant with which you can voluntarily ask questions about Hypercode, our services, projects, and website content. When you submit a message, we process the content of your input, the generated response, a technical request ID, if applicable an ID for assigning follow-up questions, as well as technical connection data.

The processing is carried out to respond to your inquiry, to technically provide the functionality, to prevent abuse, and to check the quality of the service. The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR. If your inquiry is directed at pre-contractual communication, Art. 6 para. 1 lit. b GDPR may also be applicable.

For the provision of the AI Assistant, we use Supabase for database and edge function features as well as OpenRouter for generating responses and embeddings. Requests to OpenRouter are processed with Zero Data Retention (ZDR) enabled through its EU regional routing. ZDR limits processing to endpoints that do not retain prompts or responses, while EU regional routing ensures that these AI requests are processed exclusively by EU-hosted servers. To prevent abuse, IP-based rate limiting can be implemented via Upstash.

Further information about the service providers used can be found at: Supabase Privacy, Supabase DPA, OpenRouter Zero Data Retention and Upstash Legal Documents.

Chat contents are generally stored for 14 days and then deleted or anonymized. Short-lived status data to display the processing progress are deleted after the request is completed. Please do not enter confidential information, trade secrets, or special categories of personal data into the AI Assistant.

The AI assistant does not make automated decisions with legal effect or comparable significant impact and does not create user profiles. Answers may be incomplete or incorrect.

9. Rights of the data subject

9.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:

• Right of access pursuant to Article 15 GDPR: You have, in particular, the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed about the safeguards pursuant to Article 46 GDPR in the event of the transfer of your data to third countries;
• Right to rectification according to Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored with us;
• Right to erasure according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of the data you dispute is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise, or defense of legal claims, after we no longer need these data for the purposes for which they were collected, or if you have objected for reasons of your particular situation, as long as it is not yet determined whether our legitimate grounds prevail;
• Right to information pursuant to Art. 19 GDPR: If you have exercised the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transfer to another controller, insofar as this is technically feasible;
• Right to withdraw given consents pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw a consent given for the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the affected data immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal;
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the place of the alleged infringement.

9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS WITHIN THE SCOPE OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL CEASE THE PROCESSING OF THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

10. Duration of storage of personal data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and – if applicable – additionally based on the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on an explicit consent in accordance with Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purposes of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise indicated by the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: July 7, 2026