We at Cyberon UG value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our website, services, and communication channels, in accordance with the General Data Protection Regulation (GDPR/DSGVO) and the German Telecommunications and Telemedia Data Protection Act (TTDSG).
Data Collection and Use
We collect and process personal data only when necessary to provide our services or comply with legal obligations.
Types of data processed
- Inventory data (e.g., name, address)
- Contact details (e.g., email address, telephone number)
- Content data (e.g., text entries, photographs, videos)
- Usage data (e.g., visited pages, access times)
- Meta/communication data (e.g., device information, browser type, IP address)
- Location data
Categories of data subjects
Visitors and users (in the following referred together as “users”)
Purpose of the processing
- Contractual services, invoicing, and account management
- Responding to contact requests and communication with users
- Safety measures
- Reach Measurement/Direct Marketing
- Tracking
- Geolocation services and website analytics
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: Where you have explicitly agreed, in accordance with Art. 6(1)(a) and Art. 7 GDPR.
- Contractual Necessity: When processing is required to provide our services or respond to inquiries, in accordance with Art. 6(1)(b) GDPR.
- Legal Obligation: Where processing is necessary to comply with statutory duties, in accordance with Art. 6(1)(c) GDPR.
- Legitimate Interests: For purposes such as website security, business management, or service improvement, in accordance with Art. 6(1)(f) GDPR.
- Protection of Vital Interests: Where necessary to protect the life or physical integrity of individuals, in accordance with Art. 6(1)(d) GDPR.
Security of Personal Data
We use HTTPS/SSL encryption to secure data during transmission. We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures include:
- Secure server and data storage
- Restricted physical and electronic access
- Monitoring of potential risks and threats
- Regular review and update of security practices
- Regular backups
- Strong password policies
Rights of Data Subjects
Under GDPR, you have the following rights:
- Right of Access: You may request confirmation whether we process your data and receive a copy of the data (Art. 15 GDPR).
- Right to Rectification: You may request correction of inaccurate or incomplete data (Art. 16 GDPR).
- Right to Erasure: You may request deletion of your personal data, subject to legal obligations (Art. 17 GDPR).
- Right to Restrict Processing: You may request limited processing under certain circumstances (Art. 18 GDPR).
- Right to Data Portability: You may receive your personal data in a structured, machine-readable format (Art. 20 GDPR).
- Right to Withdraw Consent: You may withdraw previously granted consent at any time (Art. 7(3) GDPR).
- Right to Object: You may object to certain data processing, including processing for direct marketing purposes (Art. 21 GDPR).
- Right to Lodge Complaint: You may contact the relevant supervisory authority in case of concerns (Art. 77 GDPR).
Deletion of Data
We delete personal data as soon as it is no longer necessary for the purposes for which it was collected, unless legal retention obligations require otherwise.
- Contractual or service-related data: deleted after the completion of the service or fulfillment of the contract, unless retention is required for statutory warranty or accounting obligations.
- Accounting and business records: retained according to German legal requirements (generally 6 years for commercial letters and 10 years for tax-related documents).
- Operational data (e.g., log files, website usage data): regularly reviewed and deleted when no longer required, typically within [7–14 days for logs].
- Order processing data from clients: deleted according to the contractual agreement and statutory requirements after the end of the processing.
We regularly review the necessity of storing personal data and ensure that unnecessary data are deleted or processed in a restricted manner in accordance with Articles 17 and 18 GDPR.
Use of Cookies and Log Data
We collect minimal technical data about every access to the server on which this service is located (server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited site), IP address and the requesting provider.
For security reasons, log file information is stored for a maximum of 7 days and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.
Contact Information
For any questions about your personal data or this Privacy Policy, please contact:
Cyberon UG
contact@cyber-on.de
Kehler Str. 3
68239 Mannheim
Privacy Policy – Service Specific Sections
Hosting and Server Log Files
Our website is hosted by Hostinger International Ltd. The hosting provider processes personal data necessary to provide and maintain the website infrastructure.
When you visit our website, the hosting provider automatically collects and stores information in so-called server log files. These may include:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- Requested pages or files
- Amount of data transferred
The processing of this data is based on our legitimate interest in maintaining the stability, security, and functionality of the website in accordance with Art. 6(1)(f) GDPR.
Contact Form
If you contact us via a contact form on our website, the information you provide will be stored in order to process your request and respond to follow-up questions.
The following data may be processed:
- Name
- Email address
- Message content
- Any additional information voluntarily provided
The processing of this data is based on:
- Art. 6(1)(b) GDPR if the request relates to contractual matters
- Art. 6(1)(f) GDPR for general communication inquiries
The data will be deleted once the request has been resolved unless legal retention obligations require otherwise.
Newsletter / Mailing List
If you subscribe to our newsletter, we will use your email address to send you information about our services or updates.
Subscription occurs through a double opt-in procedure, meaning that you will receive an email asking you to confirm your subscription.
Data processed may include:
- Email address
- Date and time of registration
- IP address used during registration
The legal basis for this processing is Art. 6(1)(a) GDPR (consent).
You can withdraw your consent and unsubscribe from the newsletter at any time using the unsubscribe link included in every email.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited.
Google Analytics uses cookies and similar technologies to analyze how users interact with the website.
The following data may be processed:
- IP address (shortened/anonymized)
- Browser information
- Device information
- Pages visited
- Time spent on pages
- Referrer URL
The legal basis for this processing is Art. 6(1)(a) GDPR (consent), which is obtained via the cookie consent banner.
Google may transfer data to servers in the United States. Such transfers are based on EU Standard Contractual Clauses to ensure an adequate level of data protection.
You can prevent the collection of your data by Google Analytics by installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout
Google Ads
We use Google Ads, an online advertising service provided by Google Ireland Limited.
Google Ads allows us to display advertisements and measure their effectiveness through conversion tracking.
If you reach our website via a Google advertisement, a cookie may be placed on your device.
The legal basis for the processing is Art. 6(1)(a) GDPR (consent).
Further information about data processing by Google can be found here: https://policies.google.com/privacy
Google Maps
Our website uses Google Maps, a mapping service provided by Google Ireland Limited.
When you access pages containing Google Maps, your IP address and other technical data may be transmitted to Google servers.
The use of Google Maps helps us provide geographic information and improve the usability of our website.
The legal basis for the use of Google Maps is Art. 6(1)(a) GDPR (consent). More information: https://policies.google.com/privacy
YouTube
Our website may embed videos from YouTube, a service provided by Google Ireland Limited.
When you visit a page containing an embedded YouTube video, a connection to YouTube servers may be established. This may result in the transmission of personal data such as:
- IP address
- Device information
- Pages visited
If you are logged into your YouTube account, YouTube may associate your browsing behavior with your profile.
Further information about data processing by YouTube can be found here: https://policies.google.com/privacy
