Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
hilynx GmbH
Hermann-Blenk-Strasse 22a
38108 Braunschweig
Germany
Represented by: Timo Nels, Eduard Klein
Commercial register: HRB 211033, Local Court (Amtsgericht) of Braunschweig
Phone: +49 151 50575815
Email: hi@hilynx.de
2. General Information on Data Processing
We process personal data only to the extent necessary to provide our website, to handle enquiries, to carry out pre-contractual measures, to conclude and perform contracts, to comply with legal obligations, or on the basis of your consent.
Which data is processed in an individual case depends on which functions and services you use. Providing certain personal data may be necessary for us to handle an enquiry. Without this data, we may not be able to process your request.
Personal data is disclosed to third parties only where there is a legal basis for doing so, where it is necessary for the performance of a contract, where we are legally obliged to do so, where you have given your consent, or where we have a legitimate interest and your interests or fundamental rights do not override it.
Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.
3. Website Access and Server Log Files
When you access our website, our hosting provider IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany, automatically processes information transmitted by your browser. This may include in particular: IP address, date and time of access, page accessed, volume of data transferred, referrer URL, browser type and version, operating system used, and the requesting provider.
This processing takes place in order to provide the website technically, ensure system security, prevent misuse, and analyse errors. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and stable operation of our website.
We have concluded a data processing agreement with IONOS SE pursuant to Art. 28 GDPR. In this context, IONOS processes personal data exclusively on our behalf and in accordance with our instructions.
Server log files are stored only for as long as is necessary for the purposes stated above and are then deleted or anonymised, unless longer storage is required to investigate security incidents.
4. Cookies
Our website uses strictly necessary cookies only. Cookies are small text files stored on your device. We do not use analytics, tracking, or marketing cookies. Consent is therefore not required for the cookies we use.
Strictly necessary cookies are used on the basis of Section 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act). The associated processing of personal data is carried out on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically secure and functional operation of our website and in providing the language version you have selected.
Multilingual Website (WPML)
We use the WPML plugin (OnTheGoSystems Ltd.) to provide our website in several languages. Translations are delivered from our own server; your personal data is not transmitted to the plugin provider when you visit our website.
WPML stores your language selection in a cookie so that the language you have chosen is retained as you continue to browse the website.
This cookie contains only the code of the selected language and serves exclusively to provide the service you have expressly requested. Your usage behaviour is not analysed and no user profiles are created.
You can prevent cookies from being set at any time via your browser settings, or delete cookies that have already been set. In this case, your language selection may not be saved.
5. Contacting Us
If you contact us by email, telephone, or by any other means, we process the data you provide in order to handle your enquiry. This may include in particular your name, email address, telephone number, company, subject line, the content of your message, and the time of contact.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures. In all other cases, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in handling and documenting your enquiry. Where you have expressly given your consent, the legal basis is Art. 6 (1) (a) GDPR.
The data will be deleted once your enquiry has been dealt with conclusively and no statutory retention obligations or legitimate interests in further storage exist.
6. Recipients of Personal Data
Personal data is disclosed only to the extent necessary to fulfil the purposes stated above or where a legal basis exists. Recipients of personal data may include in particular:
IT and hosting providers, insofar as they provide or maintain the website or other technical infrastructure
Tax advisors, accountants, banks, and other bodies, insofar as this is necessary for invoicing, payment processing, or compliance with legal obligations
Public authorities or courts, insofar as we are legally obliged to disclose data or where this is necessary to assert or defend legal claims
Where service providers process personal data on our behalf, we conclude the required data protection agreements with them, in particular data processing agreements pursuant to Art. 28 GDPR.
7. Transfers to Third Countries
Transfers of personal data to countries outside the European Union or the European Economic Area are not currently envisaged. Should such a transfer take place in an individual case, it will only occur if the legal requirements are met — in particular where an adequacy decision of the European Commission exists for the third country concerned, where appropriate safeguards within the meaning of Art. 46 GDPR have been agreed, or where you have expressly consented.
8. Storage Period
We store personal data only for as long as is necessary for the respective processing purposes. Where statutory retention obligations exist — in particular under commercial or tax law — we store the data concerned for the duration of those obligations.
We delete data from enquiries once the enquiry has been dealt with conclusively, provided that no statutory retention obligations or legitimate interests in further storage exist.
Data processed on the basis of consent is stored until you withdraw your consent or the purpose of the processing ceases to apply, unless a legal obligation or a legitimate interest in further storage exists.
9. Your Rights
Subject to the statutory requirements, you have the right of access to the personal data we process pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to data portability pursuant to Art. 20 GDPR, and the right to object to certain processing pursuant to Art. 21 GDPR.
Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you can contact us at any time using the contact details given above.
10. Right to Object
Where we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing for the purpose of such marketing. In that case, the personal data will no longer be processed for these purposes.
11. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law. The competent authority is in particular that of your habitual residence, your place of work, or the place of the alleged infringement.
For hilynx GmbH, the competent authority is generally the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).
12. Security and SSL/TLS Encryption
We take appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation, and unauthorised access. For security reasons and to protect the transmission of confidential content, our website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar begins with “https://”.
Please note that data transmission over the internet, particularly communication by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
13. Updates to this Privacy Policy
We reserve the right to amend this privacy policy if our data processing activities change or if legal requirements make this necessary. The current version published on our website applies.
Last updated: 07/2026
This is a translation of the German original. In the event of any discrepancy, the German version shall prevail.