Privacy Policy
1. Privacy at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy set out below.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Notice regarding the responsible party" section of this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This may, for example, be data you enter into a contact form.
Other data is collected automatically, or after you consent to its collection, when you visit the website, by our IT systems. This is mainly technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders, or other requests for services.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and any other questions on data protection.
2. Hosting
External hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested accordingly, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG.
We use the following hosting and backend service providers:
Lovable (website hosting & deployment)
The provider is Lovable Labs Incorporated (formerly GPT Engineer AB), Sveavägen 66, 111 34 Stockholm, Sweden. Lovable provides the infrastructure for building, hosting, and delivering this website. Upon access, technical access data (including IP address, timestamp, accessed URL, user agent) is processed in order to deliver the website and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR. More information: https://lovable.dev/privacy.
Supabase (database, auth, storage & backend)
The provider is Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992. We use Supabase to operate our database (PostgreSQL), authentication, file storage, and server functions for the contact form, newsletter, and editorial area (case studies, magazine). The form data you enter, along with technical metadata, is processed. The servers are located within the EU (Frankfurt am Main region). The legal basis is Art. 6(1)(b) and (f) GDPR. More information: https://supabase.com/privacy.
Data processing agreements
We have concluded data processing agreements (DPAs) pursuant to Art. 28 GDPR with the aforementioned providers. These agreements ensure that our service providers only process personal data of our website visitors according to our instructions and in compliance with the GDPR.
3. General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various pieces of personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for.
Please note that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Notice regarding the responsible party
The party responsible for data processing on this website is:
HYPE:TECH GmbH
Gräfin-Monika-Straße 33
88367 Hohentengen, Germany
Represented by:
Theo-Anthony Hulok
Konstantin Koehler
Phone: +49 7572 4023981
Email: hello@hype-tech.org
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods).
General information on the legal basis for data processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required to fulfil a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Recipients of personal data
As part of our business activities, we work with various external parties. In some cases, the transfer of personal data to these external parties is necessary. We only disclose personal data if this is required for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest under Art. 6(1)(f) GDPR in the disclosure, or if another legal basis permits the disclosure of data.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place where the alleged violation occurred.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format.
Access, rectification, and deletion
Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, if applicable, a right to rectification or deletion of this data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose.
SSL/TLS encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock icon in your browser bar.
Objection to promotional emails
We hereby object to the use of contact data published within the scope of the legal notice obligation for the purpose of sending unsolicited advertising and information materials.
4. Data collection on this website
Cookies and local storage
Our website uses only technically necessary storage technologies. We store your cookie consent in the local storage (localStorage) of your browser (key hypetech_cookie_consent). If you log in to our admin area, additional auth cookies from our backend provider Supabase are set to maintain your session.
The legal basis is Art. 6(1)(f) GDPR in conjunction with § 25(2) no. 2 TDDDG (strictly necessary). Details on the individual storage entries can be found in our Cookie Policy (EU).
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The data is stored in our Supabase database within the EU. The legal basis is Art. 6(1)(b) GDPR (initiation of a contract) as well as Art. 6(1)(f) GDPR (legitimate interest).
Newsletter
If you would like to subscribe to the newsletter offered on the website, we require an email address from you. Registration takes place via a double opt-in procedure. Storage takes place in our Supabase database. The legal basis is your consent (Art. 6(1)(a) GDPR). Consent can be revoked at any time, e.g. via the unsubscribe link at the end of every newsletter.
5. Social media
Instagram & LinkedIn
This website contains links to our profiles on Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). These are simple links only — you will not leave our website until you click on them. No connection to the providers' servers is made beforehand.
6. Your rights
To exercise your rights to information, rectification, deletion, restriction, data portability, or objection, please contact us by email at hello@hype-tech.org.