01Introduction
hypercon solutions GmbH (we, us, our) is committed to protecting the privacy of visitors to our website. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have regarding your data under the EU General Data Protection Regulation (GDPR) and applicable German data protection law.
This policy applies to www.hypercon-solutions.com and all pages hosted under it, including our contact forms, landing pages, and any resources (e.g. webinar or event registration pages) offered through this site.
02Data Controller
The controller responsible for data processing on this website is:
| Company | hypercon solutions GmbH |
|---|---|
| Address | Kriegsstraße 89 76133 Karlsruhe, Germany |
| Email for privacy matters | privacy@hypercon-solutions.com |
If you have questions about this policy or how your data is handled, or if you wish to make a complaint, please contact us at the email address above.
03Data Protection Officer
We have appointed an external data protection officer:
| Company | IITR Datenschutz GmbH |
|---|---|
| Contact | Dr. Sebastian Kraska |
| Address | Marienplatz 2 80331 Munich, Germany |
| email@iitr.de | |
| Phone | +49 89 18917360 |
You can also contact our data protection officer directly and confidentially with questions or complaints.
04What Personal Data We Collect
Data you provide directly, when you:
- Submit our contact form: first and last name, company name, email address, and your message (mandatory); job title, country/region, and phone number (optional).
- Register for a webinar, event, or download a resource via a landing page: name, email, company, job title, and any other fields included on that specific form.
- Subscribe to our newsletter: company name and email address (mandatory); first and last name, job title, and country/region (optional). We ask for your company because our newsletter is aimed at business customers. You can also sign up by ticking the optional box on our contact form.
Mandatory fields are marked with an asterisk (*). We need them to handle your inquiry or send you the newsletter; without them we cannot do so. All other information is voluntary and is used only where it helps us handle your request or send you relevant content.
Data collected automatically, when you browse the site:
- Technical data: IP address, browser type and version, device type, operating system, referring URL.
- Usage data: pages visited, time spent on pages, links clicked, and the campaign or source that brought you to the site (e.g. a link in a LinkedIn post or newsletter).
- Download data: when you download a file, e.g. a brochure from a landing page, the requested file and the access status (e.g. file transferred, file not found).
- Cookie identifiers, as described in Section 6.
We do not collect special categories of personal data (e.g. health, religion, political opinions) through this site, and forms should not be used to submit such data.
05Purposes and Legal Basis for Processing
| Purpose | Data used → legal basis |
|---|---|
| Responding to contact-form inquiries | Name, company, email, message, and any optional details you provide (job title, country/region, phone) → Art. 6(1)(b) GDPR (steps before or under a contract); otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering business inquiries) |
| Webinar or event registration | Name, email, company, registration details → Art. 6(1)(b) GDPR; marketing follow-up only with consent, Art. 6(1)(a) GDPR |
| Newsletter (news and updates) | Email address and company, plus name, job title, and country/region if provided, from the newsletter form or the optional box on the contact form; whether you open the newsletter and click links in it → Art. 6(1)(a) GDPR (your consent). You can unsubscribe at any time via the link in every newsletter. |
| Operating and securing the website, storing your cookie choice | IP address, browser and device data, server logs, consent cookie → Art. 6(1)(f) GDPR (our legitimate interest in operating the website securely and reliably) and § 25(2) No. 2 TDDDG (strictly necessary) |
| Website analytics and company identification (HubSpot) | Cookie identifiers, pages visited, time on page, referring page, browser and device data, IP address. HubSpot also uses the IP address to show us which company a visit comes from (company name, industry, size), not who you are personally → Art. 6(1)(a) GDPR and § 25(1) TDDDG: consent via our cookie banner (Analytics) |
| External content: videos (YouTube), map (Google Maps), LinkedIn posts | IP address, browser and device data, the page you are on; the provider may set its own cookies → Art. 6(1)(a) GDPR and § 25(1) TDDDG: consent via our cookie banner (Functionality) or by clicking the play or load button on the item |
| Legal obligations | As required → Art. 6(1)(c) GDPR |
06Cookies and Similar Technologies
We use HubSpot's cookie banner to ask for your consent. Necessary cookies are always active because the website cannot work without them. All other categories are only set after you consent, and you can change your choice at any time.
| Necessary | Stores your cookie choice and keeps the website secure and working, e.g. the HubSpot consent cookie __hs_cookie_cat_pref. Always active. |
|---|---|
| Analytics | Shows us how visitors use the website so we can improve it. HubSpot analytics cookies: __hstc, hubspotutk, __hssc, __hssrc. Only with consent. |
| Functionality | Loads external content: videos from YouTube, the map from Google Maps, and LinkedIn posts. These providers receive your IP address and may set their own cookies. Only with consent. |
| Advertisement | Not used. We do not use advertising or retargeting cookies. If this changes, we will update this policy and the cookie banner first. |
Cookies we use.
| Cookie | Category · purpose · duration |
|---|---|
| __hs_cookie_cat_pref | Necessary · stores your cookie choice · 6 months |
| __hs_opt_out | Necessary · stores your decision to decline cookies · 6 months |
| __cf_bm | Necessary · bot protection by HubSpot's network provider · 30 minutes |
| __cfruid, __cfuvid | Necessary · rate limiting by HubSpot's network provider · end of session |
| __hstc | Analytics · main visitor tracking cookie · 6 months |
| hubspotutk | Analytics · recognises returning visitors · 6 months |
| __hssc | Analytics · tracks the current session · 30 minutes |
| __hssrc | Analytics · detects a new browser session · end of session |
Cookies set by YouTube, Google Maps, and LinkedIn are controlled by those providers. Their names and durations are listed in the providers' privacy policies (see Section 8).
External content without consent. If you do not allow Functionality, videos, the map, and LinkedIn posts are replaced by a placeholder, and nothing is loaded from the provider. Only when you click the play or load button on an item is that single item loaded; the click counts as your consent for that item. YouTube videos are embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com).
Fonts. All fonts are hosted together with this website. Your browser does not connect to Google Fonts or any other font service.
You can change or withdraw your consent at any time via the Cookie settings link in the website footer. You can also delete cookies at any time in your browser settings.
07How We Use Cookie Consent Data
HubSpot's consent tool stores your choice in a cookie (__hs_cookie_cat_pref) so that the website respects it on later visits. As long as you have not consented to Analytics, no HubSpot analytics cookies are set. As long as you have not consented to Functionality or clicked a placeholder, no content is loaded from YouTube, Google Maps, or LinkedIn.
08Recipients of Your Data / Data Processors
We use the following service providers. Some process data on our behalf; others act as independent controllers for their own purposes.
- HubSpot (HubSpot Ireland Limited, Dublin, Ireland; parent company HubSpot, Inc., USA): website hosting, forms, CRM, email, and cookie consent tool. HubSpot processes data on our behalf under a data processing agreement. Our website data is hosted in HubSpot's EU data centre. Privacy policy: legal.hubspot.com/privacy-policy; sub-processors: legal.hubspot.com/sub-processors-page.
- YouTube (Google Ireland Limited, Dublin, Ireland): embedded videos. Loaded only with your consent (Functionality) or after you click play. YouTube then receives your IP address, browser and device data, and the page you are on, and may set cookies. Google acts as an independent controller and may transfer data to the USA. Privacy policy: policies.google.com/privacy.
- Google Maps (Google Ireland Limited, Dublin, Ireland): the map on our contact page. Loaded only with your consent (Functionality) or after you click "Load map"; otherwise the same as YouTube.
- LinkedIn (LinkedIn Ireland Unlimited Company, Dublin, Ireland): embedded LinkedIn posts. Loaded only with your consent (Functionality) or after you click to load the post. LinkedIn acts as an independent controller. Privacy policy: linkedin.com/legal/privacy-policy.
Where data is transferred to countries outside the EU/EEA, such as the USA, this is based on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses or, in exceptional cases, on a derogation under Art. 49 GDPR (e.g. where the transfer is necessary to perform a contract with you).
We do not use Google Fonts, Vimeo, advertising pixels, or live chat.
09Data Retention
- Inquiries and registrations that do not lead to a business relationship are deleted 24 months after our last contact with you.
- If a business relationship develops, we keep your data for as long as the relationship lasts. Business correspondence is then kept for the periods required by German commercial and tax law (generally 6 years, accounting records up to 10 years, § 257 HGB, § 147 AO) and deleted afterwards.
- Newsletter: we keep your data until you unsubscribe. After that, we keep only a record of your consent and your unsubscription, as proof and so that we respect your choice.
- Server logs, including IP addresses, are processed by HubSpot as our hosting provider for security purposes and deleted in line with HubSpot's data processing agreement (legal.hubspot.com/dpa). If there are indications of an attack or misuse, they may be kept longer until the matter has been resolved.
- Your cookie choice is stored in the consent cookie for 6 months, unless you delete it earlier. Analytics cookies expire after 30 minutes to 6 months (see the list in Section 6). You can delete all cookies at any time in your browser settings.
- You can ask us to delete your data earlier at any time (see "Your Rights").
10Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectify inaccurate or incomplete data (Art. 16)
- Erase your data (right to be forgotten) (Art. 17)
- Restrict processing under certain conditions (Art. 18)
- Data portability: receive your data in a structured, commonly used, machine-readable format (Art. 20)
- Object to processing based on legitimate interest or for direct marketing purposes, at any time (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)), including withdrawing cookie consent via the Cookie Settings link
- Lodge a complaint with a supervisory authority. As we are based in Baden-Württemberg, the relevant authority is: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg, Heilbronner Str. 35, 70191 Stuttgart, Germany.
To exercise any of these rights, contact us at privacy@hypercon-solutions.com.
11Data Security
We use appropriate technical and organizational measures (including those provided by HubSpot's infrastructure) to protect your personal data against unauthorized access, loss, or misuse.
12Children's Privacy
Our website and services are directed at business professionals and are not intended for individuals under the age of 16.
13Changes to This Policy
We may update this Privacy Policy from time to time, for example when we introduce new tracking tools such as advertising pixels. The date in the fact row above reflects the last update.