Legal

Privacy policy

This English translation is provided for convenience only. The German version is legally binding: Datenschutzerklärung

This website does not set cookies, does not embed third-party services and does not analyze your behavior. Whatever data is nonetheless generated is described here.

Controller

The controller responsible for the processing of personal data on this website is:

Hyperion Edge GmbH
Dorfstraße 40
86470 Thannhausen
Germany

Email: info@hyperion-edge.de

The persons authorized to represent the company are listed in the legal notice.

Data protection officer

We have not appointed a data protection officer. We are not required to do so under Art. 37 GDPR and Section 38 BDSG (German Federal Data Protection Act): we employ fewer than twenty persons who are constantly engaged in the automated processing of personal data, and our core activities consist neither of large-scale regular monitoring nor of the processing of special categories of data.

Please direct any data protection questions to the address stated above.

What this website does not do

These statements describe the version as delivered and can be verified:

• No cookies. No cookie is set, whether technically necessary or otherwise. For this reason, there is also no consent banner.
• No analytics, no tracking. The JavaScript used on the homepage serves display purposes only (animations and controls). There is no audience measurement, no heatmap analysis and no conversion tracking, and no data is transmitted to us or to third parties in the process.
• No third-party providers. When a page is accessed, files are loaded exclusively from hyperion-edge.de. No connection to third-party servers is established.
• No fonts from external networks. The fonts used are hosted on our server. No request is made to Google Fonts or any comparable service that would transmit your IP address.
• No embedded maps, videos or social media elements.
• No contact form. The contact page refers to an email address; no input is transmitted via the website.
• No registration, no login, no user account.

Server log files

When you access this website, your browser transmits technically necessary data, which our web server stores in log files:

• IP address of the requesting device
• date and time of access
• name and address of the file accessed
• amount of data transferred and access status message
• browser type and operating system
• previously visited page, if your browser transmits it

Purpose: delivery of the website, detection and defense against attacks, investigation of technical malfunctions.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of the website.

Retention period: 14 days. After that, the log files are deleted automatically. This data is not merged with other data sources, and we do not analyze it in relation to individuals.

Hosting

This website is operated on servers of Hetzner Online GmbH, Gunzenhausen, in Germany. Hetzner processes the data listed above exclusively on our behalf and in accordance with our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place. No transfer to third countries takes place in this context.

Contacting us by email

If you write to us, we process your email address, your name and the content of your message in order to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR, insofar as your message serves the initiation or performance of a contract; otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to inquiries.

Retention period: We retain your message for as long as it is necessary to process your inquiry or for any resulting business relationship. If the matter is subject to retention obligations under commercial or tax law, we delete it once those obligations expire.

Processor: Our email mailbox is operated via Microsoft 365. The contracting party is Microsoft Ireland Operations Limited, Dublin, Ireland. Processing in third countries, in particular in the United States, cannot be ruled out in this context. It is safeguarded by the Standard Contractual Clauses of the European Commission and by Microsoft's certification under the EU-U.S. Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR is in place.

Reports to the whistleblowing channel

If you submit a report to compliance@hyperion-edge.de (see Compliance & whistleblowing), we process the information contained in your report. This includes your email address and your name, if you provide it, as well as information about persons named in the report.

Purpose: reviewing the report, investigating the matter and initiating appropriate measures.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Section 10 of the German Whistleblower Protection Act (HinSchG), insofar as the report falls within its scope; otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in detecting and remedying violations of law and misconduct.

Confidentiality: only the members of management responsible for handling reports have access to them. We disclose the identity of reporting persons and of persons named in a report only where required by law or with your consent.

Retention period: we delete the documentation of a report three years after the procedure has been concluded, unless longer retention is required by law or necessary to enforce legal claims.

The mailbox is operated by the processor named under “Contacting us by email”.

Your rights

You have the following rights vis-à-vis us with respect to your personal data:

• Access to information on whether and which data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise these rights, an informal message to info@hyperion-edge.de is sufficient.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. We will then no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Complaint to a supervisory authority

If you believe that the processing of your data violates the GDPR, you may lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority)
Promenade 18
91522 Ansbach

You may also contact the supervisory authority of your place of residence or place of work.

Changes to this policy

We will amend this policy if the processing or the legal situation changes. The version published here applies in each case.

Last updated: October 2026