1. Data Protection at a Glance
Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the contact details under “Information on the Controller.”
How do we collect your data?
Your data is collected, on the one hand, when you provide it to us (e.g., via forms).
Other data is collected automatically or with your consent when you visit the website through our IT systems (e.g., IP address, browser, operating system, time of access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
To technically provide and secure the website, to communicate with you (contact requests), to provide user accounts and — after consent — to analyse website usage.
What rights do you have regarding your data?
You have the right to obtain information, rectification, erasure, restriction of processing and data portability. Consents may be withdrawn at any time with effect for the future. You also have the right to object to processing based on Art. 6(1)(e) or (f) GDPR and the right to lodge a complaint with a supervisory authority.
Analytics and third-party tools
With your consent, your browsing behaviour may be statistically evaluated (e.g., with Matomo). Details are set out below.
2. Hosting
We host our website with the following provider:
All-Inkl
Provider: ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Details: https://all-inkl.com/datenschutzinformationen/.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable, secure delivery). Where consent is required (e.g., cookies/tracking), processing additionally relies on Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) DDG (revocable).
Data Processing Agreement
We have concluded a Data Processing Agreement (Art. 28 GDPR) with All-Inkl.
3. General Information and Mandatory Information
Data protection
We treat your personal data confidentially and in accordance with statutory provisions and this privacy policy. Internet data transmission (e.g., email) can have security gaps; complete protection against access by third parties is not possible.
Information on the Controller
HYPERMADE
Michael Janke
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach, Germany
Phone: +49 5221 / 9500556
Email: info@hypermade.com
Storage period
Unless a more specific period is stated in this policy, personal data remains with us until the processing purpose no longer applies. After withdrawal of consent or a justified erasure request, we delete the data unless other legal reasons (e.g., tax/commercial retention) require further storage.
Legal bases
Depending on the purpose, we rely on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract/steps prior to contract), Art. 6(1)(c) GDPR (legal obligation) or Art. 6(1)(f) GDPR (legitimate interests). For access to/end-device storage (cookies/similar tech): Sec. 25(1) DDG (consent) or Sec. 25(2) DDG (strictly necessary).
Note on data transfers to third countries (incl. USA)
When using certain services (e.g., YouTube, Google Maps), data may be transferred to third countries. For the USA, an adequate level may exist if the provider is certified under the EU-US Data Privacy Framework; otherwise we use appropriate safeguards (e.g., EU Standard Contractual Clauses). Nevertheless, a lower level of protection than in the EU may apply (e.g., government access).
Withdrawal of consent
You may withdraw consent at any time; lawfulness up to withdrawal remains unaffected.
Right to object (Art. 21 GDPR)
IF WE PROCESS DATA ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. IN SUCH A CASE, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (ART. 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING (ART. 21(2) GDPR).
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
Right to data portability
You have the right to receive data processed automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format, or to have it transmitted to another controller, where technically feasible.
Access, rectification, erasure, restriction
You have the right to free information about your personal data, its origin, recipients and the purpose of processing and, where applicable, a right to rectification, erasure or restriction of processing.
SSL/TLS encryption
This site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” and the lock icon in your browser.
4. Data Collection on This Website
Cookies
We use cookies and similar technologies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR in conjunction with Sec. 25(2) DDG. For all others (e.g., statistics/marketing), we obtain your consent (Art. 6(1)(a) GDPR, Sec. 25(1) DDG). You may withdraw consent at any time via our consent tool. Browser settings allow cookie control; this may limit functionality.
Consent Management (Real Cookie Banner)
We use “Real Cookie Banner” (devowl.io GmbH, Tannet 12, 94539 Grafling), hosted locally. It stores your consent status in a cookie to assign and prove consents. Legal basis: Art. 6(1)(c) GDPR (legal obligation to obtain/document consent).
Matomo (on-premise, opt-in)
With your consent we use Matomo (self-hosted) for analytics. Cookies are used; information is stored exclusively on our servers in pseudonymous profiles; IPs are shortened (IP masking). No disclosure to third parties. Legal basis: Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) DDG. You can withdraw consent at any time via the consent banner or by deleting cookies.
Server log files
The provider automatically collects and stores: browser type/version, operating system, referrer URL, host name, time of server request, IP address. This data is not merged with other data. Legal basis: Art. 6(1)(f) GDPR (technical provision/security).
Contact form
If you send us a request via the contact form, we process your entries including contact details to handle the request and for follow-ups. Legal bases: Art. 6(1)(b) GDPR (pre-/contract), alternatively Art. 6(1)(f) GDPR (efficient communication) or — where applicable — Art. 6(1)(a) GDPR (consent). Storage until purpose is fulfilled or withdrawal/erasure; statutory retention remains unaffected.
Requests by email/phone
If you contact us by email or phone, we process your request including personal data (e.g., name, request) to handle your inquiry. Legal bases as above (Art. 6(1)(b)/(f) or (a)). Storage until purpose is fulfilled or withdrawal/erasure; statutory obligations remain unaffected.
Comments
When you leave comments, we store your comment, time of creation, email address and — if not posted anonymously — your chosen username. We also store the IP address (legitimate interest, Art. 6(1)(f) GDPR). Comments and related data remain until the commented content is fully deleted or must be deleted for legal reasons. Where applicable, the processing in the comment form relies on your consent (Art. 6(1)(a) GDPR, revocable).
Registration and user account
You may register and create a user account. We process login data (name, email, password — encrypted) and personal data you enter when using your account (e.g., saved posts). On login, we store IP and timestamp for attack detection (Art. 6(1)(f) GDPR). Overall legal basis: Art. 6(1)(b) GDPR. Storage until account deletion unless legal obligations prevent deletion.
Storage of IP addresses for evidence purposes
We store the IP addresses of users who upload data via our forms to prove the origin of submitted data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in legal enforcement). Storage period: up to 3 years; thereafter deletion/anonymisation unless statutory retention requires longer storage. Objection under Art. 21 GDPR is possible.
5. Social Media Sharing Buttons
We use “Shariff Wrapper” (2-click solution) for Facebook, Instagram and X/Twitter. A connection to the providers is only established after you click. Before that, no data is transmitted. After clicking, the providers’ privacy policies apply:
6. Plugins and Embedded Content
YouTube (enhanced privacy mode)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Embedding only after consent via the consent banner. Thereafter, data (incl. IP, device info) is transmitted to YouTube/Google; cookies/similar technologies may be used. If you are logged in to your YouTube account, your visit may be associated with your profile. Legal basis: Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) DDG (revocable). Further information: Google Privacy Policy.
Google Maps
Provider: Google Ireland Limited. Embedding only after consent via the consent banner; thereafter your IP etc. is transmitted to Google. Legal basis: Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) DDG (revocable). Further information: Google Privacy Policy.
Google Fonts (local)
We use locally hosted Google Fonts. No connection to Google servers occurs.
WP ULike
This website uses the WP ULike plugin for “Like” indications under posts. Depending on configuration, for non-logged-in users the IP (possibly anonymised) and a cookie are stored; for logged-in users the user ID and timestamp are stored. Legal basis: Art. 6(1)(f) GDPR (user feedback/UX improvement) or — where applicable — Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) DDG (revocable). No transfer to third parties.
7. Link to External Online Shop (Shopify)
Our website links to an externally operated online shop (Shopify). As soon as you access the shop, the privacy policy published there applies. The shop operator/Shopify is responsible for data processing in the shop. Please refer to the shop’s footer under “Privacy Policy.”
Note: The shop is offered in German only. On hp, we do not process your order data; processing related to purchases takes place exclusively on the external shop and under its privacy terms.
8. Your Rights
See above under “What rights do you have regarding your data?” — in particular access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Contact: info@hypermade.com.