Privacy policy
Last updated:
1. Controller
HOPn UG (haftungsbeschränkt), Weichterstr. 1, 86807 Buchloe, Germany. Email: info@hopn.eu.
2. Hosting and server logs
This website is hosted by Hostinger International Ltd. on servers in Frankfurt, Germany. Hostinger processes data on our behalf under Article 28 GDPR.
When you open a page, the server records technical data: IP address, date and time, the page requested, the referring page, and your browser and operating system. We need this to deliver the site and keep it secure. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. The hosting provider keeps these logs for a limited period and then deletes them.
3. Contact, partner, service, job application and deck request forms
When you send a form, we process the details you enter and the following technical data: the page you sent it from, the page language, the referring page, campaign parameters in the link (UTM), and the time of sending.
We use these details only to answer your request (including job applications). The legal basis is Article 6(1)(b) GDPR (steps before a contract) and our legitimate interest in answering enquiries under Article 6(1)(f) GDPR.
Submissions are stored on our server and in our internal administration system, both hosted by Hostinger in the EU. We send you a confirmation email and send ourselves an internal notification. We delete your details when they are no longer needed for your request, unless statutory retention periods apply.
4. Spam protection
To stop automated spam, forms contain a hidden field and we limit how often one connection can submit. For this we store a one-way hash of your IP address for 24 hours. The legal basis is Article 6(1)(f) GDPR.
5. Newsletter
If you subscribe, we use double opt-in: you receive an email with a confirmation link, and you are subscribed only after you click it. We store your email address, the time of sign-up and confirmation, and a hash of your IP address as proof of consent. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time with the link in each email or by writing to us.
6. Booking a call
The Book a call links lead to a booking page provided by Google Calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google's privacy policy applies there. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. No data is sent to Google until you open the link.
7. Web analytics
We currently do not use web analytics.
8. Fonts and external content
Fonts are served from our own server. The site does not embed videos, maps or social media plugins. Links to other sites, such as LinkedIn or our ventures, transfer no data until you click them.
9. Your rights
You have the right to access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interest (Article 21). You can withdraw consent at any time with effect for the future (Article 7(3)). Write to us at the address above.
You also have the right to complain to a data protection supervisory authority. For us this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.