Privacy Statement

1. Overview
This privacy policy explains how personal data is processed when you visit this website. Personal data refers to any information that can be used to identify you directly or indirectly.
We take the protection of your personal data seriously and process it in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR).

2. Data Controller
The data controller responsible for processing personal data on this website is:

hystrat® – Tobias Merten
c/o IP-Management #43633
Ludwig-Erhard-Str. 18
20459 Hamburg, Germany

Email: ahoy [at] hystrat.com
Phone: +49 (0) 40 11811 7997

The controller determines the purposes and means of processing personal data.

3. Hosting and Website Operation

This website is hosted by Wix.com Ltd.,
40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.

Wix provides the infrastructure for website hosting and delivery. In doing so, Wix processes technical and usage-related data (e.g. IP address, browser information, access times) that is required to operate and secure the website.
Israel is recognised by the European Commission as providing an adequate level of data protection under Art. 45 GDPR.
The use of Wix is based on Art. 6(1)(f) GDPR (legitimate interest in reliable and secure website operation).
Where consent is required, processing is based on Art. 6(1)(a) GDPR, and consent can be withdrawn at any time.
An appropriate data processing agreement (DPA) is in place with Wix.

4. Data Collected When Visiting the Website

Technical Data
When you visit this website, certain technical data is processed automatically, including:

browser type and version
operating system
date and time of access
IP address

This data is required to ensure the secure and error-free operation of the website.

Cookies
This website uses essential cookies only, which are required for basic functionality and security. These cookies do not require consent under applicable data protection law.
You can configure your browser to restrict or disable cookies. Please note that doing so may affect website functionality.

5. Contact Requests
If you contact us (e.g. via contact form or email), the information you provide—including contact details and the content of your inquiry—will be processed solely for the purpose of handling your request.

Legal basis:

Art. 6(1)(b) GDPR, if the inquiry relates to contractual or pre-contractual measures
Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries

Your data will not be shared with third parties and will be deleted once the purpose of processing no longer applies, unless statutory retention obligations require otherwise.

6. Data Retention
Personal data is stored only for as long as necessary to fulfil the respective processing purpose or to comply with legal obligations. Once the purpose no longer applies, data is deleted in accordance with statutory requirements.

7. Your Rights
You have the right to:

obtain information about your stored personal data (Art. 15 GDPR)
request rectification or deletion (Arts. 16, 17 GDPR)
request restriction of processing (Art. 18 GDPR)
object to processing based on legitimate interests (Art. 21 GDPR)
receive your data in a structured, machine-readable format (Art. 20 GDPR)
lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us using the details above.

8. Data Security
This website uses SSL/TLS encryption to protect data transmitted to us. Encrypted connections can be identified by “https://” and the lock symbol in the browser.

9. Changes to This Privacy Policy
We may update this privacy policy to reflect legal, technical, or operational changes. The current version published on this website applies.