Privacy Policy

1. General Information

Protecting your personal data is important to us. This privacy policy explains what data is collected when you visit this website, how it is used, and what rights you have in connection with that processing. All processing takes place exclusively within the framework of applicable data protection law, in particular the General Data Protection Regulation (GDPR).

2. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

hypescale GmbH Bornstraße 32 12163 Berlin Germany Represented by: Martin Kogut, Managing Director Phone: +49 30 92366845 Email: mail@hypescale.com

3. Hosting

This website is hosted on Cloudflare Workers, a service provided by Cloudflare, Inc., with infrastructure in both the USA and the EU. When you access the site, technically necessary data such as your IP address, the date and time of the request, and the data transmitted are briefly processed by Cloudflare to deliver the site reliably and securely. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare; for transfers to the USA, Cloudflare relies on Standard Contractual Clauses as an appropriate safeguard. Further information is available in Cloudflare's privacy policy.

4. Contact Form

If you send us a request via the contact form, the data you provide – name, email address, optionally your company, and your message – is stored for the purpose of processing your request and any follow-up questions. This processing is based on Art. 6(1)(b) GDPR, as the request relates to the initiation or performance of a contractual relationship. To technically deliver the form data by email, we use Brevo, a service of Sendinblue GmbH based in Germany, which transmits the data on our behalf as a processor. Further information about Brevo is available in its privacy policy.

5. AI Assistant ("Ask this site")

This website provides an AI assistant that answers questions about the projects, services and qualifications published here.

Data processed. Only the question text you enter, the answers already generated within the same conversation, and your IP address are processed.

Purpose and legal basis. Your question is processed in order to answer it. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in answering prospective clients' questions and presenting our services. Your IP address is processed solely to limit request frequency and thereby prevent abusive use (Art. 6(1)(f) GDPR). It is held only as a counter and is deleted automatically after no more than two minutes.

Recipients. To produce an answer, your question is transmitted to the following processors:

Transfers to third countries. Processing by OpenAI also takes place in the USA. OpenAI is certified under the EU-U.S. Data Privacy Framework; in addition, Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are in place as an appropriate safeguard. Further information is available in OpenAI's privacy policy.

Retention. Conversation content is not stored. Neither your questions nor the answers are logged or persisted on our systems; the conversation exists only in your browser and is lost when the page is reloaded. According to OpenAI, inputs and outputs are retained by default for up to 30 days for abuse monitoring and deleted thereafter. According to OpenAI, inputs submitted via the API are not used to train models.

Please note. Do not enter personal data or confidential information into the input field. For matters involving personal data, please use the contact form or the email address given above.

Notice pursuant to Art. 50(1) AI Act. You are interacting with an AI system, not with a natural person. Answers are generated automatically and may be incomplete or incorrect despite the sources cited. They do not constitute a legally binding offer.

6. Analytics (Umami)

To analyze how this website is used, we use the web analytics service Umami. Umami operates entirely without cookies and evaluates access data only in anonymized, aggregated form, so that no conclusions can be drawn about individual persons. No personal user profiles are created and no data is shared with third parties. This use is based on our legitimate interest under Art. 6(1)(f) GDPR in the needs-based design and continuous improvement of this website.

7. Language Preference (Cookie)

This website is served in German by default. If you open the English version — via the language switch or directly through an address beginning with /en — we store that choice in a cookie named NEXT_LOCALE with the value “en”. Its only effect is that a later visit to the homepage returns you to the English version.

The cookie has a lifetime of one year and contains nothing but the language code — no identifier and no information that could be attributed to a particular person. Switching back to the German version deletes it. If you do not change the language, no cookie is set.

Storing it is strictly necessary for a service you have expressly requested — displaying this website in the language you selected — and therefore requires no consent under Section 25(2)(2) TDDDG. Any subsequent processing is based on Art. 6(1)(f) GDPR. You can delete the cookie at any time in your browser settings.

8. Your Rights as a Data Subject

You have the right at any time to request information about the data we hold about you, as well as the right to have inaccurate data corrected or your data deleted, unless statutory retention obligations apply. You also have the right to restriction of processing and to data portability. To exercise any of these rights, please contact us at the address given above. You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable law.