Privacy Policy Privacy Policy

Thank you for your interest in our website. The protection of your personal data is a very important concern for us. Below you will find information on the handling of your data collected through your use of our website. The processing of your data is carried out in accordance with statutory data protection regulations.

Controller within the meaning of the GDPR

Contact Information of GDPR Representative

Definitions

Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.

Access to and Storage of Information in Terminal Equipment

By using our website, access to information (e.g., IP address) or storage of information (e.g., cookies) in your terminal equipment may occur. This access or storage may be associated with further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this takes place on the basis of Section 25 (1) sentence 1, (2) no. 2 TTDSG.

In cases where such a process serves other purposes (e.g., the needs-based design of our website), this takes place on the basis of Section 25 (1) TTDSG only with your consent pursuant to Art. 6 (1) lit. a GDPR. The consent can be revoked at any time for the future. The provisions of the GDPR and the Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections regarding the specific processing activities on our website.

Web Hosting

This website is hosted on the company’s own servers. The hosting of this website takes place in Frankfurt am Main, Germany. Personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, meta and communication data, website accesses, and other data generated via a website.

We collect the listed data in order to ensure a smooth connection establishment of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website pursuant to Art. 6 (1) lit. f GDPR.

We have concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we obligate them to protect our customers’ data and not to pass it on to third parties.

Server-Logfiles

When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server:

• Date and time of the request
• Page from which the file was requested
• Access status
• Web browser and operating system used
• (Complete) IP address of the requesting computer
• Amount of data transferred

We collect the listed data in order to ensure a smooth connection establishment of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to make the website available to you. The log files serve to evaluate system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website pursuant to Art. 6 (1) lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short time. By using the Umami Analytics tool, any user-related data is directly anonymized.

Cookies

Our website uses so-called “cookies”. Cookies are small text files that are stored on your terminal equipment either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal equipment until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or language settings). Other cookies are used to evaluate user behavior or display advertising.

The processing of data through the use of absolutely necessary cookies takes place on the basis of a legitimate interest pursuant to Art. 6 (1) lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations regarding the specific data processing activities.

The processing of personal data through the use of other cookies takes place on the basis of consent pursuant to Art. 6 (1) lit. a GDPR. The consent can be revoked at any time for the future. Insofar as such cookies are used for analysis and optimization purposes, we will inform you about this separately within the framework of this privacy policy and obtain consent pursuant to Art. 6 (1) lit. a GDPR.

You can configure your browser so that you:

• are informed about the setting of cookies,
• only allow cookies in individual cases,
• exclude the acceptance of cookies for specific cases or in general,
• activate the automatic deletion of cookies when closing the browser.

The cookie settings can be managed under the following links for the respective browsers:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

You can also individually manage cookies from many companies and functions that are used for advertising. To do this, use the corresponding user tools available at:

• AboutAds
• Youronlinechoices

Most browsers also offer a so-called “Do Not Track” function. If this function is activated, the respective browser informs advertising networks, websites, and applications that you do not wish to be “tracked” for the purposes of behavioral advertising and the like.

Information and instructions on how you can edit this function are available, depending on your browser provider, under the following links:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

Additionally, you can prevent the loading of so-called scripts by default. “NoScript” allows the execution of JavaScripts, Java, and other plug-ins only for trusted domains of your choice. Information and instructions on how you can edit this function are available via the provider of your browser (e.g., for Mozilla Firefox at: Please note that if cookies are deactivated, the functionality of our website may be restricted.

Changing Cookie Settings

You can revoke or change your cookie settings at any time. Use the browser settings mentioned above. Since our privacy tool Umami Analytics does not collect personal data or cookies, the website does not require a classic cookie banner.

Tools and Services

Umami Analytics

We use the web analytics service Umami Analytics on our website to evaluate user behavior and continuously optimize our website for you.

Umami Analytics is a privacy-friendly analytics tool. It is configured in such a way that no cookies or comparable tracking technologies are stored on your terminal equipment. Your data is collected anonymously. The collected data includes, among other things, your browser type, your operating system, the accessed pages, the duration of your stay on our website, the website from which you came to us, as well as general device-related information. Your IP address is immediately anonymized during processing, so that no conclusions can be drawn about your person and you, as a user, are not tracked across different websites.

The use of Umami Analytics is based on our legitimate interest in the statistical analysis of user behavior for the optimization and needs-based design of our website pursuant to Art. 6 (1) lit. f GDPR. Since no cookies are set and the data is processed anonymously, obtaining prior consent for this service is not necessary.

We operate (host) Umami Analytics exclusively on our own servers in Frankfurt am Main. The data collected within the scope of the analysis remains entirely with us and is not passed on to third parties. The anonymized statistical data is deleted as soon as it is no longer required for our evaluation purposes.

Newsletters, Mailings, Downloads

On the website of Helionox GmbH, we provide a wide range of newsletters, mailings, and downloads based on the user’s consent pursuant to Art. 6 (1) lit. a EU GDPR, where applicable in conjunction with Section 7 (2) no. 3 UWG (Act Against Unfair Competition). Also on the basis of legal permission under Section 7 (3), we may send certain information to data subjects by email where appropriate.

Providing a name and email address is required to register for theme-related newsletters and mailings, as well as to download certain documents (e.g., studies) from Helionox GmbH.

After registering for newsletters, mailings, or downloads on the Helionox GmbH website, every user receives a confirmation email at the email address provided (so-called double opt-in procedure). The registration is only complete after clicking the link contained in this email.

Consent once given to receive newsletters, mailings, or downloads can be revoked at any time via a link at the end of every email or by sending a message to the Helionox mailbox dsgvo [at] helionox.eu.

Registrations for newsletters, mailings, or downloads are logged on the basis of our legitimate interest in being able to prove a user’s registration and consent at any time (Art. 6 (1) lit. f EU GDPR).

External Links

Social networks, namely LinkedIn and Xing, are integrated on our website merely as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after this redirection. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you are using.

Data Transfer and Recipients

A transfer of your personal data to third parties does not take place, except:

• if we have explicitly indicated this in the description of the respective data processing,
• if you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR,
• the transfer pursuant to Art. 6 (1) sentence 1 lit. f GDPR is necessary for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• in the event that there is a legal obligation for the transfer pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and
• insofar as this is necessary pursuant to Art. 6 (1) sentence 1 lit. b GDPR for the processing of contractual relationships with you

Data Security

In accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. This website uses TLS/SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of the Storage of Personal Data

The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g., from commercial and tax law). After the respective period has expired, the corresponding data is routinely deleted. If data is required for the fulfillment of a contract or the initiation of a contract, or if we have a legitimate interest in further storage, the data will be deleted when it is no longer required for these purposes or if you have exercised your right of withdrawal or objection.

Your Rights

Below you will find information on which data subject rights the applicable data protection law grants you against the controller regarding the processing of your personal data:

• The right to request access to your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
• The right to demand the immediate rectification of inaccurate or the completion of your personal data stored by us pursuant to Art. 16 GDPR.
• The right to request the erasure of your personal data stored by us pursuant to Art. 17 GDPR, unless the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
• The right to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you need it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR.
• The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
• The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace for this purpose.
• The right to withdraw granted consents pursuant to Art. 7 (3) GDPR: You have the right to withdraw consent once given to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to Object

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for this arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement to state a particular situation.

If you would like to exercise your right of withdrawal or objection, an email to dsgvo [at] helionox.eu is sufficient.

Legal Obligations

The provision of personal data for the decision on the conclusion of a contract, the fulfillment of a contract, or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is necessary for the conclusion of the contract, the fulfillment of the contract, or pre-contractual measures.

Automated Decision-Making

Automated decision-making or profiling pursuant to Art. 22 GDPR does not take place.

Right of Modification

We reserve the right to adapt or update this privacy policy if necessary in compliance with applicable data protection regulations. In this way, we can adapt it to current legal requirements and take changes to our services into account, e.g., when introducing new services. The currently valid version applies to your visit.

Status of this privacy policy: May 14, 2026