Privacy Policy

1. Controller

Hawk Nexus GmbH
Bahnhofstraße 30
69509 Mörlenbach
Germany
Phone: +49 170 7205806
Email: office@hawk-nexus.com

2. General Information

The protection of your personal data is important to us.

We process personal data exclusively in accordance with the statutory provisions of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TTDSG).

3. Hosting and Website Operation (Webflow)

This website is operated using Webflow.

Provider: Webflow Inc., 398 11th Street, San Francisco, CA 94103, USA

When you access our website, technical data is automatically collected (e.g. IP address, browser, time of access).

Processing is carried out for the purpose of providing the website and ensuring its security.

Legal basis: Art. 6(1)(f) GDPR

We have concluded a data processing agreement with Webflow in accordance with Art. 28 GDPR.

Data may be transferred to the USA. Webflow uses standard contractual clauses pursuant to Art. 46 GDPR.

There is a risk that US authorities may access personal data without effective legal remedies being available to you.

4. Server Log Files

When visiting the website, the following data is automatically collected:

• IP address
• Date and time
• Browser type
• Operating system
• Referrer URL

This data is technically necessary and is not used to identify you personally.

Legal basis: Art. 6(1)(f) GDPR

5. Contact Form

If you contact us via the contact form, your details will be stored for the purpose of processing your inquiry.

Legal basis: Art. 6(1)(b) GDPR

The data will be deleted as soon as it is no longer required for processing your inquiry and no statutory retention obligations apply.

6. Appointment Booking (Calendly)

We use Calendly for scheduling appointments.

Provider: Calendly LLC, Atlanta, USA

When booking an appointment, personal data (name, email address, etc.) is processed.

Legal basis: Art. 6(1)(b) GDPR

We have concluded a data processing agreement with Calendly in accordance with Art. 28 GDPR.

Data may be transferred to the USA. Calendly uses standard contractual clauses pursuant to Art. 46 GDPR.

There is a risk that US authorities may access personal data without effective legal remedies being available to you.

7. Use of Google Analytics

This website uses Google Analytics, a web analytics service.

Provider: Google Ireland Ltd., Dublin, Ireland

Google Analytics uses cookies and similar technologies to analyze the use of our website.

Purpose:
• Analysis of user behavior
• Optimization of the website
‍

Important information:
• IP anonymization is activated
• Processing is carried out exclusively on the basis of your consent via the cookie banner
• Data may be transferred to the USA
‍

Google processes the data on our behalf. We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR. Google uses standard contractual clauses pursuant to Art. 46 GDPR.

There is a risk that US authorities may access personal data without effective legal remedies being available to you.

Storage period: The storage period is generally 14 months.

Legal basis: Art. 6(1)(a) GDPR (consent)

Withdrawal of consent: You may withdraw your consent at any time via the cookie banner.

8. Use of Hotjar

This website uses Hotjar to analyze user behavior.

Provider: Hotjar Ltd., Malta
‍

Hotjar enables:
• Heatmaps
• Session replays
• User feedback
‍

Processed data:
• Click behavior
• Mouse movements
• Screen size
• Anonymized IP address
‍

Purpose: Optimization of the user-friendliness of our website

Legal basis: Art. 6(1)(a) GDPR (consent)

Hotjar sets cookies only after you have given your consent via the cookie banner.

We have concluded a data processing agreement with Hotjar in accordance with Art. 28 GDPR.

Opt-out: You can disable Hotjar tracking at any time at: https://www.hotjar.com/legal/compliance/opt-out

9. Cookies and Consent Management

Our website uses cookies and comparable technologies.
‍

We distinguish between the following categories:
• Technically necessary cookies
• Analytics and statistics cookies

‍

Analytics and tracking cookies are only set after you have given your explicit consent.

‍

Typical cookies used may include:
• Google Analytics cookies (e.g. _ga, _gid)

Details on the cookies used and their storage duration can be found in the cookie banner.

‍

When you first visit the website, you will be asked for your consent via a cookie banner. You may:
• Select individual categories
• Reject all non-essential cookies
• Withdraw your consent at any time

‍

Legal basis: Art. 6(1)(a) GDPR and Section 25 TTDSG

10. Client Area / Data Room

For the provision of our services, a protected area may be made available.

‍

The following data may in particular be processed:
• Name
• Email address
• Business data
• Uploaded documents

‍

Processing is carried out exclusively for the performance of contractual services.

Legal basis: Art. 6(1)(b) GDPR

11. Data Security

Data transmission is encrypted using SSL/TLS.

12. Storage Duration

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

13. Data Subject Rights

You have the right to:
• Access
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Withdrawal of consent
• Object to the processing of your data (Art. 21 GDPR)

14. Obligation to Provide Data

The provision of personal data is partly required by law or contract.

Without such data, it may not be possible to process your inquiry or perform a contract.

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The competent authority is, in particular:

The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163
65021 Wiesbaden
Germany

16. Changes

We reserve the right to amend this Privacy Policy if legal requirements or our services change.