Exorys Legal — Privacy Policy

Privacy Policy.

Language: This is a convenience translation. Exorys is a business based in Germany, so the German version (Datenschutzerklärung) is the legally authoritative one.

01 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

02 General

This is a static website. There are no user accounts, no forms and no comment function. Personal data is processed only to the extent technically necessary to operate and deliver the site, and when you contact us of your own accord by e-mail or by telephone.

03 Hosting

This website is hosted by:

When the site is accessed, the hosting provider automatically records information transmitted by your browser in server log files:

• IP address of the requesting device
• date and time of access
• name and URL of the file requested
• volume of data transferred
• notification of successful retrieval
• browser and operating system used
• referrer URL (the previously visited page)

Purpose

Technically faultless delivery of the website, ensuring system security and stability, and defending against attacks.

Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest lies in providing this website securely and reliably.

Retention

Log data is stored only for as long as necessary for the purposes stated and is then deleted. We do not merge this data with other sources.

Data processing agreement

A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

Transfer to the USA

The provider is based in the USA, so a transfer of personal data there cannot be ruled out. Such transfer is based on an adequacy decision of the European Commission (EU-US Data Privacy Framework, Art. 45 GDPR) where the provider is certified under it, and otherwise on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). There is a risk that US authorities may access data without legal protection comparable to European law.

04 Fonts

The fonts used on this website (Archivo, Instrument Sans, IBM Plex Mono) are served locally from our own server. No connection to Google or any other third party is made when the page loads, and your IP address is not transmitted to any font provider.

05 Contact — e-mail, telephone

If you contact us by e-mail or by telephone, we process the data you provide (e.g. name, e-mail address, telephone number, content of your enquiry) in order to handle your enquiry. This site carries no enquiry form; the e-mail address and telephone number published in the legal notice are the only contact routes offered here.

Legal basis

Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract; otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries.

Retention

We store this data until the purpose for storing it ceases to apply — that is, once your enquiry has been dealt with conclusively — and beyond that only where statutory retention obligations require it.

Note

E-mail is generally transmitted unencrypted. We cannot fully guarantee the security of transmission.

06 No cookies, no tracking

This website sets no cookies. No analytics, tracking or advertising services are used. No social media plugins and no embedded third-party content (e.g. YouTube, Instagram, Google Maps) are included. No profiling and no automated decision-making takes place.

Links to social networks

The site links to our profiles on Instagram and LinkedIn as ordinary hyperlinks. Nothing is loaded from those networks while you are on this site and no data is transmitted to them. Only once you follow such a link does the operator of the network concerned receive your data, under its own privacy policy.

07 SSL/TLS encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://”.

08 Your rights

You have the right at any time:

• to obtain information about the data stored about you (Art. 15 GDPR)
• to have inaccurate data rectified (Art. 16 GDPR)
• to erasure (Art. 17 GDPR)
• to restriction of processing (Art. 18 GDPR)
• to data portability (Art. 20 GDPR)
• to object to processing (Art. 21 GDPR)

An informal message to the e-mail address above is sufficient to exercise these rights.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is:

09 Version

This policy is dated: 7 August 2026