Privacy Policy

Controller
Oskar-Maria Seeberger (LevIQ)
Adalbert-Stifter-Straße 5
82031 Grünwald
Germany

Phone: +49-15905090161
Email: amueai@hyeprlabs.com

Data Protection Officer
We are not required to appoint a Data Protection Officer under Art. 37 GDPR / § 38 BDSG, as we do not meet the relevant thresholds. For any data protection inquiries, please contact us directly using the details above.

Categories of Data Processed
We process the following categories of personal data: contact data (e.g. email address); meta and communication data (e.g. IP address, timestamps, browser and device information); and usage data (e.g. pages visited, access times).

Purpose of Processing
We process your data to provide our online offering and its functions and content, to respond to contact requests and communicate with you, to manage our waitlist (see "Waitlist Sign-Up" below), to ensure the security of our systems, and, where applicable, for range measurement or marketing purposes.

Legal Basis
We process personal data on the basis of Art. 6(1)(a) GDPR (consent, e.g. for waitlist sign-up), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), and Art. 6(1)(f) GDPR (legitimate interests, e.g. ensuring the security and functionality of our online offering), provided your interests or fundamental rights and freedoms do not override those interests.

Server Log Files
When you visit our website, our hosting provider automatically collects and stores information in server log files, which your browser transmits to us. This includes the browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free operation and security of our website). This data is deleted after [insert retention period, e.g. 7 days], unless required for evidentiary purposes.

Waitlist Sign-Up
You have the option to join our waitlist by providing your email address. By submitting your email address, you consent to us collecting and storing it for the purpose of contacting you regarding early access, product updates, and related information about our services.

We collect your email address and technical metadata generated by the sign-up process (e.g. timestamp, IP address at the time of sign-up). This data is used to manage the waitlist, notify you about availability, and send you relevant updates about the product or service you signed up for.

The legal basis is Art. 6(1)(a) GDPR — your consent, given when you submit the sign-up form. You may withdraw this consent at any time with effect for the future (see "Your Rights" below). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We use Clerk (Clerk, Inc.), a U.S.-based authentication and user-management provider, to technically operate the waitlist sign-up form and store the submitted email addresses on our behalf. We have entered into a Data Processing Agreement with Clerk pursuant to Art. 28 GDPR.

Clerk, Inc. is based in the United States. Personal data submitted through the waitlist may therefore be transferred to and processed in the United States. This transfer is safeguarded by Clerk's self-certification under the EU–U.S. Data Privacy Framework (DPF) and/or the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR, incorporated into our Data Processing Agreement with Clerk. A copy of the relevant safeguards can be requested from us using the contact details above.

We store your email address for as long as you remain on the waitlist or until you withdraw your consent or object to further processing, after which it will be deleted without undue delay, unless we are required to retain it longer for legal reasons.

Recipients
Personal data is only disclosed to third parties where necessary for the purposes listed above, where you have consented, where we are legally obligated to do so, or where disclosure is necessary to assert, exercise, or defend legal claims. Recipients may include Clerk, Inc. (waitlist and authentication infrastructure, USA), our hosting provider, and other processors engaged under Art. 28 GDPR, as applicable.

Cookies
Our website uses cookies. Cookies are small files stored on your device. Insofar as cookies are not strictly necessary for the operation of the website, we only use them with your consent via our cookie/consent banner, in accordance with § 25 TTDSG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings.

One such cookie is blog-visitor-id, a randomly generated, non-identifying token stored for up to one year. It is used solely to keep you seeing the same version of our blog page layout while we run an ongoing design experiment (an A/B test via Vercel's feature flag service), and does not collect, combine, or store any personal data. Like all non-essential cookies, it is set only once you have given your consent as described above.

Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our website uses TLS/SSL encryption for data transmitted between your browser and our servers.

Your Rights
Under the GDPR, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR) regarding your personal data. You may also withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before the withdrawal, and you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany

Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy to reflect changes in our data processing practices or applicable legal requirements. The version published on this page always applies.