Privacy Policy

Last updated: September 2026

This English version is provided for convenience. In case of discrepancies, the German version (Datenschutzerklärung) prevails.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Spacelytix GmbH
Theaterstraße 22, 53111 Bonn, Germany
Represented by the managing directors: Alexis Wisniewski
Email: datenschutz@spacelytix.com

2. Overview

This privacy policy informs you about the nature, scope and purpose of the processing of personal data when you visit our website spacelytix.com. We only process data to the extent necessary to operate a functional website and to provide our content and services.

3. Hosting and server log files

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland, in data centers located in Germany. When you access our pages, information transmitted by your browser is automatically stored in server log files: IP address (truncated), date and time of the request, page/file accessed, amount of data transferred, referrer URL, browser type and version, and operating system.

Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, optimization and security of our website. Log files are deleted after 14 days at the latest. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. Further information:Hetzner Online GmbH privacy policy.

4. Contact form and email

If you contact us via the contact form or by email, we process the data you provide (name, company, email address, information on subject and office area, and your message) in order to handle your request and any follow-up questions. To prevent abuse, your IP address and the time of submission are also recorded.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, given in the form, and – to the extent your request is aimed at concluding a contract – Art. 6 (1) (b) GDPR. Transmission is encrypted (TLS). The data is sent to us by email and is not stored on the web server. We delete your request once it has been fully processed and no statutory retention obligations apply. You may withdraw your consent at any time with effect for the future, e.g. by email todatenschutz@spacelytix.com.

5. Cookies and local storage

We only use cookies and comparable technologies (e.g. your browser's local storage) to the extent described below. The legal basis for storing and accessing information on your device is § 25 TDDDG (German Telecommunications Digital Services Data Protection Act); for the subsequent processing of personal data Art. 6 (1) (a) or (f) GDPR.

5.1 Strictly necessary storage

sx-consent (cookie and local storage): stores your cookie settings. Duration: 12 months.
sx-theme (local storage): stores your choice between light and dark color scheme. Duration: until deleted by you.

5.2 Statistics and marketing (consent only)

We currently do not use any statistics or marketing services. Should we integrate audience measurement or marketing tools in the future, this will only happen after your consent via our cookie banner. You can change or withdraw your selection at any time via the "Cookie settings" link in the footer.

6. Fonts and external content

The fonts used on this website (Inter, Space Grotesk, JetBrains Mono) are served locally from our server. No connection is made to Google or other font providers. We do not embed external scripts, maps or videos that transmit data to third parties without your consent.

7. LinkedIn company profile

We link to our company profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). This is a plain link – no data is transmitted to LinkedIn when you visit our website. LinkedIn's privacy policy applies only once you click the link.

8. Recipients and international transfers

Within our company only those departments that need your data to fulfil the stated purposes have access to it. External recipients are our hosting provider (see section 3) and, where applicable, our email provider Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany, each under a data processing agreement. No data is transferred to countries outside the EU/EEA.

9. Retention

Unless otherwise stated in this policy, we delete personal data as soon as the purpose of processing no longer applies and no statutory retention obligations (e.g. under German commercial and tax law, up to 10 years) prevent deletion.

10. Your rights

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the data protection authority of the German federal state in which we are based: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

11. Data security

We use TLS encryption (HTTPS) on our website and apply technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

12. Changes to this policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The current version applies to your next visit.