Privacy Policy


Thank you foryour interest in our website. The protection of your personal data is importantto us. Below you will find information about how we handle your data that iscollected through your use of our website. Your data will be processed inaccordance with the legal data protection regulations.

Controller within the meaning of data protection law

Hypatos GmbH
14482 Berlin
+49 (0) 302 09 97 00

Data Protection Officer

Proliance GmbH /
Leopoldstr. 21
80802 Munich


Our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data ProtectionRegulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Server- Logfiles

Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server
• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status
• Web browser used and operating system used
• (Full) IP address of the requesting computer
• Transmitted amount of data

We collect the listed data in order to guarantee a frictionless connection establishment and to enable a comfortable use of our website by the users. The log file also serves for evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, in particular to prevent attempts to attack our web server, we may temporarily store this data. It is not possible for us to draw conclusions about individual persons on the basis of this data. After 14 days at the latest, the data is made anonymous by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. This data is not evaluated in anonymous form except for statistical purposes. This data is not combined with data from other data sources.


Our website uses cookies which are stored on your device by the browser and contain certain settings for the use of the website (e.g. the current session). Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after the browser is closed. Other cookies remain stored on your terminal device until you delete them, or the storage period expires.
These cookies enable us to recognize your browser on your next visit. In some cases, cookies are used to simplify website processes by saving settings (e.g. settings that have already been made during previous visits). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either to fulfil the contract, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
In order to accept or refuse all or certain cookies, you can set up your browser to inform you when cookies are set. You can also activate the automatic deletion of cookies when closing the browser. The cookie settings for the respective browsers can be customised under the following links:

You can also individually manage the cookies of many companies and functions that are used for advertising purposes. Details about the user tools are available at or
Most browsers also offer a "do-not-track- feature" This feature allows you to indicate that you do not want to be "tracked" by websites. When the function is activated, the browser will tell ad networks, websites and applications that you do not want to be tracked for the purpose of behaviour-based advertising and such like. For information and instructions on how to use this feature, see the links below:
Mozilla Firefox:
Internet Explorer:
Google Chrome:

In addition, you can prevent the loading of scripts by default. NoScript allows you to run JavaScripts, Java and other plug-ins only on trusted domains of your choice. Information and instructions on how to use this function can be obtained from your browser's provider (e.g. for Mozilla Firefox at: Please note that deactivating cookies may limit the functionality of this website.

Contact form and contact by email

If you send us requests via contact form or email,your details from the enquiry form or email, including the contact data youhave provided there, will be passed to the technical service provider Salesforce.comGermany GmbH, Erika-Mann-Strasse 31-37,80636 München, Germany („Salesforce“) for the purpose of processing the request and in theevent of follow-up questions. You are required to provide an email address andyour name to contact us. Your telephone number is optional. Under no circumstanceswill we pass on this data without your consent. The legal basis for processingthe data is our legitimate interest in responding to your request pursuant toArt. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR,provided that your request is aimed at concluding a contract. Your data will bedeleted after final processing of your request, provided that there are nolegal storage obligations to the contrary. You can object to the processing ofyour personal data at any time in the case of Art. 6 para. 1 lit. f GDPR. Thedata you enter for the purpose of processing the request (e.g. email address)will be stored on the servers of Salesforce.

We concluded a data processing agreement with Salesforcein which we commit Salesforce to protect the data of our customers and not topass them on to third parties.

Further information can be found in the Salesforce privacypolicy at

Appointments - Calendly

On our website you have the possibility to make an appointment with us. For this purpose, we use "Calendly". Calendly is a service of Calendly, LLC, 1315 Peachtree St NE, Atlanta, GA 30309,
We have concluded a data processing agreement with Calendly, so that the data provided by you will be processed for us according to your instructions and order. When using the chat function, personal data may be transferred to the US within the scope of data processing. In order to ensure an adequate level of data protection in accordance with the provisions of the GDPR, we have conducted standard contractual clauses with the data processor in accordance with Art. 46 Para. 2 lit. c GDPR.
Further information about data privacy can be found here:
If you would like to book an appointment with us, you can use the form provided. The data provided by you will then be transmitted via Calendly to the respective contact person and the data will be entered into our calendar (Outlook). In addition, the data can be viewed and stored in the Calendly login area.
You will receive a confirmation of the appointment by email, where you have the option to enter the data into your calendar.
The purpose of processing the provided data is to be able to arrange an appointment, process the contact request and get in touch with you. The legal basis for the processing of personal data described here is Art. 6 par. 1 lit. f GDPR. It is our legitimate interest to offer you the opportunity to arrange appointments with us independently. This simplifies the coordination with regard to appointments and enables an efficient appointment arrangement.
The personal data will be deleted as soon as they are no longer necessary for the purpose of their collection.

Application Form

You can send us applications using our online application form. Further information on data protection when sending application documents can be found at

Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. "("Google"). Google Analytics uses so-called "cookies" and web beacons. The information generated in relation to the use of this website is transferred by default to a Google server in the USA and stored there. We use Google Analytics only with IP anonymization enabled. This means that Google will reduce the IP address of users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area, which may exclude any personal relationship. Google Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your given consent.
On behalf of the operator of this website, Google will use this information to analyse your use of the website and to generate reports on website activity. Google also uses this information to provide other services related to the use of the website and the internet to the website operator. The IP address sent by your browser as part of Google Analytics is not combined with other Google data. The terms of use of Google Analytics and information on data protection can be accessed via the following links:
You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. However, we must point out that in this case you will not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at
A click on the following link prevents Google Analytics from collecting data by setting an opt-out cookie:
disable Google Analytics

Google Ads

We use Google Ads on this website. Google Ads is an online advertising service, which enables advertisers to display ads in Google search engine results as well as Google advertising networks. The advertiser can predefine keywords which lead to the appearance of the advertisement as soon as the user searches for content relevant to the keyword. In the Google advertising networks, advertisements are displayed with the help of an automatic algorithm taking the predefined keywords into account. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. "("Google"). The purpose for using Google Ads is the advertisement of our website by displaying relevant advertising on third party websites and Google search engine results, as well as displaying third party advertising on our website. When a user comes on our website via Google Ads, Google sets a conversion cookie on the information technology system of the person concerned. A conversion cookie expires after thirty years and is not used to identify the person. The conversion cookie allows us, amongst other things, to identify if specific subpages were visited or the shopping cart of the shop system was used. The conversion cookie enables us as well as Google to identify, whether a person, who visited our website vie Google Ad, generated profit by buying our products/services. Data which are collected by the conversion cookie are used by Google to create visitor statistics for our website. These statistics are used by us to determine the overall visits based on advertisements in order to figure out the success of the respective advertisements to ultimately optimise their use. Our companies as well as advertising customers of Google do not receive information which could be used to identify a person concerned. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your given consent. During every visit of our website, personal data, including the IP-address of the person concerned, are transferred to Google. The personal data may be stored by Google in the USA. The person concerned can prevent the setting of cookies and permanently object it by adjusting the browser settings. This setting would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. Additionally, cookies that have already been set by Google Ads can be deleted at any time via the browser or other software programs. Furthermore, the person concerned has the possibility to object targeted advertising by Google. Therefore, the person concerned has to view the link for each browser they use at and change the settings. More information and the applicable privacy regulations of Google can be viewed at

Google Marketing Platform (formerly DoubleClick)

This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google").
DoubleClick uses cookies to serve ads that are relevant to you. This involves assigning a pseudonymous identification number (ID) to your browser or device to help us verify which ads have been displayed on your browser and which ads have been viewed. This can improve campaign performance or, for example, prevent you from seeing the same ad more than once. Google may also use cookie IDs to track conversions related to ad requests. For example, when a user sees a campaign manager ad and later visits the advertiser's website using the same browser and makes a purchase. According to Google, the cookies do not contain any personal information. If you have given us your consent, the data will be processed in accordance with Art. 6 para. 1 lit. a GDPR.
Due to the technology used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at
Alternatively, you can deactivate the DoubleClick cookies on the following page:
For more information about the Google Marketing Platform, please visit and for general information about Google's privacy policy, please visit


With regard tothe operation of our LinkedIn presence, we are jointly responsible withLinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Whenvisiting our LinkedIn page, LinkedIn collects personal data of the users (e.g.through the use of cookies). Certain information about your visit to ourLinkedIn page is also collected and processed by LinkedIn if you do not have aLinkedIn user account or are not logged in to LinkedIn. For information on datacollection and further processing by LinkedIn, please refer to LinkedIn'sprivacy policy: can find more information about cookies when using LinkedIn in the cookiepolicy at:


Furthermore,there is a data processing agreement between us and LinkedIn, which you canaccess here: Forthe purpose of demand-oriented design and continuous optimisation of our pages,we use the tool "LinkedIn analyses", in which data is collectedstatistically. We receive anonymous statistics from LinkedIn on the use andusage of our LinkedIn page. In this context, the following information, forexample, is provided and processed by us: Evaluation of followers (e.g. numberof people who follow us), information on reach (e.g. number of people who seeour specific posts), evaluation of ad performance (e.g. information on how manypeople see our ads). We cannot link this statistical data with the profile dataof our subscribers. Furthermore, no conclusions can be drawn about individualusers. We use the data to constantly improve our online offer on LinkedIn andto better respond to the interests of our users. The data may be transferred tocountries outside the European Union. More about this at:

Online meetings, conference calls and webinars via "Zoom"

We use "Zoom" to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: "Online Meetings"). "Zoom" is a service of Zoom Video Communications, Inc. which is based in the USA.
Note: If you access the "Zoom" website, the provider of "Zoom" is responsible for data processing. However, calling up the internet site is only necessary for the use of "Zoom" in order to download the software for the use of "Zoom".
You can also use "Zoom" if you enter the respective meeting ID and, if necessary, other access data for the meeting directly in the "Zoom" app.
If you do not want to or cannot use the "Zoom" app, the basic functions can also be used via a browser version, which you can also find on the "Zoom" website.

  1. Processing of personal data
    Various types of personal data is processed when using "Zoom". The scope of the data also depends on the information you provide before or during participation in an "online meeting".
    The following personal data is processed:
    User details: first name, last name, telephone (optional), e-mail address, password (if "Single-Sign-On" is not used), profile picture (optional),
    Department (optional)
    Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
    For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
    When dialling in by phone: information on incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.
    Text, audio and video data: You may be able to use the chat, question or survey functions in an "online meeting". To this extent, the text entries you make are processed in order to display and, if necessary, log them in the "online meeting". In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device is processed for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time using the "Zoom" applications.
    In order to participate in an "online meeting" or to enter the "meeting room", you must at least provide information about your name.
  2. Scope of processing
    We use "zoom" to conduct "online meetings". If we want to record "online meetings", we will inform you transparently in advance and - if necessary - ask for your consent. The fact of the recording will also be displayed in the "Zoom" app.
    If it is necessary for the purpose of recording the results of an online meeting, we will log the chat content. However, this will usually not be the case.
    In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and follow-up webinars.
    If you are registered as a user at "Zoom", reports on "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored for up to one month at "Zoom".
    Automated decision-making within the meaning of Art. 22 GDPR is not used.
  3. Legal basis of data processing
    The legal basis for data processing in connection with "online meetings" is Art. 6 para. 1 lit. b) GDPR, insofar as the meetings are held within the framework of contractual relationships.
    If no contractual relationship exists, the legal basis is Art. 6 para. 1 lit. f) GDPR. Here too, we are interested in the effective implementation of "online meetings".
  4. Recipient / transfer of data
    Personal data processed in connection with participation in "online meetings" is generally not passed on to third parties unless they are specifically intended to be passed on. Please note that content from "online meetings", as well as in personal meetings, often serves precisely to communicate information with customers, interested parties or third parties and is therefore intended for disclosure.
    Other recipients: The provider of "Zoom" necessarily obtains knowledge of the above-mentioned data, insofar as this is provided for in our contract processing agreement with "Zoom".
  5. Data processing outside the European Union
    "Zoom" is a service provided by a provider from the USA. Processing of personal data therefore also takes place in a third country. We have concluded a data processing agreement with the provider of "Zoom" which meets the requirements of Art. 28 DSGVO.
    An adequate level of data protection is guaranteed by the conclusion of the so-called EU standard contractual clauses.

External links

On our website (LinkedIn) is solely embedded as a link to the respective service. After clicking on the embedded text/image-link you will be directed to the website of the respective provider. User information will be only transferred after the redirection to the respective provider. Information regarding the use of your personal data through the use of the website can be found in the privacy policies of the visited websites.

Data Transfer and Recipients

Your personal data is not transferred to third parties, unless
• we have explicitly pointed this out in the description of the respective data processing.
• you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the transfer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms.
• there is a legal obligation to transfer data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• required by Art. 6 para. 1 sentence 1 lit. b GDPR for the execution of contractual relationships with you.
In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular, these contracts concern web hosting services, the dispatch of emails and IT updates and maintenance. Your personal data will not be transferred to third parties by our service providers.

Storage period

The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right of withdrawal or objection.

Your Rights

In the following, you will find information about your data subject rights, which the current data protection law grants you against the controller concerning the processing of personal data:
The right, pursuant to Art. 15GDPR, to obtain information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure or personal data or restriction of processing of personal data concerning you or to object such processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences.
The right to obtain without undue delay the rectification of inaccurate personal data concerning you. in accordance with Art. 16 GDPR.
The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right of freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
The right, pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, but you oppose the erasure and we no longer need the data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR.
The right, in accordance with Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us in in a commonly used and machine-readable format and the right to transmit those data to another controller.
The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR with effect in the future at any time.
The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work.
The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your given consent concerning the processing of your personal data with effect for the future at any time. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

Right to object

If your personal data is processed by us based on legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object at any time to the processing of your personal data on grounds relating to your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of stating a particular situation.
If you wish to exercise your right of withdrawal, objection or any of your other rights, simply send an e-mail to

Subject to change

We reserve the right to adapt or update this privacy policy, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take account of changes to our services, e.g. the introduction of new services. The most current version applies to your visit.

Status of this privacy policy: 10.11.2022