Privacy notice

1. Controller

The controller for the processing of personal data described here is:

Represented by Saba Moradmand Jalali and Nicoline Schmälzger (managing directors). Email: info@bytehiker.de.

2. General information

We process personal data only as needed to provide this website and the platform features described here, communicate with prospective customers and business partners, and prepare or conduct the ByteHiker pilot phase. Processing is governed in particular by the General Data Protection Regulation (GDPR).

3. Website and server logs

When you visit this site, the hosting provider may process technically necessary information such as IP address, access date and time, requested pages and files, browser and operating system details, referring URL, and technical status data.

Where necessary, processing serves secure, reliable website operation. The legal basis is Article 6(1)(f) GDPR. Data is deleted when no longer necessary for this purpose unless a statutory retention period applies.

Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

This website is hosted on servers in Germany.

4. Contacting us

If you contact us by email, the contact form, or another channel, we process the details you provide to handle your request. This may include your name, organization, email, event type, expected participant range, and message.

Contact form submissions are sent directly to our servers and stored in our internal enquiry inbox. Authorized staff can handle the enquiry, record its status, and add internal notes. Our team receives an email notification containing your details. We do not send an automatic confirmation email to you.

To protect the form from abuse, we limit submission rates. We temporarily store a hash derived from the IP address and a request counter; these entries are deleted after the rate limiting period.

Where contact concerns a potential contract or pilot arrangement, Article 6(1)(b) GDPR applies. Otherwise, Article 6(1)(f) GDPR applies to our legitimate interest in responding to business enquiries. Data is deleted once the request is resolved unless retention duties or other legitimate grounds apply.

5. Pilot enquiries

Organizers interested in a pilot may contact us. We may process contact details, organization, event type and scale, participant numbers, current workflows, requested functions, and voluntarily supplied information to assess a potential collaboration and prepare or conduct a pilot.

Article 6(1)(b) GDPR applies when preparing a pilot agreement; otherwise Article 6(1)(f) GDPR applies to our legitimate interest in testing and developing the product.

6. Cookies and similar technologies

The current static website does not use cookies or comparable technologies. If analytics, marketing, or other nonessential technologies are introduced later, they will generally be used only after consent, with details added here and, where applicable, in a consent tool.

7. Recipients

We may use external providers for hosting, IT infrastructure, email communication, web development, and potentially analytics or communication services. Where a provider processes personal data on our behalf, the appropriate processing agreements are concluded.

7.1 Firecrawl: website import during organization setup

When organizers use their website to help set up their organization, we use Firecrawl, provided by SideGuide Technologies, Inc. (USA), to retrieve publicly accessible pages and prepare organization details from their content. The website URL and the URLs of pages to be retrieved are sent to Firecrawl.

The retrieved content may include organization names, descriptions, contact details, and addresses. Publicly available information can also be personal data, such as names, individual email addresses, or a sole trader's address.

Further information: Firecrawl privacy policy.

7.2 Geoapify: address search and resolving coordinates

We use Geoapify for address search and to resolve map coordinates to an address in the organizer platform. The search text or selected coordinates, together with technical request data, are sent to Geoapify through our servers. An entered address can be personal data if it can be linked to a particular person.

Further information: Geoapify privacy policy and provider information.

These services are called when the corresponding platform feature is used. Visiting this website alone does not trigger a request to Firecrawl or Geoapify. We do not send participant lists, booking records, or payment data through these integrations.

8. Transfers outside the EU/EEA

If a provider may process personal data outside the European Union or European Economic Area, such transfers take place only under applicable GDPR conditions.

Firecrawl states in its privacy policy that it processes and stores data on servers in the USA. Website import may therefore involve a transfer to the USA. The location of our own servers in Germany does not automatically apply to processing by external services.

9. Storage duration

Personal data is generally retained only as long as necessary for its processing purpose. Statutory retention duties remain unaffected.

10. Your rights

Subject to legal requirements, data subjects have rights of access, rectification, erasure, restriction of processing, data portability, objection to certain processing, and withdrawal of consent for the future. You may also lodge a complaint with a data protection authority.

11. Updates

We update this notice if the website, technologies, or processing practices change.