The security of your data is very important to us.
1. Introduction
The protection of your personal data is an important concern for us. This privacy policy explains which personal data we collect, how we process this data and for what purposes it is used. You will also receive information about the rights to which you are entitled under the General Data Protection Regulation (GDPR) and how you can exercise these rights.
Our privacy policy applies to all services and offers that we provide via our website and apps. Personal data is collected both automatically and provided directly by you. This data is necessary in order to properly offer you our services and to meet legal requirements.
We undertake to treat your data confidentially and securely and to use it only within the framework of applicable laws.
2. Who we are
We, Cryon UG, are the controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR). Our company specialises in IT services and operates this website to offer our services and provide information.
Contact information of the controller:
Cryon UG
Landsberger Straße 35
04157 Leipzig
Germany
Tel.: +49 (0) 341 978 54900
Email: info@cryon.gmbh
For any questions regarding data protection or the processing of your personal data, you can reach us at any time using the contact details provided.
3. Types of data collected
We collect various types of data in order to provide you with our services, ensure the functionality of the website and apps and fulfil our legal obligations. The data we collect can be divided into the following categories:
Personal data
Personal data is information relating to an identified or identifiable natural person. This data includes, among others:
First and last name
Email address
Phone number
Postal address
Payment information (when using paid services)
Company-related information, such as company name and number of employees
We collect this data either directly when you use our website or apps, or through forms you provide, such as contact or registration forms.
Automatically collected data
When using our website and apps, certain data is collected automatically without you having to actively enter it. This includes:
IP address
Browser type and version
Operating system
Referrer URL (the previously visited website)
Date and time of access
Pages viewed and interactions on the website
Device information (e.g. unique device identifiers, operating system version)
This data is collected predominantly through the use of cookies and other tracking technologies and helps us improve the user experience and ensure the security of our systems.
Voluntarily provided data
In addition to personal data and automatically collected data, you can voluntarily provide us with further information, for example when you:
Take part in surveys or feedback forms
Sign up for our newsletter
Take part in prize draws or promotions
This voluntarily provided information may include additional contact details, preferences or opinions that help us further improve our services and tailor them to your needs.
4. Purposes of data collection
Your personal data is collected for various purposes relating to the provision and improvement of our services as well as compliance with legal requirements. Below we explain the main purposes of data collection:
Provision of services
We use your personal data to provide you with our IT services and to enable smooth use of our website and apps. This includes:
The management of user accounts and access
The provision of technical support and customer service
The processing of contracts and the provision of the services you have booked
The improvement of our services by analysing user interactions on our platform
Compliance with legal obligations
As a company, we are obliged to comply with certain legal requirements. Your personal data is therefore also processed in order to fulfil these legal obligations, in particular:
To comply with tax and commercial retention obligations
To provide information to authorities or other competent bodies in the context of legal proceedings
To comply with the provisions of the General Data Protection Regulation (GDPR)
Communication with users
We also process your data in order to communicate effectively with you, in particular:
To respond to enquiries you send us via contact forms or by email
To send important information about changes to our services or legal documents (e.g. updates to the privacy policy)
To send marketing and promotional information, provided you have consented (e.g. newsletter)
Your data is processed exclusively for the purposes stated in this privacy policy and is not used for other purposes unless we have received your explicit consent.
5. Data processing and methods
The processing of your personal data takes place according to established procedures and methods aimed at processing your data securely and in accordance with applicable data protection laws. Below we explain how your data is processed, which third parties are involved and where the processing takes place.
How we process data
We process your personal data in a lawful and transparent manner. In doing so, we ensure compliance with technical and organisational measures to guarantee the security of your data. Data processing takes place predominantly through computerised systems, although manual processes may also be applied. The most important processing methods include:
Collection, storage and management of data in our systems
Analysis of usage data to improve our services
Ensuring access to our services, including the management of access rights and authentication
Our data processing is based on the legal grounds set out in the GDPR, such as your consent, the performance of a contract or compliance with legal obligations.
Involvement of third parties
In order to offer our services efficiently, we work in certain areas with third-party providers who process data on our behalf. These third-party providers include:
Hosting providers that ensure the storage and availability of our website and apps
IT service providers that support us with the technical maintenance and further development of our systems
Analytics and marketing platforms that help us understand user behaviour and optimise our communication
These third parties are carefully selected and are contractually obliged to process your data securely and only for the purposes we specify. They act in accordance with applicable data protection laws and the instructions of Cryon UG.
Locations of data processing
The processing of your personal data generally takes place within the European Union (EU) or the European Economic Area (EEA). In certain cases, however, it may be necessary to transfer data to countries outside the EU/EEA, in particular when we work with international service providers. In such cases, we ensure that appropriate safeguards are taken, such as:
Use of standard contractual clauses of the European Commission
The existence of adequacy decisions by the European Commission for the destination country
Further technical and organisational measures to secure your data
We will inform you in advance if a data transfer to countries outside the EU/EEA takes place and, if necessary, obtain your consent.
6. Data retention and deletion
Your personal data is retained only for as long as is necessary to fulfil the specified purposes or to comply with legal obligations. Below we explain the duration of data storage and the process of data deletion.
Duration of data storage
We store your personal data only for as long as is necessary to fulfil the purposes described in this privacy policy. This means that the duration of data storage depends on the type of data collected and the purpose of its processing. The factors influencing the storage period include:
Contractual necessities: Data collected in connection with the provision of our services is retained for the duration of the contractual relationship.
Legal requirements: Certain data is stored for a specified period in accordance with statutory retention periods (e.g. tax and commercial regulations), which can be up to 10 years.
User consent: If data processing is based on your consent, we store the data until you withdraw your consent.
As soon as the data is no longer needed for the intended purposes or legal retention obligations end, the data is deleted.
Process of data deletion
As soon as the retention period ends or you exercise your right to erasure, we delete your personal data according to an established procedure. This ensures that the data is irretrievably removed. Depending on the type of data, deletion takes place in the following ways:
Automated deletion: Many of our systems have automated deletion mechanisms that ensure data is securely deleted after a certain period of time.
Manual deletion: In cases where deletion is not automated, the data is manually removed from our systems and permanently deleted.
Secure destruction of physical storage media: If data is stored on physical storage media, these media are securely destroyed so that access or recovery is impossible.
In certain cases, data may also be anonymised instead of deleted, in particular when longer storage is required for statistical or analytical purposes. In such cases, however, the data is no longer linked to an identifiable person.
7. Rights of users under the GDPR
As a user of our website and apps, you have various rights under the General Data Protection Regulation (GDPR) regarding the processing of your personal data. These rights ensure that you have control over your data and can decide, within the statutory framework, how your data is processed. Below we explain your most important rights.
Right of access
You have the right to obtain confirmation from us as to whether we process personal data concerning you. In addition, you can request information about the following:
The categories of data processed
The purposes of the processing
The recipients or categories of recipients to whom your data has been or will be disclosed
The planned duration of data storage or the criteria for determining this duration
Information about your further rights under the GDPR (e.g. right to rectification, erasure or restriction of processing)
On request, we will provide you with a copy of the personal data undergoing processing.
Right to rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to request the immediate rectification or completion of your data. We will update your details promptly so that they are correct and complete.
Right to erasure
You have the right to request the erasure of your personal data if:
The data is no longer needed for the purposes for which it was collected
You withdraw your consent and there is no other legal basis for the processing
You have objected to the processing and there are no overriding legitimate grounds for the processing
The data has been processed unlawfully
Erasure is required to comply with a legal obligation
Please note that the right to erasure does not apply without restriction. We may continue to retain certain data if this is necessary to fulfil legal obligations.
Right to data portability
You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller if:
The processing is based on your consent or on a contract and
The processing is carried out using automated procedures.
Where technically feasible, you can also request that we transmit the data directly to another controller.
Right to withdraw consent
If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time. The withdrawal does not affect the lawfulness of the processing carried out up to the point of withdrawal. After withdrawal, we will not process your data further unless there is another legal basis for doing so.
8. Cookie policy
Cookies are small text files that are stored on your device when you use our website or apps. They allow us to save your preferences and improve the usability of our services. Below we explain how we use cookies and how you can control the management of these cookies.
Use of cookies
We use cookies and similar tracking technologies to enable various functions on our website and in our apps. The cookies we use can be divided into different categories:
Necessary cookies: These cookies are essential for you to move around our website and use its functions. Without these cookies, certain services cannot be provided, such as access to protected areas of the website.
Functional cookies: These cookies allow us to save your entries and settings (e.g. language or region) in order to offer you an improved and personalised experience.
Analytical cookies: We use these cookies to collect information about user behaviour on our website, e.g. which pages are visited most frequently and how users interact with the website. This data helps us improve the functionality of our website.
Advertising and tracking cookies: These cookies are used to show you personalised advertising based on your interests. They allow us to track which ads have already been shown and to evaluate their effectiveness. Such cookies may be set by third parties, such as Google Ads or Facebook Pixel.
We use both temporary session cookies, which are deleted after you close your browser, and persistent cookies, which remain on your device for a specified period.
Managing cookies
You have control over how cookies are used on your device. You can manage your cookie settings at any time by:
Adjusting your browser settings: In most browsers you can block or delete cookies. The steps for managing cookie settings vary depending on the browser. The "Help" function of your browser provides detailed instructions on how to manage cookies.
Managing your consent: When you first visit our website, you will be asked to set your cookie preferences. You can change or withdraw your consent to the use of cookies at any time via our cookie banner or the cookie settings on the website.
Please note that blocking or deleting cookies may impair the functionality of our website. Some areas and services may no longer work as usual if cookies are disabled.
9. Analytics and third-party services
In order to better understand the use of our website and apps and to optimise the user experience, we use various analytics tools and third-party services. These services collect data about user behaviour and help us analyse traffic on our website, identify user patterns and continuously improve our services.
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to analyse the behaviour of users on our website. Google Analytics uses cookies to collect information about the use of the website, including:
Which pages are visited
How long users stay on the page
Origin of visitors (e.g. via search engines or referring websites)
The data collected is used by Google to create reports on website activity and to provide other services relating to website use. The information collected by Google Analytics is generally transferred to and stored on Google servers in the USA.
IP anonymisation: IP anonymisation is enabled on our website, so that your IP address is truncated within the EU or the EEA before being transmitted to Google. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. This ensures greater protection of your data.
You can object to the collection of your data by Google Analytics by downloading and installing the browser add-on to disable Google Analytics: tools.google.com/dlpage/gaoptout.
Further information about how Google processes data can be found in Google's privacy policy.
Other analytics tools
In addition to Google Analytics, we use other analytics tools to analyse user behaviour on our website and improve the quality of our services. These tools collect data such as page views, click behaviour and time spent on certain pages. The tools used include:
WordPress Stats: An analytics service provided by Automattic Inc. that helps us monitor and analyse visitor activity on our WordPress website.
Meta Pixel (formerly Facebook Pixel): An analytics tool that monitors the effectiveness of our ads on Facebook and Instagram and helps us run targeted advertising.
These analytics tools also use cookies or similar technologies to collect usage data. You have the option of objecting to the use of these tools through the appropriate settings in your browser or withdrawing your consent on our website.
10. Data security measures
We place great importance on the protection of your personal data and employ a variety of technical and organisational measures to ensure its security. These measures are intended to prevent unauthorised access, disclosure, alteration or destruction of your data.
The security measures we employ include:
Encryption: Data transmitted between your browser and our servers is protected by encryption technologies (e.g. SSL/TLS).
Access controls: Access to personal data is strictly regulated and only permitted to authorised employees or service providers who need this data to perform their tasks.
Security protocols: Our IT systems and infrastructures are regularly checked for security vulnerabilities, and we continuously implement measures to improve data security.
Training: Employees who work with personal data are regularly trained in data protection and security policies.
Despite all security precautions, no method of data transmission over the internet or electronic storage can be absolutely secure. However, we make every effort to protect your personal data.
11. Communication channels with users
We use your contact details to communicate with you and respond to your enquiries. This can take place via various communication channels, including:
Email: We use your email address to respond to your enquiries, send you information about our services or inform you about important changes.
Phone: In certain cases we contact you by phone, in particular for urgent enquiries or support cases.
Contact forms: Via our website you can reach us directly using the contact forms provided. The data you enter in these forms is used to process your enquiries.
We use your contact details only for the purposes for which you provided them to us. Without your explicit consent, we will not use your data for marketing purposes unless you have given us your consent to do so.
12. Social media and third-party widgets
Social media platforms and other third-party widgets may be integrated on our website and in our apps, allowing you to share content or access our social media profiles. These functions may collect personal data and transmit it to the respective third-party providers.
The integrated social media services and widgets include:
Facebook: We use the Facebook widget, which allows you to share content directly on your Facebook profile.
Instagram: Via the Instagram widget you can access our Instagram page or share content.
YouTube: In some cases we embed YouTube videos on our website. YouTube may collect data about your use in the process.
These third-party providers use their own cookies and tracking technologies. Information about their data protection practices can be found in the respective privacy policies of the providers.
We have no influence over the data collected by these third-party providers and recommend that you consult their privacy policies before using the widgets.
13. Changes to this privacy policy
We reserve the right to amend this privacy policy at any time in order to adapt it to changed legal provisions or new developments in our services. The current version of this privacy policy is published on our website, and the date of the last update is stated at the end of the document.
If we make significant changes to the privacy policy that affect your rights or the processing of your personal data, we will inform you of this in an appropriate manner. This may take place, for example, through a notice on our website or by email.
It is recommended that you visit this page regularly to keep informed of any changes.
14. Legal basis for data processing
The processing of your personal data always takes place on the basis of one of the following legal grounds under the General Data Protection Regulation (GDPR):
Consent (Art. 6 (1) (a) GDPR): We process your data on the basis of your voluntary and explicit consent, e.g. when you sign up for our newsletter.
Performance of a contract (Art. 6 (1) (b) GDPR): Your data is processed when this is necessary for the performance of a contract, e.g. the provision of a service.
Legal obligation (Art. 6 (1) (c) GDPR): We are obliged to process certain data in order to comply with legal requirements, such as tax or commercial regulations.
Legitimate interests (Art. 6 (1) (f) GDPR): In certain cases we process your data in order to safeguard our legitimate interests, e.g. to ensure IT security or to improve our services. In doing so, we always ensure that your fundamental rights are not adversely affected.
15. How you can exercise your rights
You have the right to exercise the rights granted to you under the GDPR. To do so, you can reach us at any time using the contact details provided in this privacy policy. Your requests regarding the following rights will be processed by us free of charge and within the statutory time limits:
Right of access: You have the right to request information about the personal data we process.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected.
Right to erasure: You have the right to request the deletion of your data, provided there are no legal retention obligations.
Right to restriction of processing: You can request the restriction of the processing of your data.
Right to data portability: You have the right to request the transmission of your personal data to yourself or to another controller in a machine-readable format.
Right to withdraw consent: You can withdraw your consent to the processing of personal data at any time.
To exercise these rights, it is sufficient to send us an email or contact us in writing. We will process your request as quickly as possible and within the statutory time limits.
16. Additional information
Should you have any questions about the processing of your personal data or about this privacy policy, please do not hesitate to contact us. We are happy to provide you with additional information not contained in this statement and to answer your enquiries in detail.
Furthermore, we inform you that, in order to ensure the proper functioning of our website and apps, we in some cases collect data that is not directly personal. This data may be used for the purpose of maintenance, troubleshooting or improving our services.
17. Severability clause
Should individual provisions of this privacy policy be or become invalid or unenforceable, or become invalid or unenforceable after this statement enters into force, the validity of the remaining provisions remains unaffected. The invalid or unenforceable provision shall be replaced by one that comes closest, in a legally effective manner, to the meaning and purpose of the invalid provision. The same applies to any gaps in the provisions.
Last updated: 10 August 2025, 14:00.
