Privacy policy

As the operators of the website www.kyroshydrogensolutions.com (“Website”), Kyros Hydrogen Solutions GmbH (“Kyros” or “we” or “us”) takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. We would like to inform you which of your personal data we collect and process on our Website and why. 

1. General Definitions 

We base our Privacy Policy on the terms used in the General Data Protection Regulation (GDPR), including the definitions below: 

‘Personal data’ is any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by a reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (cf. Art. 4 no. 1 GDPR).  

‘Processing’ means any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (cf. Art. 4 no. 2 GDPR). 

‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (cf. Art. 4 no. 7 GDPR). 

‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller (cf. Art. 4 no. 8 GDPR). 

‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data (cf. Art. 4 no. 10 GDPR). 

‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her (cf. Art. 4 no. 11 GDPR). 

2. Controller and Contact Details  

The controller processing personal data within the meaning of the GDPR is: 

Kyros Hydrogen Solutions GmbH

Bahnhofstraße 32a
96524 Föritztal OT Neuhaus-Schierschnitz 

+49 367647840 

info@kyroshydrogensolutions.com

This Privacy Policy meets our obligations to inform in connection with processing your personal data under Art. 12 – 14 GDPR. 

Should you wish to see and update your personal data, or should you have any questions about data protection on our Website, you are welcome to contact us by e-mail at info@kyroshydrogensolutions.com or by post at the address above at any time. 

You can contact our data protection officer as follows: 

By e-mail: kyros.privacy@kyroshydrogensolutions.com or  

By post:  At the controller’s postal address, quoting ‘FAO data protection officer’ 

3. Processing your Personal Data 

How much of your personal data we process and how depends on whether you contact us via our Website or merely use our Website for information purposes. You can exercise your rights in respect of the data processing processes described below at any time (see section 7 below).  

3.1 Collecting Data with Your Assistance  

When you use this Website, we collect and store your personal data if you provide it of your own accord, e.g. when contacting us via the contact form. You are always free to decide whether to let us have your data for the purposes concerned.  

3.1.1 Enquiries via e-mail  

If you e-mail us, we store your e-mail address and any personal content the message contains (legal basis is Art. 6 (1) f) GDPR). We only do this so we can process your enquiry. 

If your enquiry is product-related, e.g. request a quote, etc., we process your personal data to set up or implement contractual relations (legal basis is Art. 6 (1) b) GDPR).  

We will delete the data concerned once there is no further purpose in keeping it. You can also exercise your rights when it comes to processing this data at any time (see section 7 below), particularly the data processing concerned. 

3.1.2 Enquiries via Contact Form 

If you contact us via one of our contact forms, we collect and store the personal data you enter in the fields concerned. This includes in particular: 

• Type of request 
• E-mail address* 
• Reference and message in text field (depending on what is entered)* 

Details marked * are mandatory fields without which we cannot process your enquiry. 

We only use this personal data to process your enquiry and save it if there are any follow-on questions. To answer your queries, we may forward them to our company’s internal contact concerned (legal basis is Art. 6 (1) f) and/or in case your enquiry is product related, Art. 6 (1) b) GDPR). 

We will delete the data concerned once there is no further purpose in keeping it. You can also exercise your rights when it comes to processing this data at any time (see section 7 below), particularly the data processing concerned. 

3.2 Collection Data without Involving You  

We record and use personal data which is generated automatically when you visit our Website to provide our services. 

3.2.1 Logfiles and (session) cookies 

If you visit our Website, our servers will record your personal data temporarily in logfiles as follows: 

• Your computer’s IP address  
• The client’s file request (filename and URL) 
• http status code 
• The website you are visiting us from 

We process your personal data based on our legitimate interest in discovering abuse (spam, viruses etc.) and detecting and correcting problems (legal basis is Art. 6 (1) f) GDPR).

At a number of points, our Website also uses ‘cookies’ to make our product more user-friendly and effective. Cookies are little text files which aim to put our Website on your computer and/or other Internet-capable devices like tablets or smartphones. If your browser settings accept cookies, your browser will add this text in a little file. 

The cookies we use are necessary for our Website to work and perform unless this Privacy Policy says otherwise. There are two different kinds of cookies which sites may use, ‘session cookies’ and ‘persistent cookies’. Session cookies are temporary, staying on your device until you leave our Website again, while persistent cookies remain on your device or until you delete them manually, even once you leave. How long a cookie remains on your device depends on how long its ‘lifetime’ is. We use the information in the cookies we need solely to offer you the services and functions you want. 

Cookies themselves do not damage your computer, and do not contain any viruses. You can set your browser so these cookies cannot be saved in the first place or are deleted when your Internet session ends, but please remember in that case you may not be able to use everything our Website can do. 

3.2.2 Embedding Videos via YouTube  

We embed YouTube videos in our online offer; these are saved at https://www.youtube.com and can be played direct from our Website. YouTube is provided by a third party which is not affiliated with us, YouTube LLC, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

We use YouTube’s embed function in ‘extended data protection mode’, which according to YouTube’s information does not store any user information until a video starts being played. At the moment an embedded video starts being played, YouTube uses cookies to collect information on how users behave: it does this irrespective of whether YouTube provides a user account which you logged in via or whether there is no user account. If you log into Google, your data is assigned directly to your Google account. If you do not want YouTube to assign you via your profile, you must log out before activating the button.  

Even if users are not logged in, YouTube saves your data amongst other things to collect video statistics, make itself user-friendlier and suppress abuse.  

To find out more about what YouTube collects and processes data and to what extent, see their data protection statement. This also tells you more about your rights and settings available to protect your privacy: https://www.google.de/intl/de/policies/privacy.  

Google also processes your personal data in the USA. 

3.2.3 Matomo

This website uses Matomo, a web analytics service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, to analyze user behavior and to improve our website on a regular basis. With the help of the statistics obtained, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 No. 1 a) GDPR. Matomo therefore only sets cookies in your local browser, if you have given your express consent to do so.

The information collected in this way is stored only on our server, it includes namely the following data:

• One byte (last three digits) of the IP address of the user’s calling system;
• The website you visited;
• The website from which the user has got to the accessed website (referrer);
• The subpages that have been visited of the website;
• The time spent on the website;
• The frequency of access to the website.

This website uses Matomo with a “PrivacyManager”-Plugin. Thereby IP-addresses are processed in a shortened way; a direct identification of a user can be excluded. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.

We operate our web analysis software on our own servers and do not pass on any personal data to any third parties, except when our technical support is used (e.g. in the context of software updates).

You can revoke your consent at any time with effect for the future by deactivating tracking in the checkbox below or delete all Cookies set via your local Browser settings. Matomo also includes the so-called “Do not Track” setting, which can be set individually in many modern browsers.

Matomo is a free open source software where many developers from different countries and with different technical backgrounds are dedicated themselves. Further information about Matomo can be found at matomo.org/.

You have the option to prevent that your activities on the Website are analyzed. This will protect your privacy, but will also prevent us from learning from your activities and improve usability for you and other users.

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

You are not opted out. Uncheck this box to opt-out. You are currently opted out. Check this box to opt-in.

The tracking opt-out feature requires cookies to be enabled.

4. Disclosing Data to Other Third Parties 

We may need to share data with other third parties (in addition to the third parties with whom we share data in connection with the website tools and features described above) in strict compliance with applicable data protection laws. 

4.1 Disclosure to External Service Providers  

When providing content support and designing our online profile, we may have to allow external service providers to access personal data (particularly IT service providers).   

In that case, they deal with your personal data only as we expressly instruct based on a data processing agreement under Art. 28 GDPR. In signing this agreement, service providers guarantee us they will provide their services in accordance with current data protection law. Drawing on professional suppliers of such services is expressly provided for by law and serves our legitimate interest in being able to professionalise what we offer you and offer it commercially rationally (under: Art. 6 (1) f) GDPR). We are still responsible for protecting your data. The service providers we disclose your data to in this connection are as follows: 

Complianz

On our Website a cookie consent technology “Complianz GDPR/CCPA Cookie Consent” of the company Complianz B.V., Kalmarweg 14-5 9723 JG, The Netherlands (hereinafter “Complianz”) is used. 

We use Complianz to obtain your consent to store certain cookies from third-party providers (in particular Matomo) on your terminal device, to document this in accordance with data protection regulations and thus to ensure the full functionality of our Website. For this purpose, a connection to Complianz’s servers is set up when you access our Website in order to obtain your consent and other declarations regarding cookie use. Complianz then sets a cookie in your browser to allocate and/or withdraw consents granted to your browser.  

The use of Complianz cookie consent technology takes place in order to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 (1) c) GDPR. 

The technically necessary cookies from Complianz are deleted automatically after 12 months, unless you delete it beforehand via the browser setting. To find out more about how Complianz processes data disclosed see their Privacy at https://complianz.io/legal/privacy-statement/?cmplz_region_redirect=true&cmplz-region=eu.  

You can prevent the collection and processing of your data by Complianz by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ). 

4.2 Statutory Disclosure 

We reserve the right to disclose your personal data if the law, the authorities or criminal prosecution authorities require us to. We do not disclose any data to third parties otherwise. 

5. Location of Data Processing and Data Security 

Your data is processed mostly in Germany: it is not sent outside the European Union or Economic Area unless it is established that this offers a reasonable level of protection as defined in Art. 45 (2) GDPR. To protect your data against unauthorised access and misuse, we have taken extensive state of the art technical and organisational security precautions under European data protection law (Art. 32 GDPR) and concluded agreements under Art. 28 GDPR if we use contract processing.

6. Deleting and Blocking Personal Data 

We process and store data subjects’ personal data only for as long as is necessary to achieve the reason we store it or for as long as the legislators require. 

If we no longer need to store personal data, or the law does not require it to be stored any longer, we block or delete it as the law requires unless the data subject concerned consents to our saving and continuing to process it.

7. Data subjects’ rights

Right to be informed: you can demand that we tell you without charge how much data we save, where it comes from, who we send it to and what we store it for at any time (Art. 15 GDPR). To exercise your right to information, you can contact any member of Kyros’s staff or data protection officer.  

Right to data portability: you can get your personal data you provide us with in a structured, commonly used machine-readable format (Art. 20 GDPR), provided (1) you consent to its being processed under Art. 6 (1) a) GDPR or Art. 9 (2) a) GDPR or is based on a contract under Art. 6 (1) b) GDPR and (2) it is processed by automated procedures. 

Right to rectification: the data subject shall have the right to obtain from the controller without undue delay the rectification of personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement (Art. 16 GDPR). 

Right to erasure (‘right to be forgotten)’: the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without delay and the controller shall have the obligation to erase personal data without due delay where one of the following grounds applies (Art. 17 GDPR): (1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (2) the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1), or point (a) of Article 9 (2), and where there is no other legal ground for the processing; (3) the data subject objects to the processing pursuant to Article 21 (1) and there are no overriding legitimate grounds for the processing; (4) the personal data have been unlawfully processed; (5) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. 

Right to object: the data subject shall have the right to object to processing of personal data concerning him or her at any time (Art. 21 GDPR). 

If a data subject objects, we will not process the personal data concerned any more unless we can show overriding legitimate grounds for processing it which outweigh the data subject’s interests, rights and freedoms or processing serves to assert, exercise or defend claims in law. If we process personal data to engage in direct advertising, the data subject has the right to object to that personal data being processed for the purposes of such advertising at any time. 

Right to withdraw consent under data processing law: The data subject shall have the right to withdraw his or her consent at any time (Art. 7 para. 3 GDPR). 

Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, particularly in the Member State in which you are resident, in which you work or where the supposed breach was committed if you believe that processing personal data concerning you is a breach of the GDPR (Art. 77 GDPR). 

If you assert your rights against us, we will examine it and uphold it unless the law requires otherwise, and notify you of the outcome. 

You do not have to observe any particular formalities to claim your data subject rights. You can e-mail us at kyros.privacy@kyroshydrogensolutions.com, for example or use the contact details on our Website. 

8. Updates and amendments

We may update or amend parts of this Privacy Policy without telling you first. Please check our Privacy Policy before using our offer to check for any updates and/or amendments and if it is the latest version.