Privacy Policy

Last Updated: July 13, 2025

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as „Data“) within our online offering and its associated websites, features, and content.

 

1. Data Controller

The party responsible for data processing on this website (the „controller“) in accordance with the General Data Protection Regulation (GDPR) is:

Qybera
Donnerstr. 43
22763 Hamburg, Germany

Email: support@qybera.com
Phone: +49 176 41101546
Website: https://qybera.com/

 

2. Types of Data Processed

• Contact Data: (e.g., name, email address, phone number) when you contact us.
• Usage Data: (e.g., websites visited, access times, click behavior).
• Meta/Communication Data: (e.g., device information, IP addresses).
• Contract Data: (e.g., subject of the contract, customer number) when you order a product.
• Payment Data: (e.g., bank details, credit card information) when you make a purchase.

 

3. Purpose of Processing

• Provision of our online offering, its functions, and content.
• Responding to contact requests and communicating with users.
• Implementation of security measures and spam prevention.
• Fulfillment of our contractual obligations and customer services.

 

4. Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR): For operations where we obtain your consent for a specific purpose (e.g., use of certain cookies or services like Google Maps).
• Contract Fulfillment (Art. 6(1)(b) GDPR): For processing required to perform a contract (e.g., processing an order).
• Legal Obligation (Art. 6(1)(c) GDPR): For processing where we are legally required to do so (e.g., for tax purposes).
• Legitimate Interests (Art. 6(1)(f) GDPR): For processing based on our legitimate interests (e.g., to ensure the secure and spam-free operation of our website).

 

5. Data Collection on Our Website

a) Server Log Files
When you access our website, our hosting provider automatically collects and stores information in server log files. This data is processed to ensure a smooth connection and secure operation of the website based on our legitimate interest (Art. 6(1)(f) GDPR). We have concluded a Data Processing Agreement (DPA) with our hosting provider, Hostinger.

b) Cookies
Our website uses cookies. These are small text files that are stored on your device. Our website platform (WordPress with Elementor) and payment plugins (WooPayments) use essential cookies to ensure basic functionality, manage shopping carts, and process sessions. The use of non-essential cookies is based on your consent (Art. 6(1)(a) GDPR), which you can provide via our cookie consent banner.

[You should still verify and list all specific cookies your site uses here, along with their purpose and duration.]

c) Contact Form and Email Contact
If you contact us via our contact form or by email, the data you provide will be stored by us to process your request. The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to a contract, or on our legitimate interest (Art. 6(1)(f) GDPR) in all other cases. To protect our forms from spam, we use Google ReCaptcha (see Section 7).

d) Data Processing for Order Fulfillment (WooPayments)
When you order a product, we process your personal data to fulfill the contract (Art. 6(1)(b) GDPR). For payment processing, we use the WooPayments service, which may process your payment through its partners, including Stripe, PayPal, Klarna, Apple Pay, and Google Pay. During the payment process, your payment data (e.g., name, credit card number, bank account details) will be transmitted to the respective payment service provider. We only receive information confirming whether the payment was successful. We have no access to your sensitive credit card or bank data.

 

6. Your Rights as a Data Subject

You have the following rights regarding your personal data under the GDPR:

• Right of Access (Art. 15 GDPR): The right to obtain information about your data processed by us.
• Right to Rectification (Art. 16 GDPR): The right to request the correction of incorrect or incomplete data.
• Right to Erasure / „Right to be Forgotten“ (Art. 17 GDPR): The right to request the deletion of your data.
• Right to Restriction of Processing (Art. 18 GDPR): The right to request a restriction on the processing of your data.
• Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): The right to object to the processing of your data.
• Right to Withdraw Consent (Art. 7(3) GDPR): The right to withdraw your consent at any time.
• Right to Lodge a Complaint (Art. 77 GDPR): The right to lodge a complaint with a supervisory authority.
  
  

To exercise your rights, please contact us using the details provided in Section 1.

 

7. Third-Party Services

a) Google ReCaptcha
To protect our contact forms from spam and automated abuse, we use the Google ReCaptcha service from Google Ireland Limited. ReCaptcha analyzes your behavior (e.g., mouse movements, IP address) to determine whether you are a human user or a bot. This serves our legitimate interest in securing our website (Art. 6(1)(f) GDPR). Data may be transferred to Google servers in the USA. For more information, please see Google’s Privacy Policy: https://policies.google.com/privacy.

b) Google Maps
This site may use the Google Maps service to display interactive maps and provide directions. This service is provided by Google Ireland Limited. To display the maps, it is necessary for Google to process your IP address. The use of Google Maps is based on your consent (Art. 6(1)(a) GDPR), which you typically provide via our cookie consent banner. For more information, please see Google’s Privacy Policy: https://policies.google.com/privacy.

 

8. Data Security

We use appropriate technical and organizational security measures, including SSL/TLS encryption, to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.

 

9. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to adapt it to changing legal situations or changes in our services and data processing. We encourage you to review this Privacy Policy regularly.