Privacy Notice

The controller responsible for data processing on this website is:

This notice explains how we process personal data when you visit harpocrates-corp.com and use its features (contact form and product waitlist). We process only what is necessary for the purposes described below, and we host our website within the European Union.

When you visit our website, our hosting provider automatically processes technical access data: your IP address, the date and time of the request, the browser type, the referring page, and the resource requested. This data is processed to operate the website securely and reliably. It is not combined with other data sources and is automatically deleted after 14 days.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in the secure and stable operation of the website).

If you contact us through the form on our website or by email, we process the information you provide, your name, email address, and the content of your message, in order to handle your enquiry and any follow-up correspondence.

Providing this information is neither a statutory nor a contractual requirement, but we need your name and email address to respond; without them we cannot process your enquiry. We delete this data once your enquiry has been fully resolved, unless statutory retention obligations require us to keep it longer.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (your consent).

To protect our contact form against automated abuse and spam, we use Cloudflare Turnstile, a bot-detection service provided by Cloudflare, Inc. (United States). When you interact with the form, Turnstile processes technical data, including your IP address and information about your browser and your interaction with the page, to verify that you are not an automated system. Turnstile is designed to be privacy-preserving: it does not use cookies for the bot check and is not used to track you across websites.

Because Cloudflare is based in the United States, this may involve the processing of personal data outside the EU/EEA. That transfer is safeguarded by the EU Standard Contractual Clauses concluded with Cloudflare. Further information is available in Cloudflare’s own privacy policy.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in protecting our systems and this form against abuse). You may object to this processing on grounds relating to your particular situation (Art. 21 GDPR).

If you join a product waitlist, we store your email address so that we can notify you when the product becomes available. You may withdraw your consent at any time by contacting us; withdrawal does not affect the lawfulness of processing carried out before the withdrawal. We delete your email address once you withdraw your consent or once we have notified you that the product is available.

Legal basis: Art. 6(1)(a) GDPR (your consent).

Our website is hosted by Hostinger (HOSTINGER, UAB / Hostinger International Ltd), a provider established in the EU, on servers within the European Union under a data processing agreement pursuant to Art. 28 GDPR. Content is delivered through Hostinger’s own content delivery network, and DNS is operated by Hostinger. Enquiries you send us by email are received in our mailbox hosted through the same provider. Technical connection data such as IP addresses is processed to deliver and secure the site.

This website uses only technically necessary cookies. We use no tracking cookies, no advertising, and no third-party web analytics. The Cloudflare Turnstile bot-check on our contact form (see 4.1) does not set cookies. Because we set only technically necessary cookies, no consent banner is required (§ 25(2) TDDDG).

With a single exception, all processing takes place on infrastructure within the EU/EEA. The exception is the Cloudflare Turnstile protection on our contact form (see 4.1): when you use that form, Cloudflare, Inc. (United States) processes technical data, including your IP address, to verify that you are not an automated system. That transfer is safeguarded by the EU Standard Contractual Clauses concluded with Cloudflare.

We engage the following processors under Art. 28 GDPR data processing agreements:

• Hostinger (EU), website hosting, content delivery (CDN), DNS, and email.
• Cloudflare, Inc. (US) , bot protection (Turnstile) on the contact form only.

We do not sell your personal data, and we do not share it with third parties for their own purposes.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR in connection with this website.

You have the right to:

• access your personal data (Art. 15 GDPR);
• request rectification of inaccurate data (Art. 16 GDPR);
• request erasure (Art. 17 GDPR);
• request restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing based on our legitimate interests (Art. 21 GDPR).

Where processing is based on your consent, you may withdraw that consent at any time (Art. 7(3) GDPR); withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us at info@harpocrates-corp.com. You also have the right to lodge a complaint with a supervisory authority, in particular the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

We may update this notice to reflect changes in our processing activities or in legal requirements. The current version is always available on this page.