Privacy Policy

This privacy policy explains what personal data we process when you visit kybernautik.xyz, on what legal basis, and which rights you have. We keep this website deliberately lean: it sets no cookies of its own, uses no advertising or cross-site tracking, and asks you for no personal data unless you choose to contact us.

1. Controller

The controller responsible for data processing on this website is:

Kybernautik Advisory GmbH
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main
Germany

Represented by Andreas Fauler (Managing Director)
Email: kontakt@kybernautik.xyz
Register entry: Amtsgericht Frankfurt am Main, HRB 125485
VAT ID: DE348045028

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR and § 38 BDSG.

2. Hosting and server log files

This website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA, and delivered through a content delivery network. When you access a page, your browser automatically transmits technical information that is stored in server log files:

  • the IP address of the requesting device
  • date and time of the request
  • the page or file requested
  • referring URL, browser type and version, and operating system

This data is required to deliver the website, to maintain its stability and security, and to detect and investigate misuse. The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). The data is not merged with other data sources and is not used to identify you personally.

Webflow acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. Data may be processed in the United States. For these transfers we rely on Webflow's certification under the EU–U.S. Data Privacy Framework and, in addition, on the EU Standard Contractual Clauses (Art. 45 and 46 GDPR).

3. Cookies

This website does not set any cookies of its own. We use no tracking cookies, no advertising cookies, and no cross-site identifiers. For this reason, no cookie consent banner is required.

If your browser shows cookies while visiting this site, they usually originate from browser extensions you have installed, not from this website.

4. Web analytics with Plausible

To understand how this website is used, we use Plausible Analytics, a privacy-focused analytics service operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.

Plausible is expressly designed to work without personal data:

  • no cookies are set and no persistent identifiers are created
  • all data is processed and stored exclusively on servers within the European Union
  • raw IP addresses and user-agent strings are never stored; they are used only briefly to generate an anonymous daily counting value, and the salt used for this is deleted every 24 hours
  • visitors cannot be recognised across days, devices, or websites

We only receive aggregated statistics such as page views, referral sources, approximate country, browser, and device type. The legal basis is our legitimate interest in the needs-based design and continuous improvement of our website (Art. 6(1)(f) GDPR). Because no information is stored on or read from your device, § 25 TDDDG does not require consent.

5. Web fonts

To display our typography consistently, this website loads fonts and a font loader script from external servers. When a page is loaded, your IP address is transmitted to the respective provider; without this, the fonts could not be delivered to your browser.

Adobe Fonts

Fonts are provided by Adobe Fonts, a service of Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA. Within the EEA, Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible. According to Adobe, no cookies are set for the purpose of font delivery.

Google web font loader

Our website builder loads a font loader script from a Google server (ajax.googleapis.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The legal basis for both services is our legitimate interest in a consistent and appealing presentation of our website (Art. 6(1)(f) GDPR). Insofar as data is transferred to the United States, the providers are certified under the EU–U.S. Data Privacy Framework and additionally rely on the EU Standard Contractual Clauses (Art. 45 and 46 GDPR).

6. Booking an appointment via Calendly

Our website links to Calendly for scheduling a consultation. The link is a plain hyperlink: no data is transmitted to Calendly while you are merely browsing our site.

If you follow the link and book an appointment, this takes place on the infrastructure of Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA, which processes the data you enter there (such as name, email address, and appointment details) in order to arrange the meeting. The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). Please refer to Calendly's own privacy policy for details of their processing.

7. Contacting us by email

If you contact us by email, the details you provide — such as your name, email address, and the content of your message — are processed by us in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your message relates to a contract or pre-contractual measures, and otherwise our legitimate interest in responding effectively to enquiries addressed to us (Art. 6(1)(f) GDPR).

We retain this correspondence until the purpose no longer applies — for example once your enquiry has been fully dealt with — unless statutory retention obligations under commercial or tax law require us to keep it longer (regularly six or ten years under § 257 HGB and § 147 AO).

8. Encryption

This website uses TLS encryption (recognisable by "https://" and the padlock symbol in your browser) to protect the transmission of content between your browser and our server.

9. Your rights

Under the GDPR you have the following rights regarding your personal data:

  • the right of access (Art. 15 GDPR)
  • the right to rectification (Art. 16 GDPR)
  • the right to erasure (Art. 17 GDPR)
  • the right to restriction of processing (Art. 18 GDPR)
  • the right to data portability (Art. 20 GDPR)
  • the right to object to processing based on legitimate interests (Art. 21 GDPR)
  • the right to withdraw consent at any time, with effect for the future, where processing is based on consent (Art. 7(3) GDPR)

To exercise these rights, an informal message to our contact address is sufficient: kontakt@kybernautik.xyz

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority competent for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany

You may also address the supervisory authority of your habitual residence or place of work.

10. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

11. Changes to this privacy policy

We update this privacy policy whenever changes to our website or to the services we use make it necessary, so that it always reflects the current legal requirements.

Last updated: September 2026