FYMARO

Privacy

This notice explains how personal data is processed when you visit our website or submit a project enquiry.

1. Controller

Email: info@fymaro.de

2. Providing the website

We use Namecheap Shared Hosting, on the Stellar Plus plan, with the EU server region selected. The provider is Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA.

When you access the website, the hosting provider processes technical access data, including your IP address, access time, requested address, response status, volume of data and, where applicable, the referring page and details of your browser and operating system. This data is processed in server logs to provide the website, diagnose errors and maintain security. The legal basis is our legitimate interest in these purposes under Article 6(1)(f) GDPR.

The retention periods for provider logs and backups depend on operational and security needs, backup rotation and any statutory requirements. Namecheap describes retention under its data processing arrangements as linked to providing its services and meeting legal requirements.

3. Project enquiries and email

In the project dialogue, you choose the project type, a relevant context answer, your main goal and an approximate timeframe. An investment range and any written details are optional. To submit, we require your name and email address; your company, a phone number for questions and additional information are optional. We use this information to understand your project, respond and prepare for a possible collaboration. The same applies when you email us directly.

The legal basis for specific precontractual and contractual enquiries is Article 6(1)(b) GDPR. For other business enquiries, our legitimate interest in responding applies under Article 6(1)(f) GDPR. The checkbox acknowledges that you have read this notice; it is not marketing consent.

Only when you submit the enquiry are your selections, name, email address, language and any optional phone number, details and investment range transferred to our server over HTTPS. Your details are then sent using encrypted transmission through Namecheap Private Email to info@fymaro.de. FYMARO receives the enquiry; Namecheap provides hosting and email services. We currently do not transfer enquiries to HubSpot or subscribe you to a newsletter.

We keep the enquiry and subsequent correspondence for as long as needed to respond or work together, unless legal retention duties or necessary legal claims require longer.

Using the dialogue is voluntary. Name, email and acknowledgement of this notice are required to submit; you can email us directly instead. Your selections and text remain only in the open page's memory, including when you close and reopen the dialogue. They are not stored in cookies or persistent browser storage. Reloading the page clears an unsubmitted draft. “Start again” resets it.

4. Form security

To prevent abuse and duplicate submissions, the server processes cryptographic verification values derived from the IP address and enquiry, as well as a random request identifier, timestamps and sending status. These verification values are pseudonymised. No additional enquiry database containing names, contact details or message text is created for this purpose.

Attempt counters cover one hour; duplicate prevention and sending status cover 24 hours. Expired entries are removed the next time the form is processed. The legal basis is Article 6(1)(f) GDPR and our interest in a secure, reliable enquiry process.

5. Service providers and possible processing outside the EU

Namecheap is a US provider. Selecting an EU region for the web server does not mean that all processing, particularly for email, support or subcontractors, takes place exclusively in the EU. Namecheap’s Data Processing Addendum governs processing on our behalf and provides for the European Commission’s Standard Contractual Clauses for relevant transfers to third countries. The contractual safeguards can be viewed there. Further details are available in Namecheap’s privacy policy.

6. Cookies, fonts and external content

Our website uses no analytics or advertising trackers and stores no tracking cookies. Fonts, brand images and animation libraries are served from our hosting. No external font, video or social media services are embedded. External websites are opened only when you click their links. After the logo intro, we show a privacy and cookie notice. If you confirm it with “Accept”, we save only that acknowledgement under fymaro-privacy-notice-v1 in this browser tab’s sessionStorage. It survives a reload and is discarded when the tab session ends. Its sole purpose is to apply your explicitly chosen display setting; it is not consent to analytics or advertising. You can reopen the notice using “Privacy notice” in the footer. The website remains usable without acknowledging it.

For the intro, we store a flag under fymaro_arrival_seen_v1 in this browser tab’s session storage to record whether it has finished or been skipped. This prevents it from replaying on every visit within the same tab session. The entry applies only to that session, contains no enquiry details and is not sent to our server. You can replay the intro using “Watch intro” in the footer.

7. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw any consent you have given at any time with effect for the future. For requests concerning your data, contact info@fymaro.de.

8. Right to object

Where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation (Article 21 GDPR). We will then stop processing it unless we can demonstrate compelling legitimate grounds or the processing is needed for legal claims.

9. Complaints and decisions

You can lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the suspected infringement. In Schleswig-Holstein, this is the Independent Centre for Data Protection Schleswig-Holstein.

We do not make automated decisions about accepting your project and do not carry out profiling. Your details are used to prepare for a personal conversation.

Policy and translation dated 1 November 2026

English translation · Deutsche Fassung