Legal
Privacy Policy
How Hyground GmbH processes personal data, the legal bases, and your rights as a data subject under the GDPR.
Controller: Hyground GmbH, Versmannstraße 2, 20457 Hamburg, Germany Last updated: 16.01.2026
We, Hyground GmbH ("Hyground" or "we"/"us"), would like to thank you for visiting our website and for your interest in our services. This privacy policy, in accordance with Article 13 of the EU General Data Protection Regulation ("GDPR"), outlines how we handle, protect, and process your personal data in connection with your use of our services, our online offer and your browsing activities on our website.
A. General Information
I. Definitions
- "Personal data" – Any information relating to an identified or identifiable natural person (e.g. name, address, email addresses, user behaviour).
- "Processing" – Any operation performed on personal data, such as collection, recording, storage, use, disclosure or destruction.
- "Controller" – The natural or legal person which determines the purposes and means of the processing of personal data.
- "Processor" – A natural or legal person which processes personal data on behalf of the controller.
- "Profiling" – Automated processing of personal data to evaluate certain personal aspects relating to a natural person.
II. Controller
Hyground GmbH Versmannstraße 2 20457 Hamburg Germany E-Mail: info@hyground.ai
B. Processing of Personal Data
I. Visiting the Website
When you visit our website without transmitting data in any other way, we collect the following data temporarily via server log files:
- IP address
- Date and time of the enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (page visited)
- Access status / HTTP status code
- Amount of data transferred
- Previously visited page
- Browser type
- Operating system used
- Language and version of the browser software
- Host name of the accessing computer
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest) and Art. 6 para. 1 sentence 1 lit. c GDPR (legal obligation / data security).
II. Contacting Us
We process data provided through our contact form:
- Name
- Company name
- Company email
- Reason for contacting us
- Any additional information in the message field
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract / pre-contractual measures), Art. 6 para. 1 sentence 1 lit. a GDPR (consent), or Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest).
III. Cookies
We use cookies on certain areas of our website. Some are session cookies (deleted after your visit); others remain until you delete them.
Technically Necessary Cookies
Used to ensure basic functionality, security and proper operation of our website. Legal basis: Section 25 para. 2 TDDDG.
Analytics and Marketing Cookies (Consent-Based)
Only set with your explicit consent. Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR and Section 25 para. 1 TDDDG. You may revoke consent at any time via the cookie settings link in the footer.
Analytics Cookies – Google Analytics (GA4)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
| Cookie | Purpose | Retention |
|---|---|---|
_ga |
Distinguishes unique users | 2 years |
_ga_* |
Maintains session state | 2 years |
IP addresses are anonymised before storage. A data processing agreement has been concluded with Google.
Marketing Cookies – Google Ads
Provider: Google Ireland Limited.
| Cookie | Purpose |
|---|---|
_gcl_aw |
Google Ads click information |
_gcl_dc |
DoubleClick click information |
_gcl_au |
Google Ads conversion linker |
_gcl_gb |
Google Ads conversion tracking |
No directly identifiable personal data is stored by us.
Marketing Cookies – LinkedIn Insight Tag
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
| Cookie | Purpose | Retention |
|---|---|---|
li_fat_id |
Member identifier for conversion tracking | 30 days |
li_giant |
Group identifier for conversion tracking | 7 days |
See LinkedIn's Cookie Policy for a complete list.
Marketing Cookies – HubSpot
Provider: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA.
| Cookie | Purpose | Retention |
|---|---|---|
hubspotutk |
Visitor identifier across sessions | 13 months |
__hstc |
Main tracking cookie | 13 months |
__hssc |
Session tracking | 30 minutes |
__hssrc |
Browser restart detection | Session |
See HubSpot's Cookie Documentation.
Google Tag Manager
Used solely as a technical tool to deploy other tags (Google Analytics, Google Ads, LinkedIn) in a consent-based manner. Does not itself set cookies or process personal data. Only loaded after consent is given.
IV. Customers, Business Partners and Interested Parties
Data processed in the context of contractual or pre-contractual relationships:
- Inventory data (name, address, company, location)
- Contact details (email, telephone)
- Payment data (bank details, billing information, payment history)
Legal basis: Art. 6 para. 1 sentence 1 lit. b, c and f GDPR.
V. Newsletter / E-Mail Marketing
We require your email address to send newsletters. Registration uses a double opt-in process.
Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent).
You may unsubscribe at any time via the unsubscribe link in each newsletter or by contacting us. If your email address was obtained in connection with a sale, we may use it for similar product marketing under § 7 para. 3 UWG and Art. 6 para. 1 sentence 1 lit. f GDPR, unless you object.
VI. Third-Party Tools
1. Google Tag Manager
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data transfers to the USA are covered by the EU-US Data Privacy Framework (DPF) and EU Standard Contractual Clauses (SCCs). Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR / Section 25 para. 1 TDDDG. More info: Google Privacy Policy
2. Google Analytics (GA4)
Provider: Google Ireland Limited. IP addresses are anonymised. A data processing agreement has been concluded. Transfers to the USA are covered by DPF and SCCs. Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR / Section 25 para. 1 TDDDG. More info: Google Privacy Policy | Google Cookies Documentation
3. Google Ads
Provider: Google Ireland Limited. Used for conversion tracking and remarketing. No directly identifiable personal data stored by us. Transfers covered by DPF and SCCs. Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR / Section 25 para. 1 TDDDG.
4. LinkedIn Insight Tag
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Used for conversion tracking, retargeting and analytics. Data is encrypted and pseudonymised within 7 days. LinkedIn provides only aggregated reports. Transfers to the USA are covered by DPF and SCCs. Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR / Section 25 para. 1 TDDDG. More info: LinkedIn Privacy Policy | LinkedIn Cookie Policy
5. HubSpot
Provider: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA.
HubSpot Forms – Collects: name, company name, company email, reason for contact, additional message field content. Legal basis: Art. 6 para. 1 sentence 1 lit. b or f GDPR.
HubSpot Meetings – Collects: name, email, selected date/time, additional booking information. Legal basis: Art. 6 para. 1 sentence 1 lit. b and f GDPR.
HubSpot Tracking – See cookies section above. Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR / Art. 6 para. 1 sentence 1 lit. a GDPR (where consent required).
HubSpot is certified under the EU-US DPF and SCCs have been concluded. More info: HubSpot Privacy Policy
6. Microsoft Bookings
Provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland. Used to manage and schedule appointments. Data collected includes name, email and appointment details. A DPA has been concluded with Microsoft. Microsoft may process data for its own business purposes as an independent controller. Transfers to the USA are covered by DPF and SCCs. More info: Microsoft Privacy Statement
VII. Online Presence on Social Media
We operate social media presences on:
- LinkedIn – LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland | Privacy Policy
- Xing – New Work SE, Am Strandkai 1, 20457 Hamburg, Germany | Privacy Policy
Use of these platforms and their features is at your own responsibility. When you visit our social media sites, the platform providers may collect your IP address and other data via cookies, including for transfer to countries outside the EU.
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR.
VIII. Storage and Deletion of Data
Personal data is deleted when:
- Consent is revoked, or
- The purpose for processing no longer applies, or
- Statutory retention periods expire.
We only store data as long as necessary for the respective processing purpose.
C. Your Rights as a Data Subject
You have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Object to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
- Withdraw consent at any time (for future processing only)
Right to Object: You may object at any time to processing based on Art. 6 para. 1 lit. e or f GDPR, including profiling. We will stop processing unless we can demonstrate compelling legitimate grounds.
To exercise your rights, contact: info@hyground.ai
You also have the right to lodge a complaint with a data protection supervisory authority.
D. Data Processing When Accessing Linked Content
This privacy policy applies only to this website. External links lead to third-party sites outside our control. Please consult those sites' privacy policies for information on their data handling.
E. Automated Decision-Making / Profiling
No automated decision-making or profiling takes place.
F. Changes to This Privacy Policy
This privacy policy may be amended from time to time due to website development, changes to our services, or legal requirements.
For questions regarding the processing of your data, contact us at any time: contact@hyground.ai
© 2026 Hyground. All rights reserved.