Privacy Policy

Last updated: May 2026

1. Controller

Draxon GmbH

c/o WeWork Wallarkaden

Pilgrimstraße 6

50674 Cologne, Germany

2. Hosting

This website is hosted by Vercel Inc. (San Francisco, USA). When you access our site, Vercel processes your IP address and technical metadata (browser type, operating system, referrer URL) to deliver the page and ensure system security. This processing is based on our legitimate interest in the secure and efficient operation of our website (Art. 6(1)(f) GDPR). Technical log files are automatically deleted or anonymized by the provider after a short period. Data transfer to the USA is legally secured through Vercel's active certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR Adequacy Decision), supplemented by a Data Processing Agreement incorporating EU Standard Contractual Clauses.

3. Contact Form

When you use our contact form, we collect your name, email address, and message. This data is processed via Resend Inc. (USA) and delivered to support@draxon.com. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual inquiries). Data transfer to the USA is legally secured through Resend's active certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR Adequacy Decision), backed by a Data Processing Agreement incorporating EU Standard Contractual Clauses. We retain your inquiry until it is resolved, or until statutory retention requirements under German commercial and tax law expire.

4. Newsletter

If you subscribe to our newsletter, we collect your email address. We send the newsletter only after you confirm your subscription (double opt-in). The legal basis is your consent (Art. 6(1)(a) GDPR). You may unsubscribe at any time via the link in each email. Upon unsubscription, your email address is deleted immediately. You may withdraw your consent at any time with future effect.

5. No Cookies

We do not use cookies or similar tracking technologies.

We use Vercel Web Analytics to collect anonymous aggregated usage statistics for the improvement and operation of our website.

6. Data Retention

We retain personal data only for as long as necessary to process inquiries and comply with legal obligations.

7. Your Rights

Under GDPR, you have the right to:

Access your personal data (Art. 15)
Rectify inaccurate data (Art. 16)
Request erasure (Art. 17)
Restrict processing (Art. 18)
Data portability (Art. 20)
Object to processing (Art. 21)

To exercise any of these rights, email info@draxon.com.

8. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Draxon GmbH is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Postfach 20 04 44

40102 Düsseldorf

https://www.ldi.nrw.de