Privacy Policy

Last updated: July 2026

1. Controller

Draxon GmbH

c/o WeWork Wallarkaden

Pilgrimstraße 6

50674 Cologne, Germany

2. Hosting

This website is hosted by Vercel Inc. (San Francisco, USA). When you access our site, Vercel processes your IP address and technical metadata (browser type, operating system, referrer URL) to deliver the page and ensure system security. This processing is based on our legitimate interest in the secure and efficient operation of our website (Art. 6(1)(f) GDPR). Technical log files are automatically deleted or anonymized by the provider after a short period. Data transfer to the USA is legally secured through Vercel's active certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR Adequacy Decision), supplemented by a Data Processing Agreement incorporating EU Standard Contractual Clauses.

3. Contact Form

When you use our contact form, we collect your name, email address, and message. This data is processed via Resend Inc. (USA) and delivered to support@draxon.com. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual inquiries). Data transfer to the USA is legally secured through Resend's active certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR Adequacy Decision), backed by a Data Processing Agreement incorporating EU Standard Contractual Clauses. We retain your inquiry until it is resolved, or until statutory retention requirements under German commercial and tax law expire.

4. Newsletter

If you subscribe to our newsletter, we collect your email address. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the consent checkbox when signing up. We record the time of your consent. You may unsubscribe at any time via the link in each email. Upon unsubscription, your email address is deleted immediately. You may withdraw your consent at any time with future effect.

5. No Cookies and Web Analytics

We do not use cookies or similar tracking technologies.

We use Vercel Web Analytics and Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, EU) to collect anonymous aggregated usage statistics for the improvement and operation of our website. Both services are cookieless and do not store personal data. Processed data includes the page accessed, the referring website, browser and device type, and the country of access, which is derived from the IP address without the IP address being stored. The legal basis is our legitimate interest in understanding aggregate website usage (Art. 6(1)(f) GDPR). Plausible processes and stores all analytics data within the EU.

6. Data Retention

We retain personal data only for as long as necessary to process inquiries and comply with legal obligations.

7. Your Rights

Under GDPR, you have the right to:

Access your personal data (Art. 15)
Rectify inaccurate data (Art. 16)
Request erasure (Art. 17)
Restrict processing (Art. 18)
Data portability (Art. 20)
Object to processing (Art. 21)

To exercise any of these rights, email info@draxon.com.

8. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Draxon GmbH is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Postfach 20 04 44

40102 Düsseldorf

https://www.ldi.nrw.de