Data Protection

Last updated: September 2026

Thank you for your interest in pyropower GmbH. Below we explain which personal data we process when you visit our website or contact us, for what purposes and on what legal basis.

1. Controller

pyropower GmbH
Burger Chaussee 25, 03044 Cottbus, Germany
Phone: +49 355 866 870 82
Email: info@pyro-power.com
Managing directors: Lucie Töpfer, Steffen Sebastian Kießling

We have not appointed a data protection officer, as we are not legally required to do so. For any data protection questions, please contact us at the address above.

2. Hosting and server log files

Our website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. The servers are located in the EU. We have concluded a data processing agreement with Raidboxes.

When you visit the website, the server automatically stores information transmitted by your browser: IP address, date and time of access, page visited, referrer URL, browser type and version, operating system and amount of data transferred. We need this data to deliver the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website). Log files are deleted automatically after a short period unless they are needed to investigate a security incident.

To protect against attacks, our host uses server-side security software (Imunify), which evaluates IP addresses and request data for this purpose. The legal basis is also Art. 6(1)(f) GDPR.

The website is encrypted via SSL/TLS, recognisable by “https://” in the address bar.

3. Cookies and consent management (Borlabs Cookie)

We use the WordPress plugin Borlabs Cookie to manage your consent. Borlabs Cookie stores your choice in a cookie on your device; no data is transferred to third parties. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR and Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

We set technically necessary cookies on the basis of Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All other cookies and similar technologies are only used with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie icon on the website.

4. Contact form and customer management (HubSpot)

We use HubSpot for our contact form and to manage customer and prospect contacts. The provider is HubSpot Ireland Limited, HubSpot House, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland; its parent company is HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA.

When you submit the form, we process the information you provide (first name, last name, company, email address, phone number, message) as well as the time and page of the request in order to handle your enquiry and get in touch with you. The same applies if you contact us by email or phone.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries and maintaining business relationships).

Our HubSpot data is stored in data centres in the USA. HubSpot, Inc. is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission. In addition, we have concluded a data processing agreement with HubSpot including EU Standard Contractual Clauses.

We delete your data once your enquiry has been fully dealt with and no business relationship arises, and at the latest when statutory retention periods expire (e.g. six years for business correspondence under Section 257 of the German Commercial Code).

5. Newsletter

Our newsletter covers news about pyropower GmbH, Pyro-ClinX, projects and events. You will only receive it if you actively tick the corresponding box in the contact form.

We use the double opt-in procedure: after signing up, you receive an email asking you to confirm your subscription. Only then do we send the newsletter. We store the time of sign-up and confirmation as well as your IP address so that we can prove your consent.

The newsletter is sent via HubSpot (see section 4). We analyse whether and when a newsletter is opened and which links are clicked in order to improve our content. This analysis is part of your consent.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future via the unsubscribe link in every newsletter or by email to info@pyro-power.com. After you unsubscribe, we keep your email address only on a suppression list so that you receive no further newsletters (Art. 6(1)(f) GDPR).

6. Online appointment booking (HubSpot Meetings)

We provide booking links via HubSpot Meetings for scheduling appointments (provider: see section 4). When you book, we process your name, email address, the chosen time slot and any other information you provide. The appointment is matched against our Microsoft 365 calendar. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR.

7. Email and video conferencing (Microsoft 365 and Microsoft Teams)

We use Microsoft 365, including Microsoft Teams, for email, calendars and video conferencing. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

When you email us or join a Teams meeting, we process your contact details and the content of the communication, and for Teams meetings also your name, audio and video data, chat messages and connection data (e.g. IP address, time, duration). We only record meetings after prior notice. The legal basis is Art. 6(1)(b) GDPR where the communication concerns the preparation or performance of a contract, otherwise Art. 6(1)(f) GDPR.

Data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Microsoft.

8. Web analytics (Google Analytics 4)

With your consent, we use Google Analytics 4, integrated via the WordPress plugin Google Site Kit. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics records how visitors use our website, e.g. pages viewed, time spent, where the visit came from, and device and browser information. IP addresses are truncated by Google within the EU and not stored. The data is deleted after two months. Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Google.

The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Without consent, Google Analytics does not set any cookies. You can withdraw your consent at any time via the cookie icon.

9. Multilingual content and search engine optimisation

We use the WPML plugin for our language versions and the Yoast SEO plugin for search engine optimisation. Both run on our own server and do not transfer visitor data to third parties. WPML may store your language choice in a technically necessary cookie.

10. Links to social networks

Our website links to our profiles on LinkedIn, Instagram and YouTube. These are simple links, not embedded plugins. No data is transferred until you click a link and visit the platform, where the provider’s privacy policy applies: LinkedIn Ireland Unlimited Company (Dublin), Meta Platforms Ireland Limited (Instagram, Dublin) and Google Ireland Limited (YouTube, Dublin).

For the statistics of our LinkedIn company page and our Instagram profile, we are jointly responsible with the respective provider (Art. 26 GDPR). The providers make the corresponding agreements available in their terms of use. You can also exercise your rights directly with the provider.

11. Fonts (Google Fonts)

Our website loads fonts (Google Fonts) from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In doing so, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (consistent presentation of the website). We are currently switching to local hosting.

12. Job applications (Connectoor)

We use the recruiting software Connectoor, provided by jobEconomy GmbH, Meinekestraße 26, 10719 Berlin, Germany, for job postings and managing applications. The servers are located in Germany. We have a data processing agreement with the provider.

We process the data you send us with your application (e.g. contact details, CV, references) solely to decide on an employment relationship. The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG). If you are not hired, we delete your documents six months after the end of the application process. We only keep them longer, for example for future vacancies, with your consent (Art. 6(1)(a) GDPR).

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). Simply contact info@pyro-power.com.

Right to object: Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). You may object to processing for direct marketing at any time without giving reasons (Art. 21(2) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Brandenburg Commissioner for Data Protection and Access to Information (Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

14. Storage period and obligation to provide data

Unless stated otherwise in this policy, we only store your data for as long as necessary for the respective purpose or as required by statutory retention periods. You are not obliged to provide us with personal data; however, without your contact details we cannot answer your enquiry. We do not use automated decision-making, including profiling.

15. Changes

We update this privacy policy when our website or the services we use change. The version published here applies.