Privacy policy

1. Controller

Dejan Mitrović
c/o Slaviša Čolić
Barbara-von-Eck-Straße 5
93309 Kelheim
Germany

Email: contact@hawzion.com. Privacy requests may be sent to this address or through our contact page.

2. Website delivery and security

Cloudflare provides hosting and network security. Page delivery involves technical information such as IP address, time, requested URL, browser/device details and security events. The purpose is to deliver the website, maintain availability and prevent abuse. The legal basis is our legitimate interest in reliable, secure operation under Article 6(1)(f) GDPR.

The website application does not maintain a contact-message database or record message bodies. Infrastructure providers may retain technical logs needed for service delivery, incident investigation, security and legal obligations. Their retention depends on those purposes and applicable service settings.

3. Contact form and email

Our contact form uses Microsoft Forms. Following the form link opens an external Microsoft page; the corporate website does not automatically embed a Microsoft form or load its scripts. The form asks for an email address and message; your name is optional. Submissions go directly to Microsoft Forms, not through the corporate website's email-sending service. We access the responses and receive notification emails in our Microsoft 365 business mailbox.

For direct email enquiries, we process your email address, message, voluntarily supplied attachments and correspondence metadata. We use contact information to handle the enquiry and reply. The legal basis is Article 6(1)(b) GDPR when necessary for a requested contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Providing information is voluntary and is not a condition for visiting the website. Without an email address and sufficient information, we may be unable to answer. Do not send passwords, access keys, payment-card details or unnecessary sensitive data. Submitted answers are not made publicly available by the public form link.

4. Retention

We keep form responses and correspondence for the time needed to answer and follow up the enquiry. When that purpose ends, they are to be deleted unless statutory retention obligations or the establishment, exercise or defence of legal claims require continued retention. Information retained for those reasons is limited to that purpose. Provider backups and technical records follow the applicable service deletion and security arrangements. These criteria do not imply that automatic deletion has been configured.

5. Providers and international processing

Recipients include authorized people handling the enquiry and the Cloudflare and Microsoft service providers, including their authorized subprocessors. Their data-processing terms govern processing on our behalf. Microsoft also processes technical information needed to operate and secure its own service.

Microsoft Forms storage depends on the tenant and service configuration. A website domain or a visitor's location does not establish data residency. This notice does not promise exclusive EU storage or processing. Technical, support or security processing by the providers may occur outside the European Economic Area, including in the United States. Where applicable, international transfers use an adequacy decision under Article 45 GDPR or safeguards under Article 46, such as standard contractual clauses. Information about the applicable safeguards, or a copy where required, can be requested at our contact address.

Provider information: Cloudflare data-processing terms, Microsoft data-processing terms, Microsoft privacy statement, and Forms storage information.

6. Cookies and automated decisions

The corporate website code does not include advertising pixels or an additional visitor-tracking analytics service. Necessary infrastructure security technologies may still be used. The external Forms page operates under Microsoft's applicable service information. Enquiries do not automatically subscribe you to marketing. We do not use them for automated decisions with legal or similarly significant effects.

7. Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Where consent is the legal basis, you may withdraw it for the future. Contact us using the details above.

You may complain to a competent supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement. In Bavaria, the Bavarian State Office for Data Protection Supervision supervises non-public bodies.