This Privacy Policy explains how VYNOXE LLC ("VYNOXE", "we", "us") collects, uses, and protects your personal data when you visit our website or engage our services. It applies to all visitors and clients based in the European Union and complies with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
01 Data Controller
The data controller responsible for processing your personal data is:
Vynoxe LLC
30 N Gould St Ste R
Sheridan, WY 82801, USA
Email: contact@vynoxe.com
Phone: +1 307-200-8170
EU Representative pursuant to Art. 27 GDPR:
Confidential
Hirschgartenallee 19
80639 München, Germany
02 Data We Collect
We collect personal data only where necessary and with a lawful basis. The categories of data we process include:
Contact & Enquiry Data
When you submit a contact form or send us an email, we collect: your name, email address, phone number (if provided), and the content of your message.
Technical & Usage Data
When you visit our website, our servers and analytics tools automatically record: your IP address (anonymised), browser type and version, operating system, referring URL, pages viewed, and visit duration.
Cookie Data
We use cookies and similar tracking technologies. See Section 6 for full details.
Client Project Data
When you engage VYNOXE as a client, we process business contact details, project briefs, and any assets you share with us solely for the purpose of delivering our services. This data is covered by our client agreement.
03 Why We Collect It — Legal Bases (Art. 6 GDPR)
| Purpose | Legal Basis | Details |
|---|---|---|
| Responding to contact form submissions | Art. 6(1)(b) — contract / pre-contract | Processing is necessary to respond to your request and potentially enter a service agreement. |
| Website analytics & performance | Art. 6(1)(a) — consent | We use Google Analytics only after you have given explicit cookie consent. |
| Google My Business presence | Art. 6(1)(f) — legitimate interest | Maintaining a verifiable business profile is a legitimate business interest. You may object at any time. |
| Delivering contracted services | Art. 6(1)(b) — contract performance | Processing client data is necessary to fulfil our contractual obligations. |
| Legal compliance & record-keeping | Art. 6(1)(c) — legal obligation | We retain certain data to comply with German tax and commercial law. |
04 Retention Periods
We keep your personal data only for as long as necessary for the stated purpose, or as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Contact form enquiries (non-client) | 12 months from last contact, then deleted |
| Client project data | Duration of contract + 3 years (limitation period) |
| Invoices & financial records | 10 years (§ 257 HGB / § 147 AO) |
| Google Analytics data | 14 months (configured retention in GA4) |
| Server access logs | 7 days, then auto-deleted |
05 Third-Party Tools & Processors
Google Analytics 4
We use Google Analytics 4 (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyse website traffic. GA4 uses anonymised IP addresses and does not create individual user profiles without consent. Data may be transferred to Google servers in the USA. Google is certified under the EU–US Data Privacy Framework. We have activated IP anonymisation and data sharing restrictions. You can opt out via Google Analytics Opt-out Browser Add-on. Legal basis: your cookie consent (Art. 6(1)(a) GDPR).
Google My Business
VYNOXE maintains a Google My Business profile. If you interact with our listing (e.g., leave a review, send a message), that interaction is governed by Google's Privacy Policy. We process your name and review content only to respond to feedback. Legal basis: Art. 6(1)(f) GDPR — legitimate interest.
Contact Forms
Contact form submissions are transmitted via encrypted HTTPS and delivered to our business email. We do not use third-party form processors that store your data on external servers beyond your email provider and ours. All form data is treated as outlined in Sections 2 and 4.
Hosting & Infrastructure
Our website is hosted with Vercel, Inc., USA. The hosting provider processes IP addresses and server logs only for technical operation and security. We have a Data Processing Agreement (DPA) in place.
06 Cookies & Tracking
We use cookies to operate and improve our website. A cookie is a small text file stored in your browser. You can control cookies through your browser settings or our consent banner.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Analytics | Google Analytics — distinguishes users, tracks sessions | 2 years |
| _gid | Analytics | Google Analytics — distinguishes users | 24 hours |
| vynoxe_cookie_consent | Functional (essential) | Stores your cookie consent preference | 12 months |
Analytics cookies are set only after you grant consent. Essential cookies required for site operation are exempt from consent requirements under §25 TDDDG.
To withdraw consent at any time, clear your cookies or adjust your preferences via our cookie banner.
07 Your Rights Under GDPR
As a data subject in the European Union, you have the following rights:
You may request a copy of all personal data we hold about you.
You may ask us to correct inaccurate or incomplete data.
You may request deletion of your data where no legal obligation requires us to retain it.
You may request your data in a structured, machine-readable format.
You may object to processing based on legitimate interest or for direct marketing at any time.
You may ask us to restrict processing while a complaint is pending.
To exercise any of these rights, contact us at contact@vynoxe.com. We will respond within 30 days.
You also have the right to lodge a complaint with your national supervisory authority. In Germany: Bundesbeauftragter für den Datenschutz (BfDI).
08 International Data Transfers
VYNOXE LLC is incorporated in Wyoming, USA. When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place:
- Google LLC (USA) — covered by the EU–US Data Privacy Framework (Art. 45 GDPR adequacy decision).
- VYNOXE LLC (USA) — we rely on Standard Contractual Clauses (SCCs, Art. 46(2)(c) GDPR) and our EU Representative to ensure GDPR compliance.
Copies of applicable transfer mechanisms are available on request.
09 Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include:
- TLS/HTTPS encryption for all data transmitted to and from our website.
- Access controls — only authorised personnel can access personal data.
- Regular security reviews of our infrastructure and third-party tools.
- IP anonymisation in Google Analytics.
In the event of a data breach affecting your rights and freedoms, we will notify the competent supervisory authority within 72 hours and inform affected individuals without undue delay, as required by Art. 33–34 GDPR.
10 Contact for Data Requests
For any privacy-related question, request, or complaint, contact our data protection point of contact:
Vynoxe LLC — Data Privacy
Email: contact@vynoxe.com
Post: Hirschgartenallee 19, 80639 München, Germany
Please include "Data Privacy Request" in the subject line and provide sufficient information to verify your identity. We will respond within 30 calendar days.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on this page with a revised "Last updated" date at the top. For material changes, we will provide additional notice (e.g., a notice on our homepage). Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
A German-language version (Datenschutzerklärung) is available at vynoxe.com/de/datenschutz.