Privacy Policy

Last updated: August 2026

Data protection is of a particularly high priority for the management of Adoxin UG (haftungsbeschränkt) ("Adoxin", "we", "us"). The use of our website is generally possible without providing personal data. Where personal data (such as name, email address or telephone number) is processed, this is always done in line with the EU General Data Protection Regulation (GDPR) and the applicable German data protection law. This privacy policy informs you about the nature, scope and purpose of the personal data we process, and about your rights.

1. Controller

2. Hosting (Netlify)

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA ("Netlify"). When you visit our website, Netlify automatically processes technical access data in server log files. This may include: the requested page or file, browser type and version, operating system, referrer URL, date and time of access, and the IP address of the accessing device.

This data is processed to deliver the website reliably and securely, to defend against attacks and to ensure the stability of the service. The legal basis is our legitimate interest in the secure and efficient provision of our website (Art. 6 (1) lit. f GDPR). Log data is not merged with other data sources and is not used to identify individual visitors.

Netlify is based in the USA. Data transfers to the USA are safeguarded by the EU Standard Contractual Clauses and Netlify's data processing terms. Further information: netlify.com/privacy.

3. Fonts and video streaming (Bunny)

This website loads the "Carlito" web font via Bunny Fonts, a service provided by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia, EU. Bunny Fonts is an EU-based, privacy-first alternative to Google Fonts. When your browser loads a page on this site, it establishes a connection to the Bunny Fonts servers (fonts.bunny.net) to download the font files. Bunny Fonts does not use cookies, does not set any tracking identifiers, and — according to their published privacy policy — does not log or store any personal data including IP addresses in connection with font delivery requests. No consent banner is therefore required for this processing. The legal basis is our legitimate interest in presenting our website in a consistent and accessible typeface (Art. 6 (1) lit. f GDPR). Further information: fonts.bunny.net/about.

We also embed videos via Bunny Stream, a video hosting and streaming service of the same provider (BunnyWay d.o.o., Slovenia, EU). When you open a page containing an embedded video, your browser establishes a connection to Bunny's servers (player.mediadelivery.net and associated Bunny CDN domains) to load the player and stream the video content; in doing so, Bunny processes technical connection data (including your IP address) as necessary to deliver the video. Bunny is an EU-based, privacy-focused provider and does not use third-party advertising or cross-site tracking cookies in connection with video delivery. The legal basis is our legitimate interest in presenting our services in an appealing audiovisual form (Art. 6 (1) lit. f GDPR). Further information: bunny.net/privacy.

4. Web analytics (Cabin)

We use Cabin (withcabin.com), a privacy-first web analytics service. Cabin works without cookies, without cross-site tracking and without storing personal identifiers; it collects only aggregated, anonymous usage statistics (e.g. page views, referrers, approximate region derived from a truncated IP address that is not stored). No consent banner is required for this kind of processing. The legal basis is our legitimate interest in understanding and improving the use of our website (Art. 6 (1) lit. f GDPR). Further information: withcabin.com/privacy.

5. Registration and contact forms (Microsoft Forms)

For registrations and inquiries — for example for the Wind Energy Learning Journey — we embed forms provided by Microsoft Forms, a service of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft").

When you open a page containing an embedded form, a connection to Microsoft servers is established and Microsoft may process technical data (such as your IP address). When you submit a form, we process the data you enter — typically your name, company, business contact details and the content of your request — in order to handle your registration or inquiry.

The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures) and, where applicable, Art. 6 (1) lit. f GDPR (our legitimate interest in efficient communication). Microsoft may transfer data to countries outside the EU/EEA; such transfers are safeguarded by the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Further information: Microsoft Privacy Statement.

6. Contact by email or telephone

If you contact us by email or telephone, we process the personal data you provide (name, contact details, content of your message) for the purpose of handling your request. The legal basis is Art. 6 (1) lit. b GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) lit. f GDPR (legitimate interest in answering inquiries). If you prefer not to transmit personal data over the internet, you are free to contact us by telephone.

7. Processing in connection with the Learning Journey

If you register for one of our learning programs, we process the data required for the preparation, execution and administration of the program (e.g. name, employer, contact details, dietary or accessibility requirements you choose to share). Where necessary for the execution of the program, we may share participant names and affiliations with host organizations (e.g. for site-access registration and security procedures), hotels and transport providers. These recipients may use the data exclusively for the respective purpose. The legal basis is Art. 6 (1) lit. b GDPR. Details are set out in our Terms of Service.

8. External links

Our website contains links to external websites (e.g. latoda.de, host organizations, Netlify, Microsoft). This privacy policy does not apply to those external sites; please consult the privacy information of the respective provider.

9. Storage period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods (e.g. under German commercial and tax law, typically 6 or 10 years for business correspondence and accounting records). After expiry, the data is routinely erased.

10. Your rights

As a data subject, you have the following rights under the GDPR:

• Access (Art. 15 GDPR) — to obtain confirmation and information about the personal data we process about you;
• Rectification (Art. 16 GDPR) — to have inaccurate data corrected and incomplete data completed;
• Erasure (Art. 17 GDPR) — to have your data deleted where the legal conditions are met;
• Restriction of processing (Art. 18 GDPR);
• Data portability (Art. 20 GDPR) — to receive data you provided in a structured, commonly used, machine-readable format;
• Objection (Art. 21 GDPR) — to object, on grounds relating to your particular situation, to processing based on Art. 6 (1) lit. e or f GDPR; where we process data for direct marketing, you may object at any time;
• Withdrawal of consent (Art. 7 (3) GDPR) — to withdraw any consent you have given, with effect for the future;
• Complaint (Art. 77 GDPR) — to lodge a complaint with a supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).

To exercise your rights, simply contact us at info@adoxin-group.com.

11. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes to this policy

We may update this privacy policy to reflect changes to our website or legal requirements. The current version is always available on this page.