Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is
H2FLY GmbH
Ausgburger Straße 293
70327 Stuttgart
Phone: +49-711-340300-0
Email: info@h2fly.de
Contact details of the Data Protection Officer
You can contact the Data Protection Officer at
Proliance GmbH
www.proliance.ai
Data Protection Officer
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter@proliance.ai
When contacting the Data Protection Officer, please state the company to which your inquiry relates. Please also refrain from including sensitive information, such as a copy of your ID, with your inquiry.
Privacy notice for visitors to the website
Data processing in connection with web hosting
Usage data and server log files
Description of data processing and purpose
When you visit our website, it is technically necessary for data to be transmitted between your Internet browser and ours for communication purposes. During an ongoing connection for communication between the Internet browser and the web server, the following data is regularly collected:
- IP address of the requesting entity (router or terminal device),
- Date and time of the request,
- Name of the requested file,
- Website from which the file was requested (referrer URL),
- Access status,
- Amount of data transferred,
- Web browser and operating system used,
- Language used.
The listed data is stored in log files and analyzed if necessary.
The purpose of data processing and our legitimate interest lies in ensuring a smooth connection between your Internet browser and our website and the technically error-free provision of our services, as well as in detecting, preventing, and tracking attacks on our website. The log files are used to evaluate system stability, functionality, and security. The processing of this data is absolutely necessary in order to make the website available to you.
Legal basis for data processing
The legal basis for the processing of the data is Art. 6 (1) (f) GDPR.
Recipients
As part of data processing, your data will be transferred to the following categories of recipients or recipients that we use in the context of data processing to achieve the aforementioned purposes
Hosting service providers
Feyer Media Media GmbH
Eibenweg 42
42111 Wuppertal
IT support and administration service provider
Gmospace
Daniel Gmoser
Raistinger Straße 25/5
71083 Herrenberg
In the event of anomalies or attacks, the data may also be passed on in individual cases to:
Information security consultants and IT forensic experts
- Lawyers,
- Investigative authorities,
- courts.
Storage period
For technical security reasons, in particular to defend against attempts to attack our web server, we store this data for a short period of time. After no more than 7 days, the data is anonymized by shortening the IP address at the domain level, so that it is no longer possible to establish a connection to individual users.
In individual cases, the data may be stored for longer in the event of attacks or attempted attacks, insofar as this is necessary until the conclusion of investigations or court proceedings or for the exercise of legal claims.
The data from the log files may be stored and processed in anonymized form for statistical purposes.
Data processing in connection with cookies and similar technologies
Access to and storage of information in terminal equipment
When you use our website, information (e.g., IP address) may be accessed or stored (e.g., cookies) on your terminal equipment. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (2) No. 1 or No. 2 of the German Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG).
If personal data is subsequently processed, this is done on the basis of the GDPR and the German Bundesdatenschutzgesetz (BDSG). We explain this data processing separately in our privacy notice.
Further information on the processing of your personal data and the relevant legal basis in this context can be found in the following sections on the specific processing activities on our website.
Cookies and similar technologies
General information
We use services on this website that employ cookies and similar technologies to store data in your terminal device's browser and to access data that has already been stored. Cookies, your terminal device's local storage and tags may be used for this purpose.
Cookies are small text files that can be stored and read on your terminal device.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored for a certain period of time beyond the individual session. Only session cookies are used on our website.
In addition to cookies, we may use your browser's session storage or local storage to store and read data.
Finally, we may use tags (markers) on our websites. Tags are small HTML or JavaScript code fragments or markers that enable website analysis or user tracking services to distinguish or identify users and track certain user activities.
Further information on the cookies and similar technologies we use can be found below in the descriptions of the categories of cookies.
Please note that without the use of certain cookies and similar technologies, our websites may not be displayed correctly and some functions may no longer be available for technical reasons.
Category "Necessary"
Services in this category may use cookies and similar technologies to store and read information on your terminal device. We use these for the purpose and in the interest of enabling the display of the website and providing its basic functions, in particular page navigation.
Category "Analysis"
Services in this category may use cookies or similar technologies to store and read information on your terminal device. We use these
- to count and distinguish you as an individual website visitor and to perform statistical analyses of your interactions and use of our websites,
- to design our websites in line with demand and adapt them to user interactions,
- to test adjustments to the website and measure user response to them (A/B testing), and
- to monitor the technical functionality of our website and enable troubleshooting.
Use of Digistats
We integrate the "Digistats" service from digistats Analytics Ltd., Täfernstrasse 2A, 5405 Dättwil AG, Switzerland, into our website.
Description of data processing and purpose
The service enables us to evaluate how many users visit our website, from which region, and with which terminal device and browser they access our website. Digistats does not set any cookies or create a unique fingerprint. It only reads information from the terminal device that is already necessarily transmitted to our server when the website is accessed.
In particular, the following types of data are processed by the service:
HTTP header (Accept-Language)
Primary language of the browser being used
HTTP header (referrer)
The Referer field shows the URL that the user last visited and from which they followed a link to the current page
- User-Agent (Viewport-Width)
Displays the visitor's screen resolution. - User-Agent (browser)
Displays the visitor's browser.. - User-Agent (platform)
Operating system (e.g. Windows, Mac, Linux, Android, etc.) - Geolocation (city)
Displays the visitor's city - Geolocation (continent)
Displays the visitor’s continent (e.g. Europe). - Geolocation (country)
Displays the visitor’s country (e.g. Germany). - Events (event)
Shows which links a visitor clicked on and how often. - Landing pages (landing_page)
Shows which links a visitor clicks on and how often. - Visitors (visitors)
Shows how many unique visitors have visited the website. - Time (visitors_hours)
Shows the time the website was first opened. - Page views (pageviews)
Shows how many times a page has been viewed. - Time (pageviews_hours)
Shows the time at which certain websites were opened. - Search engines (search_engines)
Shows which search engine was used to access a website. - Social Media (social_networks)
Shows which social media platforms were used to access a website
Digistats does not store the IP addresses of website visitors. By default, Digistats uses the IP address to provision its geolocation in real time without storing the IP address. This involves an automatic internal database query on Digistats' side to identify the geographical location of a visitor or device.
Digistats uses JavaScript to read data on your terminal device. For more details, see "Data processing in connection with cookies and similar technologies" above.
The purpose of data processing and our legitimate interest is to analyze the use of our website and to optimize our website with this information without continuing to process users' personal data or setting cookies.
Legal basis for data processing
Insofar as we use cookies and similar technologies in connection with the integration of the service, or insofar as data is stored on your terminal device or read from it by the service, this is done in accordance with Section 25 (2) No. 2 TDDDG. Subsequent data processing is based on Art. 6 (1) (f) GDPR.
Recipients
When using Digistats, your data will be transmitted to the following recipients:
- digistats Analytics Ltd., Täfernstrasse 2A, 5405 Dättwil AG, Switzerland
Data processing in third countries
Your data will be transferred to the provider of Digistats, which is based in Switzerland. The EU Commission has issued an adequacy decision for data transfers to Switzerland.
Storage period
By integrating the service on our websites, data is transmitted to the above-mentioned recipients and processed there for as long as is necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this.
Access to "gated content" and consent to receive promotional emails, email tracking
Description of data processing and purpose
We offer users of our website the opportunity to download white papers and similar content of interest to them ("gated content"). This requires the provision of personal data and consent to receive advertising from H2FLY GmbH. When a user clicks on a "Download" button for our gated content, a form opens for the collection of personal data for the purpose of sending the content and subsequent advertising, as well as for the provision of consent.
We process your personal data (first name, last name, business email address for business contacts, private email address for consumer contacts) solely for the purpose of providing you with the requested gated content and subsequently sending you or your company personalized advertising by email and informing you about our own products, services, events, and offers.
Legal basis for data processing
The legal basis for this processing is your consent in accordance with Art. 6 (1) (a) GDPR. Your consent is freely given and can be withdrawn at any time with effect for the future. The withdrawal of your consent does not affect the lawfulness of the data processing that has taken place up to that point. To exercise your right of withdrawal, please use the unsubscribe link in our promotional emails or in the newsletter, or the contact details listed above under "Controller."
We use the double opt-in procedure for advertising communications. This means that we will only send you advertising communications once you have expressly confirmed that you consent to receiving advertising communications. In the first step, you will receive an e mail with a link that you can use to confirm that you, as the owner of the corresponding email address, would like to receive advertising communications in the future.
SStorage period
We store your data for as long as is necessary to achieve the aforementioned purpose, but no longer than we are engaged in advertising activities within the scope of our business activities or as long as you have not withdrawn your consent. We will then delete your data unless data processing is still permitted on another legal basis or is mandatory for us (e.g., in the case of statutory retention obligations).
Contact form and general inquiries by email
Description of data processing and purpose
If you send us inquiries via the contact form or email, your details from the inquiry form or your email, including the personal data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
Providing an email address is necessary for us to contact you; providing additional information (e.g., name, telephone number) is freely given. We will not disclose this data without your consent under any circumstances.
Legal basis for data processing
The legal basis for the processing of your data is your and our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR and, if applicable, Art. 6 (1) (b) GDPR, provided that your request is aimed at concluding a contract.
Your data will be deleted after your request has been processed, as soon as no further queries are expected and provided that there are no legal retention obligations to the contrary.
Your rights
Below you will find information on the data subject rights granted to you by the applicable data protection law with regard to the Controller in relation to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details.
The right to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR.
The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
The right to request the restriction of processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to request its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have raised an objection to the processing pursuant to Art. 21 GDPR.
The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another Controller.
The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office indicated above or, if applicable, that of your usual place of residence or workplace.
The right to withdraw consent granted in accordance with Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right of objection
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to raise an objection to the processing of your personal data pursuant to Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the need to specify a particular situation.
If you wish to exercise your right of withdrawal or right of objection, please contact us using the contact details provided above under "Controller."
Status of the privacy notice
This privacy notice was last amended on April 13, 2026.