Privacy policy

Last updated: October 2026

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

HM Horizontal Technologies GmbH i.G.
Baaderstraße 42
80469 München
Germany
Managing directors: Niklas Marxer, Jakob Hermeler
Email: niklas@horizontal-tech.com

For any question about data protection, you can reach us at the address above or by email.

2. Overview

We process personal data only to the extent necessary to provide this website, answer your requests, arrange demos and handle applications. We rely on the following legal bases under Art. 6 para. 1 GDPR:

  • (a) your consent;
  • (b) the performance of a contract or steps prior to entering into a contract, for example when you request a demo;
  • (c) compliance with a legal obligation, for example retention duties under commercial and tax law;
  • (f) our legitimate interests, for example the secure and stable operation of this website.

3. Hosting and server log files

This website is hosted on Cloudflare Pages. Hosting, domain and DNS are provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Each time you visit the website, the server automatically records information your browser transmits: IP address, date and time of the request, the page requested, the referring URL, browser type and version, and operating system. We use this data only to deliver the website, ensure its security and detect misuse. The legal basis is Art. 6 para. 1 (f) GDPR. Log files are deleted after [7] days at the latest, unless they are needed to investigate a specific security incident.

We have concluded data processing agreements with our hosting and infrastructure providers in accordance with Art. 28 GDPR.

4. Cookies and similar technologies

This website uses only technically necessary cookies or storage, which are required to operate the site (§ 25 para. 2 TDDDG). We do not use tracking or marketing cookies.

5. Demo requests and contact

When you book a demo or write to us by email, we process the data you provide: name, business email address, company, role, the time you choose and any message you add. We use this data to answer your request and to arrange and prepare the meeting.

The legal basis is Art. 6 para. 1 (b) GDPR where your request concerns a potential contract, and otherwise Art. 6 para. 1 (f) GDPR, based on our legitimate interest in responding to business enquiries.

Our email and calendar run on Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Demo appointments are booked through Calendly, provided by Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA, which processes your booking details and technical data such as your IP address on our behalf under a data processing agreement. Calendly is certified under the EU-U.S. Data Privacy Framework. The booking calendar is only loaded on our demo page. We delete your data once your request has been fully dealt with, unless statutory retention periods apply or a business relationship results from it.

6. Applications

When you apply for a position, we process the data contained in your application, such as your contact details, CV, certificates and correspondence, to decide on an employment relationship. The legal basis is § 26 BDSG in conjunction with Art. 88 GDPR, and Art. 6 para. 1 (b) GDPR.

If we do not hire you, we delete your application documents six months after the decision, unless you have agreed to a longer retention for future vacancies. If we hire you, your data becomes part of your personnel file.

7. Links to social networks

Our website links to our company profile on LinkedIn. These are plain links, not embedded plugins. No data is transmitted to LinkedIn until you click the link. After that, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for the processing on its platform.

8. Recipients and transfers to third countries

We only share personal data with service providers that process it on our behalf under a data processing agreement, or where we are legally obliged to do so.

Some of our providers, or their parent companies, are based in the United States. Where data is transferred to a third country, we ensure an adequate level of protection, either through the provider's certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or through the EU standard contractual clauses (Art. 46 para. 2 (c) GDPR).

Notice for visitors in the United States

We collect the categories of personal information described above (identifiers and professional information you provide, and technical data from your browser) for the business purposes described in this policy. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling. Depending on the state you live in, you may have the right to know, access, correct and delete your personal information. To make a request, write to niklas@horizontal-tech.com. We will not discriminate against you for exercising these rights.

9. Storage period

We store personal data only for as long as necessary for the purpose for which it was collected, or as long as statutory retention periods require, in particular under § 257 HGB and § 147 AO (six to ten years for business correspondence and accounting records).

10. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to withdraw consent at any time, with effect for the future (Art. 7 para. 3 GDPR)

Right to object (Art. 21 GDPR). Where we process your data on the basis of our legitimate interests, you can object at any time on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise your rights, write to niklas@horizontal-tech.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

12. Data security

This website uses TLS encryption. You can recognise an encrypted connection by "https://" in the address bar of your browser.

13. Changes to this policy

We update this privacy policy when our website or the legal requirements change. The current version is always available on this page.