// Legal

Privacy Policy

Draft: This privacy policy is tailored to the current setup (Cloudflare hosting, waitlist, Postmark). Please have it finalised via a privacy-policy generator or a lawyer before launch.

1. Controller

The controller responsible for data processing on this website is:

Rheinwork GmbH
Haus-Endt-Straße 90, 40593 Düsseldorf, Germany
Represented by: Dustin Schneider
Email: [email protected]
(HypePilot is a product of Rheinwork GmbH.)

2. Your rights as a data subject

Under the GDPR you have the following rights:

Access to your stored data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of a given consent with effect for the future (Art. 7(3) GDPR)
Lodging a complaint with a supervisory authority (Art. 77 GDPR)

3. Competent supervisory authority

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

4. Hosting (Cloudflare)

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When you access the site, Cloudflare processes technically necessary data (including your IP address) to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare; the transfer to the USA is safeguarded by EU Standard Contractual Clauses.

5. Server log files

When you visit the website, information is automatically recorded in server log files, e.g. IP address, date and time of access, page requested, browser and operating system, and referrer URL. This data serves secure operation and is processed on the basis of Art. 6(1)(f) GDPR.

6. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by „https://“ in your browser's address bar.

7. Contacting us

If you contact us by email, we process your details to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR.

8. Waitlist / early-access sign-up

To join the waitlist we collect your email address. Sign-up uses a double opt-in procedure: after registering you receive a confirmation email, and we only add you to the list after your confirmation. The purpose is to inform you about the launch, early access and related benefits. The legal basis is your consent (Art. 6(1)(a) GDPR).

Your email address is stored in a database at Cloudflare (Cloudflare D1). Confirmation and info emails are sent via the service provider Postmark (ActiveCampaign, LLC, USA) as a processor; the transfer to the USA is safeguarded by EU Standard Contractual Clauses. You can withdraw your consent or unsubscribe at any time (via the unsubscribe link in every email or by messaging [email protected]). After withdrawal we delete your data unless statutory retention obligations apply.

9. Analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics for reach measurement. The service is cookie-free and privacy-friendly: no cookies are set and no cross-device profiles are created; evaluation is aggregated. The legal basis is Art. 6(1)(f) GDPR. The provider is Cloudflare, Inc., USA.

10. Fonts

Fonts are served locally from our own server. There is no connection to third-party servers (e.g. Google Fonts); no personal data is transferred to third parties in the process.

11. Changes to this privacy policy

Last updated: July 2026. We update this privacy policy whenever the legal situation or our data processing changes.