1. Responsible party
This website pyxis-space.com is operated by PYXIS SPACE GmbH as the responsible party:
PYXIS SPACE GmbH
Rückertstr. 2
97072 Würzburg
Germany
Email: contact@pyxis-space.com
Phone: +49 157 564 220 82
2. Your rights
You can exercise the following rights at any time in accordance with the EU General Data Protection Regulation (GDPR) using the contact details provided on top of this page:
- Information about your data stored by us and its processing (Art. 15 GDPR),
- Correction of inaccurate personal data (Art. 16 GDPR),
- Deletion of your data stored by us (Art. 17 GDPR),
- Restriction of data processing, provided we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, provided you have consented to data processing or have a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with future effect.
You can file a complaint with the regulatory authority at any time, e.g., the responsible supervisory authority at your residence or the authority responsible for us as the operator. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html [external link]
3. Data Processing Activities
3.1 Collection of General Information When Visiting Our Website
3.1.1 Type and Purpose of Processing
When you access our website, i.e., if you do not register or otherwise provide information, general information is automatically collected. This information (server log files) includes:
- your IP address
- date and time of accessing our website
- name and URL of requested files
- website from which you accessed our website (referrer URL)
- your browser and operation system
It is processed for
- ensuring a smooth connection to the website
- ensuring smooth use of the website
- ensuring and evaluating system security and stability, particularly for misuse detection
- ensuring a technically error-free display and optimization of the website
We do not use your data to draw conclusions about you personally. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.
3.1.2 Legal Basis and Legitimate Interest
Data processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website, as well as ensuring system security and abuse detection.
3.1.3 Recipients
Recipients of the data may be technical service providers who operate our server and maintain our website.
3.1.4 Storage period
Data is stored in server log files in a form that allows the identification of the user, for a maximum of 30 days; unless a security-relevant event occurs (e.g., a DDoS attack). In case of such an event, server log files are stored until the security-relevant event has been resolved and fully clarified.
3.1.5 Provision of data required or necessary
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted.
3.1.6 Objection
Please read the information about your right of objection according to Art. 21 GDPR below.
3.2 Contacting Us
3.2.1 Type and purpose of processing
You can contact us via the email addresses provided. In this case, the user’s personal data transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.
You can contact us using the telephone numbers provided. We will collect log data including your telephone number and the duration of the call.
Regardless of the communication method chosen, we will collect the content of your inquiry. Your data will be stored for the purpose of communicating with you individually.
3.2.2 Legal Basis
The data is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest in processing your data is to enable uncomplicated contact.
If you contact us to request a quote, the data will be processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
3.2.3 Recipients
Recipients of the data may be technical service providers who operate our server and maintain our website, or act as an processor for your request.
3.2.4 Storage period
Data will be deleted no later than six months after the contact has been processed.
If a contractual relationship is established, we are subject to statutory retention periods. These are generally six or ten years for reasons of proper accounting and tax law requirements.
3.2.5 Provision required or necessary
The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for the request.
3.2.6 Objection
Please read the information about your right of objection under Art. 21 GDPR below.
3.3 Reach Measurement
3.3.1 Type and Purpose of Processing
Reach measurement is used to evaluate visitor flows to our online offerinc and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify when our online offering or its functions or content are most frequently used or encourage revisits. Likewise, we can understand which areas require adjustment.
You can find out which tools we use for reach measurement below under section 3.3.7.
3.3.2 Legal Basis and Legitimate Interest
Data processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest. The measurement of reach and the resulting information are suitable for improving our website.
3.3.3 Recipients
Recipients of the data may be technical service providers who operate our server and maintain our website.
3.3.4 Storage period
Information on the storage period can be found in the information on the tools used listed below under section 3.3.7.
3.3.5 Provision of data required or necessary
The provision of data is neither legally nor contractually required.
3.3.6 Objection
Please read the information about your right of objection according to Art. 21 GDPR below.
3.3.7 Tools used for reach measurement
We use the locally installed analysis tool Matomo (formerly Piwik) for reach measurement without cookies. With the help of this tool, we evaluate user behavior locally on the server. Matomo does not collect the data itself, but uses the data provided by the web server. Each requesting IP address is truncated before storage. This means that the database is sufficiently anonymized and no conclusions can be drawn about individual persons.
4. Information about your right of objection under Art. 21 GDPR
4.1 Case-specific right of objection
You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR (data processing based on a balance of interests), for reasons arising from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
4.3 Recipient of an objection
PYXIS SPACE GmbH
5. Changes to our privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.
6. Questions about data protection
If you have any questions about data protection, please send us an email to the contact of the responsible party named above.
Copyright information
This privacy policy was created with the help of activeMind AG – the experts for external data protection officers (version #2024-10-25).