Privacy Policy

Last updated: 19/04/2026

This Privacy Policy explains how Hyabora (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website https://hyabora.com.
We comply with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws in the Netherlands, Germany, Italy, and other EU countries.

1. Data Controller
Hyabora
Heemraadstraat 70
6525TK Nijmegen
Netherlands
Email: info@hyabora.com

We are the Data Controller for the processing of personal data described in this policy.

2. Personal Data We Collect
We collect the following categories of personal data:

2.1 Information you provide directly
When you contact us via the contact form, we collect:
Name
Email address
Message content
This data is used only to respond to your inquiry or pre-contractual request (e.g. product information or order enquiries via email).

2.2 Automatically collected data
When you visit our website, we may process limited technical data, such as:
– IP address (anonymised or pseudonymised where applicable)
– Browser type and version
– Device type
– Pages visited
– Approximate geographic location (country-level only)

3. Purpose of Processing
We use personal data for the following purposes:
– Responding to contact requests
– Providing product and service information
– Improving website performance and content
– Understanding general website usage
– Ensuring website security
– We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
Legitimate interest (Art. 6(1)(f) GDPR):
Website analytics and security improvements
Pre-contractual request (Art. 6(1)(b) GDPR):
Handling enquiries via contact form
Consent (Art. 6(1)(a) GDPR):
Only where required for third-party embedded content (e.g. YouTube, Google Maps)

5. Cookies and Tracking
We use Complianz to manage cookie consent. The use of essential cookies is based on our legitimate interest (Art. 6(1)(f) GDPR), while non-essential content is only loaded based on your consent (Art. 6(1)(a) GDPR).

5.1 Cookie use
Our website uses: Essential cookies (required for website functionality)
Functional cookies (if applicable via WordPress plugins)
Consent cookies (to store your preferences)
We do not use advertising cookies or third-party marketing tracking cookies.

5.2 Third-party embedded content
Our website may include embedded content from:
– YouTube
– Instagram
– LinkedIn
– Facebook
– Google Maps
These services may set cookies and collect usage data. Such cookies are only loaded after your consent via our cookie banner where required. These providers act as independent data controllers for the data they process.

6. Analytics (WP Statistics)
We use a privacy-friendly analytics tool, WP Statistics, to understand how visitors use our website. WP Statistics is configured to minimise data collection and operate in a privacy-friendly manner:
– No cookies are used for analytics
– IP addresses are anonymised or pseudonymised where possible
– No personal identification of users is performed
– Data is stored locally on our own server in the Netherlands
– No data is shared with third parties
Where enabled, approximate geographic data may be derived (e.g. country-level only).
This processing is based on our legitimate interest in improving our website (Art. 6(1)(f) GDPR).

7. Data Retention
We retain personal data only for as long as necessary:
– Contact form submissions: up to 12 months
– Analytics data: up to 6 months
– Server logs: up to 30 days
After these periods, data is deleted or anonymised.

8. Data Sharing
We do not sell your personal data.
We may share data only with:
– Hosting provider (mijn.host, Netherlands)
– Email service provider (for receiving contact form messages)
– Email communication (stored in our email systems for handling enquiries)
– Embedded third-party services (only when you interact with them)
– Analytics processing (WP Statistics, hosted locally, no third-party sharing)
All processors are bound by GDPR-compliant agreements where applicable.

9. International Data Transfers
Our hosting and primary data processing takes place within the European Union (Netherlands).
However, embedded third-party services (such as YouTube or Google Maps) may process data outside the EU. These providers apply appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Your Rights Under GDPR
You have the right to:
– Access your personal data
– Correct inaccurate data
– Request deletion of your data
– Restrict processing
– Object to processing
– Request data portability
– Withdraw consent (where applicable)
To exercise your rights, contact us at info@hyabora.com.
You also have the right to lodge a complaint with your local data protection authority (e.g. Autoriteit Persoonsgegevens in the Netherlands).

11. Security
We implement appropriate technical and organisational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

14. Contact
If you have any questions about this Privacy Policy, you can contact us:
Email: info@hyabora.com