HYTECON AG · Brunnhalde 10, 6006 Lucerne, Switzerland · Version September 2026
This Privacy Policy (in its current version at any given time) applies to the use of the website https://hytecon.com (the “Website”) and to communication with us by e-mail or through other channels.
When you use the Website, personal data relating to you may be processed. Personal data means any information relating to an identified or identifiable natural person. Because the protection of your privacy is important to us, we inform you below about which personal data we process when you use the Website, for what purposes and on what legal basis, and how we handle this data.
The operator of the Website and the controller responsible for the processing of your personal data is: HYTECON AG, Brunnhalde 10, CH-6006 Lucerne, Switzerland, e-mail: info@hytecon.com.
Our Data Protection Officer can be reached at gdpr@hytecon.com or at our postal address stated above, marked “Data Protection Officer”.
Our representative in the European Union pursuant to Art. 27 GDPR is: HYTECON Entwicklung und Produktion GmbH, Oststraße 68, 32051 Herford, Germany.
Below you will find information on which personal data we process when you use the Website and how we process it.
The Website is hosted on the platform of Shopify International Limited, 2nd Floor, Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland (“Shopify”). When you access the Website, Shopify processes technical data such as your IP address, browser type and version, operating system, referrer URL, the pages accessed, and the date and time of access (see Section 4). Shopify also sets cookies that are technically necessary for the secure operation of the Website. Shopify acts as our processor on the basis of a data processing agreement. Shopify may transfer data to its parent company Shopify Inc. in Canada and to service providers in the USA; Canada is subject to an adequacy decision of the European Commission, and transfers to the USA are based on the EU-US Data Privacy Framework and the Standard Contractual Clauses of the European Commission. Further information: https://www.shopify.com/legal/privacy.
The legal basis for this processing is our legitimate interest in the secure and reliable provision of the Website (Art. 6(1) lit. f GDPR; Art. 31 Swiss FADP).
Shopify also provides us with anonymised visitor statistics (e.g. number of visits, pages viewed, approximate region, device type). The cookies required for this (“Shopify Analytics”) are set only if you have given your consent via the cookie banner. The legal basis is your consent (Art. 6(1) lit. a GDPR; Art. 31 Swiss FADP), which you may withdraw at any time via “Privacy Settings” in the footer.
To obtain and document your consent to the use of cookies and similar technologies, we use the consent management platform of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden (“consentmanager”). When the Website is accessed, consentmanager processes your IP address (shortened), information about your browser and device, the date and time of your visit, and your consent decision, which is stored in a cookie so that it does not have to be requested again on each visit. You can change or withdraw your decision at any time via the link “Privacy Settings” in the footer of the Website. Further information: https://www.consentmanager.net/privacy/.
The legal basis is our legal obligation to obtain and document consent (Art. 6(1) lit. c GDPR) and our legitimate interest in a legally compliant operation of the Website (Art. 6(1) lit. f GDPR).
If you contact us by e-mail, we process the data you provide (e.g. name, company, e-mail address, telephone number and the content of your message) in order to handle your enquiry and any follow-up questions. The Website does not contain a contact form. We process only the data that is necessary to deal with your enquiry.
The legal basis is the performance of pre-contractual measures at your request (Art. 6(1) lit. b GDPR) and our legitimate interest in responding to enquiries (Art. 6(1) lit. f GDPR). We erase the data once your enquiry has been dealt with, unless statutory retention obligations apply.
The fonts used on the Website are hosted on our own web servers. No connection to third-party font providers (such as Google Fonts) is established when the Website is accessed.
When the Website is accessed, information is automatically collected and stored in server log files which your browser transmits. This includes: browser type and version, operating system used, referrer URL, IP address of the accessing device, and date and time of the server request. This data is not merged with other data sources and is used exclusively to ensure the stability and security of the Website and to investigate misuse. The legal basis is our legitimate interest pursuant to Art. 6(1) lit. f GDPR.
The Website uses technically necessary cookies that are required for its secure operation (e.g. session security, storage of your cookie consent decision). In addition, and only with your consent, cookies of Shopify’s anonymised visitor statistics are set (see Section 3.1). We do not use cookies for marketing or social-media purposes. You can configure your browser to refuse or delete cookies; in that case, however, some functions of the Website may not be available.
Should we use additional services requiring consent in future (e.g. web analytics or online advertising), we will obtain your prior consent via the consent banner and update this Privacy Policy accordingly.
We process personal data to provide a functional and secure Website and its content, to communicate with you and to respond to your enquiries, and to comply with our legal obligations.
We process your personal data on the basis of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). The legal bases are, in particular: the performance of a contract or pre-contractual measures (Art. 6(1) lit. b GDPR), compliance with legal obligations (Art. 6(1) lit. c GDPR), our legitimate interests (Art. 6(1) lit. f GDPR), and, where obtained, your consent (Art. 6(1) lit. a GDPR). Specific legal bases are stated in the respective sections above.
As a rule, your personal data will only be disclosed without your express prior consent in the cases set out below:
Where it is necessary to investigate unlawful use of the Website or for the purposes of legal enforcement, personal data will be forwarded to law enforcement authorities and, where applicable, to injured third parties. This will only occur where there are specific indications of unlawful or abusive conduct. Disclosure may also take place where it serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. The disclosure of this data is based on our legitimate interest in combating misuse, prosecuting criminal offences and securing, asserting and enforcing claims (Art. 6(1) lit. f GDPR).
In order to handle your enquiry in the country concerned, personal data may be passed on to companies affiliated with us within the HYTECON Group, in particular HYTECON Entwicklung und Produktion GmbH, Herford, Germany. The disclosure is based on our legitimate interest in effective customer support (Art. 6(1) lit. f GDPR).
We use the following processors, which process personal data on our behalf and on the basis of data processing agreements:
These processors are carefully selected and reviewed regularly. They may use the data exclusively for the purposes specified by us and are contractually obliged to handle your data in accordance with this Privacy Policy and applicable data protection law. Apart from the transfers described in Section 3.1, personal data is not transferred to countries outside the European Economic Area and Switzerland.
Access to your personal data is restricted to those persons who require it. HYTECON employs appropriate technical and organisational security measures to protect your data, in particular against accidental or intentional manipulation, disclosure, loss or destruction. Our security measures are continuously improved in line with technological developments. The Website is delivered exclusively via encrypted connections (TLS/HTTPS). Nevertheless, data transmission over the internet is never completely secure.
This Privacy Policy also applies to the processing of personal data of other persons which you make available to us. You are responsible for informing the persons concerned about this Privacy Policy.
As a data subject, you have the following rights with regard to our processing of your personal data, in accordance with and to the extent provided for under the data protection law applicable to you, in particular the Swiss FADP or the GDPR. To exercise your rights, please contact us using the contact details given in Section 2 or at gdpr@hytecon.com.
You have the right to obtain from us at any time information about the personal data relating to you which we process.
You have the right to request the rectification of inaccurate data, the completion of incomplete data or the erasure of the personal data relating to you. In particular, you have a right to erasure where the personal data is no longer necessary for the purposes for which it was collected. This right is restricted where we require your data to fulfil a legal obligation or to enforce legal claims.
In certain cases, you have the right to request the restriction of the processing of your personal data.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of our legitimate interests. We will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You have the right to receive the personal data relating to you which you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller, provided that the processing is based on your consent or on a contract and is carried out by automated means.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes applicable data protection law. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
Where processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.
We erase or anonymise your personal data as soon as it is no longer required for the purposes for which it was collected, unless statutory retention obligations require longer storage. Data which must be retained for legal reasons is blocked and is no longer available for further use. To request erasure of your data, please send an e-mail to gdpr@hytecon.com.
Your personal data will only be processed for purposes other than those described where a legal provision permits this or where you have consented to the changed purpose. In such a case, we will inform you of the other purposes prior to further processing.
We do not use automated processing operations to reach decisions, including profiling.
If you have any questions regarding data protection, you may contact us at any time at the address given in the Imprint or via the contact details given in Section 2 of this Privacy Policy.
We may amend this Privacy Policy from time to time, in particular where we introduce new services or where legal requirements change. The current version can be accessed at any time on the Website under “Privacy Policy”. This version is dated September 2026.
HYTECON AG, Brunnhalde 10, CH-6006 Lucerne, info@hytecon.com, www.hytecon.com