Skip to content

Legal information

Privacy Policy

Last updated: September 2026

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website.

Personal data are any data by which you can be personally identified. Detailed information about the processing of personal data can be found in the following sections of this Privacy Policy.

2. Hosting

Hostinger

We host our website with Hostinger.

The provider is Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

When you visit our website, Hostinger processes various technical data and server log files, including your IP address.

Hostinger is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in the secure, stable, and reliable provision of our website.

Where required, we have concluded a data processing agreement with Hostinger pursuant to Article 28 GDPR. This legally required data-protection agreement ensures that the personal data of our website visitors are processed only in accordance with our instructions and the applicable data-protection provisions.

3. General information and mandatory disclosures

Controller

The controller responsible for data processing on this website is:

Ara Khalaf, trading as “Happidion Media Group”, Wattstr. 21, 13355 Berlin, Germany.

Telephone: +49 173 4255927

Email: partnerships@happidion.com

The controller is the natural person who alone determines the purposes and means of processing personal data.

Legal bases for data processing

We process personal data only where a legal basis exists.

Where we obtain your consent, processing is based on Article 6(1)(a) GDPR.

Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, it is based on Article 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, it is based on Article 6(1)(c) GDPR.

Where processing is necessary for our legitimate interests or those of a third party, it is based on Article 6(1)(f) GDPR, provided that your interests, fundamental rights, or freedoms do not override those interests.

Retention period

Unless a more specific retention period is stated in this Privacy Policy, we store your personal data only for as long as necessary for the relevant processing purpose.

If you submit a legitimate request for deletion or withdraw consent, your data will be deleted unless legally permissible reasons require further storage.

Such reasons may include tax, commercial, or other statutory retention obligations. In that case, deletion takes place after the applicable retention period expires.

Recipients of personal data

We transfer personal data to third parties only where this is necessary to perform a contract, take pre-contractual measures, comply with a legal obligation, protect a legitimate interest, or where you have consented to the transfer.

Where external service providers process personal data on our behalf, we conclude a data processing agreement with them pursuant to Article 28 GDPR where legally required.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can generally identify an encrypted connection because your browser’s address bar begins with “https://”.

When SSL or TLS encryption is active, data that you transmit to us generally cannot readily be read by third parties.

4. Data collection on this website

Server log files

The provider of this website, Hostinger, automatically collects and stores information in server log files that your browser automatically transmits.

This may include the following data:

  • browser type and browser version
  • operating system used
  • referrer URL
  • hostname of the accessing device
  • date and time of the server request
  • page or file accessed
  • amount of data transferred
  • HTTP status code
  • IP address

As a rule, we do not combine these data with other data sources.

These data are collected on the basis of Article 6(1)(f) GDPR.

Our legitimate interest lies in providing our website securely, stably, and without errors, analysing technical faults, and detecting and preventing abusive or unlawful access.

Server log files are deleted as soon as they are no longer required for these purposes, unless statutory obligations or security-related reasons require longer storage.

Contact by email, telephone, or contact form

If you contact us by email, telephone, or through the contact form, we process your enquiry and the personal data arising from it to handle your request and any follow-up questions.

This may include the following data:

  • name
  • email address
  • telephone number, if provided
  • company name, if provided
  • content and time of your enquiry
  • other information voluntarily provided by you

If your enquiry relates to initiating, performing, or fulfilling a contract, processing is based on Article 6(1)(b) GDPR.

In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in handling enquiries addressed to us appropriately and efficiently.

Where we obtain your consent for specific processing, processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

We do not disclose data transmitted in connection with your enquiry to third parties without an appropriate legal basis.

The data you transmit to us are deleted once your enquiry has been fully processed and no statutory retention obligations or other legal reasons require further storage.

Statutory retention obligations may apply to contractual or business transactions.

5. Cookies and comparable technologies

At present, this website does not use analytics, marketing, or tracking technologies.

In particular, services such as Google Analytics, Meta Pixel, or LinkedIn Insight Tag are not used.

Where technically necessary cookies or comparable technologies are used, they serve exclusively to provide securely and properly a function that you have expressly requested.

Where access to or storage of information on your device is strictly necessary, this takes place on the basis of Section 25(2) TDDDG.

If consent-based analytics, marketing, or tracking technologies are used in the future, they will be activated only after your explicit consent. Consent will then be obtained pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR.

This Privacy Policy will be updated accordingly in that event.

6. Your rights

Subject to the applicable statutory requirements, you have the following rights in particular:

Right of access

Under Article 15 GDPR, you have the right to request information about the personal data we process.

Right to rectification

Under Article 16 GDPR, you have the right to request the prompt correction of inaccurate personal data or completion of incomplete personal data.

Right to erasure

Under Article 17 GDPR, you have the right to request the erasure of your personal data unless statutory grounds prevent deletion.

Right to restriction of processing

Under Article 18 GDPR, you have the right to request restriction of the processing of your personal data where the statutory requirements are met.

Right to data portability

Under Article 20 GDPR, you have the right to receive personal data that you provided to us in a structured, commonly used, machine-readable format or to request its transmission to another controller, where the statutory requirements are met.

Right to withdraw consent

Under Article 7(3) GDPR, you may withdraw consent at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Right to object

Where we process your personal data on the basis of Article 6(1)(f) GDPR, Article 21 GDPR gives you the right to object at any time on grounds relating to your particular situation.

Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

Contact for exercising your rights

To exercise your data-protection rights or ask questions about the processing of your personal data, please contact us:

7. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right under Article 77 GDPR to lodge a complaint with a data-protection supervisory authority.

You may contact, in particular, the supervisory authority at your habitual residence, place of work, or the place of the alleged infringement.

For controllers established in Berlin, the following supervisory authority is generally competent:

Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

8. Automated decision-making

This website does not carry out decision-making based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

9. Updates to this Privacy Policy

We reserve the right to amend this Privacy Policy if the legal situation, our website, or the services we use change.

The current version published on this website applies.

Further legal information: Legal Notice