Legal information
Privacy Policy
Last updated: September 2026
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website.
Personal data are any data by which you can be personally identified. Detailed information about the processing of personal data can be found in the following sections of this Privacy Policy.
2. Hosting
Hostinger
We host our website with Hostinger.
The provider is Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
When you visit our website, Hostinger processes various technical data and server log files, including your IP address.
Hostinger is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in the secure, stable, and reliable provision of our website.
Where required, we have concluded a data processing agreement with Hostinger pursuant to Article 28 GDPR. This legally required data-protection agreement ensures that the personal data of our website visitors are processed only in accordance with our instructions and the applicable data-protection provisions.
3. General information and mandatory disclosures
Controller
The controller responsible for data processing on this website is:
Ara Khalaf, trading as “Happidion Media Group”, Wattstr. 21, 13355 Berlin, Germany.
Telephone: +49 173 4255927
Email: partnerships@happidion.com
The controller is the natural person who alone determines the purposes and means of processing personal data.
Legal bases for data processing
We process personal data only where a legal basis exists.
Where we obtain your consent, processing is based on Article 6(1)(a) GDPR.
Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, it is based on Article 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, it is based on Article 6(1)(c) GDPR.
Where processing is necessary for our legitimate interests or those of a third party, it is based on Article 6(1)(f) GDPR, provided that your interests, fundamental rights, or freedoms do not override those interests.
Retention period
Unless a more specific retention period is stated in this Privacy Policy, we store your personal data only for as long as necessary for the relevant processing purpose.
If you submit a legitimate request for deletion or withdraw consent, your data will be deleted unless legally permissible reasons require further storage.
Such reasons may include tax, commercial, or other statutory retention obligations. In that case, deletion takes place after the applicable retention period expires.
Recipients of personal data
We transfer personal data to third parties only where this is necessary to perform a contract, take pre-contractual measures, comply with a legal obligation, protect a legitimate interest, or where you have consented to the transfer.
Where external service providers process personal data on our behalf, we conclude a data processing agreement with them pursuant to Article 28 GDPR where legally required.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
You can generally identify an encrypted connection because your browser’s address bar begins with “https://”.
When SSL or TLS encryption is active, data that you transmit to us generally cannot readily be read by third parties.
4. Data collection on this website
Server log files
The provider of this website, Hostinger, automatically collects and stores information in server log files that your browser automatically transmits.
This may include the following data:
- browser type and browser version
- operating system used
- referrer URL
- hostname of the accessing device
- date and time of the server request
- page or file accessed
- amount of data transferred
- HTTP status code
- IP address
As a rule, we do not combine these data with other data sources.
These data are collected on the basis of Article 6(1)(f) GDPR.
Our legitimate interest lies in providing our website securely, stably, and without errors, analysing technical faults, and detecting and preventing abusive or unlawful access.
Server log files are deleted as soon as they are no longer required for these purposes, unless statutory obligations or security-related reasons require longer storage.
Contact by email, telephone, or contact form
If you contact us by email, telephone, or through the contact form, we process your enquiry and the personal data arising from it to handle your request and any follow-up questions.
This may include the following data:
- name
- email address
- telephone number, if provided
- company name, if provided
- content and time of your enquiry
- other information voluntarily provided by you
If your enquiry relates to initiating, performing, or fulfilling a contract, processing is based on Article 6(1)(b) GDPR.
In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in handling enquiries addressed to us appropriately and efficiently.
Where we obtain your consent for specific processing, processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
We do not disclose data transmitted in connection with your enquiry to third parties without an appropriate legal basis.
The data you transmit to us are deleted once your enquiry has been fully processed and no statutory retention obligations or other legal reasons require further storage.
Statutory retention obligations may apply to contractual or business transactions.
6. Your rights
Subject to the applicable statutory requirements, you have the following rights in particular:
Right of access
Under Article 15 GDPR, you have the right to request information about the personal data we process.
Right to rectification
Under Article 16 GDPR, you have the right to request the prompt correction of inaccurate personal data or completion of incomplete personal data.
Right to erasure
Under Article 17 GDPR, you have the right to request the erasure of your personal data unless statutory grounds prevent deletion.
Right to restriction of processing
Under Article 18 GDPR, you have the right to request restriction of the processing of your personal data where the statutory requirements are met.
Right to data portability
Under Article 20 GDPR, you have the right to receive personal data that you provided to us in a structured, commonly used, machine-readable format or to request its transmission to another controller, where the statutory requirements are met.
Right to withdraw consent
Under Article 7(3) GDPR, you may withdraw consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Right to object
Where we process your personal data on the basis of Article 6(1)(f) GDPR, Article 21 GDPR gives you the right to object at any time on grounds relating to your particular situation.
Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
Contact for exercising your rights
To exercise your data-protection rights or ask questions about the processing of your personal data, please contact us:
7. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data infringes the GDPR, you have the right under Article 77 GDPR to lodge a complaint with a data-protection supervisory authority.
You may contact, in particular, the supervisory authority at your habitual residence, place of work, or the place of the alleged infringement.
For controllers established in Berlin, the following supervisory authority is generally competent:
Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.
The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
8. Automated decision-making
This website does not carry out decision-making based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.
9. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy if the legal situation, our website, or the services we use change.
The current version published on this website applies.
Further legal information: Legal Notice