Sixonia


DATA PRIVACY

Responsible in the sense of the Data Protection Act:

Sixonia GmbH

Maria-Reiche-Str. 3

01109 Dresden

Represented by

Personally liable partners Dr. Martin Lohe, Rüdiger Henke

Contact

E-Mail: contact@sixonia.com

Internet: www.sixonia.com

Phone: +49 (0)351 84034110


General information on data processing

We process your data only as long as it is required to provide a functional website and our content and services. The processing of your data is only collected to the extent necessary and within the framework of the legal regulations.
Some images and videos on this website were generated or enhanced using AI systems.


Your rights as a concerned person

Right of access to information

You have the right to ask us to confirm whether personal data about you are processed, and if this is the case, you have the right to be informed about these personal data.

Right of rectification

You have the right to demand that we correct any incorrect data about you without delay. Considering the purposes of the processing, you have the right to complete incomplete personal data—also using a supplementary declaration.

Right of deletion ("right to be forgotten")

You have the right to demand that we delete personal data relating to you immediately, and we are obliged to do so if one of the reasons stated in Art. 17 § 1 GDPR applies and the processing is not necessary for one of the purposes regulated in Art. 17 § 3 GDPR.

Right to restrict processing.

You have the right to request the controller to restrict processing if one of the following conditions is met or if one of the conditions laid down in Art. 18 § 1 lit. (a) to (d) GDPR is met.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, standard, and machine-readable format. You have the right to transfer this data to another person in charge without hindrance from us, provided that this is technically possible and the conditions stated in Art. 20 § 1 GDPR are fulfilled.

Right of objection

You shall have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out under Article 6 § 1 lit. (e) or (f), including profiling based on these provisions. You can exercise the right of objection free of charge.

Right to withdraw consent

If processing is based on consent, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

Right of appeal

If you consider that the processing of personal data concerning you is in breach of the DPA, you have the right to complain to a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of suspected infringement.

The supervisory authority responsible for us is:

Sächsische Datenschutz- und Transparenzbeauftragte

Devrientstraße 5

01067 Dresden

Germany

Which of your data is processed by us? For what purposes? On what legal basis?We process various data that you transmit to us when you visit our website. The individual processing steps are presented below.


Provision of the website and creation of log files
Scope of processing

When using the website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary to display our website to you and guarantee stability and security.

  • IP address

  • date and time of the request

  • Time zone difference to Greenwich Mean Time (GMT)

  • Content of the request (specific page)

  • Access status/HTTP status code

  • the amount of data transferred in each case

  • The website from which the request comes

  • Browser

  • Operating system and its interface

  • Language and version of the browser software.


This data is not stored together with the user's other personal data.

Legal basis for the data processing

The legal basis for temporarily storing data and log files is Art. 6 § 1 lit. (f) GDPR.

Purpose of the data processing

The system temporarily stores the IP address to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the session.

Log file information is collected for security reasons (e.g., to investigate abuse or fraud). It also ensures the website's functionality. In addition, the data is used to optimize the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not occur in this context.

Duration of storage

The data will be deleted as soon as it is no longer necessary for their collection. In the case of data collection to provide for the website, this occurs when the respective session has ended.

The data will be deleted within seven days if stored in our log files.


Cookies

In addition to the data above, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard disk in your browser, and specific information flows through them to the place that sets the cookie (here, by us). Cookies cannot run programs or transmit viruses to your computer. They help make the internet more user-friendly and more effective overall.

Use of cookies:

a) This website uses the following types of cookies, the scope and functioning of which are explained below:

b) Transient cookies are automatically deleted when you close your browser. This includes, in particular, the session cookies. These store a so-called session ID, assigning different browser requests to the joint session. This will recognize your computer when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

d) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all of this website's functions in this case.


Transmission of personal data

As part of our processing of personal data, the data may be transmitted or disclosed to other authorities, companies, legally independent organizational units, or persons. The recipients of this data can include, for example, service providers commissioned with IT tasks or providers of services and content integrated into a website. In such a case, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements that protect your data with the recipients of your data.


Use of HubSpot - Tracking

We use HubSpot for marketing automation, analytics/and tracking.
Provider

HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA

Privacy Policy: https://legal.hubspot.com/privacy-policy

DPA & Standard Contractual Clauses: https://legal.hubspot.com/dpa


Scope of processing

HubSpot loads cookies and tracking scripts when you give consent via our cookie banner.
HubSpot collects:

  • IP address (geolocation, device data)

  • Browser and device information

  • Page views and session information

  • Referrer URLs

  • Interactions with forms, CTAs, and emails


If you submit a form, HubSpot may associate your previous anonymous page views with your contact record.


Purposes

  • Responding to your inquiry

  • Customer communication and CRM

  • Analytics and performance of our website

  • Marketing automation and lead management

Legal basis

  • Art. 6(1)(a) GDPR – Consent, for HubSpot analytics and marketing cookies

  • Art. 6(1)(b) GDPR – Contract initiation, for processing contact-form submissions

  • Art. 6(1)(f) GDPR – Legitimate interest, for technically necessary HubSpot functions


Data transfer

HubSpot may process data in the USA. Processing is based on Standard Contractual Clauses (SCCs).
Retention

  • Cookies expire after 13 months.

  • Contact data remains until deletion is requested or the statutory retention periods end.



Use of Hubspot - Forms

Collection & processing of data transmitted via contact forms, etc.
On this website, you can contact Sixonia GmbH via the contact form, e-mail, or social media channels. Personal data is collected, stored, and processed insofar as necessary, for example, to answer inquiries.


These data are:

  • First and last name

  • Company

  • Contact data, such as e-mail address or telephone number

  • Country

  • Content data (e.g., entries in online forms)

Purpose of collection: contact inquiries, communication, business initiation, fulfillment of contractual obligations and services or customer service.

The collection of data is based on the following legal grounds:

  • Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. GDPR).

  • Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR)

  • Legal obligation (Art. 6 para. 1 p. 1 lit. c. GDPR).

The handling, processes, procedures, or services of data processing via contact data forms and manual entries by Sixonia GmbH employees are carried out via the customer management database HubSpot.



Use of Google Analytics (GA4)

We use Google Analytics to analyze the usage of our website and improve performance.


Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

For data transfers to the USA: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043

Privacy: https://policies.google.com/privacy


Scope of processing

Google Analytics collects the following data:

  • IP address (anonymized via IP masking)

  • Browser, device type, operating system

  • Click paths, scroll events, session duration

  • Referrer URLs

  • Interaction events (page views, clicks, form interactions)


No personally identifiable information is stored.


Legal basis

  • Art. 6(1)(a) GDPR – Consent: Google Analytics is only activated after you agree to analytics cookies.


Data transfer

Data may be transferred to the USA. Google relies on Standard Contractual Clauses (SCCs).


Retention

We use the 14-month retention setting for user-level and event-level data.


Use of Google Tag Manager

We use Google Tag Manager to manage website tags via an interface. The Tag Manager itself does not create cookies and does not process personal data.It triggers other tags that may collect data. Google Tag Manager does not access this data.

Provider:

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Privacy: https://policies.google.com/privacy
Legal basis:

Art. 6(1)(a) GDPR — Consent for all tags requiring approval.

Art. 6(1)(f) GDPR — Legitimate interest in a technically efficient integration and management of website tags.

Data transfer:

Google may process data in the USA. Standard Contractual Clauses (SCCs) apply.

Use of Google Ads Conversion Tracking

We use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns and understand how users interact with our website.

Provider:

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

For US processing: Google LLC, Mountain View, CA, USA

Scope of processing:

Google Ads uses cookies and event signals to understand whether users have completed defined conversions (e.g., contact form submission).

The following data may be processed:

– IP address (shortened)

– device information

– browser data

– pages visited

– click and conversion events

Legal basis:

Art. 6(1)(a) GDPR – Consent (Marketing)

Google Ads is only activated after consent is given via our cookie banner.

Data transfer:

Data may be transferred to the USA. Processing is performed based on SCCs.

Retention:

Conversion cookies typically expire after 90 days.



Use of Google Consent Mode (v2)

We use Google Consent Mode v2 to adjust the behavior of Google services depending on your cookie settings. If you do not consent, Google receives only anonymized and limited (“basic mode”) signals, without storing or reading cookies. If you consent, Google services (e.g., Analytics, Ads) are activated with full functionality.

Legal basis:

Art. 6(1)(a) GDPR – Consent

Consent can be withdrawn at any time via the cookie banner.



Use of Dealfront (Company Identification)

We use Dealfront (formerly Leadfeeder and Echobot) to identify which companies visit our website.


Provider

Dealfront Group GmbH

Durlacher Allee 73, 76131 Karlsruhe, Germany

Privacy: https://www.dealfront.com/privacy-policy/


Scope of processing

Dealfront processes IP addresses of website visitors and matches them against publicly available B2B databases to identify only organizations (companies) visiting our site.

  • No private individuals are identified

  • No personal profile is created

  • Data is limited to company-level information (e.g., company name, location, industry)


Dealfront stores logs of:

  • Company-level IP address

  • Pages visited

  • Time and duration of visit

  • Referrer and campaign source


Purpose

  • B2B lead generation

  • Attribution of traffic to companies

  • Understanding which industries engage with our content


Legal basis

  • Art. 6(1)(a) GDPR – Consent, for analytics/marketing cookies

  • Art. 6(1)(f) GDPR – Legitimate interest, in identifying corporate visitors and improving our B2B website performance


Data transfer

Dealfront processes data within the EU. Some services may involve data transfer to third countries; SCCs apply.


Retention

Log data is stored for up to 24 months.