Privacy policy of Paragamix GmbH.

This privacy policy explains how Paragamix GmbH (“Paragamix”, “we” or “us”) processes personal data in connection with our websites, cyber awareness missions and other digital services.

1. Controller

Paragamix GmbH
Alte Dorfstraße 37
39326 Angern
Email: info@paragamix.com

2. Purposes of processing

We process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), and only insofar as this is necessary to provide our websites, deliver our services, communicate with prospects and customers and ensure technical security.

3. Cyber awareness missions

Paragamix cyber awareness missions are designed so that participation generally does not require user accounts.

Participants can access missions using provided participant quotas with one shared mission code. For the operation of the missions, Paragamix generally does not collect or store names, email addresses or other personal participant profiles.

Knowledge checks and participation confirmations are provided without personal participant administration.

Companies do not receive personal participant evaluations. Where usage or completion numbers are provided, this is done only in anonymized or aggregated form.

4. Website visits

When accessing our website, technically necessary information is processed. This may include in particular:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Pages and files accessed
• Referrer URL

Processing takes place to provide, stabilize and secure the website pursuant to Art. 6(1)(f) GDPR.

5. Online orders and contract fulfilment

When you place an online order, we process the company, billing and contact data provided to calculate the price, fulfil the contract, issue the invoice and automatically provide company access and mission codes.

The data is not used for newsletters or personal participant analytics. Participants do not need personal accounts.

The legal basis is Art. 6(1)(b) GDPR and, where statutory retention obligations apply, Art. 6(1)(c) GDPR.

6. Orders and invoicing

When a cyber awareness mission is ordered, the Paragamix.Cyber ordering service processes the required company, billing and contact details. The purposes are quote calculation, contract formation, invoicing, buyer portal access and delivery of the shared mission code with its participant quota.

The data is transmitted directly to cyber.paragamix.com. Participant identities are not part of the order. Where technically necessary processors are used for invoice delivery or electronic invoicing, the applicable privacy notices and processing agreements apply.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual and contractual processing and Art. 6(1)(f) GDPR for legitimate interests in secure, traceable order processing.

7. Hosting and technical service providers

We use technical service providers and hosting providers to provide our websites and online services. The public website is hosted via Strato; the mission subdomain cyber.paragamix.com is operated in a Hetzner environment. These providers process technical access data for availability, security and stability on the basis of corresponding data processing agreements where required.

8. Disclosure of data

Personal data is disclosed only where legally permissible or necessary to provide our services, for example to hosting providers, payment providers, booking systems or technical service providers.

Data is not disclosed for advertising purposes without corresponding consent.

9. Retention period

Personal data is stored only for as long as required for the relevant purposes or as long as statutory retention obligations apply.

10. Cookies and similar technologies

This website loads Google Analytics and Google Ads conversion measurement through the Google Tag only after your consent. If you reject, these services remain disabled. The Google Tag is used for reach measurement and conversion analysis for Google Analytics or Google Ads; Google services may be involved as recipients.

Your cookie choice is stored locally in your browser so the notice does not appear on every page view. More information is available in the cookie notice.

11. Your rights

Under the GDPR, data subjects have in particular the following rights:

• Access to processed personal data
• Rectification of inaccurate data
• Erasure of personal data
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent with future effect

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority.

12. Changes to this privacy policy

We reserve the right to adapt this privacy policy if technical, legal or organizational changes make this necessary.

13. Contact

Paragamix GmbH
Alte Dorfstraße 37
39326 Angern
Email: info@paragamix.com

Last updated: June 2026