Privacy policy of Paragamix GmbH.

This privacy policy explains how Paragamix GmbH (“Paragamix”, “we” or “us”) processes personal data in connection with our websites, cyber awareness missions and other digital services.

1. Controller

Paragamix GmbH
Alte Dorfstraße 37
39326 Angern
Email: info@paragamix.com

2. Purposes of processing

We process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), and only insofar as this is necessary to provide our websites, deliver our services, communicate with prospects and customers and ensure technical security.

3. Cyber awareness missions

Paragamix cyber awareness missions are designed so that participation generally does not require user accounts.

Participants can access missions using provided mission codes. For the operation of the missions, Paragamix generally does not collect or store names, email addresses or other personal participant profiles.

Knowledge checks and participation confirmations are provided without personal participant administration.

Companies do not receive personal participant evaluations. Where usage or completion numbers are provided, this is done only in anonymized or aggregated form.

4. Website visits

When accessing our website, technically necessary information is processed. This may include in particular:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Pages and files accessed
• Referrer URL

Processing takes place to provide, stabilize and secure the website pursuant to Art. 6(1)(f) GDPR.

5. Contact

If you contact us by email or through provided contact options, we process the data you provide solely to handle your request.

The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

6. Orders and payment processing

When ordering cyber awareness missions, mission codes, interactive awareness formats or other services, the data required for contract processing is processed.

Order and payment processing may be handled through external payment, booking or ticketing systems, in particular Quinbook. Quinbook processes purchase and booking-related data for ordering, payment processing, ticket provision and commercial handling. The respective privacy notices of those providers also apply to their processing of personal data.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual and contractual processing and Art. 6(1)(f) GDPR for legitimate interests in secure, traceable booking processing.

7. Hosting and technical service providers

We use technical service providers and hosting providers to provide our websites and online services. The public website is hosted via Strato; the mission subdomain cyber.paragamix.com is operated in a Hetzner environment. These providers process technical access data for availability, security and stability on the basis of corresponding data processing agreements where required.

8. Disclosure of data

Personal data is disclosed only where legally permissible or necessary to provide our services, for example to hosting providers, payment providers, booking systems or technical service providers.

Data is not disclosed for advertising purposes without corresponding consent.

9. Retention period

Personal data is stored only for as long as required for the relevant purposes or as long as statutory retention obligations apply.

10. Cookies and similar technologies

This website loads Google Analytics and Google Ads conversion measurement through the Google Tag only after your consent. If you reject, these services remain disabled. The Google Tag is used for reach measurement and conversion analysis for Google Analytics or Google Ads; Google services may be involved as recipients.

Your cookie choice is stored locally in your browser so the notice does not appear on every page view. More information is available in the cookie notice.

11. Your rights

Under the GDPR, data subjects have in particular the following rights:

• Access to processed personal data
• Rectification of inaccurate data
• Erasure of personal data
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent with future effect

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority.

12. Changes to this privacy policy

We reserve the right to adapt this privacy policy if technical, legal or organizational changes make this necessary.

13. Contact

Paragamix GmbH
Alte Dorfstraße 37
39326 Angern
Email: info@paragamix.com

Last updated: June 2026