Legal

Privacy Policy

Last updated: May 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

David Palese
Rebhuhnweg 5A
90513 Zirndorf
Email: hello@heliorhythm.eu

2. What we collect

When you reserve a bottle via our form, we collect:

  • Your email address
  • The timestamp of your submission
  • A one-way SHA-256 hash of your IP address (for spam prevention; cannot be reversed to your IP)
  • The form source (which call-to-action on the page you used)

We do not collect your name, phone number, or any other personal data.

Additionally, when you visit this website, our server receives standard access logs (IP address, timestamp, URL, browser information) for security and operational purposes. These logs are kept for a maximum of 7 days.

3. Anonymous usage analytics

This website uses a self-hosted, cookieless analytics system. When you visit or leave the page, the following non-personal usage data is transmitted to our own server:

  • The URL path you visited
  • The referring domain (for example, "google.com") but not the full URL
  • Whether you are on a mobile or desktop device
  • Your browser window width in pixels
  • The UTM source parameter from the URL, if present
  • How long you spent on the page
  • How far down the page you scrolled, as a percentage
  • Which call-to-action buttons you clicked
  • Whether you began typing an email address in the form
  • A one-way SHA-256 hash of your IP address, truncated to 16 characters and not reversible

This data is stored on our EU-hosted server and not shared with any third party. No cookies are set. No cross-site tracking takes place. Legal basis: our legitimate interest in understanding site performance (Art. 6(1)(f) GDPR).

4. Legal basis for form submissions

Processing of the email address you submit via the reservation form is based on your explicit consent (Art. 6(1)(a) GDPR), given by ticking the consent box and submitting the form.

5. Purpose

We use your email address solely to send one notification when HelioRhythm Nighttime Repair Serum becomes available for purchase. We do not use it for marketing newsletters or share it with third parties.

6. Storage and hosting

All data is stored on servers operated by All-Inkl.com (Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany) within the European Union. We do not transfer data to third countries.

7. Retention

We retain your email address until the launch notification has been sent, or until you withdraw consent, whichever comes first. After that, your data is deleted within 30 days.

8. Your rights

Under GDPR you have the right to access your data (Art. 15), rectify it (Art. 16), have it erased (Art. 17), restrict processing (Art. 18), receive it in portable format (Art. 20), and object to processing (Art. 21). You may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any right, email hello@heliorhythm.eu. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Cookies

This website does not set any cookies. No advertising or third-party tracking scripts are loaded.

10. External resources

All fonts, stylesheets, scripts, and images are hosted directly on our own server. No external CDNs, Google Fonts, or third-party services are loaded when you visit this site.