Privacy.

Controller

Lyron
Owner: Jack Jipp
Grünstraße 43
40667 Meerbusch
Germany
Email: info@lyron-ai.com

We process personal data only as far as necessary to run this website and to handle your inquiry. The website sets no cookies and loads no advertising tools or external fonts. For audience measurement without cookies we use Cloudflare Web Analytics (see below).

Hosting and server logs

The website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data such as IP address, time, requested page, browser type and referrer in order to deliver the site securely and quickly and to fend off attacks. Legal basis is our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place.

Audience measurement

To see which pages are visited, where visitors come from and how fast the pages load, we use Cloudflare Web Analytics (same provider as for hosting). Each page loads a small script from Cloudflare. It sends the page visited, the referring page (for example LinkedIn), browser, operating system and device type as well as loading and performance values to Cloudflare; the country is derived from the IP address. The script sets no cookies, stores nothing on your device and builds no user profiles. According to Cloudflare, IP addresses and browser identifiers are not used to recognise individual visitors; we only see aggregated figures. Legal basis is our legitimate interest in making the website useful and technically sound (Art. 6(1)(f) GDPR). You can object by blocking scripts from “static.cloudflareinsights.com” in your browser, for example with a content blocker.

Demo intranet

At demo-intranet.nuvandro.com we show the intranet of the fictional Contoso GmbH for you to try. The demo is not embedded on nuvandro.com; it only loads when you open that address. It works without sign-in and without cookies. As on this website, we use Cloudflare Web Analytics to see which pages of the demo are visited; what is said above under “Audience measurement” applies.

Like this website, the demo is delivered via Cloudflare Pages; what is said above under “Hosting and server logs” applies. The demo loads program and file icons (for Word or Excel files, for example) from Microsoft’s content delivery network (res-1.cdn.office.net; Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA) so that they look as they do in Microsoft 365; Microsoft receives your IP address and browser details in the process. The legal basis is our legitimate interest in a presentation true to the original (Art. 6(1)(f) GDPR). Microsoft is certified under the EU-US Data Privacy Framework.

What you enter in the demo, such as requests, bookings or favourites, and where you are in the tour is stored by the demo only in your browser’s local storage. This information is not transmitted to us. Storing it is necessary for the demo to work the way you use it (Section 25(2) no. 2 TDDDG). You can delete it with “Zurücksetzen” (reset) in the demo’s bar or in your browser settings.

Project brief and appointments

When you press “Send”, your brief (project type, description, organisation, name, email, optional phone number and chosen time) is transmitted encrypted to an automation server (n8n) that Lyron operates on a server of IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). From there it is sent by email to Lyron via Google Workspace. If you choose a time, an appointment with a Google Meet link is created in Lyron’s Google Calendar, and Google sends you the invitation. You receive a confirmation email; it contains only the project type and, if chosen, the appointment – not your description. Legal basis: steps prior to entering into a contract at your request and your consent (Art. 6(1)(b) and (a) GDPR).

When free times are loaded and when you send your brief, your IP address is transmitted to this server and recorded in its server logs (nginx); these logs are deleted after 14 days. To protect against misuse, your IP address is kept for at most one hour. Successful runs of the automation are not stored in n8n; failed technical runs are kept for up to 14 days for troubleshooting and may then contain the submitted details.

Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) processes emails and calendar entries on behalf of Lyron under a data processing agreement. A transfer to Google LLC in the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.

Contact by email

If you email us, we process your details to answer your inquiry (Art. 6(1)(b) or (f) GDPR).

Retention

We keep inquiries and appointment data as long as needed to handle them and for a possible project. If no project follows, we delete them after twelve months at the latest, unless statutory retention obligations (e.g. under commercial and tax law) apply.

Your rights

You have the right of access, rectification, erasure and restriction of processing, to data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw consent at any time with effect for the future. Please use the email address above. You may also lodge a complaint with a data protection supervisory authority, for example the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information.

Encryption

The website and all transmissions to the automation server are encrypted with TLS (HTTPS).

Last updated: October 2026