Privacy Policy
Thank you for visiting our website and for your interest in our company. We take the greatest possible care in processing your data. The following information provides a concise and straightforward overview of what happens to your personal data when you visit our website. Your personal data is processed in accordance with applicable legal regulations — in particular the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
The controller within the meaning of the GDPR and other national data protection laws of EU member states is:
Noyes Robotics GmbH
Leopoldstraße 37a
80802 München
Germany
E-Mail: info@noyes-tech.com
Web: https://www.noyes-tech.com
2. Data Protection Officer
For questions regarding data protection, please contact our external data protection officer:
E-Mail: datenschutz@confidentdata.de
3. Your Rights as a Data Subject
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
With regard to the right of access and the right to erasure, the restrictions pursuant to §§ 34 and 35 BDSG apply.
You also have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). As Noyes Robotics GmbH is based in Bavaria, the competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
Tel.: +49 981 180093-0
E-Mail: poststelle@lda.bayern.de
Web: https://www.lda.bayern.de
4. Information on the Right to Object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR (legitimate interest); this also applies to profiling based on this provision within the meaning of Art. 4 no. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
The objection can be made informally with the subject line "Objection", stating your name and address, to info@noyes-tech.com.
5. Hosting (Cloudflare Pages)
This website is hosted on the infrastructure of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) via the "Cloudflare Pages" service. When our website is accessed, the server automatically collects technical access data and stores it in server log files. This includes:
- IP address of the requesting device
- Date and time of access
- Page accessed and data transferred
- Browser type and operating system
- Referring URL (referrer)
This data is used exclusively to ensure the technical operation of the website and to detect and prevent attacks. It is not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and error-free provision of the website).
Cloudflare is certified under the EU-US Data Privacy Framework. A data processing agreement has been concluded with Cloudflare. Further information on data protection at Cloudflare: https://www.cloudflare.com/privacypolicy/
6. Contact Form (HubSpot)
On our contact page we use the form tool of HubSpot Ireland Limited (Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland), a subsidiary of HubSpot, Inc. (USA). The data you enter in the form (e.g. name, email address, company, message) is transmitted to and processed by HubSpot.
We use the EU region of HubSpot (eu1), so your data is stored on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR has been concluded with HubSpot.
The data entered in the form is processed exclusively for the purpose of handling your contact request and initiating a potential contract. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to enquiries) and Art. 6 para. 1 lit. b GDPR (pre-contractual measures). Your data will be deleted once your request has been fully processed and no retention obligations apply.
Further information on data protection at HubSpot: https://legal.hubspot.com/privacy-policy
8. Data Security
We use technical and organisational security measures to protect your personal data from misuse, loss, destruction or access by unauthorised persons. The measures taken correspond to the current state of the art and are continuously updated. The website is transmitted exclusively in encrypted form via HTTPS (TLS).
Nevertheless, we point out that there is always a certain residual risk in internet communication that we cannot completely exclude.
9. Data Deletion and Retention Periods
We store personal data only for as long as necessary for the respective processing purpose or as required by statutory retention obligations.
The following statutory retention periods apply in Germany:
- 10 years for books, records, accounting documents and tax-relevant documents (§ 147 para. 1 AO)
- 6 years for commercial and business letters and other documents (§ 257 para. 1 HGB)
After expiry of the respective period or once the processing purpose ceases to apply, the data will be routinely deleted.
10. Validity and Changes to this Policy
This privacy policy is valid and dated May 2026.
Due to the further development of our website or the implementation of new technologies, it may be necessary to update this privacy policy. We recommend checking this page regularly to stay informed about the current version.