1. Controller
The controller responsible for the processing of personal data on this website is:
H₂-Enterprises Group Inc.
One World Trade Center, 85th Floor
New York, NY 10007
USA
Represented by: Dipl.-Ing. Michael Stusch, Executive Chairman and CEO
E-mail: contact@h2.enterprises
Further company details are provided in the Imprint.
2. Overview
This website is designed to process as little personal data as possible:
- It does not set cookies and does not store information in your browser (no local or session storage).
- It does not use analytics, advertising or tracking tools.
- It does not embed third-party content such as external videos, maps or social-media plugins.
- Fonts, images and videos are delivered from this website’s own domain; no request is made to external font or media services.
Personal data is processed only as described below: when the website is delivered to you (section 3) and when you send an enquiry through the contact form (section 4).
3. Hosting and server log data
This website is hosted by the web hosting provider INWX, which processes data on our behalf as a processor. When you visit the website, the hosting server automatically processes technical data that your browser transmits, in particular your IP address, the date and time of the request, the requested page or file, the referring page, and browser and operating-system information.
This processing is necessary to deliver the website and to ensure its stability and security. The legal basis is our legitimate interest in a secure and functioning website (Art. 6 (1) (f) GDPR). Log data is kept only for as long as it is needed for these purposes.
4. Contact form
When you send an enquiry through the contact form, we process the information you enter:
- your name;
- your work e-mail address;
- your organization (optional);
- the enquiry category you choose (Investor Relations, Business Development or Corporate);
- your message;
- your confirmation that you have read this Privacy Policy.
Purpose and routing. We use this information only to handle and answer your enquiry. The website’s server sends it as an e-mail to our mailbox contact@h2.enterprises, using the authenticated mail server of our e-mail provider. The enquiry category determines the subject line and which H₂-Enterprises team reviews the enquiry. We reply to the e-mail address you provide. The form does not store enquiries in a database on the web server.
Protection against misuse. To prevent automated spam, the form also transmits the time at which it was opened and a hidden field that people leave empty; neither contains personal data. To limit the number of enquiries that can be sent from one connection, the server stores a keyed hash of your IP address together with the time of submission. The plain IP address is not stored for this purpose, the hash is not used for anything else, and it is deleted after 24 hours.
Legal basis. Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures; otherwise our legitimate interest in responding to enquiries and protecting the form against misuse (Art. 6 (1) (f) GDPR). Providing the information is voluntary; without your name, e-mail address and message we cannot answer your enquiry.
Investor Relations enquiries. If you choose Investor Relations, we use your details to assess and answer your request. Investor materials are shared following internal review.
Storage period. We keep your enquiry and our correspondence for as long as needed to handle it and any follow-up. Afterwards it is deleted, unless statutory retention obligations require longer storage.
Recipients. Your enquiry is accessible to the H₂-Enterprises team responsible for the chosen category. Our hosting provider and our e-mail provider process the data on our behalf only to the extent necessary to transmit and store the e-mail.
5. Contact by e-mail
If you write to us by e-mail, we process your e-mail address, the content of your message and any further information you provide in order to answer you, on the legal bases and for the storage period described in section 4.
6. External links
Where this website links to external websites — for example to archived web pages in the Historical Archive — no data is transmitted to these providers until you follow the link. From that point, the respective provider’s privacy policy applies.
7. Your rights
Under the applicable data protection laws you have the right to:
- obtain information about the personal data we process about you (Art. 15 GDPR);
- have inaccurate data rectified (Art. 16 GDPR);
- have your data erased (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR);
- receive your data in a portable format (Art. 20 GDPR);
- object to processing based on legitimate interests (Art. 21 GDPR);
- lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
To exercise your rights, contact us at contact@h2.enterprises.
9. Changes to this policy
We update this Privacy Policy when the website or the applicable legal requirements change. The current version is always available on this page.