Privacy Policy

Last updated: April 2026

1. Who We Are

HyperVerum is operated by Hyper38 GmbH ("we", "us", "our"). We provide a pharmaceutical drug authentication platform using NFC technology. For all data-protection matters, contact us at privacy@hyperverum.com.

2. What Data We Collect

We collect personal data only in the following circumstances:

• Access request form: When you submit a pilot programme request, we collect your full name, work email address, company name, company website, and headquarters address.
• Correspondence: If you contact us by email, we retain the content of that correspondence.
• Usage data: Standard server log data (IP address, browser type, pages visited) is collected solely for security and operational purposes.

No personal data is stored on or transmitted by HyperVerum NFC chips.

3. How We Use Your Data

• To process and respond to your pilot programme application
• To communicate with you about our services, pricing, and deployment
• To comply with applicable legal obligations
• To maintain the security and integrity of our systems

4. Legal Basis for Processing

We rely on the following legal bases under GDPR Article 6:

• Article 6(1)(b): Steps taken at your request prior to entering a contract
• Article 6(1)(f): Our legitimate interests in operating our business and communicating with prospective customers
• Article 6(1)(c): Compliance with legal obligations where applicable

5. Data Retention

Contact form submissions are retained for a maximum of 24 months from submission, or until you request deletion — whichever is sooner. Server log data is retained for up to 90 days.

6. Sharing of Data

We do not sell, rent, or trade your personal data. We may share data with carefully selected service providers (cloud hosting, email infrastructure) who process it on our behalf under signed data processing agreements. We will disclose data if required by applicable law.

7. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses where applicable.

8. Your Rights

Under the GDPR you have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, receive your data in a portable format, and object to processing based on legitimate interests. To exercise any of these rights, contact privacy@hyperverum.com. You also have the right to lodge a complaint with your national supervisory authority.

9. Cookies and Local Storage

Our website uses browser local storage solely to remember your theme preference. We do not use cookies for tracking or analytics. See our Cookie Policy for full details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes are indicated by an updated "Last updated" date at the top of this page.

11. Contact

HyperVerum, c/o Hyper38 GmbH
Email: privacy@hyperverum.com