Halyar
Halyar / Privacy

Legal

Privacy policy

Note: This is a convenience translation. The German version (Datenschutzerklärung) is legally binding.

1. Controller

2M Ventures UG (haftungsbeschränkt)
Hohenstaufenstr. 22
10779 Berlin, Germany
Email: hello@halyar.com
Represented by: Managing Director Philipp Müller

A summary of this policy is available as a data protection overview (PDF, German), and a template of our data processing agreement as a DPA template (PDF, German).

2. Hosting with Vercel

This website is delivered via Vercel. When you access it, technically necessary connection data such as IP address, timestamp, requested file, referrer and browser information may be processed to deliver the website securely.

The contracting party is Vercel Inc. (USA). The legal basis is our legitimate interest in a secure and stable delivery of the website (Art. 6(1)(f) GDPR). Connection data is stored only as long as required for operation and security. Where data is transferred to the USA, the transfer is based on the data processing agreement with Vercel including the EU standard contractual clauses.

3. Work sample form

When you use the form, we process your company, name, email address, selected role, description, optional link and your consent confirmation in order to handle the request and communicate about the work sample.

The data is not used for automated marketing. The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). If no contract is concluded, we delete the request no later than twelve months after the last communication.

4. Email delivery via Resend

Form requests and confirmations are sent technically via Resend. The contact details and content you enter are transmitted to the email service for this purpose.

The contracting party is Resend Inc. (USA), with whom a data processing agreement including EU standard contractual clauses is in place. The legal basis is the handling of your request (Art. 6(1)(b) GDPR).

5. Data processing in customer operations

When we run digital employees for you, the following also applies:

  • Dedicated environment: Every customer gets their own, separate instance. Your data resides on servers in Germany.
  • Language models: For AI processing we use language model providers as data processors. Depending on the agreed configuration these are EU or US providers; for US providers we base the transfer on data processing agreements including EU standard contractual clauses. On request we set up the role with EU providers only.
  • No training: Your data is not used to train AI models. This is contractually agreed with the providers we use.
  • DPA: Before launch we conclude a data processing agreement with you under Art. 28 GDPR, including the list of subprocessors we use. A template (PDF, German) is available for download.
  • On cancellation: Results and documentation are handed over to you, then your data is deleted from the instance.

6. Cookies and tracking

The website currently does not use any analytics, advertising or tracking cookies. No external web fonts are loaded. Technically necessary infrastructure mechanisms of the hosting remain unaffected.

7. Your rights

Within the scope of the law you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can also withdraw a given consent with effect for the future and lodge a complaint with a data protection supervisory authority; the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.

8. Version

Version: 6 September 2026