Privacy Policy
In accordance with Art. 13, 14 GDPR · Last updated: 10 September 2026
We take the protection of your personal data seriously. This privacy policy explains what data we process when you visit bovaryx.com, on what legal basis, who receives it, and what rights you have — in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
Yannik Schröder
BovaryX (pre-incorporation)
Platenstraße 6
60320 Frankfurt am Main
Germany
E-Mail: hello@bovaryx.com
We have not appointed a data protection officer, as the statutory thresholds of § 38 BDSG are not met. Please direct any data protection enquiries to the address above.
2. Server log files
When you access this website, our hosting provider automatically collects and stores technical information that your browser transmits: IP address, date and time of the request, the page requested, referrer URL, browser type and version, and operating system.
Purpose: secure and stable operation of the website, and defence against misuse.
Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in a technically functional and secure website.
Retention: deleted after 30 days at the latest, unless a specific incident requires longer storage.
This data is not merged with other data sources and is not used to identify you personally.
3. Contact form and e-mail
If you send us a message via the contact form, we process the data you enter (name, e-mail address, company where provided, and the content of your message) in order to respond to your enquiry. The same applies if you contact us directly by e-mail.
Legal basis: Art. 6 (1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures; otherwise Art. 6 (1)(f) GDPR — our legitimate interest in responding to enquiries addressed to us.
Retention: until your enquiry has been fully dealt with, unless statutory retention obligations (in particular under commercial and tax law) require longer storage.
4. Newsletter
If you subscribe to our newsletter, we process your e-mail address in order to send you updates about BovaryX and LPOS. Subscription uses a double opt-in procedure: after entering your address you receive a confirmation email, and you are only added to the list once you confirm. We record the confirmation as evidence of your consent.
The subscription itself takes place on the website of our newsletter service beehiiv (see section 6). This page only links there — no beehiiv content is loaded into this website, so simply visiting bovaryx.com creates no connection to beehiiv and transmits no data to them.
Legal basis: Art. 6 (1)(a) GDPR — your consent.
Withdrawal: you can withdraw your consent at any time with effect for the future, using the unsubscribe link in every newsletter or by e-mailing hello@bovaryx.com. Withdrawal does not affect the lawfulness of processing carried out before it.
Retention: until you unsubscribe.
5. Cookies and reach measurement
This website does not set cookies, and does not store or read any information on your device. We do not use profiling, advertising networks or social media plugins, and no consent banner is therefore required.
No reach measurement. We do not run analytics on this website. Nothing records your visit beyond the server log described in section 2, and that log is deleted after 30 days at the latest. There is no analytics script, no tracking pixel and no cross-site identifier.
6. Recipients and third-country transfers
We use the following service providers, each of which processes personal data on our behalf as a processor under Art. 28 GDPR. Our hosting provider is established in Germany. The two remaining providers are established in the United States, so processing by them may involve a transfer of personal data to a third country.
| Service | Purpose & data | Transfer basis |
|---|---|---|
| netcup GmbH Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany | Hosting and delivery of this website on a virtual server operated by us. Processes the server log data described in section 2, including your IP address. | Processing takes place within the European Union — no third-country transfer. Data processing agreement pursuant to Art. 28 GDPR. Privacy policy |
| Formspree Inc. Boston, MA, USA | Processing and forwarding of contact form submissions. Receives the name, e-mail address and message you submit. | EU Standard Contractual Clauses pursuant to Art. 46 (2)(c) GDPR, on the basis of a data processing agreement. Privacy policy |
| beehiiv Inc. 228 Park Avenue # 2329976, New York, NY 10003, USA | Operation of our newsletter. Receives your e-mail address and your newsletter interaction data once you follow the subscribe link and sign up there. | EU Standard Contractual Clauses pursuant to Art. 46 (2)(c) GDPR. EU representative under Art. 27 GDPR: Prighter EU Rep GmbH, Schellinggasse 3/10, 1010 Vienna, Austria. Privacy policy |
Beyond these processors, we do not pass your data on to third parties unless we are legally obliged to do so.
Please note that despite these safeguards, US authorities may under certain circumstances access personal data held by US providers, and that the level of legal protection in the United States does not fully correspond to that within the EU.
7. Your rights
Under the GDPR you have the right to:
- obtain information about the personal data we hold about you (Art. 15 GDPR)
- have inaccurate data corrected (Art. 16 GDPR)
- have your data erased (Art. 17 GDPR)
- have processing restricted (Art. 18 GDPR)
- receive your data in a portable format (Art. 20 GDPR)
- object to processing based on Art. 6 (1)(f) GDPR (Art. 21 GDPR)
- withdraw consent you have given at any time with effect for the future (Art. 7 (3) GDPR)
To exercise these rights, write to hello@bovaryx.com.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
datenschutz.hessen.de
9. Obligation to provide data
You are not legally or contractually obliged to provide us with personal data. However, without the details requested in the contact form we cannot process your enquiry, and without your e-mail address we cannot send you the newsletter.
10. Data security
This website uses TLS encryption (HTTPS) with HTTP Strict Transport Security for all transmissions. We take appropriate technical and organisational measures to protect your data against manipulation, loss and unauthorised access.
11. Visitors outside the EU
Our product is aimed at feedlot operators in Australia. Where we process personal data of individuals in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles may apply in addition to the GDPR. In such cases we apply whichever standard offers the higher level of protection.
12. Changes to this policy
We update this privacy policy when changes to our services or to the legal framework make it necessary. The current version always applies and can be found at bovaryx.com/privacy.