Privacy policy

1. Controller

BliXray Technologies GmbH
Hollerithallee 17, 30419 Hannover, Germany
E-mail: a.deriz@blix-ray.de · Phone: +49 1578 0477753

2. Hosting and server logs

This website consists of static files delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, through its worldwide network. When a page is requested, Cloudflare processes technical data: IP address, date and time, the page requested, browser type and operating system. This is needed to deliver the website and to protect it against attacks. Legal basis: Article 6 (1) (f) GDPR; our legitimate interest is a secure and fast website. Cloudflare acts as our processor. Where data is transferred to the USA, this takes place under the EU-US Data Privacy Framework and the EU standard contractual clauses.

3. Cookies, consent and fonts

Fonts and images are delivered from our own website. Essential functions of the website set no cookies. Analytics cookies (section 4) are set only after you have agreed in the cookie banner. Your choice is stored in your browser for twelve months and can be changed at any time via "Cookie settings" in the footer of every page. Legal basis for the storage of your choice: Article 6 (1) (c) and (f) GDPR.

4. Analytics

Cloudflare Web Analytics. To see how many visitors read which pages and how fast the pages load, we use Cloudflare Web Analytics (Cloudflare, Inc., see section 2). It works without cookies and without storing personal identifiers; the page requested, the referring page, the browser type and the country are counted in aggregated form. Legal basis: Article 6 (1) (f) GDPR; our legitimate interest is measuring and improving our website.

Google Analytics 4. With your consent we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It sets cookies (in particular _ga and _ga_*, kept for up to two years) and records the pages you view, how you arrived, the type of device and browser and an approximate location; IP addresses are shortened before storage. We use the reports to understand which content is of interest. Google acts as our processor; where data is transferred to the USA, this takes place under the EU-US Data Privacy Framework and the EU standard contractual clauses. Legal basis: Article 6 (1) (a) GDPR (consent).

Identification of visiting companies from the network address. When a page is opened, our website records the page address together with the network from which the request came (the network operator named for the IP address by our hosting provider, and the organisation registered for the address range in the public internet registries such as RIPE NCC). We use this to see which companies and institutions take an interest in industrial CT and radiation shielding and which pages they read. The IP address itself is not stored; no cookie and no visitor identifier is set, and individual persons are not identified. Where a network belongs to an internet provider or a mobile network, the visit is counted as anonymous. Legal basis: Article 6 (1) (f) GDPR; our legitimate interest is business development towards companies. You may object to this processing at any time (see section 9).

You can withdraw your consent at any time via "Cookie settings" in the footer; the tools are then no longer loaded. Withdrawal does not affect the lawfulness of processing before it.

5. Enquiry form

If you send the enquiry form, we process the details you enter: name, business e-mail address, company or institute, telephone number if given, topic and the description of your task, together with the address of the page from which the form was sent. We use them to answer your enquiry and to prepare a quotation or a test scan. Legal basis: Article 6 (1) (b) GDPR (steps prior to a contract) and Article 6 (1) (f) GDPR (answering business enquiries).

The form sends these details to a function on our own website, which enters them in our contact list and sends a notification to our mailbox. The contact list is kept in Google Sheets of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the notification is sent through Google and received in our mailbox at Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Both act as our processors. Where data is transferred to the USA, this takes place under the EU-US Data Privacy Framework and the EU standard contractual clauses.

6. Contact by e-mail or telephone

If you contact us by e-mail or telephone, we process your details to handle the matter. Legal basis: Article 6 (1) (b) or (f) GDPR. Enquiries from business contacts are also recorded in our customer relationship management system (HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA; in the EU: HubSpot Ireland Ltd., Dublin), which acts as our processor.

7. Recipients

Your details are handled by the staff of BliXray Technologies GmbH. Where needed to answer a technical question or prepare a quotation, we pass the necessary details to our suppliers, for example the manufacturer of a system or cabinet. Such transfers are limited to what the enquiry requires. We do not sell data and do not pass it on for advertising.

8. Storage period

We delete enquiry data when it is no longer needed for the purpose, as a rule three years after the last contact, unless statutory retention periods under commercial or tax law require longer storage.

9. Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing based on Article 6 (1) (f) GDPR (Article 21). An e-mail to a.deriz@blix-ray.de is enough. You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Data Protection Commissioner of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

10. Changes

This policy describes the state as of 7 October 2026. If we add new services to the website, we will update it.