Loading
How DY Nexus handles personal data.
Last updated 4 November 2026
The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:
Demhat YasinEmail: admin@dynexus.io
The website is operated by Demhat Yasin as a private individual. Full provider identification is on the legal notice page.
This website is a set of static pages. It uses no advertising networks, no advertising or marketing tags and no third-party embeds. Only if you allow it, it uses Google Analytics 4 to measure how the site is used (§ 2.2).
The web server of this website records every request in a log file. This is necessary to deliver the site and operate it securely. It records:
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is operating the site securely and diagnosing faults. This data is not combined with other sources and is not used to identify individual visitors.
Retention: the log file is switched daily; completed log files are deleted automatically after 14 days. Server error messages, which may also contain an IP address, are kept in the system journal for no longer than 30 days.
Nothing is stored on your device until you make a choice in the cookie banner. What is stored afterwards depends on that choice. Everything listed here is set on this website's own domain. The site uses no advertising or marketing technologies and no functional cookies.
| Name | Type | Category | Provider | Purpose | Retention |
|---|---|---|---|---|---|
dyn_consent | Cookie | Strictly necessary | This website | Records your cookie choices: the policy version, the date and time of your choice and, for each optional category, whether you allowed it | 12 months, or until the cookie section of this policy changes |
_ga | Cookie | Analytics (only with consent) | Google, set by Google Analytics on this domain | Distinguishes browsers, with a randomly generated identifier | 12 months from the last measured visit (set by this site; Google's default is 2 years) |
_ga_2P8JVD54XZ | Cookie | Analytics (only with consent) | Google, set by Google Analytics on this domain | Keeps the state of the current visit (session) | 12 months from the last measured visit (set by this site; Google's default is 2 years) |
The cookie descriptions follow Google's documentation.
Language: the language of every page is part of its address (/en, /de
or /ar). If you open the root address without one, the site reads the
Accept-Language header your browser sends with each request and forwards you
to the matching language, or to English if none of yours is offered. Your
language is not stored: no cookie and no browser storage are used for it.
To change it, use the language menu, which takes you to the same page in the
other language.
Legal basis for the consent cookie: storing and reading it is strictly necessary to record the choice you make (§ 25(2) No. 2 TDDDG), so it does not require consent.
If, and only if, you allow the Analytics category, this site uses Google Analytics 4 to understand how the website is used so that it can be improved: which pages are visited, in which language, and how visitors move between them.
Without your consent, Google Analytics is not loaded at all: no script from Google, no request to Google and no Google cookie. Nothing is sent before consent, including no cookieless measurement.
What is collected once you consent:
session_start), a first visit (first_visit) and engagement time
(user_engagement);Every hit carries the pseudonymous identifier from the _ga cookie.
Not collected: names, email addresses, form contents or anything else you type; in particular, no contents of the contact form are sent to Google. The collection of user-provided data is not enabled. Advertising features are switched off: advertising storage, advertising user data and ad personalisation are denied, Google signals is disabled, and the settings for sharing data with Google are switched off.
IP address: for your browser to load Google's script and send measurement data to Google, your IP address is necessarily transmitted to Google. According to Google, Google Analytics 4 uses the IP address only to derive the coarse location and does not log or store it; for visits from the EU it is discarded before the data is logged.
Provider and Google's role: Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data as a processor under Google's data processing terms (Art. 28 GDPR). Google's own information: privacy policy and how Google uses information from sites that use its services.
Transfers outside the EU/EEA: data may also be processed by Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).
Retention in Google Analytics: event data is deleted from Google Analytics after 14 months at the latest. The cookies expire as stated in the table above.
Legal basis: your consent (§ 25(1) TDDDG for storing and reading information on your device; Art. 6(1)(a) GDPR for the processing). After 12 months you are asked for your choice again.
Withdrawing consent: use Cookie Settings at the bottom of every page and switch Analytics off, or choose Reject all. Measurement stops at once: the page reloads without Google Analytics, its cookies are deleted from your browser, and nothing further is sent. Withdrawal does not affect data sent before it, or the lawfulness of processing based on your consent until then.
Other categories: apart from Analytics, no optional category is in use, in particular no functional or marketing technology. The cookie settings therefore show only the categories that are actually used. If another technology is introduced, it will load only after you allow its category, it will be described here, and you will be asked for your choice again.
Your choices: on your first visit, a banner lets you accept all, reject all, or choose individual categories. Rejecting is as easy as accepting, and the website works fully either way. Optional categories stay off until you switch them on. You can also delete cookies and site data in your browser's settings, after which the banner appears again on your next visit.
Web fonts are served from this site's own domain. No requests are made to Google Fonts or any other font CDN, so no data reaches a third party when fonts load.
If you use the contact form, the name, email address, subject
and message you enter are transmitted to this website's server. The server
sends them, together with the time of receipt, as an email through Hostinger's
email service to the mailbox admin@dynexus.io, where they are stored in
order to answer your enquiry. Your email address is set as the reply-to
address. The website itself does not store them.
Providing this information is voluntary. Without a name, email address, subject and message the form cannot be sent and your enquiry cannot be answered.
Abuse protection: to limit the number of requests per sender, the server holds your IP address in memory only; it is discarded no later than 30 minutes after your last request and is never written to disk. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in protecting the form from automated abuse.
Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps; otherwise Art. 6(1)(f) GDPR, the legitimate interest in responding to enquiries.
Retention: enquiries are kept until the matter is settled, then deleted, unless statutory retention periods apply.
Recipient: Hostinger, as the provider of the email service (section 4).
You can always email admin@dynexus.io directly instead.
This website runs on a virtual private server (VPS) from the provider
Hostinger; the server is located in Germany. Hostinger provides the server
infrastructure and also operates the email service used for the mailbox
admin@dynexus.io and the contact form. The data described in sections 2.1
and 3 may therefore be processed on Hostinger's systems.
Data processing agreement: a data processing agreement under Art. 28 GDPR is in place with Hostinger (Hostinger's Data Processing Addendum, part of Hostinger's terms). It covers the VPS and the email service.
Sub-processors and third countries: Hostinger uses sub-processors,
including companies based in the USA (Cloudflare, Inc. and Proofpoint, Inc.)
and in Canada (MailChannels Corporation). Processing of the data described
above — in particular messages from the contact form and emails to
admin@dynexus.io — outside the EU/EEA can therefore not be ruled out. For
Canada, there is an adequacy decision of the European Commission (Art. 45
GDPR). For transfers to countries without an adequacy decision, the agreement
with Hostinger provides for the EU Standard Contractual Clauses
(Art. 46(2)(c) GDPR).
This policy covers this website only. Applications published under the DY Nexus name are separate products with their own privacy documentation, provided with each application.
NexusPass is designed so that vault data stays on your device: there is no account and no server that receives your entries. Detailed documentation will be published with its release.
Under the GDPR you have the right to:
To exercise any of these, email admin@dynexus.io.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
On this website, that basis covers the server log files (section 2.1), the handling of enquiries sent through the contact form where they do not concern a contract, and the protection of the form against misuse (section 3).
If you object, your data will no longer be processed for these purposes unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
No particular form is required; an email to admin@dynexus.io is enough. Google Analytics is not based on legitimate interests but on your consent, which you can withdraw as described in section 2.2.
You may lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement. The authority responsible for the controller is the data protection supervisory authority of the Free Hanseatic City of Bremen (LfDI Bremen, www.datenschutz.bremen.de).
This policy is updated when the website changes. The date at the top of this page identifies the current version.