Privacy

Privacy policy

This policy explains what personal data we process when you use gethugo.ca / gethugo.de, on what legal basis, and the rights you have. We designed the site to be data-minimal: fonts and media are self-hosted and there is no advertising or third-party tracking.

Last updated: July 2026

Who is responsible (controller)

The entity responsible for processing your personal data on this website depends on your region.

Controller for visitors in the EU / EEA

oceans GmbH

Lindenweg 2
04668 Grimma
Germany
Data protection contact
datenschutz@oc-ans.com

If you are served by cloud&more Inc. (Canada), that company is the controller and processing is governed by Canada’s PIPEDA and the cloud&more privacy policy.

Visiting the website (server logs)

This website runs on infrastructure operated by cloud&more Inc. in Canada. Each time the site is accessed, our server automatically records technical data your browser transmits: IP address, date and time of the request, the file or page requested, the referring page, and your browser type, version and operating system.

This data is processed to deliver the site reliably and to protect it against misuse and attacks. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, functioning website). Log entries are deleted once no longer needed for these purposes, as a rule within 14 days, unless a specific incident requires longer retention.

Contact form

When you send us a request, we process the details you enter: name, email address, company, number of users, industry, your message, the Hugo product selection you assembled, and your chosen language. We use this data solely to handle your request and to prepare a possible quote.

Legal basis: Art. 6(1)(b) GDPR where your request concerns entering into or performing a contract, otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries). To reduce spam we use a hidden field and a submission-timing check, which involve no personal data.

Your submission is delivered to us by email; it is not stored in a website database. We keep it until your request is fully handled and then delete it, unless statutory retention periods (for example under commercial or tax law) apply.

Web analytics (Matomo)

With your consent we use Matomo, an open-source analytics tool that we host ourselves on our own server (statistics.cloudandmore.ca). Your data is not shared with third parties such as Google. Matomo helps us understand how the site is used so we can improve it.

Matomo sets cookies in your browser (for example _pk_id, lifetime up to 13 months, and _pk_ses, lifetime 30 minutes) and processes: the pages you visit, time on the site, the approximate region derived from your IP address, your device and browser, and the page that referred you.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Analytics loads only after you accept; if you decline, no analytics cookies are set. You can change your choice at any time below. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

Cookies and local storage

Strictly necessary storage: we store your language preference, theme (light/dark) and your cookie choice in your browser’s local storage. This is used only to make the site work as you set it, is not used to track you, and requires no consent.

Analytics cookies: set by Matomo only after you consent (see above).

Transfer to a third country (Canada)

Our hosting and self-hosted analytics run on cloud&more Inc. infrastructure in Canada, so personal data may be processed there. The European Commission has decided that Canada ensures an adequate level of data protection for recipients subject to its PIPEDA legislation (adequacy decision 2002/2/EC of 20 December 2001). cloud&more Inc. is subject to PIPEDA, so this transfer is permitted without further safeguards.

Data security

This site is served exclusively over an encrypted TLS/HTTPS connection to protect data in transit.

Changes to this policy

We may update this policy to reflect changes to the site or to legal requirements. The version published here always applies.

Your rights

Under the GDPR you have the following rights regarding your personal data:

  • Access to the data we hold about you (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Objection to processing based on legitimate interest (Art. 21)
  • Withdrawal of consent at any time, with future effect (Art. 7(3))

To exercise any of these rights, contact us at datenschutz@oc-ans.com.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:

Die Sächsische Datenschutz- und Transparenzbeauftragte
Devrientstraße 5
01067 Dresden
Deutschland
https://www.datenschutz.sachsen.de

Contact

For any question about this policy or your data, write to datenschutz@oc-ans.com.