1. Controller

Royma Industrial CT – Europe, represented by BliXray Technologies GmbH
Hollerithallee 17, 30419 Hannover, Germany
E-mail: adrian_deriz@roymatek.eu · Phone: +49 1578 04 777 53

2. Hosting and server logs

This website consists of static files delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, through its worldwide network. When a page is requested, Cloudflare processes technical data: IP address, date and time, the page requested, browser type and operating system. This is needed to deliver the website and to protect it against attacks. Legal basis: Article 6 (1) (f) GDPR; our legitimate interest is a secure and fast website. Cloudflare acts as our processor. Where data is transferred to the USA, this takes place under the EU-US Data Privacy Framework and the EU standard contractual clauses.

3. Cookies, consent and fonts

Fonts and images are delivered from our own website. Essential functions of the website set no cookies. Analytics cookies (section 4) are set only after you have agreed in the cookie banner. Your choice is stored in your browser for twelve months and can be changed at any time via "Cookie settings" in the footer of every page. Legal basis for the storage of your choice: Article 6 (1) (c) and (f) GDPR.

4. Analytics

Cloudflare Web Analytics. To see how many visitors read which pages and how fast the pages load, we use Cloudflare Web Analytics (Cloudflare, Inc., see section 2). It works without cookies and without storing personal identifiers; the page requested, the referring page, the browser type and the country are counted in aggregated form. Legal basis: Article 6 (1) (f) GDPR; our legitimate interest is measuring and improving our website.

Google Analytics 4. With your consent we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It sets cookies (in particular _ga, _ga_*, kept for up to two years) and records the pages you view, how you arrived, the type of device and browser and an approximate location; IP addresses are shortened before storage. We use the reports to understand which content is of interest. Google acts as our processor; where data is transferred to the USA, this takes place under the EU-US Data Privacy Framework and the EU standard contractual clauses. Legal basis: Article 6 (1) (a) GDPR (consent).

Apollo website visitors. With your consent we use the website-visitor tool of Apollo.io (ZenLeads Inc., 535 Mission St, San Francisco, CA 94105, USA). It sets a cookie and matches the network address of your visit against a company database in order to tell us which company a visit came from and which pages were viewed. It does not identify individual persons. We use this to prepare relevant follow-up with companies that show interest in industrial CT. Where data is transferred to the USA, this takes place under the EU standard contractual clauses. Legal basis: Article 6 (1) (a) GDPR (consent).

You can withdraw your consent at any time via "Cookie settings" in the footer; the tools are then no longer loaded. Withdrawal does not affect the lawfulness of processing before it.

5. Enquiry form

If you send the enquiry form, we process the details you enter: name, business e-mail address, company, telephone number if given, industry and the description of your inspection task, together with the address of the page from which the form was sent. We use them to answer your enquiry and to prepare a quotation or a test scan. Legal basis: Article 6 (1) (b) GDPR (steps prior to a contract) and Article 6 (1) (f) GDPR (answering business enquiries).

The form sends these details to a function on our own website, which passes them on to our contact list and sends an e-mail to our sales staff. The contact list and the e-mail are kept in Google Workspace services (Google Sheets and Gmail) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as our processor. Where data is transferred to the USA, this takes place under the EU-US Data Privacy Framework and the EU standard contractual clauses.

6. Contact by e-mail or telephone

If you contact us by e-mail or telephone, we process your details to handle the matter. Legal basis: Article 6 (1) (b) or (f) GDPR. Enquiries from business contacts are also recorded in our customer relationship management system (HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA; in the EU: HubSpot Ireland Ltd., Dublin), which acts as our processor.

7. Recipients

Your details are handled by the staff of Royma Europe and, where needed to answer a technical question or prepare a quotation, by Royma staff at the headquarters in Suzhou, China. Such transfers are limited to what the enquiry requires and are based on Article 49 (1) (b) GDPR or on standard contractual clauses. We do not sell data and do not pass it on for advertising.

8. Storage period

We delete enquiry data when it is no longer needed for the purpose, as a rule three years after the last contact, unless statutory retention periods under commercial or tax law require longer storage.

9. Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing based on Article 6 (1) (f) GDPR (Article 21). Consent can be withdrawn at any time with effect for the future. An e-mail to adrian_deriz@roymatek.eu is sufficient.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

10. Changes

We update this policy when the website or the legal position changes. Version: September 2026.