Privacy Policy

This Privacy Policy explains what personal data we process when you visit pinexq.net, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This policy covers only the public website and its documentation. The PineXQ platform itself (e.g. the JMA API at jobs.api.pinexq.net and Portal portal.pinexq.net) is governed by a separate agreement with the operator of the platform you connect to.

1. Controller

The controller responsible for the data processing described in this policy is:

data cybernetics ssc GmbH Vordere Mühlgasse 189 86899 Landsberg am Lech Germany

Registered at Amtsgericht Augsburg, HRB 36687. Email:

If you have appointed or are looking for our Data Protection Officer, please contact us using the address above.

2. What we collect when you visit pinexq.net

2.1 Hosting and CDN

The website is delivered as static files from an Amazon S3 bucket in the eu-central-1 (Frankfurt) region through the Amazon CloudFront content delivery network. The hosting provider is Amazon Web Services EMEA SARL (Luxembourg).

We do not enable CloudFront or S3 access logging on our buckets, which means we ourselves do not write or store any access logs about your visit. AWS, as our hosting and CDN provider, necessarily processes your IP address, request URL, timestamp, response status, and user-agent header at the network edge for the purpose of delivering a response to your browser and protecting the service from abuse. This processing happens inside AWS and is governed by AWS’s own privacy notice; we do not receive a copy of this data.

The legal basis for using AWS in this way is Art. 6(1)(f) GDPR (legitimate interest in operating a reliable and secure website).

2.2 Web analytics (self-hosted Umami)

To understand how our website is used and to improve it, we run a self-hosted instance of Umami at umami.data-cybernetics.net. The Umami server is operated on infrastructure provided by Hetzner Online GmbH (Germany, EU). The analytics script is loaded on every page of this site and our documentation.

Umami is privacy-friendly by design:

• It does not set any cookies and does not read any existing cookies.
• It does not collect cross-site identifiers and cannot be used to recognise you on other websites.
• It does not store your full IP address. Your IP is used only to derive a rough country and to compute a daily, salted hash that lets Umami distinguish unique visitors within a single day. The hash cannot be reversed to your IP and is rotated daily.

For each page view Umami records:

• a hashed daily visitor identifier (as described above),
• the page URL on our site and the referrer URL,
• your country (derived from the IP, which is not stored),
• your browser, operating system, and device type, and
• the screen resolution and language preference reported by your browser.

The Umami server is operated by data cybernetics ssc GmbH on infrastructure we control inside the EU (see also section 3); analytics events are not shared with any third-party processor. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in measuring and improving our website). Because no cookies are set and no personally identifying data is collected, we do not display a consent banner; if you nonetheless wish to avoid being counted, common privacy extensions (such as uBlock Origin) block the Umami script.

2.3 Interactive API reference (/api)

The page at /api renders an interactive reference of the PineXQ JMA API using Scalar. The OpenAPI specification is bundled with the website and loaded from our own server; Scalar’s own telemetry is disabled.

If you use the “Try it” feature on this page to send a test request, your browser sends that request directly to https://jobs.api.pinexq.net — i.e. to the PineXQ platform itself — including any API key or other credentials you enter. That request is processed under the terms of the JMA service operator and is not governed by this Privacy Policy. We strongly recommend that you only send test requests using credentials issued for that purpose.

2.4 Fonts, icons, and other assets

All fonts, icons, images, and scripts are self-hosted and served from the same domain as the rest of the site. We do not load Google Fonts, font CDNs, or any third-party content delivery network for these assets. As a result, no additional third party receives your IP address simply because you opened a page.

2.5 Cookies and local storage

We do not set any cookies. The site uses your browser’s localStorage only to remember small UI state (for example, which tab you last selected on the Downloads page). This data stays in your browser, contains no personal information, and is never transmitted to us.

2.6 Forms, accounts, and embedded content

This website does not offer contact forms, newsletter signups, user accounts, or comment functionality. It does not embed YouTube videos, social-media widgets, maps, or other third-party content. Outbound links to external sites (such as PyPI, GitHub, or data-cybernetics.com) are followed only when you click them; we have no influence over what those operators do with your data and refer you to their respective privacy policies.

3. International data transfers

Our hosting and CDN are operated by Amazon Web Services EMEA SARL (Luxembourg). The S3 bucket is provisioned in the eu-central-1 (Frankfurt) region and the website data is stored there. CloudFront, however, is a global CDN that may deliver content from edge locations outside the European Economic Area; where such transfers to third countries occur, they are covered by AWS’s participation in the EU–US Data Privacy Framework and by the European Commission’s Standard Contractual Clauses in our data processing agreement with AWS.

The self-hosted Umami analytics server runs on infrastructure provided by Hetzner Online GmbH in Germany; analytics events are processed and stored within the European Union.

4. Retention

5. Your rights under the GDPR

Where we process personal data about you, you have the following rights:

• Right of access (Art. 15 GDPR) — to obtain confirmation of whether we process data about you and a copy of that data;
• Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected;
• Right to erasure (Art. 17 GDPR) — to have your data deleted, subject to the conditions in the GDPR;
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR);
• Right to object (Art. 21 GDPR) — to object to processing based on our legitimate interests, including the analytics described in section 2.2;
• Right to withdraw consent (Art. 7(3) GDPR) where processing is based on consent — this does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us using the address in section 1.

In practice, the website itself collects no data that can identify you personally, so an access or erasure request for the website usually amounts to “we do not hold identifiable data about you.” Requests concerning the JMA platform (jobs.api.pinexq.net) should be directed to the operator of that platform.

6. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

The supervisory authority responsible for data cybernetics ssc GmbH is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach, Germany www.lda.bayern.de

7. Changes to this policy

We may update this policy when our website or the underlying processing changes. The current version is always available at https://pinexq.net/privacy/. The “Last updated” date at the top of the page reflects the most recent change. Material changes will be highlighted on the website.