PRIVACY POLICY

Responsible for data processing on this website:

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

This website uses the "Inter" font from Google Fonts. The fonts are hosted locally on our servers (self-hosting). No connection is made to Google servers and your IP address is not transmitted to Google when visiting this website.

When visiting this website, the hosting provider automatically stores technical information in server log files:

• -IP address of the requesting computer
• -Date and time of access
• -Name and URL of the retrieved file
• -Website from which the access was made (referrer URL)
• -Browser used and, if applicable, the operating system

Processing is carried out for the technical provision of the website, to ensure system security, and to optimize the website.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the proper functioning and security of our website.

The data is deleted as soon as it is no longer necessary for the purpose of its collection. This is usually the case after 7 to 30 days.

Vercel operates servers worldwide, including in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Vercel.

This website uses Umami, a privacy-friendly, cookie-free open-source web analytics software. Umami does not set cookies and does not store personal data.

Umami only collects anonymous, aggregated usage data such as page views, session duration, and referrers. Identification of individual visitors is not possible.

Umami is completely cookie-free and GDPR-compliant. No cookies are set and no fingerprinting is carried out.

Umami is self-hosted by us on servers of Railway Inc. in the EU. No data is transferred to third parties.

Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the analysis and optimization of our website. Since Umami does not collect personal data and does not set cookies, no consent is required.

This website only stores technically functional data in the user's browser. No cookies are set.

• -Session Storage (p01-booted): Remembers whether the boot animation has already been played, so it can be skipped on subsequent page loads. Automatically deleted when the browser tab is closed.
• -Local Storage (p01-avaf-state): Saves the working state of the AVAF Idea Scorer so your inputs are preserved for future visits. Can be deleted at any time via browser settings.

None of this data contains personal information. No tracking or profiling takes place.

Art. 6 para. 1 lit. f GDPR (legitimate interest in technical functionality). In accordance with TTDSG § 25 para. 2, no consent is required as the storage is exclusively used to provide the functions explicitly requested by the user.

If you contact us by email, the data you provide (your email address, your name if applicable, and other information you share) will be stored by us to process your inquiry.

Processing your inquiry and communicating with you.

Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your inquiry) or Art. 6 para. 1 lit. b GDPR if your inquiry is aimed at concluding a contract.

The data is deleted as soon as the processing of your inquiry is completed and no statutory retention obligations apply.

If you contact us via a contact form on this website, your data will be processed for lead management and customer care.

Name, email address, phone number (optional), company (optional), message, and timestamp of the inquiry.

Lead management, customer care, processing inquiries, and, if applicable, contract initiation.

Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your inquiry and customer care).

The transmitted data is stored in our self-hosted Odoo CRM system to process your inquiry and manage customer contacts.

Odoo is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the European Union.

Lead data is stored as long as it is necessary for the processing of your inquiry or for a possible business relationship. After completion of correspondence, the data is deleted unless statutory retention obligations (e.g., commercial or tax law) apply. These are usually 6 to 10 years.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH, ensuring compliance with European data protection standards.

If you use our live chat or submit a support request via our ticket system, your data will be processed to handle your concern.

Name, email address, subject, message, chat history, timestamp, and, if applicable, ticket number of the inquiry.

Processing your support or chat inquiry, tracking the concern, and communicating with you.

Art. 6 para. 1 lit. b GDPR (contract fulfillment) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your inquiry).

Zammad — a self-hosted open-source system for support tickets and live chat.

Zammad is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the European Union.

Support tickets are retained for a reasonable period after the matter is resolved to be available for follow-up questions. Deletion occurs as soon as no retention obligations exist.

You have the following rights with regard to your personal data:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR (data processing based on a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply for your next visit.