Privacy policy

English translation of the German privacy policy retrieved on 11 September 2026. German version.

1) Introduction and contact details of the controller

1.1 Thank you for visiting our website and for your interest. The following information explains how we handle your personal data when you use our website. Personal data means any data that can identify you personally.

1.2 The controller responsible for processing data on this website under the General Data Protection Regulation (GDPR) is AYINNOVATE SOLUTIONS Ltd., Tala Sea View 7, Flat/Office 203, Mouttalion 14, 8577 Tala, Cyprus, tel. +4917684369216, email: info@ayinnovate.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collected when you visit our website

2.1 When you use our website for information only, without registering or otherwise providing information, we collect only the data your browser transmits to the server (“server log files”). To display our website, we need the following technical data:

• The website visited
• Date and time of access
• Amount of data sent in bytes
• The source or referring page from which you arrived
• Browser used
• Operating system used
• IP address used, where applicable in anonymised form

Processing is based on Article 6(1)(f) GDPR and our legitimate interest in improving the website’s stability and functionality. The data is not disclosed or used for other purposes. However, we reserve the right to review server log files subsequently if specific indications suggest unlawful use.

2.2 This website uses SSL or TLS encryption for security and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to the controller. An encrypted connection is indicated by “https://” and the padlock symbol in your browser’s address bar.

3) Hosting and content delivery network

3.1 To host our website and display its content, we use a provider that performs its services itself or through selected subcontractors exclusively on servers in the European Union. All data collected on our website is processed on those servers unless different recipients are specified below for particular processing activities. We have concluded a data processing agreement with the provider to protect visitor data and prohibit unauthorised disclosure to third parties.

3.2 IONOS. We use a content delivery network provided by 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. It enables faster delivery of large media files, such as graphics, page content and scripts, through geographically distributed servers. Processing is based on Article 6(1)(f) GDPR and our legitimate interest in improving website stability and functionality. A data processing agreement protects visitor data and prohibits unauthorised disclosure to third parties.

4) Cookies

We use cookies, small text files stored on your device, to make visits to our website convenient and enable certain functions. Some are deleted automatically when you close your browser (“session cookies”); others remain longer and store website settings (“persistent cookies”). The storage duration of persistent cookies can be found in your browser’s cookie settings.

If cookies process personal data, the legal basis is Article 6(1)(b) GDPR for performing a contract, Article 6(1)(a) GDPR where consent has been given, or Article 6(1)(f) GDPR for our legitimate interest in optimal functionality and a convenient, efficient website visit.

You can configure your browser to notify you when cookies are set, decide individually whether to accept them, or reject cookies in particular cases or generally. Rejecting cookies may limit website functionality.

5) Contacting us

5.1 Botpress

This website uses a live chat system provided by Botpress, Inc., 131 Continental Drive, Suite 305, Newark, DE 19713, USA. Personal data submitted through the chat is processed under Article 6(1)(b) GDPR where necessary to enter into or perform a contract, or under Article 6(1)(f) GDPR based on our legitimate interest in effectively supporting website visitors.

Subject to statutory retention requirements, submitted data is deleted once the matter has been conclusively resolved. Cookies may also collect and analyse information to create pseudonymous usage profiles. These profiles do not identify you personally and are not combined with other datasets. Where the information is personal data, processing is based on Article 6(1)(f) GDPR and our legitimate interest in analysing usage statistically to optimise our services.

You can prevent cookies through your browser settings, although website functionality may then be limited. You may object to the collection and storage of data for pseudonymous usage profiles at any time by contacting us, with effect for the future. We have a data processing agreement with the provider to protect visitor data and prohibit unauthorised third-party disclosure. For transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which safeguards the European level of data protection on the basis of a European Commission adequacy decision.

5.2 ManyChat

This website uses a live chat system provided by ManyChat Inc., 8605 Santa Monica Blvd. #64372, West Hollywood, CA 90069, USA. Data submitted through the chat is processed under Article 6(1)(b) GDPR where necessary to enter into or perform a contract, or under Article 6(1)(f) GDPR based on our legitimate interest in effective visitor support.

Subject to statutory retention requirements, submitted data is deleted once the matter is conclusively resolved. Cookies may also collect and analyse information for pseudonymous usage profiles, which do not identify you personally and are not combined with other datasets. Where the information is personal data, processing is based on Article 6(1)(f) GDPR and our legitimate interest in statistical usage analysis for optimisation.

Browser settings can prevent cookies, potentially limiting website functionality. You may object to collection and storage for pseudonymous usage profiles at any time by contacting us, with effect for the future. We have a data processing agreement protecting visitor data and prohibiting unauthorised third-party disclosure. For transfers to the USA, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

5.3 Calendly

Our online appointment booking function uses Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA. For scheduling, we collect your first and last name and email address, and, if a telephone appointment is requested, your telephone number, under Article 6(1)(b) GDPR. We transmit these details to the provider for appointment organisation and storage under Article 6(1)(f) GDPR, based on our legitimate interest in effective customer management and efficient scheduling.

The provider deletes your data after the appointment or the agreed appointment period. We have a data processing agreement protecting visitor data and prohibiting unauthorised third-party disclosure. For US transfers, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

5.4 WhatsApp Business

You can contact us through WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use WhatsApp’s Business version.

If you contact us about a specific transaction, such as an order, we store and use your WhatsApp mobile number and, if provided, your first and last name under Article 6(1)(b) GDPR to handle and answer your enquiry. On the same legal basis, we may ask for further information, such as an order number, customer number, address or email address, to associate the enquiry with the relevant transaction.

For general enquiries, such as questions about services, availability or our website, we store and use your mobile number and, if provided, your name under Article 6(1)(f) GDPR, based on our legitimate interest in providing the requested information efficiently and promptly. Your data is used only to answer your enquiry through WhatsApp and is not disclosed to third parties.

WhatsApp Business accesses the address book of the mobile device we use and automatically transfers stored telephone numbers to a server of its parent company Meta Platforms Inc. in the USA. We therefore operate our WhatsApp Business account on a device whose address book contains only WhatsApp contact details of users who have contacted us through WhatsApp.

This ensures that everyone whose WhatsApp details are stored in our address book has already, when first using the app and accepting WhatsApp’s terms, consented under Article 6(1)(a) GDPR to transmission of their WhatsApp telephone number from their chat contacts’ address books. This excludes transfers of data about people who do not use WhatsApp and/or have not contacted us through it.

For the purposes and scope of WhatsApp’s data collection and further processing and use, and your rights and privacy settings, see WhatsApp’s privacy information. We have a data processing agreement with the provider protecting visitor data and prohibiting disclosure to third parties. The processing described above may involve transfers to Meta Platforms Inc. servers in the USA. For such transfers, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

5.5 When you contact us, for example by contact form or email, we process personal data solely to handle and answer your enquiry and only to the extent necessary. The legal basis is our legitimate interest in answering enquiries under Article 6(1)(f) GDPR. If your enquiry concerns entering into a contract, Article 6(1)(b) GDPR also applies. Data is deleted once the circumstances show that the matter has been conclusively resolved, unless statutory retention obligations require otherwise.

6) Processing when opening a customer account

Under Article 6(1)(b) GDPR, we also collect and process personal data to the extent necessary when you provide it to open a customer account. The relevant form on our website indicates which information is required. You can request deletion of your account at any time by contacting the controller at the address above. After account deletion, your data is deleted if all related contracts have been fully performed, no statutory retention periods apply and we have no continuing legitimate interest in retaining it.

7) Use of customer data for direct marketing

7.1 Email newsletter subscription

If you subscribe to our email newsletter, we regularly send information about our offers. Only your email address is required. Additional information is voluntary and helps us address you personally. We use double opt-in: newsletters are sent only after you expressly confirm consent by clicking a verification link sent to the email address provided.

By activating that link, you consent to use of your personal data under Article 6(1)(a) GDPR. We store the IP address assigned by your internet service provider and the date and time of registration so that any misuse of your email address can be investigated later. Data collected for newsletter registration is used strictly for that purpose.

You can unsubscribe at any time through the link in the newsletter or by contacting the controller named above. After unsubscribing, your email address is removed from the mailing list without undue delay, unless you have expressly consented to further use or we reserve another legally permitted use described in this policy.

7.2 Email newsletters to existing customers

If you provided your email address when purchasing goods or services, we reserve the right to send regular email offers for similar goods or services from our range. Separate consent is not required under section 7(3) of the German Act Against Unfair Competition (UWG). Processing is based solely on our legitimate interest in personalised direct marketing under Article 6(1)(f) GDPR. We will not send such emails if you objected to this use from the outset.

You may object at any time with effect for the future by contacting the controller. You incur only the transmission costs at basic rates. Upon receipt of your objection, we stop using your email address for advertising without undue delay.

7.3 WhatsApp newsletter

If you subscribe to our WhatsApp newsletter, we regularly send information about our offers through WhatsApp. Only your mobile number is required. To subscribe, add the mobile number we provide to your device’s contacts and send us “Start” through WhatsApp. Sending this message gives consent under Article 6(1)(a) GDPR to use your personal data for the newsletter, and we add you to the mailing list.

Registration data is processed only for newsletter advertising. You can unsubscribe at any time by sending “Stop” through WhatsApp. Your mobile number is then removed from the list without undue delay, unless you expressly consented to further use or we reserve another legally permitted use described in this policy.

WhatsApp Business can access the device’s address book and automatically transfers stored telephone numbers to a Meta Platforms Inc. server in the USA. For our newsletter, we therefore use a device whose address book contains only recipients’ WhatsApp contact details. This ensures that everyone stored there has already consented under Article 6(1)(a) GDPR, by accepting WhatsApp’s terms when first using the app, to transmission of their WhatsApp number from chat contacts’ address books. Transfers concerning people who do not use WhatsApp and/or have not contacted us through it are thereby excluded.

See WhatsApp’s privacy information for the purpose and scope of collection, further processing and use, your rights and settings. We have a data processing agreement with WhatsApp protecting newsletter recipients’ data and prohibiting third-party disclosure. Processing may involve transfers to Meta Platforms Inc. servers in the USA. The provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

8) Processing to perform contracts

8.1 We work with the service providers listed below, who support us in performing contracts in whole or in part. Certain personal data is disclosed to them as explained below.

8.2 Payment service providers

Apple Pay

If you select Apple Pay, provided by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed through the Apple Pay function on your iOS, watchOS or macOS device by charging a stored payment card. Apple Pay uses security functions integrated into your device’s hardware and software. Authorising payment requires a previously defined code and verification using Face ID or Touch ID.

Your checkout details and order information are transmitted to Apple in encrypted form. Apple encrypts them again using a developer-specific key before sending them to the payment service provider for the card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment data. After payment, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm success.

Any personal data involved is processed solely to handle payment under Article 6(1)(b) GDPR. Apple retains anonymised transaction data, including approximate amount, date, time and whether payment succeeded. Anonymisation excludes identification of individuals. Apple uses it to improve Apple Pay and other products and services.

If you use an iPhone or Apple Watch to authorise a purchase made in Safari on a Mac, the Mac and authorising device communicate through an encrypted channel on Apple’s servers. Apple neither processes nor stores that information in a form that identifies you. You can disable Apple Pay on your Mac in your iPhone settings under “Wallet & Apple Pay” by turning off “Allow Payments on Mac”. Further information: Apple Pay privacy and security.

PayPal

This website offers one or more payment methods from PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. If you select a method requiring payment in advance, checkout payment data, including name, address, bank and card details, currency and transaction number, and order contents are disclosed under Article 6(1)(b) GDPR solely to the extent necessary for processing payment.

If you select a method under which we perform before receiving payment, checkout also asks for personal information: first and last name, street, building number, postcode, city, date of birth, email address, telephone number and, where applicable, an alternative payment method. To protect our legitimate interest in assessing creditworthiness, this data is sent to the provider for a credit check under Article 6(1)(f) GDPR. Using your information and other data, such as basket contents, invoice amount, order history and payment experience, the provider assesses whether the payment method can be offered given the risk of payment default.

Credit reports may include probability scores based on scientifically recognised mathematical and statistical methods. Address data, among other information, may be used to calculate scores. You can object to this processing at any time by contacting us or the provider. The provider may nevertheless remain entitled to process your data where necessary to handle payment in accordance with the contract.

Revolut Pay

This website offers one or more payment methods from Revolut Bank UAB, Konstitucijos ave. 21B, 08130 Vilnius, Lithuania. Checkout payment data, including name, address, bank and card details, currency and transaction number, and order contents are disclosed under Article 6(1)(b) GDPR solely to process payment and only to the extent necessary.

Stripe

This website offers one or more payment methods from Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. If you select one, checkout payment data, including name, address, bank and card details, currency and transaction number, and order contents are disclosed under Article 6(1)(b) GDPR solely to process payment and only to the extent necessary.

8.3 Fiverr

For order processing, we use Fiverr International Ltd., Eliezer Kaplan St. 8, Tel Aviv-Yafo, Israel. Name, address and any other necessary personal data are disclosed under Article 6(1)(b) GDPR only where actually required to process an online order. The provider is also used for accounting: it processes incoming and outgoing invoices and, where applicable, business bank transactions to record invoices automatically, match them to transactions and prepare accounting records through a partly automated process.

Any personal data involved is processed under Article 6(1)(f) GDPR based on our legitimate interest in efficiently organising and documenting business transactions. A European Commission adequacy decision ensures an adequate level of protection for data transferred to the provider’s location.

8.4 Electronic termination of continuing consumer contracts

Consumers who have concluded paid continuing contracts on this website, such as subscriptions, can terminate them through an electronic button in accordance with the applicable notice periods. The button leads to a confirmation page where consumers can provide termination details, identify themselves and submit their notice electronically.

Personal data is collected and transmitted to us under Article 6(1)(b) GDPR only to the extent necessary to process termination. On the same basis, it is used to confirm electronically, in text form, receipt of the notice and the termination date. Article 6(1)(c) GDPR is an additional basis because we are legally obliged to provide an electronic termination option for paid continuing consumer contracts concluded electronically.

9) Web analytics services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), to analyse website usage. By default, Google Analytics 4 sets cookies that store information on your device. This includes your IP address, which Google truncates by removing the final digits to prevent direct identification. Information is sent to Google’s servers for further processing and may also be transferred to Google LLC in the USA.

Google uses the information on our behalf to evaluate website use, compile activity reports and provide other services relating to website and internet usage. The truncated IP address transmitted by your browser is not combined with other Google data. Google Analytics 4 data is stored for two months and then deleted.

All processing described above, particularly setting cookies, occurs only with your express consent under Article 6(1)(a) GDPR. Without consent, Google Analytics 4 is not used during your visit. You can withdraw consent at any time with effect for the future by disabling the service in the website’s cookie consent tool.

We have a data processing agreement with Google protecting visitor data and prohibiting unauthorised third-party disclosure. Further information: Google Business Data Responsibility, Google privacy policy and Google partner sites information.

Demographics. Google Analytics 4 can produce statistics about visitors’ ages, genders and interests by analysing advertising and third-party information, allowing identification of marketing audiences. The collected data cannot be attributed to a specific person and is deleted after two months.

Google Signals. This extension may be used for cross-device reporting. If you have enabled personalised advertising and linked devices to your Google account, Google may, subject to your Google Analytics consent under Article 6(1)(a) GDPR, analyse usage across devices and create models, including cross-device conversions. We receive statistics, not personal data. You can stop cross-device analysis by disabling personalised advertising in your Google account. See advertising settings instructions and Google Signals information.

UserIDs. This Google Analytics 4 extension may also be used. If you consent under Article 6(1)(a) GDPR, create an account on this website and sign in on different devices, your activity, including conversions, may be analysed across devices.

For transfers to the USA, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

9.2 Google Tag Manager

This website uses Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It provides a technical framework for combining web applications, including tracking and analytics services, and configuring, managing and applying conditions to them through one interface. Tag Manager itself does not store or read information on user devices and does not perform independent data analysis. However, your IP address is transmitted to Google when a page is accessed and may be stored there, including on Google LLC servers in the USA.

This occurs only with express consent under Article 6(1)(a) GDPR. Without consent, Tag Manager is not used during your visit. Consent can be withdrawn at any time with effect for the future by disabling the service in the website’s cookie consent tool. We have a data processing agreement protecting visitor data and prohibiting unauthorised third-party disclosure. For US transfers, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision. Further information: Google Business Data Responsibility and Google privacy policy.

10) Retargeting, remarketing and conversion tracking

Meta Pixel with advanced matching

Our online offering uses Meta Pixel with advanced matching, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”). If a user clicks one of our Facebook or Instagram advertisements, Meta Pixel adds a parameter to our linked page’s URL. After redirection, a cookie set by our linked page stores that parameter in the browser. This cookie also records specific customer data, such as email addresses collected on the linked website during purchases, account sign-ins or registration (“advanced matching”). Reading the cookie allows transmission of that information, including specific customer data, to Meta.

We use advanced matching to make Facebook and/or Instagram advertisements more effective and relevant to users’ interests or characteristics, such as interests in topics or products inferred from websites visited, which we share with Meta as “Custom Audiences”. We also evaluate whether users arrive on our website after clicking an advertisement (a conversion). Compared with standard Meta Pixel, advanced matching helps attribute more conversions and measure campaign effectiveness more accurately.

Meta stores and processes all transmitted data, allowing it to be linked to user profiles and used for Meta’s own advertising under its data policy. Meta and its partners may use it to display advertising on and off Facebook.

All processing described above, particularly cookies used to read device information, occurs only with express consent under Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future by disabling the service in the website’s cookie consent tool. We have a data processing agreement protecting visitor data and prohibiting unauthorised third-party disclosure. Information is generally transmitted to and stored on Meta servers and may also be transferred to Meta Platforms Inc. servers in the USA. The provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

11) Website functions

11.1 Vimeo

This website uses plugins to display and play videos from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. When a page containing a plugin is accessed, your browser connects directly to the provider’s servers to load it, transmitting information including your IP address. When an embedded video is played, the provider also sets cookies to collect usage information, produce playback statistics and prevent abuse.

If you are signed in to a provider account, clicking a video links your data directly to it. Sign out before pressing play if you do not want that association. All such processing, particularly cookies used to read device information, occurs only with express consent under Article 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future by disabling the service in the website’s cookie consent tool. For US transfers, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision.

11.2 Google Sign-In

Our website provides single sign-on through Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC in the USA. If you have a provider account, you can use its credentials to create an account or register on our website.

When you visit this page, the sign-in function may connect your browser directly to the provider’s servers even if you do not have an account or are not signed in. The provider learns that you visited our page. The information, potentially including your IP address, is transmitted directly from your browser to a provider server and stored there, but is not used to identify you personally or disclosed to third parties. Processing is based on Article 6(1)(f) GDPR and our legitimate interest in a convenient, interactive website.

If you click the sign-in button to register using your provider account, the provider transmits general and publicly accessible account information, including user ID, name, address, email, age and gender, solely on the basis of your express consent under Article 6(1)(a) GDPR. We store and use released information to create an account with the necessary details, including title, first and last name, address, country, email and date of birth. Conversely, with consent, we may transmit data such as browsing or purchasing information to your provider account. You can withdraw consent by contacting us at any time with effect for the future.

For transfers to the USA, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision. Further information: Google privacy information.

11.3 Google Web Fonts

This website uses web fonts from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, for consistent typography. When a page is accessed, your browser loads the required fonts into its cache and connects directly to the provider’s servers, transmitting browser information including your IP address. Data may also be transferred to Google LLC in the USA.

Personal data is processed through this connection only with express consent under Article 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future by disabling the service in the website’s cookie consent tool. If your browser does not support web fonts, a standard font on your computer is used. For US transfers, the provider participates in the EU–US Data Privacy Framework, based on the European Commission’s adequacy decision. Further information: Google privacy information.

11.4 n8n

To integrate and synchronise databases and web applications, this website uses n8n GmbH, Novalisstr. 10, 10115 Berlin, Germany. It automates processing and establishes workflows to manage internal processes efficiently. Any personal data involved is processed under Article 6(1)(f) GDPR, based on our legitimate interest in optimising internal organisation. We have a data processing agreement protecting visitor data and prohibiting unauthorised third-party disclosure.

12) Tools and other services

Cookie consent tool

This website uses a cookie consent tool to obtain valid consent for cookies and cookie-based applications requiring consent. An interactive interface appears when users visit the website, allowing consent to specific cookies or applications through checkboxes. Services requiring consent load only when the user selects the corresponding checkbox, ensuring that such cookies are set only with consent.

The tool sets technically necessary cookies to store your preferences and generally does not process personal user data. Where personal data, such as an IP address, is exceptionally processed to store, associate or log settings, this is based on Article 6(1)(f) GDPR and our legitimate interest in lawful, individual and convenient cookie consent management and a legally compliant website.

Article 6(1)(c) GDPR is a further basis: as controller, we must make technically unnecessary cookies dependent on user consent. Where required, we have a data processing agreement with the provider protecting visitor data and prohibiting unauthorised third-party disclosure. Information about the tool’s operator and settings is available directly in its interface on our website.

13) Your rights

13.1 Applicable data protection law grants you the following rights concerning processing of your personal data. The conditions for exercising each right are set out in the legal provisions indicated:

• Access under Article 15 GDPR
• Rectification under Article 16 GDPR
• Erasure under Article 17 GDPR
• Restriction of processing under Article 18 GDPR
• Notification under Article 19 GDPR
• Data portability under Article 20 GDPR
• Withdrawal of consent under Article 7(3) GDPR
• Lodging a complaint under Article 77 GDPR

13.2 Right to object

Where we process personal data on the basis of our overriding legitimate interest following a balancing of interests, you may object at any time, on grounds relating to your particular situation, with effect for the future.

If you object, we stop processing the affected data. We may continue if we demonstrate compelling legitimate grounds that override your interests, fundamental rights and freedoms, or if processing serves the establishment, exercise or defence of legal claims.

Where we process your personal data for direct marketing, you may object at any time to processing for that purpose. You can do so as described above. If you object, we stop processing your data for direct marketing.

14) Retention of personal data

Retention depends on the legal basis, purpose and, where applicable, statutory retention periods, such as commercial and tax requirements. Data processed on express consent under Article 6(1)(a) GDPR is stored until you withdraw consent.

Data processed under Article 6(1)(b) GDPR for contractual or similar obligations and subject to statutory retention periods is routinely deleted after those periods expire, provided it is no longer needed to enter into or perform a contract and/or we have no continuing legitimate interest in retention.

Data processed under Article 6(1)(f) GDPR is stored until you exercise your right to object under Article 21(1) GDPR, unless we can show compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims. Data processed for direct marketing under Article 6(1)(f) GDPR is stored until you object under Article 21(2) GDPR.

Unless other information in this policy about specific processing situations states otherwise, stored personal data is deleted when no longer necessary for the purposes for which it was collected or otherwise processed.

German source: IT-Recht Kanzlei, retrieved 11 September 2026. English translation prepared for AyInnovate.