1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Audatio GmbH
Mainzer Straße 74
64293 Darmstadt
Germany

Email: info@audatio.com

2. General Information on Data Processing

We process personal data only where this is necessary to provide our website, communicate with prospective clients, clients and business partners, take steps prior to entering into a contract or perform contractual obligations, or where another legal basis permits such processing.

Depending on the respective processing activity, processing is based in particular on:

• Article 6(1)(a) GDPR where you have given us your consent,

• Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract,

• Article 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation, or

• Article 6(1)(f) GDPR where processing is necessary for the purposes of our legitimate interests and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

3. Provision and Hosting of the Website

This website is created and hosted using Framer. The provider is:

Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
The Netherlands

When you access our website, technically necessary data is processed in order to deliver the website to your device and ensure its secure and stable operation. This may include, in particular, your IP address, the date and time of access, content accessed, browser and device information and technical connection data.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, reliable and technically functioning website.

Where Framer processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement in accordance with Article 28 GDPR.

Framer may use additional subprocessors in providing its services. Where personal data is processed outside the European Union or the European Economic Area, such processing takes place in accordance with the requirements of Articles 44 et seq. GDPR.

Technical data is processed only for as long as necessary to provide and secure the website and to identify and prevent technical faults and misuse, unless statutory retention obligations or other legal grounds require longer storage.

4. Framer Analytics

We use the integrated Framer Analytics function to statistically evaluate use of our website and improve our online offering.

According to Framer, Framer Analytics does not use cookies or persistent identifiers. The analytics function is used to provide aggregated statistical information about website usage and may include information such as page views, referral source, country, device type, browser and operating system.

To the extent that personal data is processed as part of the technical implementation, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in statistically evaluating and optimizing our website.

Framer Analytics does not store non-essential cookies or persistent identifiers on your device for analytics purposes.

5. Google Analytics

We use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics enables us to statistically evaluate the use of our website and to optimize both our website and our marketing activities.

The information processed may include, in particular:

• pages and content accessed,

• time and duration of visits,

• interactions with the website,

• referral source,

• approximate geographic information,

• device used,

• browser and operating system,

• technical usage and event data, and

• identifiers used by Google or the browser.

Google Analytics may use cookies and comparable technologies to distinguish and evaluate visits and sessions.

According to Google, individual IP addresses of users in the European Union are not logged or stored. IP addresses are initially processed to derive approximate location information and are subsequently deleted.

Google Analytics is activated only after you have given your express consent.

The legal bases for processing are Article 6(1)(a) GDPR and, insofar as information is stored on or accessed from your device, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

You may change or withdraw your consent at any time with effect for the future via the cookie or privacy settings available on our website.

Google may also process data through affiliated companies and service providers outside the European Economic Area, particularly in the United States. Where data is transferred to a third country, such transfer is carried out in accordance with Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards pursuant to Article 46 GDPR.

Data collected through Google Analytics is stored only for as long as necessary for the analysis of website usage and the purposes described above. The retention of user and event data is additionally governed by the retention settings selected by us within Google Analytics.

6. Meta Pixel

We use the Meta Pixel provided by:

Meta Platforms Ireland Limited
Merrion Road
Ballsbridge
Dublin D04 X2K5
Ireland

The Meta Pixel enables us, in particular, to understand how visitors interact with our website after viewing or clicking an advertisement on Facebook or Instagram. This allows us to measure the effectiveness of our advertising activities, evaluate conversions and optimize our advertising on Meta platforms.

The information processed may include, in particular:

• pages and content visited,

• actions and interactions performed on the website,

• time of visit,

• technical device and browser information,

• IP address,

• referral source, and

• identifiers used by Meta or the browser.

The information collected may be transmitted to Meta and combined there with other information. If you are logged into Facebook, Instagram or another Meta service, Meta may be able to associate the transmitted information with your user account.

The Meta Pixel is activated only after you have given your express consent.

The legal bases for processing are Article 6(1)(a) GDPR and, insofar as information is stored on or accessed from your device, Section 25(1) TDDDG.

You may change or withdraw your consent at any time with effect for the future via the cookie or privacy settings available on our website.

To the extent that Audatio and Meta jointly determine the purposes and means of collecting and transmitting certain data, such processing is carried out within the framework of the applicable joint controllership arrangements. Meta is independently responsible for any subsequent processing of the data carried out by Meta for its own purposes.

Meta may also process data outside the European Economic Area, particularly in the United States. Where data is transferred to a third country, the requirements of Articles 44 et seq. GDPR apply, in particular any applicable adequacy decision by the European Commission or appropriate safeguards pursuant to Article 46 GDPR.

Any further retention of data by Meta is governed by Meta's applicable privacy and data retention policies.

7. Cookies, Consent Management and Similar Technologies

Our website uses technically necessary technologies as well as analytics and marketing technologies following your consent.

Technically necessary storage of or access to information on your device takes place without consent only where the requirements of Section 25(2) TDDDG are met, in particular where this is strictly necessary to provide the website or a function expressly requested by you.

Google Analytics and the Meta Pixel are activated only after you have given the relevant consent.

Our consent management solution allows you to decide which optional analytics and marketing services you wish to permit. Your selection is stored so that it can be taken into account during subsequent page visits and your chosen settings can be implemented.

Your consent decision is also stored and processed in order to respect your selection and, where necessary, demonstrate that consent was given.

You may change or withdraw any consent you have given at any time with effect for the future via the cookie or privacy settings available on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

8. Contacting Us

If you contact us by email, through a contact form or by other means, we process the information you provide in order to handle your enquiry.

This may include, in particular:

• your name,

• company or organization,

• email address and other contact details,

• the subject and content of your enquiry, and

• any additional information you provide voluntarily.

Where your enquiry relates to an existing contract or is intended to initiate a contractual relationship, processing is based on Article 6(1)(b) GDPR.

For other business or general enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to enquiries addressed to us.

The data will be deleted once it is no longer required to process the enquiry and no statutory retention obligations or other legitimate grounds require continued storage.

9. Contact Forms and Spam Protection

Where we use Framer contact forms on our website, the information entered into these forms is processed through Framer's technical infrastructure and transmitted to us or to the recipient configured by us for this purpose.

Framer may use technical protection mechanisms to detect and prevent spam, automated submissions and abusive access. For this purpose, technical browser, device, network and interaction information may be processed.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and communication channels against abusive or harmful submissions.

The provisions under Section 8 additionally apply to the processing of enquiries submitted through a contact form.

10. Pre-Contractual Measures and Business Relationships

Where you enquire about our services through our website, request information regarding a potential production or otherwise provide us with information in connection with a potential collaboration, we process this information for the purpose of preparing and conducting the business relationship.

Processing is based on Article 6(1)(b) GDPR insofar as it is necessary to take steps prior to entering into a contract at your request or for the performance of a contract.

Where the data relates to contact persons at companies, publishers or other organizations, processing may additionally be based on Article 6(1)(f) GDPR. Our legitimate interest lies in establishing, conducting and managing our business relationships.

11. Recipients and Processors

We disclose personal data only where this is necessary for the respective processing purposes, provided for under a contract or otherwise permitted by law.

Recipients may include, in particular:

• hosting and IT service providers,

• communication service providers,

• analytics and marketing service providers,

• technical service providers engaged by us, and

• where applicable, advisers or other service providers required for the provision of our services.

Where a service provider processes personal data on our behalf, it is engaged as a processor in accordance with Article 28 GDPR.

We do not sell personal data or disclose personal data to unrelated third parties for their own advertising purposes.

12. Transfers of Data to Third Countries

In connection with the use of certain service providers, personal data may also be processed outside the European Union or the European Economic Area.

Any such transfer takes place only in accordance with the requirements of Articles 44 et seq. GDPR.

Where the European Commission has adopted an adequacy decision for a particular third country or recipient, the transfer may be based on that decision.

Where no applicable adequacy decision exists, data transfers may in particular be based on appropriate safeguards pursuant to Article 46 GDPR, such as the Standard Contractual Clauses adopted by the European Commission.

13. Retention Periods

Unless a specific retention period is stated in this Privacy Policy, we store personal data only for as long as necessary for the respective purpose of processing.

Once the purpose no longer applies, the data will be deleted unless statutory retention obligations, in particular obligations under commercial or tax law, or other legitimate grounds require further storage.

Where data is processed on the basis of consent, such processing generally continues until consent is withdrawn or the respective purpose ceases to apply, unless another legal basis permits further storage or processing.

14. Your Rights

Subject to the applicable legal requirements, you have in particular the following rights:

• the right of access to your personal data pursuant to Article 15 GDPR,

• the right to rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR,

• the right to erasure of your personal data pursuant to Article 17 GDPR,

• the right to restriction of processing pursuant to Article 18 GDPR,

• the right to data portability pursuant to Article 20 GDPR, and

• the right to object to certain processing pursuant to Article 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.

To exercise your rights, you may contact us at any time at:

info@audatio.com

15. Right to Object

Where we process personal data on the basis of Article 6(1)(f) GDPR for the purposes of legitimate interests, you have the right pursuant to Article 21 GDPR to object to such processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is required for the establishment, exercise or defence of legal claims.

16. Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.

The supervisory authority responsible for our registered office is:

The Hessian Commissioner for Data Protection and Freedom of Information
Wilhelmstraße 7
65185 Wiesbaden
Germany

Postal address:
Postfach 3163
65021 Wiesbaden
Germany

17. Automated Decision-Making

We do not use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR through this website.

The statistical evaluation of website usage and the analysis and optimization of advertising activities through Google Analytics or Meta do not constitute such automated decision-making by Audatio.

18. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access and other unlawful processing.

Data transmitted between your browser and our website is encrypted using HTTPS/TLS.

19. External Links and Social Media

Our website may contain links to external websites or social media services.

Where a service is linked only through a standard external link, simply visiting our website does not initially result in personal data being transmitted by us to the respective external provider. Only when you follow the relevant link do you leave our website, at which point the privacy policies of the respective external provider apply.

The respective operators of external websites and platforms are generally responsible for the processing of personal data on their services.

20. Changes to this Privacy Policy

We may update this Privacy Policy if our website, the services we use or the applicable legal requirements change.

The version currently published on this website shall apply.