Privacy Policy

This statement describes which data is processed when you visit this website, why this happens and what rights you have. Last updated: September 2026.

Controller

RENavigAID UG (haftungsbeschränkt)
Winterstraße 52, 53177 Bonn
Represented by David Schneider, Managing Director
info@renavigaid.de

A data protection officer is not required by law and has not been appointed. Please send any data protection questions to the address above.

Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21).

You can withdraw any consent you have given at any time with effect for the future; for the measurement, use the “Cookie settings” link at the bottom of the page. Irrespective of this, you have the right to lodge a complaint with a supervisory authority, which for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Visiting this website

When you visit the site, technically necessary data is processed: IP address, date and time, requested address, amount of data transferred, browser type and operating system. A page cannot be delivered without this information.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in secure operation. Storage period: Server logs are deleted after seven days.

Hosting: The website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, in data centers in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.

Consent management

We use Complianz to manage your consent. The tool runs entirely on our server, and no data is transferred to third parties. Only your decision is stored, so that the banner does not reappear on every visit.

Legal basis: Art. 6(1)(c) GDPR, legal obligation to document consent. Storage period: up to twelve months.

Audience measurement without cookies

We use Koko Analytics, which shows us which pages are visited. The analysis runs exclusively on our own server. It sets no cookies, stores no IP addresses and transfers no data to third parties, so individual visitors cannot be recognized.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in data-minimizing audience measurement.

Measurement with Google services

Only if you consent in the banner do we load Google Tag Manager and, through it, Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This involves processing a pseudonymous identifier, pages visited, time spent, approximate location at city level, device type and the source of your visit. Google shortens your IP address before it is stored. We use the data to understand which content is in demand and how visitors find us.

Before you consent, Google Consent Mode is set to “denied”: no identifiers are assigned and no advertising data is processed.

Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG. Storage period: 14 months. Transfer to the USA: Google is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision of July 10, 2023, supplemented by standard contractual clauses.

Contact form and email

The form asks for your name, company, business email address, optionally your phone number, and your role. We use this information solely to process your request. The message is delivered to us by email.

Legal basis: Art. 6(1)(b) GDPR for inquiries relating to a contractual relationship, otherwise point (f) (legitimate interest in answering). Storage period: We delete inquiries once they have been fully processed, at the latest after twelve months. Retention periods under commercial and tax law remain unaffected.

AI assistant (chat)

Our website offers an AI-based assistant. It only transmits anything once you have given your consent, either via the “Activate AI chat” button in the chat window or via “Accept all” in the cookie banner. When you ask a question, your input is transmitted via a server of the service provider Vercel to Google Cloud (Vertex AI, Gemini model) and answered there on servers in Frankfurt am Main (region europe-west3). Your input is not stored permanently and is not used to train AI models. Please do not enter any personal data in the chat.

Provider: Google Cloud EMEA Limited, Ireland; a data processing agreement under Art. 28 GDPR is in place with Google Cloud. Vercel Inc., USA; your request may be processed on servers in the USA, and Vercel is certified under the EU-U.S. Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw it at any time, via “Deactivate chat” in the chat window or in the cookie banner with “Necessary only”.

Fonts and images

The fonts used on this page are delivered from our own server and nowhere else. There is no connection to Google Fonts, and your IP address is not transmitted there.

When uploaded, images are compressed with Imagify before publication. This only concerns our own files and takes place without any reference to visitors.

No automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Changes

We update this statement when the services we use change. The version published here applies.