Last updated: 25 July 2025
The following information provides an overview of how RENavigAID UG (limited liability), ("RENavigAID", "we", "us") processes your personal data when you visit our website or use our online services – in particular the AI-powered chat function ("Ask RENavigAID") – and informs you about your rights under the General Data Protection Regulation (GDPR).
1. Controller (Art. 4 No. 7 GDPR)
RENavigAID UG (limited liability)
Winterstraße 52
53177 Bonn
Germany
E-mail: info@renavigaid.de
Phone: [to be added]
Note: We have not appointed a Data Protection Officer pursuant to Art. 37 GDPR because the statutory requirements are currently not met. For any privacy-related queries, please contact us at the address above.
2. Data processing on our website
2.1. Website visit (server log files)
When you access our website, certain information is automatically sent by your browser to our server and temporarily stored in log files, including:
- IP address of the requesting device,
- date and time of access,
- name and URL of the requested file,
- referrer URL (the page from which the request was made),
- browser type and, where applicable, the operating system of your device and the name of your access provider.
Purpose / legal basis: To ensure a smooth connection and the security and stability of the system (Art. 6 (1)(f) GDPR – legitimate interest).
Retention period: Log files are deleted automatically after no more than 30 days.
Recipient: Our hosting provider Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, acts as a processor pursuant to Art. 28 GDPR under a Data Processing Addendum (DPA).
2.2. Contact by e-mail
If you contact us by e-mail, we process the data you provide (e-mail address, name, the content of your inquiry and any additional information you voluntarily supply).
Purpose: Handling your request. Legal basis: Art. 6 (1)(b) GDPR where your request relates to the initiation or performance of a contract; otherwise Art. 6 (1)(f) GDPR (legitimate interest).
Retention period: We delete your inquiry once it has been resolved unless statutory retention obligations require otherwise.
3. AI-powered chat "Ask RENavigAID" (in planning)
3.1. How it works
We use "Google Gemini", a generative AI service provided by Google Cloud (Google Ireland Ltd. / Google LLC), to answer user questions on our website. The text you enter in the chat, along with the generated responses, is transmitted to Google servers in the Netherlands (europe-west4) and processed there to produce context-based answers. Google Gemini is a generative language model that analyses user prompts and automatically produces responses.
3.2. Data processed
- chat prompts entered by the user,
- timestamp of the query,
- meta/log data (IP address, browser information, language settings),
- responses generated by Gemini.
3.3. Legal basis
Processing is based on Art. 6 (1)(f) GDPR (legitimate interest) to provide modern and efficient customer service. If you enter sensitive data, processing is based on your consent (Art. 6 (1)(a) GDPR); you may discontinue use at any time.
3.4. Data transfers / third-country processing
Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of protection. Transfers are additionally safeguarded by the European Commission's Standard Contractual Clauses (SCC).
According to the Gemini Apps Privacy Hub, users can disable or delete their chat activity; data already reviewed may be stored for up to three years.
3.5. Use of AI Assistant
On our website, we offer an AI-powered assistant to generate optimization suggestions for you. When you use this function, your inputs are transmitted to Google servers in the Netherlands (europe-west4) for processing. We do not permanently store your inputs. The use of this function is voluntary.
3.6. No automated decision-making
3.7. Training data
The underlying model was trained by Google on large, publicly available text corpora. RENavigAID does not provide any customer data for model training.
The generated answers are for information purposes only and have no legal effect within the meaning of Art. 22 GDPR.
4. Cookies
Our website uses only technically necessary cookies. A single cookie is set to store your choice regarding the cookie banner. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest) to enable use of our website and to manage your consent.
You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to exclude cookies for certain cases or in general, and to automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of the website.
5. Retention period & deletion
We process and store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods. Afterwards, the data is routinely deleted or anonymised.
6. Your rights (Art. 15 ff. GDPR)
You have the right to
- access your data (Art. 15),
- rectification of inaccurate or completion of incomplete data (Art. 16),
- erasure (Art. 17),
- restriction of processing (Art. 18),
- data portability (Art. 20), and
- object to processing based on Art. 6 (1)(f) GDPR (Art. 21).
To exercise these rights, a simple message to us is sufficient.
You also have the right to lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de).
7. Data security
We employ appropriate technical and organisational security measures (TLS encryption, access controls, etc.) to protect your data from unauthorised access.
8. Updates to this privacy policy
This privacy policy is currently valid and dated July 2025. It may become necessary to amend it due to developments of our website or changes in legislation. The latest version is always available on this page.
