New: dictation and AI rewriting in the support workspace
Home·Privacy policy

Privacy policy

This policy explains which personal data is processed when you visit this website (www.aidanta.de and aidanta.eu). Data processing within the Aidanta platform (customer portal) is covered by supplementary information that customers receive when they conclude their contract.

Legal Notice · Privacy · Terms · Withdrawal

1. Controller

Florian Westeroth
An den Eichen 7
38162 Cremlingen
Germany
Email: info@aidanta.de

Full provider details can be found in our Legal Notice.

2. Hosting and server log files

This website is hosted by Serverprofis GmbH, Otto-Lilienthal-Ring 34-36, 85622 Feldkirchen (server location: Germany). When you visit the website, the web server automatically processes information transmitted by your browser (server log files): IP address, date and time of access, page requested, referrer URL, browser type and operating system.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical operation, stability and security of the website. Log files are generally deleted after 7 days unless a security incident requires them to be kept longer.

3. Demo request

If you request a demo using the form on this website, we process the data you provide (name, email address and, optionally, the URL of your website or shop and a message) solely to handle your request. We also store when you sent your request, in which language and from which page.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps or initiating a contract) and Art. 6(1)(f) GDPR (answering general inquiries). The data is stored in our database with our hosting provider (section 2), sent to us by email and deleted as soon as it is no longer required to handle your request and no statutory retention obligations apply.

To prevent misuse, we limit the number of requests per IP address. For this purpose, our server stores your IP address for one hour after you submit the form (Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the form against large numbers of requests).

4. Cookies and consent

We use technically necessary cookies without consent (Section 25(2) of the German Telecommunications and Digital Services Data Protection Act, TDDDG):

  • “aidanta-session” (2 hours): session cookie our server uses to protect forms against misuse (CSRF protection). For each session, the server stores your IP address and your browser’s user agent; expired sessions are deleted regularly.
  • “XSRF-TOKEN” (2 hours): also CSRF protection for forms.
  • “aidanta_consent” (12 months): stores your choice in the cookie banner.
  • “aidanta_sprache” (12 months): stores your answer when we offer you another language version, so that the question does not appear again. It is only set once you answer.

The legal basis for the associated processing is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the website securely and respecting your choices. These cookies do not enable tracking across websites.

We only use Google Tag Manager (section 5) and Google Analytics (section 6) if you expressly agree via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw or adjust your consent at any time with effect for the future – via “Cookie settings” at the bottom of every page; the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Your choice applies to the domain on which you make it (www.aidanta.de or aidanta.eu).

5. Google Tag Manager

If you have given your consent, we use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager is a technical tool that manages and triggers other services (tags) on this website; in our case, this is exclusively Google Analytics (section 6). It does not set any cookies itself. However, when the script is loaded, your IP address is transmitted to Google servers for technical reasons. We therefore only load Tag Manager after you have agreed in the cookie banner; without your consent, this website does not connect to Google.

The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). A transfer to servers of Google LLC in the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). You can withdraw your consent at any time via “Cookie settings” at the bottom of the page.

6. Google Analytics 4

If you have given your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited. Google Analytics uses cookies and similar technologies to analyze how this website is used (e.g., pages viewed, time spent, scroll depth, language used, buttons and links clicked, form interactions excluding the content entered, approximate region of origin). Google Analytics 4 does not store the IP address and truncates it as soon as it is collected; EU data is collected on EU servers.

For this purpose, Google Analytics sets the cookies “_ga”, which distinguishes visitors by a random identifier, and “_ga_L9F60R5V5C”, which stores the session state; both last up to 2 years. If you withdraw your consent, we delete these cookies.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to servers of Google LLC in the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Analytics data is stored for a maximum of 14 months. You can withdraw your consent at any time via “Cookie settings” at the bottom of the page. Further information: policies.google.com/privacy.

7. Fonts and external services

All fonts on this website are loaded locally from our server. No connection to Google Fonts or other font services is established to display fonts. External services are only used as described in sections 5 and 6.

8. Your rights

Under the GDPR, you have the following rights:

  • Access to the data processed (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

An informal message to the email address above is sufficient to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example, with the authority responsible for your place of residence or for our place of business.

9. Data security

All content on this website is transmitted with TLS encryption (recognizable by “https” in the address bar). We also take technical and organizational measures to protect your data against loss, misuse and unauthorized access.

10. Updates to this policy

Last updated: October 2026. We will update this policy as soon as the data processing on this website changes.