Privacy Policy Paula Test October 2, 2025
We take care
Protection of your data and privacy
Data policy

Aviando GmbH (“Aviando”, “we”, “our”, “us”) takes the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website and services. It also describes your rights under the EU General Data Protection Regulation (GDPR).

1. Controller

The entity responsible for processing your personal data under the GDPR is:

Aviando GmbH
Römerstr. 254
69126 Heidelberg
Germany
Tel: +49 211 15824257
Email: datenschutz@aviando.io

Further company information can be found in our Imprint.

2. Data Protection Officer

For any questions regarding this Privacy Policy or the protection of your data, you may contact our Data Protection Officer Lutz Wehner:

datenschutz@aviando.io

3. Legal Basis for Processing

We process your personal data only where permitted by law. Legal grounds include:

  • Consent (Art. 6(1)(a) GDPR) – where you have given us permission.
  • Contractual necessity (Art. 6(1)(b)) – where processing is necessary to perform a contract with you.
  • Legal obligation (Art. 6(1)(c)) – where we must comply with a legal requirement.
  • Legitimate interests (Art. 6(1)(f)) – where processing is necessary for our business operations and your interests do not override ours.
4. Data We Collect

When you use our website, we may collect the following categories of personal data:

  • Log Data: IP address (anonymised), browser type/version, operating system, referrer URL, date and time of access, status codes, data volume transferred.
  • Contact Form Data: Name, email address, company, and any information you provide in your message.
  • Newsletter Data: Email address, subscription confirmation details (double opt-in), usage statistics through tracking pixels (pseudonymised).
5. Purpose of Processing

We use your data for the following purposes:

  • To provide and secure our website.
  • To respond to your enquiries.
  • To send newsletters and marketing communications, where you have consented.
  • To analyse website usage and improve user experience.
  • To comply with legal obligations.
6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above or as required by law. Once data is no longer needed, it will be securely deleted or anonymised.

7. Data Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access. These measures are reviewed and updated regularly.

8. Sharing of Data

We may share your data with:

  • Service providers (e.g. IT hosting, newsletter services, analytics) who act as processors under Art. 28 GDPR.
  • Public authorities where legally required.
  • Business partners or advisors (e.g. auditors, lawyers, banks) where necessary.

Some of these recipients may be located outside the EEA. In such cases, we ensure adequate safeguards such as EU Standard Contractual Clauses.

9. Cookies & Third-Party Services

We use cookies and third-party tools to enhance functionality and analyse usage:

  • Essential Cookies: Required for basic website operation.
  • Analytics Cookies (Google Analytics): To analyse site traffic and usage (IP anonymisation enabled).
  • Google Maps: To provide interactive map features.
  • Google Tag Manager: To manage analytics and marketing tools.
  • Google reCAPTCHA: To prevent spam and automated abuse.
  • Cloudflare: For performance and security (CDN and reverse proxy).
  • Calendly: For online appointment booking.

You can manage or withdraw your cookie consent at any time via your browser settings.

10. Your Rights

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. Updates will be published on this website. Please check this page regularly to stay informed.