Privacy Policy

Datenschutzerklärung gemäß DSGVO

1. Controller

The controller responsible for data processing on this website is:

Akator GmbH

Mozartstr. 13

D-49740 Haselünne

Germany

Email: info@akator.de

2. Data Protection Officer

Claas Flint

Email: claas.flint@akator.de

3. Data Collection

Website Visitors

When you visit our website, we automatically collect technical information through server log files, including:

  • IP address of the requesting computer
  • Date and time of access
  • Requested URL and referrer URL
  • Browser type and operating system

This data is used for connection optimization and ensuring system security. It is not merged with other data sources.

API Users

For registered API users, we collect:

  • Name and email address
  • Complete API usage logs (requests, timestamps, endpoints)
  • Uploaded images (stored for matching purposes)

This data is necessary for service provision, billing, and service improvement.

Contact Form

When you use our contact form, we process the information you provide:

  • Name
  • Email address
  • Company (optional)
  • The content of your message

This information is used solely to handle your request and is delivered by email via our own mail server (operated within the EU/EEA) to info@akator.de. It is not passed on to any external form or email provider. To prevent spam, your IP address is processed briefly when the form is submitted (protection against abuse).

Analytics

We use Umami, a privacy-friendly, self-hosted web analytics tool, to understand how our website is used. It is cookieless and does not collect personal data or build cross-site profiles. Only aggregated, anonymized information is recorded — such as pages visited, referrer, approximate region (derived from the IP address without storing it), and device/browser type. Processing takes place on our own server within the EU/EEA and is not shared with third parties. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in measuring and improving our reach; no consent is required because no cookies or personal data are used.

4. Legal Basis

We process your data based on:

  • Contract fulfillment (Art. 6(1)(b) GDPR) — for billing and service provision
  • Legitimate interests (Art. 6(1)(f) GDPR) — for service optimization and security
  • Handling your enquiry (Art. 6(1)(b) and (f) GDPR) — for responding to contact requests

5. Third-Party Services

Hosting

Our infrastructure is hosted by Hetzner Online GmbH within Germany. All data processing occurs within the EU/EEA.

Authentication

We use Google for identity verification for API access (optional).

Mail Delivery

Contact requests are processed and sent via our own mail server. No external form or email provider is involved; all processing takes place within the EU/EEA.

No data is shared with other third parties.

All data is hosted and processed within the EU/EEA; no transfer to third countries outside the EU/EEA takes place.

6. Data Retention

  • Billing records: 10 years (as required by § 257 HGB, § 147 AO)
  • API usage logs: retained as long as necessary for service provision and billing
  • Server logs: automatically deleted after 30 days
  • Contact requests: kept until your enquiry has been fully handled, then deleted — unless statutory retention periods apply

7. Your Rights

Under GDPR, you have the right to:

  • Access — request information about your stored data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Restriction — limit processing of your data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interests

To exercise these rights, contact our Data Protection Officer at claas.flint@akator.de.

You also have the right to lodge a complaint with a supervisory authority.

8. Cookies

This website does not use cookies.

9. Data Security

All data transmission is encrypted using TLS/SSL. Our servers are protected by firewalls and regular security updates. Access to personal data is restricted to authorized personnel only.

10. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available on this page.

Last updated: June 2026