Privacy Policy

As of September 2026

This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.

1. Controller

No data protection officer has been appointed, as the legal requirements for a mandatory appointment are currently not met.

2. The essentials

• This website uses no cookies and no analytics or tracking services.
• No third-party content (such as external fonts, maps, videos or social media plugins) is loaded. All fonts are served from our own server.
• Personal data is only processed where technically necessary to deliver the website (server log files) or when you contact us.

3. Hosting

This website is hosted on the STACKIT cloud, a service of Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany. The servers are located in data centres in Germany or the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

The legal basis is our legitimate interest in a secure, fast and reliable delivery of our online services (Art. 6 (1) (f) GDPR).

4. Server log files

When you access this website, the web server automatically stores information in so-called server log files that your browser transmits to us:

• IP address of the requesting device
• date and time of access
• name and URL of the requested file
• website from which the access originates (referrer URL)
• browser, operating system and, where applicable, device type
• amount of data transferred and status code of the request

This processing serves to ensure a smooth connection, system security and stability, and administrative purposes. The data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted after 30 days at the latest, unless retention is required in individual cases for security reasons.

5. Contacting us

If you contact us by email or phone, we process the data you provide (e.g. name, email address, phone number, content of your enquiry) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6 (1) (f) GDPR (our legitimate interest in responding to enquiries). The data is deleted once it is no longer required to process your request and no statutory retention obligations apply.

6. Login area of the craize.io platform

This website links to the login area of our platform at craize.io (and craize.ai). The platform is currently under development. The information on hosting and server log files applies accordingly to accessing the login page. The processing of personal data in the course of using the platform itself is described in a separate privacy policy of the platform, which is made available to users when their access is activated.

7. Encryption

For security reasons, this website uses TLS encryption (recognisable by "https://" and the padlock symbol in your browser's address bar). Data you transmit to us cannot be read by third parties.

8. Disclosure of data

Your personal data is only passed on to third parties where this is necessary to deliver the website (hosting provider, see section 3), where you have consented, or where we are legally obliged to do so. No data is transferred to countries outside the EU or the EEA.

9. Your rights

With regard to the personal data concerning you, you have the following rights against us:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

Right to object

Where we process your data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The current version applies to your next visit.