Privacy policy

Controller

The controller for the processing described here is Hanna Novikova, Amselweg 1, 69231 Rauenberg, Germany — info@ainclave.com. The full details are in the imprint.

For any request under this policy, including the rights listed below, write to that address or use the contact form.

Design partner application

If you apply through the design partner form, we process the email address you enter and the fact that you gave consent. Both are stored in our Postgres database. We use them for one purpose: to contact you about the design partner programme.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future; we then delete the entry. We keep the entry until you withdraw or until the programme ends.

The form contains a hidden field that is invisible to you and only ever filled in by automated submissions. When it is filled, the submission is discarded and nothing is stored.

Abuse prevention

To rate-limit the application form, your IP address is hashed with SHA-256 the moment the request arrives. Only that hash is held, in memory, for a rolling 15-minute window, and it is used solely to count attempts. The IP address itself is not written to our database, and the hash is not stored beyond the window. The legal basis is our legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR).

Contact form

The name, email address and message you submit are sent to our contact mailbox so that we can answer you. The legal basis is our legitimate interest in responding to enquiries, or the steps prior to a contract at your request (Art. 6(1)(b) and (f) GDPR). We keep the correspondence for as long as it takes to deal with your enquiry.

Server logs

Our hosting provider processes the technical data that any web request carries — IP address, timestamp, requested URL, referrer and user agent — to deliver the page and to keep the service available and secure. This is standard operation of a web server and rests on our legitimate interest (Art. 6(1)(f) GDPR).

Cookies

All of the following are strictly necessary: they exist so that a feature you asked for works. They store a setting or a session, never a profile.

Strictly necessary cookies do not require consent, because they are needed to provide the service you requested. Since we set nothing beyond them, there is nothing to consent to.

You can delete or block cookies in your browser settings. Blocking these will not break the site, but it will forget your theme and language choices, and it will prevent you from staying signed in.

Recipients

We use service providers to host this website, run our database, and deliver email. They process data on our instructions only. The formal subprocessor list is in preparation and is not published yet; we will not pretend otherwise. Ask us and we will name the providers in scope for your case.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to have processing restricted, to data portability, and to object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of what happened before. You also have the right to lodge a complaint with a supervisory authority.

Changes

We update this policy when what the site does changes. The version you are reading is the one in force.