Back to homepage
Legal

Privacy Policy

This is a convenience translation. Only the German version is legally binding: German version (Datenschutzerklärung)

01 Controller

Avolang Vermittlung UG (haftungsbeschränkt) Zino Lang
Pacelliallee 5, 14195 Berlin
info@avolang.de

02 Collection and Storage of Personal Data

a) When visiting the website

When you access this website, your browser automatically sends information to the server, which is stored in log files. The log files are automatically deleted after 7 days at the latest:

The data is processed to ensure a smooth connection set-up, to evaluate system security and for administrative purposes. Legal basis: Art. 6(1)(f) GDPR.

b) When you contact us

If you contact us by email or telephone, we process the data you provide in order to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR.

c) When using the contact form

If you use our contact form, we collect your email address, the selected concern and, if provided voluntarily, your name and an additional message. This data is used to process your enquiry and is received via Microsoft 365 (see section 03b). It is not passed on to third parties for advertising or analytics purposes. The data is deleted as soon as your enquiry has been conclusively dealt with and no statutory retention obligations prevent this. Legal basis: Art. 6(1)(b) GDPR.

d) Voluntary consent to information about our services

If you select the separate marketing consent in the contact form, you will first receive an email with a confirmation link. Only after you click this link will we use your email address to inform you about our own services and specialist information on AI, data analysis and digitalisation. Consent is voluntary and is not a prerequisite for processing your enquiry. As evidence, we store the server-defined version of the consent text, the times of the request and of the confirmation, and pseudonymised technical evidence data in a protected server audit. Requests that have not yet been confirmed are deleted after 30 days at the latest; the audit records are stored for a maximum of three years. You can withdraw your consent at any time with effect for the future via info@avolang.de. After withdrawal, you will not receive any further promotional emails. Legal basis: Art. 6(1)(a) and Art. 7 GDPR and § 7(2) No. 2 UWG (German Act against Unfair Competition).

e) When requesting the AI Policy Blueprint

If you request the free AI Policy Blueprint (KI Richtlinien Blaupause), we process your email address to carry out the double opt-in procedure and to provide the Word file once. The complete editable template is a benefit of Avolang’s email offer, which is requested at the same time, and is therefore only delivered after marketing consent has been confirmed. The public specialist article remains accessible without registration. The confirmation link is valid for 48 hours and can only be used once. The audit data and withdrawal options described under d) apply to the evidence. Withdrawal ends future marketing emails; the template already downloaded may continue to be used internally. Legal bases: Art. 6(1)(b) GDPR for the request and delivery, and Art. 6(1)(a) and Art. 7 GDPR and § 7(2) No. 2 UWG for email marketing.

03 Hosting, Processors & Disclosure

a) Hosting (dogado)

This website is hosted by dogado GmbH, Emil-Hoffmann-Straße 13, 50996 Köln, Germany. When the website is accessed, dogado processes the server log data referred to in 2a) on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with dogado. As dogado is a German company, no personal data is transferred to third countries. Legal basis: Art. 6(1)(f) GDPR.

b) Email (Microsoft 365)

For our email communication, including enquiries received via the contact form, we use Microsoft 365 provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. A data processing agreement is also in place for this; any transfers to third countries are safeguarded by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

c) Google services

Insofar as Google processes data for Google Analytics and Google Ads on our behalf, the Google Ads Data Processing Terms apply as the data processing terms. These terms form part of our contractual relationship with Google. Further information on the services used, the consents and possible data transfers can be found in section 04.

d) Disclosure to third parties

Your data will only be transferred to third parties beyond this if you have expressly consented, if this is necessary for the performance of a contract or if there is a legal obligation to do so. Your data will not be used for any unrelated purposes (Fremdnutzung).

04 Cookies & Tracking

a) Consent management

On your first visit, you can decide separately whether analytics and marketing cookies and similar identifiers may be used. Your choice is stored locally in your browser. In addition, we log the decision in a protected server audit as evidence of consent. The following are recorded: a random consent ID, a unique decision ID, the selected categories, the type of decision, the version of the consent text, the time, and HMAC values of the IP address and of the browser identifier. The IP address and the browser identifier are not stored in plain text. The HMAC values are generated using a secret server key and serve solely as evidence of the decision. The evidence data is stored for a maximum of three years. Local settings expire after 180 days, after which you will be asked again. The legal basis for the necessary local storage of your choice is § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The evidence data is processed to fulfil our obligations to demonstrate consent pursuant to Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. You can change or withdraw any consent you have given at any time with effect for the future via “Cookie settings” in the page footer. Changes and withdrawals are also logged in the server audit.

We use Basic Consent Mode v2. The default settings for analytics_storage, ad_storage, ad_user_data and ad_personalization are denied. Before you give your consent, the Google tags are not loaded and no data is transmitted to Google. If you consent, your choice is transmitted to Google and only the services you have enabled are activated.

b) Google Analytics

If you consent to the Analytics category, we use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The measurement ID is G-1866TDC6G0. The service helps us understand which pages, content and contact channels are used. In the process, pages viewed, times, interactions, approximate location data, device information and online identifiers may be processed, and cookies such as _ga and _ga_* may be set.

Without your consent, the external Google script for analytics is not loaded. After you have given your consent, we may record events such as page views, clicks on contact channels, started form submissions and opened questions. When the contact form is submitted successfully, the event of a generated enquiry is recorded. Form content, names, email addresses, telephone numbers and messages are not transmitted to Google Analytics.

The legal basis for the use of optional cookies and similar identifiers and the associated more detailed analysis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy and in the explanation of how Google uses data from websites. The storage period depends on the provider’s settings and specifications.

c) Google Ads conversion tracking

If you consent to the Marketing category, we load the Google tag for Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The conversion ID is AW-18266700800. The tag helps us recognise whether a confirmed contact request was sent after clicking on an advertisement and supports the attribution of campaigns. In the process, online identifiers, device information, pages viewed, times and campaign parameters may be processed, and cookies may be set.

Without your consent, the external Google script for marketing is not loaded. The conversion action is only triggered after a server-confirmed submission of the contact form and if marketing consent has been given. Form content, email address and name are not transmitted to Google.

The legal basis for the use of optional cookies and similar identifiers and the associated more detailed conversion attribution is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy. The storage period of Google data depends on the provider’s settings and specifications.

d) OpenAI conversion pixel (ChatGPT Ads)

If you consent to the Marketing category, we load the OpenAI conversion pixel (OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). The pixel ID is Hkn3Kr6oxxjsroQqAbBHzp. The pixel helps us recognise whether a confirmed contact request was sent after clicking on an advertisement in ChatGPT and supports the attribution of these advertising campaigns. In the process, online identifiers, device information, pages viewed, times and campaign parameters may be processed, and cookies or similar identifiers may be set.

Without your consent, the external OpenAI script is not loaded. If marketing consent has been given, the event of a generated contact request is triggered exclusively after a submission of the contact form that has been confirmed by the mail server. A mere click on a telephone number is not transmitted to OpenAI as a conversion. Form content, email address and name are not transmitted to OpenAI.

The legal basis for the use of optional cookies and similar identifiers and the associated conversion attribution is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. OpenAI may also process data in the USA; any transfer is based on the EU Standard Contractual Clauses or a comparable adequacy mechanism. Further information can be found in OpenAI’s privacy policy for Europe. The storage period depends on the provider’s settings and specifications.

e) Microsoft Clarity

If you consent to the Analytics category, we use Microsoft Clarity provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. The project ID is yhlfbt92g8. Clarity helps us understand and improve the use and usability of our website by means of behavioural metrics, heatmaps and session recordings.

In particular, pages viewed and their DOM and layout information, times, clicks, mouse movements, scroll, selection and input events, window sizes, device and browser information, approximate location data, online identifiers, and diagnostic and performance data may be processed. The contents of input fields and the content in the area of our contact form are technically masked; masked content is not transmitted to Clarity. Clarity may in particular use the first-party cookies _clck and _clsk and, on Microsoft domains, the cookies CLID, ANONCHK, MR, MUID and SM.

Without your consent, the external Clarity script is not loaded and no data is transmitted to Microsoft Clarity. If you consent, we additionally transmit a Consent V2 signal for analytics storage to Clarity; storage for advertising purposes remains deactivated. After withdrawal, the status is set to denied, any existing accessible Clarity cookies are deleted and the page is reloaded.

The legal basis for the use of optional cookies and similar identifiers and for the behavioural analysis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Microsoft may also process data in the USA; for this purpose, Microsoft refers in particular to the EU Standard Contractual Clauses. According to Microsoft, playback data is generally stored for 30 days, and click data, heatmaps and marked sessions for up to nine months. Further information can be found in the Microsoft Privacy Statement and in the information on Clarity cookies.

05 Your Rights

You have the following rights:

Competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI) (Berlin Commissioner for Data Protection and Freedom of Information), Friedrichstr. 219, 10969 Berlin, www.datenschutz-berlin.de.

06 Data Security

We use appropriate technical and organisational security measures to protect your data against manipulation, loss or unauthorised access.

07 Currency of This Policy

This privacy policy is currently valid and was last updated on 19 September 2026 (19.09.2026). We reserve the right to amend it as necessary.

If you have any questions about data protection, please contact: info@avolang.de

Free initial consultation Send an enquiry →