Privacy Policy

General information

This information explains what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified.

Data collection on this website

• Who is the controller? Data processing is carried out by the provider named below.
• How do we collect your data? You provide data to us, e.g. via the contact form. Other data (e.g. IP address, browser type) is collected automatically by our IT systems when you visit the website.
• What do we use your data for? For the technical provision of the website, for security/error analysis and for processing your enquiries.
• What rights do you have? Among other things, you have the right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent given. You may lodge a complaint with a data protection supervisory authority.

InnofyAI – a service of
Innofy Ventures LLC
25 SE 2nd Ave Ste 550 769
Miami, FL 33131, USA
Phone: +49 (0)391 73813007
Email: [email protected]

Legal bases

• Contractual/pre-contractual measures: Art. 6(1)(b) of the General Data Protection Regulation (GDPR)
• Legal obligations: Art. 6(1)(c) GDPR
• Legitimate interest (e.g. operation/security of the website): Art. 6(1)(f) GDPR
• Consent (where obtained): Art. 6(1)(a) GDPR

Storage period

Personal data is erased as soon as the purpose no longer applies and no statutory retention obligations prevent erasure.

Our website uses HTTPS encryption. This means that data you transmit cannot be read by third parties.

When the website is accessed, the following data is processed automatically: IP address, date/time, URL accessed, referrer URL, browser and operating system information, HTTP status code. Purpose/interest: technical operation, stability and security of the website. Legal basis: Art. 6(1)(f) GDPR. Storage period: usually 7–30 days; thereafter erasure/anonymisation.

We set technically necessary cookies (e.g. “innofy_consent”, which stores your consent decision) on the basis of Art. 6(1)(f) GDPR; Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

We load statistics and marketing services only after you have given your express consent via our cookie banner (Art. 6(1)(a) GDPR; Section 25(1) TDDDG). Without consent, no such cookies are set. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer; any tracking cookies that have been set will then be deleted.

Services and cookies used after consent:

• Google Analytics 4 / Google Ads (Google Ireland Ltd.) — audience measurement and conversion tracking. Cookies: _ga, _ga_* (up to 24 months), _gcl_au (3 months). Without consent, the Google tag runs in Consent Mode v2 without cookies and without personal identifiers.
• Meta Pixel + Conversions API (Meta Platforms Ireland Ltd.) — conversion tracking. Cookie: _fbp (3 months). Server-side transmission (Conversions API) also takes place only if consent has been given.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) — conversion tracking. Cookies: li_*, ln_or (up to 12 months).
• TikTok Pixel (TikTok Technology Ltd.) — conversion tracking. Cookies: _ttp, ttcsid (13 months).
• X/Twitter Pixel (X Corp.) — conversion tracking. Cookie: _twpid.
• Microsoft Clarity & Bing UET(Microsoft Ireland Operations Ltd.) — heatmaps/session replay and conversion tracking. Cookies: _clck, _clsk, _uetsid, _uetvid (up to 13 months).
• PostHog (PostHog Inc., hosted in the EU/Frankfurt) — product analytics and session replay with masked inputs. Cookie: ph_* (12 months).
• Own attribution cookie innofy_sid (first-party, 90 days) — attribution of campaign clicks to enquiries and bookings.

If you contact us, we process the data you provide (e.g. name, email, phone number, message) in order to handle your enquiry and to clarify any follow-up questions. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (general enquiries). Storage period: until your enquiry has been fully dealt with; thereafter erasure, unless retention obligations apply.

For appointment booking, we embed the widget of Calendly (Calendly LLC, USA). When the widget is loaded, connection data (including the IP address) is transmitted to Calendly; when you make a booking, Calendly processes the data you enter on our behalf. Legal basis: Art. 6(1)(b) GDPR (scheduling appointments) or Art. 6(1)(f) GDPR; transfer to the USA on the basis of the EU-US Data Privacy Framework. We do not currently embed any other external content. The statistics and marketing services listed in section 06 are loaded only after consent.

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Right to lodge a complaint: you may lodge a complaint with a data protection supervisory authority.

We hereby object to the use of the contact details published in the legal notice for sending advertising that has not been expressly requested. We reserve the right to take legal action in the event of unsolicited advertising information being sent.

We will amend this privacy policy when the website or legal requirements so require. The current version is always available here.