# Privacy policy > How we process personal data on this website. > Source: https://www.mainpath.ai/en/privacy/ ## Controller The controller responsible for processing personal data in connection with this website: doppelt.digital GmbH Im Mediapark 5 50670 Cologne Germany Email: kontakt [at] doppelt-digital.de Phone: +49 221 25934428 Represented by: Robin Janke Email: robin.janke [at] doppelt-digital.de ## Hosting and website access This website is hosted on servers provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you access the website, technically necessary data may be processed, including IP address, date and time of access, requested file, amount of data transferred, referrer URL, browser and operating system information, and server log data. The processing is necessary to deliver the website, ensure technical stability and security, and investigate attacks or malfunctions. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Where required, we have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR. Further information is available from Hetzner: - [Hetzner privacy policy](https://www.hetzner.com/legal/privacy-policy) - [Data protection at Hetzner](https://docs.hetzner.com/general/others/data-protection/) ## Contact forms Contact, support, feedback, and pilot-customer forms on this website are submitted directly to our backend at api.mainpath.ai. We process the data you enter, such as name, email address, phone number, message, and technical metadata related to the request, so that we can receive your inquiry, handle it in CRM and the support inbox, and contact you. The legal basis is Art. 6(1)(b) GDPR where your request relates to pre-contractual or contractual communication, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest is the efficient handling of inquiries. The data is not transmitted to an external form provider. Registration as a pilot customer is also covered by the [privacy policy for pilot customers]({{< relref "pilot-privacy" >}}). Agencies are covered by the [privacy policy for agency pilot customers]({{< relref "agency-pilot-privacy" >}}). ## Newsletter We use Listmonk for our email newsletter. Listmonk is open-source newsletter software that we self-host on the same server infrastructure operated with Hetzner. When you subscribe to the newsletter, we process in particular your email address, subscription time, confirmation status, and technical log data to the extent required for subscription, sending, proof of consent, abuse prevention, and unsubscribe handling. Newsletters are sent only on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the unsubscribe link in each newsletter email or by contacting us. The lawfulness of processing carried out before withdrawal remains unaffected. Because Listmonk is self-hosted by us, newsletter data is not transferred to an external newsletter service provider. Technical storage takes place on our server infrastructure hosted with Hetzner. ## Cookies This website stores your cookie choice locally in the browser (strictly necessary). Optional Google Analytics cookies are set only if you accept the Analytics category in the cookie banner. You can change your choice at any time via the cookie icon or the Cookie settings link in the footer. We do not use marketing or advertising cookies. ## Analytics (Umami) We measure anonymous usage with the open-source software Umami, running on our own infrastructure at umami-analytics.application-platform.com (Hetzner, Germany). No analytics cookies are set. The tracker honors the browser Do-Not-Track signal. We may process page paths, referrer, device type, language and approximate region. IP addresses are not stored for identification. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is improving this website and the product UI. Processing takes place in the EU. ## Google Analytics We also use Google Analytics 4 if you consent to the Analytics category in the cookie banner. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland may transfer data to Google LLC in the United States. According to Google, Standard Contractual Clauses are used for that transfer. Google Analytics sets cookies and similar storage. We may process page views, referrer, device type, language, approximate region and technical usage events. Google Analytics 4 truncates IP addresses by default. Advertising personalization and Google Signals are disabled for this property. The Google tag loads only after your consent (Google Consent Mode v2, default “denied”). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future via the cookie banner. The lawfulness of processing carried out before withdrawal remains unaffected. Further information: - [Google privacy policy](https://policies.google.com/privacy) - [Google data processing terms](https://business.safety.google/adsprocessorterms/) ## Support chat The help chat at the bottom right of this website talks to our MainPath API (`api.mainpath.ai`). We store conversation text, a guest identifier in your browser, and. After you sign in. Your user id so the assistant can answer with your projects. Sign-in uses Authentik (OIDC). Proposed project changes are applied only after you confirm them in the chat. The legal basis is Art. 6(1)(b) GDPR where the chat is used to operate your account, otherwise Art. 6(1)(f) GDPR. Optional model inference may be provided by OpenAI (USA) under a data processing agreement and Standard Contractual Clauses. Do not paste passwords, tokens, or one-time codes into the chat. ## Your rights Under the GDPR you may have rights of access, rectification, erasure, restriction, objection, data portability, and the right to lodge a complaint with a supervisory authority. ## Changes We may update this policy when the site or legal requirements change.