Privacy Notice
Last updated: November 2026 · Deutsche Fassung
This is an English translation of our German privacy notice (Datenschutzerklärung). In case of discrepancies, the German version prevails.
1. Controller
Entision GmbH i.G.
Rummerweg 4, 69121 Heidelberg, Germany
Email: info@entision.ai
2. Hosting and server log files
This website is hosted on Google Firebase (Firebase Hosting), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you visit the site, Google processes technically necessary data in server log files: IP address, date and time, page requested, referrer, browser type and operating system.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and error-free delivery of the website. Google processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Log data is deleted in line with Google's retention periods; we do not use it for any other purpose.
A transfer of data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework. The transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).
3. Cookies, tracking and external services
This website does not set cookies and does not use any analytics or tracking tools. Fonts and graphics are served locally from our server; no external fonts, scripts or other third-party content are loaded.
4. Contacting us by email
If you contact us by email, we process your email address, your name (if provided) and the content of your message in order to handle your enquiry. We do not pass this data on to third parties without your consent, apart from the processors named below. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or to pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Our mailboxes are operated via Google Workspace, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as our processor pursuant to Art. 28 GDPR. A transfer to Google LLC in the USA cannot be ruled out; it is based on the EU-US Data Privacy Framework and the European Commission's adequacy decision (Art. 45 GDPR). The data is deleted as soon as it is no longer needed for the purpose and no statutory retention obligations apply.
5. Storage period, recipients and data security
Unless a more specific storage period is stated in this privacy notice, we store personal data only for as long as it is needed for the respective purpose. It is then deleted, unless statutory retention obligations (for example under commercial or tax law) apply; in that case it is deleted once those periods have expired.
The only recipients of personal data are the processors named in this privacy notice. Beyond that, we disclose data only where we are legally obliged to do so.
For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by "https://" in the address bar and the padlock symbol in your browser. Please note that data transmitted over the internet, for example by email, may be subject to security gaps; complete protection against access by third parties is not possible.
6. Your rights
Under the GDPR you have the following rights, which you can exercise free of charge:
- Access to the data we process about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR, see below)
An email to info@entision.ai is sufficient to exercise your rights.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
7. Right to object under Art. 21 GDPR
Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object informally, most easily by email to info@entision.ai.
If your data is processed for direct marketing purposes, you can object to this at any time; your data will then no longer be used for this purpose (Art. 21(2) GDPR). We do not currently carry out any direct marketing via this website.
8. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website.