Privacy Policy
As of: April 2026 | In accordance with GDPR, BDSG and TDDDG
Note: This is a convenience translation of the German Privacy Policy (Datenschutzerklärung). The German version is the legally binding document.
The protection of your personal data is important to us. As a company developing a knowledge management software, we understand the value of information — and the responsibility that comes with it. In this privacy policy, we transparently inform you about what data we collect, how we use it, and what rights you have.
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Responsible Party" in this privacy policy.
How do we collect your data?
Your data is collected in part when you provide it to us. This may include data you enter in a contact form or when signing up for our product updates.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. browser type, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data may be used for anonymised analysis of user behaviour. Where contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders or other enquiries.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and other questions on data protection.
Analytics tools and third-party tools
When visiting this website, your browsing behaviour may be statistically analysed in anonymised form. This is primarily done using the analytics service Plausible Analytics, which operates without cookies and without collecting personal data.
Detailed information about this analytics service can be found in this privacy policy.
2. Hosting
We host the contents of our website with the following provider:
Amazon Web Services (AWS)
The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter "AWS"). Our website is operated on servers in Frankfurt am Main, Germany (Region eu-central-1). When you visit our website, AWS collects various log files including your IP addresses.
For more information, please refer to the AWS privacy policy: https://aws.amazon.com/privacy/
The use of AWS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible.
Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
We would like to point out that data transmission over the internet (e.g. communication by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the Responsible Party
The responsible party for data processing on this website is:
EPINOIA GmbH
Blaumeisenweg 7
40489 Düsseldorf
Germany
Email: info@epinoia.ai
Contact form: www.epinoia.ai/kontakt
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage Duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion takes place after these reasons cease to apply.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims (objection under Art. 21(1) GDPR).
Where your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection under Art. 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a
supervisory authority, in particular in the Member State of their habitual residence, their place
of work or the place of the alleged violation.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Postfach 20 04 44, 40102 Düsseldorf, Germany
https://www.ldi.nrw.de
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, Rectification and Deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing and, if applicable, a right to rectification or deletion of this data.
SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
Objection to Unsolicited Emails
The use of contact data published as part of the legal notice obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
4. Data Collection on this Website
Cookies
This website does not use cookies. Neither technically necessary, analytical, nor marketing cookies are used. Third-party services integrated on this website also do not set cookies. A cookie consent banner is therefore not required.
Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
The data stored in server log files is deleted after the storage period required for the respective purpose has expired. This data is not merged with other data sources. After deletion of the IP address, we can no longer establish a personal reference from the remaining data. The collection of this data is based on Art. 6(1)(f) GDPR.
Contact (Contact Form and Email)
If you send us enquiries via the contact form or by email, your details including the contact data you provide will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
Where you provide voluntary information in the contact form beyond the fields marked as mandatory, we process this data on the legitimate assumption that processing and use of this data is in your interest (Art. 6(1)(f) GDPR).
The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested; consent can be revoked at any time.
The data you submit will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
5. Web Analytics
Plausible Analytics
This website uses the web analytics service Plausible Analytics. The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia (hereinafter "Plausible").
Plausible operates entirely without cookies and does not collect any personal data. No IP addresses are stored and no cross-website tracking is performed. The analytics data collected is fully anonymised. It is not possible to identify individual visitors based on the collected data.
The following anonymised data is collected: page views, referral source, browser used, operating system, device type, and country (based on anonymised IP processing without storing the IP address).
The service is operated via Plausible Cloud. The servers are located in the European Union (Hetzner, Germany).
The use of Plausible is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymised analysis of user behaviour to optimise our website. Since Plausible does not collect personal data and does not set cookies, neither consent under Art. 6(1)(a) GDPR nor cookie consent under § 25 TDDDG is required.
Data Processing Agreement
We have concluded a data processing agreement (DPA) with Plausible to ensure the data protection-compliant use of the service.
For more information, please refer to Plausible's data policy: https://plausible.io/data-policy
6. Email Marketing
Product Updates with Brevo
On our website, we offer the option to sign up for product updates by email. When you register, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the product updates (double opt-in procedure). No further data is collected, or only on a voluntary basis.
We use the service Brevo for sending product updates. The provider is Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (hereinafter "Brevo").
Brevo enables us to organise and analyse the sending of our product updates. The data you enter for the purpose of registration (e.g. email address) is stored on Brevo's servers in the European Union (France, Germany and Belgium).
Data Analysis by Brevo
Our emails sent via Brevo enable us to analyse the behaviour of recipients. Among other things, it can be evaluated whether and when an email was opened and which links were clicked. Using so-called tracking pixels, a small invisible file is integrated into the email, which is called up when the email is opened, enabling analysis. Technical data is also collected (e.g. time of retrieval, IP address). This information is processed by Brevo as a data processor on our behalf and serves exclusively for the statistical evaluation and optimisation of our communication.
Legal Basis
The processing of the data entered in the registration form is based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time, for example via the unsubscribe link in every email we send. The legality of the data processing operations already carried out remains unaffected by the revocation.
Storage Duration
The data you have provided for the purpose of subscribing to product updates will be stored by us or the email service provider until you unsubscribe and will be deleted from the distribution list after you unsubscribe or after the purpose ceases to apply.
After you unsubscribe, your email address may be stored by us or the email service provider in a blocklist if this is necessary to prevent future mailings. The data from the blocklist is used only for this purpose and is not merged with other data.
Data Processing Agreement
We have concluded a data processing agreement (DPA) with Brevo. This is part of Brevo's General Terms of Use (Annex 3: Data Protection Agreement). The agreement ensures that Brevo processes the personal data of our email recipients only in accordance with our instructions and in compliance with the GDPR.
For more information, please refer to Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/
7. Currency and Amendments to this Privacy Policy
This privacy policy is currently valid as of April 2026.
Due to the further development of our website and services, or as a result of changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy can be accessed at any time on this website.