Brandilyst UG (haftungsbeschränkt)
Operating Office (preferred address): Gasthaus Str. 2, 47533 Kleve, Germany
Registered Office / Commercial Register Address: Taubenstraße 9, 89269 Vöhringen, Germany
Represented by: Ali Hussain
Contact: info@brandilyst.de, +49 1521 3573675

2. Data Protection Contact
For data protection inquiries: info@brandilyst.de

3. Purposes, Legal Bases, and Data Categories
Website operation / server logs (IP address, timestamp, requested URL, referrer, user agent) – Art. 6(1)(f) GDPR (legitimate interest: security, stability).
Contact requests (name, email, message) – Art. 6(1)(b) GDPR (pre-/contractual) or Art. 6(1)(f).
Contract/project execution (master, contract, billing data) – Art. 6(1)(b) GDPR.
Cookies/tracking for analytics & advertising – Art. 6(1)(a) GDPR (consent); revocable at any time with effect for the future.

4. Cookies & Tracking (Analytics/Ads)
We use cookies/similar technologies for analytics and advertising purposes. Non-essential cookies are only set after your consent. You can adjust settings in your browser/system and – if implemented – via our cookie banner.

Tools used (examples):
Meta Technologies (e.g., Meta Pixel / Conversions API) – Provider: Meta Platforms Ireland Ltd.; Purposes: reach measurement, performance, marketing; Data: e.g., page views/events, possibly hashed IDs; Legal basis: consent.
LinkedIn Insight Tag – Provider: LinkedIn Ireland Unlimited Company; Purposes: reach, conversion, retargeting; Data: page views, pseudonymized audience characteristics; Legal basis: consent.

5. Processors & Third-Country Transfers
We engage service providers (e.g., OpenAI Developer APIs, n8n, Twilio, Zapier, hosting/IT) pursuant to Art. 28 GDPR. For transfers to third countries (e.g., USA), we use EU Standard Contractual Clauses (SCC) and appropriate additional safeguards (Art. 44 ff. GDPR).

6. Storage Period
Data is deleted once the purpose no longer applies and no legal retention obligations remain. Server logs are generally retained briefly for security purposes and then deleted or anonymized.

7. Provision Obligations
Certain data is technically necessary for operation. Without contact/contract data, it is not possible to prepare an offer or carry out execution.

8. Recipients
Authorized internal departments as well as external service providers (hosting, IT operations, communication, automation, billing). No disclosure to third parties for advertising purposes without consent.

9. Data Subject Rights (Art. 15–21 GDPR)
You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. Consents may be revoked at any time.
Right to lodge a complaint with a supervisory authority, e.g., LfDI Baden-Württemberg.

10. Security
We take appropriate technical and organizational measures (TOMs) and continuously adapt them.

11. Minors
Our offer is not directed at children within the meaning of Art. 8 GDPR.

12. Changes
This statement will be updated in case of process/legal changes.

Status: 20.09.2025