Privacy Policy

1. Controller

AUTOMATIFY LLC
33 N Gould St.
Sheridan, WY 82801
USA

Represented by: Tuan Trung Ngo
Email: trung@automatify.io
Phone: +84 372764892

2. Overview: What is this about?

We process personal data to provide this website, answer enquiries, enable appointments and measure how the website is used in order to improve it. Analytics runs cookielessly on our own server (section 6); in addition, and only if you consent, Google Analytics is used (section 7). This website is a statically generated site and deliberately built to be data-minimising: there are no user accounts and no embedded third-party content.

3. Hosting, domain and DNS

This website is operated on our own virtual server (VPS) in a data centre in Germany. The hosting provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

The domain is registered with GoDaddy. The domain registrar is GoDaddy.com, LLC, 14455 N. Hayden Road, Suite 226, Scottsdale, AZ 85260, USA.

We use Cloudflare to manage the DNS of the domain (name resolution). Cloudflare is used exclusively as a DNS service; website traffic does not run through Cloudflare (no reverse proxy, no CDN). When the domain name is resolved, DNS queries may be processed by Cloudflare for technical reasons. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, stable and performant operation).

4. Server log files

When the website is accessed, technical access data is processed automatically on our own server (nginx), in particular IP address, date and time, page accessed, referrer URL, browser type and operating system (user agent). This is necessary to provide the website, detect attacks and analyse errors.

Legal basis: Art. 6 (1) (f) GDPR.

Retention period: 30 days. In the event of security-relevant incidents, log files may exceptionally be stored longer until the incident has been clarified.

5. Cookie banner and consent (our own solution)

We use our own, self-developed consent banner and no third-party consent service. Your decision is stored exclusively locally in your browser, in localStorage under the key “am-consent”. No cookie is set for this, and your decision is not transmitted to us or to third parties.

For visitors from the EU/EEA – detected via your browser's time zone – analytics services are only loaded after you have actively consented (opt-in). Without consent, no analytics scripts are loaded.

Legal bases:

• Storing your consent decision in the browser (technically necessary): Art. 6 (1) (f) GDPR.
• Optional analytics services: Art. 6 (1) (a) GDPR (consent).

You can change or withdraw your consent at any time via the “Cookie settings” link in the footer of the website.

6. Analytics with Umami (no cookies)

We use Umami to analyse how our website is used. It is analytics software we host ourselves, running on our own server at analytics.automatify.vn in the EU; no data is passed on to third parties.

Umami sets no cookies and neither stores nor reads any information on your device. Measurement therefore runs independently of the cookie banner. To tell visits apart, a daily-rotating, non-reversible hash is formed from your IP address, browser identifier and a secret value; your IP address itself is not stored. You cannot be recognised beyond that day, and no profile is built.

Collected: the page visited, the referring page, country, device type, browser and operating system, plus the time and duration of the visit. Evaluation is only ever done in aggregate.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in statistical analysis of website use). Since no information is stored on or read from your device, no consent under § 25 TDDDG is required.

Objection: You may object to this measurement at any time — simply email the address given in section 1. Technically, the counting script can also be blocked by common script or ad blockers.

7. Google Analytics 4 (GA4) with Google Consent Mode v2

If you consent, we use Google Analytics 4 to analyse and improve the use of our website. This processes, for example, page views, clicks, technical information about the device/browser as well as events.

We use Google Consent Mode v2: by default, all consent signals are set to “denied”; the GA4 script (gtag.js) is only loaded at all after you have consented in the banner. Without consent, no connection to Google servers is established for analytics purposes. GA4 truncates/anonymises IP addresses by default.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6 (1) (a) GDPR (consent).

Transfer to third countries: Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses may be used where required.

Withdrawal: You can withdraw your consent at any time via the “Cookie settings” link in the footer.

8. Appointment request and contact form (sent via your email program)

To request a free intro call, we provide our own form on the website. There you can enter your name, email address, questions/details about your company and the process concerned, as well as your preferred date and time zone.

When you submit the form, no data is transmitted to our server. Instead, the form opens your email program with a pre-filled email to trung@automatify.io. You can review the content before sending and decide yourself whether to send the email. Processing by us only takes place once your email reaches us.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measure at your request).

9. Contact by email

When you contact us by email, we process the data you send us, e.g. name, email address and the content of your message. The purpose is to handle your enquiry and communicate with you.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual communication) or Art. 6 (1) (f) GDPR (legitimate interest in efficient communication), depending on the content.

10. Fonts (self-hosted)

The font used on this website (Manrope) is stored on our own server and delivered from there. No Google Fonts CDN or other external font service is embedded; no connection to Google servers is established when the fonts are loaded.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a consistent and data-minimising presentation).

11. Recipients, processors and third-country transfers

We only pass on personal data when it is necessary for the purposes stated above, when you have consented, or when we are legally obliged to do so. We use service providers as processors, e.g. for hosting (IONOS), DNS management (Cloudflare) and – only after your consent – web analytics (Google).

With some services, a transfer to countries outside the EU/EEA may take place, in particular to the USA. In such cases we use – where required – appropriate safeguards (e.g. certification under the EU-US Data Privacy Framework or standard contractual clauses) and review additional protective measures.

12. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to certain processing. If processing is based on your consent, you can withdraw it at any time with effect for the future.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work.

14. Changes to this privacy policy

We may adapt this privacy policy if our website, the tools we use or legal requirements change.

The German version of this privacy policy is legally binding.