Privacy policy
This website sets no cookies and runs no analytics or advertising trackers. We process the technical data your browser sends when it loads a page, and whatever you send us through the demo form or by email. This summary is for orientation only; the sections below are what applies.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
- Company
- Maven Labs UG (haftungsbeschränkt)
- Address
- Baaderstraße 17
80469 München
Germany - Managing director
- Maximilian Nitsche
- Phone
- +49 174 43 53 754
- hello@decky-ai.com
We have not appointed a data protection officer because we are under no statutory obligation to do so (§ 38 of the German Federal Data Protection Act, BDSG). For any question about data protection, use the contact details above.
2. Scope
This policy explains how we process personal data when you visit this website or get in touch with us.
It does not cover use of the MavenOS platform. That is governed by separate privacy information and, where we act as a processor for a customer, by a data processing agreement (Art. 28 GDPR).
3. Visiting the website
When you open a page, your browser sends technical data to the server that delivers it. This is recorded in server log files:
- IP address
- date and time of the request
- the page or file requested and the amount of data transferred
- the page you came from (referrer)
- browser type and version, operating system
We process this data to deliver the website, to keep it stable and secure, and to investigate misuse. The legal basis is our legitimate interest in operating a secure and reliable website (Art. 6(1)(f) GDPR). We do not combine this data with other data and do not use it to identify you.
The website is hosted on Microsoft Azure Static Web Apps. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, which processes this data on our behalf (Art. 28 GDPR). Microsoft delivers the pages through a worldwide network of servers, so a request may be handled outside the European Union; see section 8. Log data is deleted after a short period, unless we need it for longer to investigate a specific security incident.
4. Fonts and scripts
All typefaces and scripts this website uses are delivered from the website’s own address. To load a page, your browser does not connect to any other provider, and no data goes to font or script services.
5. Demo requests and contact
If you request a demo through the form, we process what you enter: first and last name, firm, work email address, role and, if you add one, your message. If you write to us by email, we process your email address and the content of your message.
We use this data to answer you, to arrange and hold the demo and to follow up on it. The legal basis is the taking of steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
You are not obliged to give us this data. Without the fields marked as required, however, we cannot process a demo request.
6. Email updates
If you tick the box for occasional notes about the product, we use your email address to send them. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7 of the German Act against Unfair Competition, UWG).
You can withdraw your consent at any time with effect for the future, through the unsubscribe link in each email or by writing to hello@decky-ai.com.
8. Recipients and transfers outside the EU
We share personal data only with:
- service providers that host the website or run our email and customer-relationship tools; they act on our instructions as processors (Art. 28 GDPR);
- authorities and courts, where the law requires it or where it is necessary to establish, exercise or defend legal claims.
We do not sell personal data.
Some recipients are located, or process data, outside the European Union and the European Economic Area. Where we transfer personal data there, we rely on an adequacy decision of the European Commission (for the United States, the EU-US Data Privacy Framework for providers certified under it) or on the Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).
9. How long we keep data
We keep personal data only for as long as the purpose requires:
- Server logs: for a short period, as described in section 3.
- Demo requests and correspondence: until your request has been dealt with and, if a business relationship follows, for its duration. After that we keep data only as long as retention periods under commercial and tax law require, which is six to ten years (§ 257 of the German Commercial Code, HGB; § 147 of the German Fiscal Code, AO).
- Email updates: until you unsubscribe.
10. Your rights
You have the following rights with regard to your personal data. To exercise them, write to hello@decky-ai.com.
| Right | Basis | What it means |
|---|---|---|
| Access | Art. 15 GDPR | You can ask whether we process personal data about you and receive a copy of it. |
| Rectification | Art. 16 GDPR | You can have inaccurate data corrected and incomplete data completed. |
| Erasure | Art. 17 GDPR | You can have your data deleted, unless we are legally required to keep it. |
| Restriction | Art. 18 GDPR | Under certain conditions you can have the processing of your data restricted. |
| Portability | Art. 20 GDPR | You can receive the data you gave us in a structured, commonly used, machine-readable format. |
| Objection | Art. 21 GDPR | You can object at any time, on grounds relating to your situation, to processing that we base on legitimate interests (Art. 6(1)(f) GDPR). You can object to direct marketing at any time without giving reasons. |
| Withdrawal of consent | Art. 7(3) GDPR | Where processing is based on your consent, you can withdraw it at any time with effect for the future. |
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
11. Security
The website is delivered over an encrypted connection (HTTPS/TLS). We take technical and organisational measures appropriate to the risk to protect personal data against loss, misuse and unauthorised access (Art. 32 GDPR).
12. Changes and contact
We update this policy when the website or the law changes. The current version is always the one on this page; the date of the last change is at the top.
If you have questions about this policy, write to hello@decky-ai.com or to the postal address in section 1.