danera

Privacy Policy

Last updated: 19 September 2026

Scope

This privacy policy applies solely to our website danera.ai. The processing of personal data within the danera platform is governed separately; see section 7.

1. Controller

The controller for data processing on this website is:

danera GmbH
Kollwitzstr. 76
10435 Berlin
Email: hello@danera.ai

Authorised managing director and commercial register details: see the legal notice.

2. Privacy contact

For any questions about data protection and to exercise your rights, please contact:

Darius Pajouh, Chief Product Officer, privacy@danera.ai

3. What data we process

Visiting the website: We process your IP address, browser type and version, operating system, referrer URL, hostname, and the date and time of the request. The purpose is to deliver the website, maintain its stability and security, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure and uninterrupted operation. The recipient is our hosting provider. The retention period follows that provider's settings and is limited to what is necessary for security and operation; we do not set a period of our own.

Enquiries by form or email: We process your name, email address, company, and the content of your message in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR. The recipient is HubSpot. We store this data for up to five years after our last contact; if a contractual relationship comes about, the statutory commercial and tax retention periods apply.

Booking an appointment: We process your name, email address, company, requested time, and any comments in order to arrange and hold the appointment. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR. The recipient is Microsoft. The same retention period applies as for enquiries.

Log files are not combined with any other data sources. You may object to the storage of contact and booking data at any time at privacy@danera.ai.

4. Cookies and access to your device

Our website does not use any cookies that require consent. Where information is stored on or read from your device at all, it is strictly necessary to provide the service you have requested; no consent is required for this under § 25(2)(2) TDDDG. There is therefore no consent banner.

5. Recipients and transfers to third countries

The recipients named in section 3 are Lovable Labs Incorporated (Boston, USA, website hosting), HubSpot, Inc. (Cambridge, USA, contact form and customer management; the data is held on servers within the European Union), and Microsoft Ireland Operations Limited (Ireland, appointment booking and email). Beyond this, we disclose personal data only where required by law.

Data processing agreements under Art. 28 GDPR are in place with HubSpot and Microsoft; transfers to third countries are safeguarded there by the European Commission's standard contractual clauses. Our website is provided through Lovable Labs Incorporated, based in the USA, and data may therefore be transferred to the United States. According to the provider's own statements, the server log files arising during operation are processed by it as an independent controller for security and product improvement purposes.

6. Your rights

Under the GDPR you have the right to access the data we process about you (Art. 15), to have inaccurate data corrected (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), to object to processing based on Art. 6(1)(f) GDPR (Art. 21), and to withdraw any consent you have given with effect for the future (Art. 7(3)).

An informal message to privacy@danera.ai is sufficient to exercise them.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin. You may also contact the supervisory authority where you habitually reside.

7. Processing within the danera platform

When the danera platform is used, our corporate customers are the controllers within the meaning of the GDPR; danera acts solely as a processor under Art. 28 GDPR. This is governed by a separate data processing agreement with the customer in question.

Our customers' employees are informed about the processing of their data by their employer, who provides them with the applicable privacy notice.

We make our platform documentation — the data processing agreement, the list of sub-processors, technical and organisational measures, and materials for works councils and data protection officers — available to prospective and existing customers on request at privacy@danera.ai.

8. Changes to this privacy policy

We update this policy when our processing or the legal position changes. The version published on this page is the one that applies.