Privacy Policy

Last updated: October 2025

1. Data Controller and Contact

The data controller responsible for data processing on this website is:

Bureau Wehrmann Dennis Wehrmann
Bahnhofstraße 159
86438 Kissing
Germany

Contact:
Phone: +49 (0) 8233 73955-11
Email: info@getplinio.com

2. General Information about Data Protection

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of statutory provisions (GDPR, TKG). This privacy policy informs you about the most important aspects of data processing within our website and services.

Your Rights

According to GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about your personal data processed by us
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data
• Right to erasure (Art. 17 GDPR): You can request deletion of your data
• Right to restriction (Art. 18 GDPR): You can request restriction of processing
• Right to object (Art. 21 GDPR): You can object to processing
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured, common format
• Right to withdraw consent: You can withdraw given consent at any time with effect for the future

To exercise your rights, please contact: info@getplinio.com

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

Competent supervisory authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Website: https://www.lda.bayern.de

3. Data Collection on this Website

3.1 Server Log Files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address (anonymized)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technical provision and security of the website)

Storage period: The data is deleted after 7 days at the latest.

3.2 Contact Form and Email Contact

If you send us inquiries via contact form or email, your details from the inquiry form or your email, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

Data collected via contact form (Assessment/Demo request):

• Name
• Email address
• Company (optional)
• Message/Inquiry
• Time of inquiry

Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering your inquiry)

Storage period: Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For contract initiation, data will be stored according to legal retention periods (generally 6-10 years).

3.3 Cookies and Cookie Consent Tool

This website uses cookies. Cookies are small text files that are stored on your device and store certain settings and data for exchange with our system via your browser.

Cookie Consent Management with Cookiebot:
We use Cookiebot to manage cookie settings on our website.

Provider:
Cybot A/S
Havnegade 39
1058 Copenhagen, Denmark

Functionality:
When you first visit our website, a cookie banner is displayed where you can set your cookie preferences. Your settings are stored in a cookie so you don't have to be asked again on your next visit.

Cookie Categories:

• Necessary Cookies: Technically required for website operation (e.g. session, login)
• Preference Cookies: Store your personal settings (e.g. language selection)
• Statistics Cookies: Enable us to analyze website usage (Matomo)
• Marketing Cookies: Used for newsletter tracking (Brevo)

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) for non-necessary cookies or Art. 6 para. 1 lit. f GDPR for technically necessary cookies

Withdrawal: You can change your cookie settings at any time by clicking on the "Cookie Settings" link in the footer.

More information: https://www.cookiebot.com/en/privacy-policy/

Current Cookie Overview:

4. Newsletter (Brevo)

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter.

Service provider: We use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) for newsletter delivery.

Data collected:

• Email address
• Name (optional)
• Time of registration
• IP address at registration (for double-opt-in proof)
• Opening and click rates (for statistics)

Double-opt-in procedure: Registration is done using the so-called double-opt-in procedure. After registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign email addresses.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Withdrawal: You can withdraw your consent to receive the newsletter at any time. You will find an unsubscribe link in every newsletter or contact info@getplinio.com.

Storage period: The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your email address will be stored as long as the newsletter subscription is active.

More information: https://www.brevo.com/legal/privacypolicy/

5. Analytics Tools

5.1 Matomo (Self-hosted)

This website uses the open-source software Matomo to analyze website usage. Matomo runs on our own servers in the EU, so all analytics data remains under our control.

Functionality:
Matomo uses cookies that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about the use of this website is stored exclusively on our server in the EU.

Data collected:

• Anonymized IP address (last 2 bytes are masked)
• Pages visited and time spent
• Origin of access (referrer)
• Browser and operating system used
• Approximate location (city level)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing and optimizing our website)

Objection/Opt-out:
You can prevent the storage of cookies through appropriate settings in your browser software or object to collection via our opt-out tool.

Storage period: Data is deleted after 24 months.

6. Payment Service Providers

6.1 Stripe

We use the payment service provider Stripe for payment processing.

Provider:
Stripe Payments Europe, Ltd.
1 Grand Canal Street Lower
Grand Canal Dock, Dublin, D02 H210
Ireland

Functionality:
When you book a paid service with us, your payment data (e.g. name, payment amount, bank details, credit card number) is processed by Stripe for payment processing.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)

Data transfer: Stripe is certified under the EU-US Data Privacy Framework and thus provides an adequate level of data protection.

More information: https://stripe.com/privacy

7. Hosting

This website is hosted by Vercel Inc.

Provider:
Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
USA

Server location: Frankfurt, Germany (Region: fra1)

Processing:
Vercel processes data on our behalf and is contractually obligated to process your data exclusively according to our instructions.

Data collected:

• IP addresses
• Access data (date, time, pages accessed)
• Browser information

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient hosting)

Data processing agreement: A data processing agreement (DPA) has been concluded with Vercel in accordance with Art. 28 GDPR.

More information: https://vercel.com/legal/privacy-policy

8. Use of the plinio Platform

8.1 Registration and Login

Registration is required to use our content operations platform.

Data collected during registration:

• Email address
• Name
• Company name
• Login time

Login procedure:
Login is via email authentication through Vercel (server location: Frankfurt, Germany).

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)

Storage period: Your account data is stored as long as your account is active. After account deletion, data will be completely deleted within 30 days, unless legal retention requirements apply.

8.2 Content Processing with AI Models

To provide our content operations services, we use AI models from OpenAI and Anthropic.

OpenAI via Microsoft Azure (Germany):

• Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
• Server location: Germany (Azure Region Germany)
• Processing of your content exclusively in the EU
• No use for model improvement by OpenAI
• Data processing agreement according to Art. 28 GDPR available

Anthropic Claude:

• Provider: Anthropic PBC, San Francisco, USA
• Processing according to EU-US Data Privacy Framework
• No use for model improvement
• Data processing agreement according to Art. 28 GDPR available

Data collected/processed:

• Content briefs provided by you
• Generated texts and content
• Usage statistics (number of articles generated, usage duration)

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)

Data protection: Your content data is transmitted and processed in encrypted form. The AI providers do not use your data to train their models.

Storage period: Generated content is stored as long as you keep it in your account. You can delete content at any time.

8.3 Support and Communication (Planned)

We plan to introduce a support system via Zammad (self-hosted in Germany).

Planned provider:
Zammad (Open Source Ticket System)
Hosting: Own servers in Germany

Data for support requests:

• Name and email address
• Content of your request
• Time of communication
• Attachments (if submitted)

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment) or Art. 6 para. 1 lit. f GDPR (legitimate interest in customer service)

Storage period: Support requests are stored for 3 years for documentation purposes.

9. Data Security

We use the common SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser within the website visit. This is usually 256-bit encryption.

We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

10. Data Transfer to Third Countries

Insofar as we process data in a third country (i.e. outside the European Union or the European Economic Area) or this occurs in the context of using third-party services, this only happens if:

• an adequacy decision by the EU Commission exists (e.g. EU-US Data Privacy Framework)
• appropriate safeguards exist according to Art. 46 GDPR (e.g. EU standard contractual clauses)
• you have given explicit consent

Details about the safeguards and data transfers can be found in the respective sections on the individual services.

11. Changes to the Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your renewed visit.

12. Privacy Questions

If you have questions about data protection, please send us an email: info@getplinio.com

Last updated: October 2025