We take your privacy seriously

Privacy Policy

Last updated: 23 September 2026

Welcome to the website of aioneers Technologies GmbH ("aioneers", "we", "our" or "us").

Protecting the privacy of visitors, customers, applicants and business partners is an essential part of our corporate responsibility. We are committed to processing personal data in a lawful, fair and transparent manner and to ensuring an appropriate level of protection throughout its lifecycle.

This Privacy Policy explains how personal data is collected, used, disclosed, stored and otherwise processed when you visit our website or otherwise interact with us through our online services.

The Policy has been prepared in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR");
• the German Federal Data Protection Act (Bundesdatenschutzgesetz – "BDSG");
• and other applicable European and German data protection legislation.

This Privacy Policy applies exclusively to the website operated under

https://www.aioneers.com

and all associated online services made available through this website.

It does not apply to third-party websites that may be accessed through external links.

1. Definitions

Unless otherwise specified, terms used in this Privacy Policy shall have the meaning assigned to them in Article 4 GDPR.

For the purposes of this Policy:

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on Personal Data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure or destruction.

Controller means the legal entity determining the purposes and means of processing Personal Data.

Processor means a third party processing Personal Data on behalf of the Controller.

Data Subject means the natural person whose Personal Data is processed.

2. Scope of this Privacy Policy

This Privacy Policy applies whenever Personal Data is processed through the website operated by aioneers Technologies GmbH.

Depending on how you interact with our website, Personal Data may be processed when you:

• access our website;
• browse website content;
• contact us through online forms;
• communicate with us via email;
• apply for employment;
• interact with website functionality;
• manage cookie preferences.

Additional privacy notices may apply where specific services require supplementary information.

3. Controller

The Controller responsible for the processing of Personal Data within the meaning of Article 4(7) GDPR is:

aioneers Technologies GmbH

Q7 24 – Business Center Mannheim

68161 Mannheim

Germany

Telephone:

+49 621 405 48360

Email: info@aioneers.com

Website: https://www.aioneers.com

The Controller determines the purposes and means of processing described in this Privacy Policy.

4. Data Protection Officer

aioneers Technologies GmbH has appointed a Data Protection Officer.

Questions relating to this Privacy Policy, the processing of Personal Data or the exercise of data subject rights may be addressed at any time to:

Data Protection Officer

aioneers Technologies GmbH

Q7 24 – Business Center Mannheim

68161 Mannheim

Germany

Email: dpo@aioneers.com

5. Principles Governing the Processing of Personal Data

All Personal Data is processed in accordance with the principles laid down in Article 5 GDPR.

Accordingly, Personal Data is:

• processed lawfully, fairly and transparently;
• collected for specified, explicit and legitimate purposes;
• limited to what is necessary for those purposes;
• kept accurate and up to date;
• retained only for as long as necessary;
• processed securely through appropriate technical and organisational measures.

These principles apply to every processing activity described in this Privacy Policy.

6. Categories of Personal Data

Depending on the purpose of processing and the interaction with our website, we may process the following categories of Personal Data.

Technical Data

Including:

• IP address;
• browser type and version;
• operating system;
• device type;
• requested resources;
• HTTP status information;
• referrer URL;
• date and time of access;
• log information.

Identification Data

Including:

• first name;
• last name;
• company;
• job title.

Contact Data

Including:

• email address;
• telephone number;
• postal address;
• country.

Communication Data

Including:

• enquiries;
• correspondence;
• attachments;
• communication history.

Recruitment Data

Where applicants submit information through our recruitment process:

• CV;
• cover letter;
• employment history;
• qualifications;
• certificates;
• references;
• additional documents voluntarily submitted.

Special categories of Personal Data within the meaning of Article 9 GDPR should not be submitted unless necessary for the recruitment process or otherwise required by law.

7. Legal Bases for Processing

The legal basis applicable to a particular processing activity depends on the purpose for which Personal Data is processed.

Where applicable, processing is based on one or more of the following provisions of the GDPR.

Consent

Article 6(1)(a) GDPR

Processing based on the freely given consent of the Data Subject.

Where consent is required, it may be withdrawn at any time with effect for the future.

Performance of a Contract

Article 6(1)(b) GDPR

Processing necessary for the performance of a contract or for taking steps at the request of the Data Subject prior to entering into a contract.

Compliance with Legal Obligations

Article 6(1)(c) GDPR

Processing necessary for compliance with legal obligations to which aioneers Technologies GmbH is subject.

Legitimate Interests

Article 6(1)(f) GDPR

Processing necessary for the purposes of the legitimate interests pursued by aioneers Technologies GmbH or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject.

Where processing is based on legitimate interests, we have carried out an assessment to ensure that:

• the processing is necessary;
• the processing is proportionate;
• appropriate safeguards are implemented;
• the interests of Data Subjects are respected.

8. Recipients of Personal Data

Access to Personal Data is limited to those employees who require such information in order to perform their professional responsibilities.

Depending on the purpose of processing, Personal Data may also be processed by carefully selected service providers acting on our behalf as processors pursuant to Article 28 GDPR.

Where processors are engaged, appropriate contractual safeguards are implemented to ensure that Personal Data is processed exclusively in accordance with our instructions and applicable data protection legislation.

Further information regarding our processors is provided in the relevant sections of this Privacy Policy.

9. Processing of Personal Data in Connection with the Operation of Our Website

9.1 General

Whenever you visit our website, certain technical information is processed automatically to establish a connection between your device and our web infrastructure and to provide the requested content securely and reliably.

This processing is essential for the operation of the website and for maintaining the confidentiality, integrity and availability of our information systems.

Unless otherwise stated in this Privacy Policy, this processing is not intended to identify individual visitors.

9.2 Server Log Files

Our web servers automatically record technical information transmitted by your browser whenever you access the website.

Depending on your browser configuration and the requested resources, the following information may be processed:

• IP address
• Date and time of access
• Requested URL
• HTTP status code
• Browser type and browser version
• Operating system
• Device type
• Referrer URL (where transmitted)
• Host name of the requesting device
• Volume of data transferred

The information is processed exclusively for technical and security purposes.

Server log files are not combined with other personal data unless necessary to investigate security incidents, prevent misuse or comply with legal obligations.

9.3 Purposes of Processing

Technical information is processed in order to:

• establish and maintain secure network connections;
• provide requested website content;
• ensure website availability;
• detect and prevent cyberattacks and fraudulent activities;
• analyse technical faults;
• optimise system performance;
• protect the integrity of our IT infrastructure.

Without this processing, the website cannot be provided securely.

9.4 Legal Basis

Processing is based on Article 6(1)(f) GDPR.

Our legitimate interest consists of ensuring the secure, reliable and efficient operation of our website, protecting our systems against misuse and maintaining network security.

9.5 Retention

Server log files are retained only for as long as necessary to fulfil the purposes described above.

Unless required for security investigations or legal obligations, server log files are generally deleted within seven (7) days.

10. Website Infrastructure

10.1 Website Platform

Our website is operated using Odoo Online, which provides the technical platform supporting the operation and administration of our website.

The platform supports, among other things:

• website hosting;
• content management;
• page administration;
• contact forms;
• recruitment pages;
• website analytics integration;
• operational website functionality.

Where visitors submit information through the website, the data is processed within the Odoo platform solely for the purposes described in this Privacy Policy.

10.2 Cloudflare

To improve the security, availability and resilience of our website, we use services provided by Cloudflare, Inc.

Cloudflare provides technical services including:

• network protection;
• distributed denial-of-service (DDoS) mitigation;
• secure delivery of website content;
• optimisation of website performance;
• protection against malicious traffic.

For these purposes, Cloudflare may process technical connection information such as IP addresses, browser information and request metadata.

Cloudflare acts as our processor where personal data is processed on our behalf.

10.3 Security Monitoring

To ensure the continuous availability and security of our website, we monitor technical events relating to website performance and system integrity.

This may include:

• availability monitoring;
• technical diagnostics;
• performance monitoring;
• security monitoring;
• incident detection.

Information processed for these purposes is limited to what is necessary to ensure the secure operation of our online services and is not used to create visitor profiles.

10.4 Legal Basis

Processing in connection with the operation, administration and protection of our website is based on Article 6(1)(f) GDPR.

Our legitimate interest is to provide a secure, stable and resilient online service while protecting our systems against technical failures and cyber threats.

11. Communications with Website Visitors

Visitors may contact aioneers Technologies GmbH through various communication channels, including:

• contact forms;
• email;
• telephone;
• general enquiries.

We process only the personal data necessary to respond to the communication and manage the resulting business relationship.

11.1 Categories of Personal Data

Depending on the communication channel used, we may process:

Identification Data

• First name
• Last name
• Company
• Job title

Contact Data

• Email address
• Telephone number
• Country

Communication Data

• Subject
• Message
• Attachments
• Communication history

Technical Data

Where communications are initiated through our website:

• IP address
• Date and time of submission
• Browser information
• Device information

11.2 Purpose of Processing

Personal data is processed in order to:

• respond to enquiries;
• provide requested information;
• arrange meetings or demonstrations;
• prepare quotations;
• establish contractual relationships;
• perform contractual obligations;
• maintain business relationships.

11.3 Legal Basis

Where communications relate to the initiation or performance of a contract, processing is based on Article 6(1)(b) GDPR.

For all other enquiries, processing is based on Article 6(1)(f) GDPR.

Our legitimate interest consists of maintaining effective communication with customers, business partners and prospective clients.

11.4 Recipients

Access to communication data is limited to employees who require the information to process the enquiry.

Depending on the subject matter, personal data may be shared internally with:

• Sales
• Consulting
• Customer Success
• Marketing
• Human Resources
• Finance
• IT Administration

Where external providers support the operation of our communication systems, such providers process personal data solely on our behalf and in accordance with applicable data protection legislation.

11.5 Retention

Communication records are retained only for as long as necessary to process the enquiry, maintain any resulting business relationship and comply with applicable legal retention requirements.

12. Processing of Applicant Data

aioneers Technologies GmbH processes applicant data exclusively for recruitment purposes.

Applications submitted through our website are administered using Personio.

12.1 Categories of Personal Data

Depending on the application submitted, we may process:

• identification data;
• contact information;
• curriculum vitae;
• cover letter;
• employment history;
• qualifications;
• certificates;
• references;
• additional documents voluntarily submitted by the applicant.

Applicants should refrain from providing special categories of personal data unless such information is required for the application or processing is otherwise permitted under applicable law.

12.2 Purposes of Processing

Applicant data is processed for the purposes of:

• evaluating applications;
• assessing professional qualifications;
• conducting interviews;
• communicating with applicants;
• making recruitment decisions;
• preparing employment contracts where applicable;
• complying with employment law obligations.

No automated decision-making within the meaning of Article 22 GDPR takes place as part of the recruitment process.

12.3 Legal Basis

Applicant data is processed pursuant to:

• Article 6(1)(b) GDPR;
• Section 26 BDSG, where applicable to the establishment of an employment relationship.

Where applicants voluntarily consent to inclusion in a talent pool, processing is additionally based on Article 6(1)(a) GDPR.

12.4 Retention

Where no employment relationship is established, applicant data is generally retained for six (6) months following completion of the recruitment process, unless:

• legal obligations require longer retention;
• legal claims need to be established, exercised or defended; or
• the applicant has consented to longer retention for future vacancies.

Where employment is established, applicant data becomes part of the personnel record and is processed in accordance with applicable employment legislation and internal retention schedules.

13. Website Analytics

13.1 Purpose of Website Analytics

Understanding how visitors use our website enables us to continuously improve its functionality, usability, accessibility and technical performance.

For this purpose, aioneers Technologies GmbH uses Plausible Analytics, integrated through the Odoo Online platform.

Plausible Analytics is designed as a privacy-focused analytics solution that minimises the processing of personal data. Unlike traditional analytics platforms, it does not support behavioural advertising or cross-site tracking and is intended to provide aggregated website statistics.

Depending on the technical configuration and applicable legal requirements, analytics processing may operate as a cookieless implementation or may be activated only after the visitor has provided consent through our Consent Management Platform.

13.2 Categories of Personal Data

Depending on the technical implementation, analytics processing may include:

• pages visited;
• date and time of access;
• referring websites;
• browser type and version;
• operating system;
• device type;
• approximate geographic region;
• language settings;
• website performance metrics.

Analytics information is processed in aggregated form to understand general website usage.

We do not use website analytics to create advertising profiles or to identify individual visitors.

13.3 Purpose of Processing

Analytics information is processed exclusively to:

• understand website usage;
• improve website navigation;
• optimise website content;
• identify technical issues;
• monitor website performance;
• improve the user experience.

Analytics data is not used for behavioural advertising.

13.4 Legal Basis

The legal basis for analytics processing depends on the technical configuration implemented on our website.

Where analytics is implemented as a privacy-friendly, cookieless analytics solution that does not require consent under applicable law, processing is carried out on the basis of Article 6(1)(f) GDPR.

Where the technical implementation or applicable legal requirements require visitor consent before analytics is activated, processing is carried out only after consent has been obtained pursuant to Article 6(1)(a) GDPR.

13.5 Retention

Analytics information is retained only for as long as necessary to produce aggregated website statistics and improve our online services.

14. Cookies and Similar Technologies

14.1 General

Our website uses cookies and comparable technologies where necessary to provide website functionality, maintain security, remember user preferences and, where applicable, support website analytics.

Cookies are small text files stored on your device by your web browser.

Depending on their purpose, cookies may constitute personal data within the meaning of the GDPR.

14.2 Categories of Cookies

Strictly Necessary Cookies

Strictly necessary cookies are essential for the operation of our website.

These cookies enable functions such as:

• website security;
• page navigation;
• session management;
• storage of consent preferences;
• protection against misuse.

Strictly necessary cookies cannot be disabled through our Consent Management Platform.

Processing is based on Article 6(1)(f) GDPR together with the applicable provisions governing technically necessary storage technologies.

Functional Cookies

Where functional cookies are used, they enable enhanced website functionality, such as remembering visitor preferences.

Functional cookies are activated only where permitted under applicable law.

Analytics Technologies

Where analytics technologies require consent, they are activated only after valid consent has been obtained.

Where analytics operates without cookies and does not require consent under applicable law, processing takes place as described in Section 13.

14.3 Consent Management

We use CookieScript as our Consent Management Platform.

CookieScript enables visitors to:

• accept cookies;
• reject optional cookies;
• configure individual categories of cookies;
• modify previously granted consent;
• withdraw consent at any time.

Where required by law, optional cookies and comparable technologies are activated only after valid consent has been obtained.

CookieScript additionally records consent decisions in order to demonstrate compliance with applicable legal obligations.

14.4 Managing Cookies

Visitors may configure their cookie preferences at any time using the Cookie Settings available on our website.

Most web browsers additionally allow users to:

• delete cookies;
• block cookies;
• restrict third-party cookies;
• receive notifications before cookies are stored.

Please note that disabling technically necessary cookies may affect the functionality of the website.

14.5 Cookie Declaration

Detailed information regarding the cookies currently used on our website, including their purpose, storage period and provider, is available through our Cookie Declaration.

The Cookie Declaration forms part of our Consent Management Platform and is updated automatically to reflect the technologies currently used on our website.

15. Service Providers

To support the operation of our website and our business processes, we engage carefully selected external service providers.

Where these providers process personal data on our behalf, they act as processors within the meaning of Article 28 GDPR.

Appropriate contractual safeguards, including Data Processing Agreements where required, are implemented before processors receive access to personal data.

Our current website processors include:

We periodically review our processors to ensure that they continue to provide appropriate technical and organisational measures to protect personal data.

16. International Data Transfers

Some of our processors may process personal data outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are implemented in accordance with Chapter V GDPR.

Depending on the recipient, these safeguards may include:

• an adequacy decision adopted by the European Commission;
• the European Commission's Standard Contractual Clauses;
• supplementary contractual, technical and organisational safeguards;
• other transfer mechanisms recognised under applicable data protection legislation.

Before engaging processors that may transfer personal data outside the EEA, we assess:

• the necessity of the transfer;
• the level of protection available;
• contractual safeguards;
• technical and organisational measures.

Further information regarding international data transfers may be obtained by contacting us using the contact details provided in this Privacy Policy.

17. Security Measures

aioneers Technologies GmbH implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

Such measures include, where appropriate:

• access controls;
• authentication mechanisms;
• encryption in transit;
• network security measures;
• monitoring of security events;
• role-based access controls;
• regular review of processors;
• internal security policies and procedures.

18. Retention of Personal Data

18.1 General

Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, to resolve disputes or to establish, exercise or defend legal claims.

Retention periods are determined taking into account:

• the purpose of the processing;
• statutory retention obligations;
• contractual obligations;
• limitation periods under applicable law;
• legitimate business requirements.

Where Personal Data is no longer required, it is securely deleted, anonymised or irreversibly aggregated, unless continued retention is required by law.

18.2 Typical Retention Periods

Unless a different retention period is specified in this Privacy Policy or required by law, the following retention periods generally apply.

Retention periods may be extended where necessary to establish, exercise or defend legal claims or where required by applicable law.

19. Rights of Data Subjects

Under the GDPR, you have the following rights regarding the processing of your Personal Data.

19.1 Right of Access

You have the right to obtain confirmation as to whether we process your Personal Data.

Where this is the case, you may request access to:

• the Personal Data processed;
• the purposes of processing;
• the categories of Personal Data;
• the recipients or categories of recipients;
• the envisaged retention period;
• the source of the data, where it was not collected directly from you;
• information regarding automated decision-making, where applicable.

19.2 Right to Rectification

You have the right to request the correction of inaccurate Personal Data and the completion of incomplete Personal Data without undue delay.

19.3 Right to Erasure

Subject to the conditions laid down in Article 17 GDPR, you have the right to request the deletion of your Personal Data.

This right is subject to statutory retention obligations and other legal grounds permitting or requiring continued processing.

19.4 Right to Restriction of Processing

You may request that processing of your Personal Data be restricted under the conditions set out in Article 18 GDPR.

19.5 Right to Data Portability

Where processing is based on consent or on a contract and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format.

Where technically feasible, you may request the direct transmission of such data to another controller.

19.6 Right to Object

Where processing is based on Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.

If you object, we will cease processing your Personal Data unless compelling legitimate grounds exist that override your interests, rights and freedoms or unless processing is necessary for the establishment, exercise or defence of legal claims.

19.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

19.8 Exercising Your Rights

Requests relating to the exercise of your rights may be submitted using the contact details provided in Section 22 of this Privacy Policy.

To protect your Personal Data, we may request appropriate information to verify your identity before responding to your request.

20. Right to Lodge a Complaint

If you believe that the processing of your Personal Data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

The supervisory authority generally responsible for aioneers Technologies GmbH is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Lautenschlagerstraße 20

70173 Stuttgart

Germany

Website: https://www.baden-wuerttemberg.datenschutz.de

The right to lodge a complaint is without prejudice to any other administrative or judicial remedies available to you.

21. Amendments to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect:

• changes in applicable legislation;
• regulatory guidance;
• judicial decisions;
• technological developments;
• changes to our website;
• changes to our processing activities;
• organisational changes.

The most current version of this Privacy Policy is always available on our website.

The "Last updated" date displayed at the beginning of this Privacy Policy indicates the date on which the current version became effective.

Where required by applicable law, we will provide appropriate notice of material changes.

22. Contact

If you have any questions regarding this Privacy Policy or the processing of your Personal Data, please contact:

aioneers Technologies GmbH

Q7 24 – Business Center Mannheim

68161 Mannheim

Germany

Telephone

+49 621 405 48360

Email info@aioneers.com

Website https://www.aioneers.com

Data Protection Officer

Questions concerning data protection or the exercise of your rights under the GDPR may be addressed to our Data Protection Officer:

Email: dpo@aioneers.com

Annex A – Categories of Processors

The following categories of processors currently support the operation of our website and related services:

Processors are engaged only where necessary for the respective processing activity and are contractually required to process Personal Data in accordance with applicable data protection legislation.

The list of processors may change over time as service providers are added, removed or replaced.