Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

pi-optimal UG (haftungsbeschränkt)
Unter den Linden 15
72762 Reutlingen
Germany

Managing Director: Jochen Luithardt
Commercial Register: Stuttgart District Court HRB 797217

For data protection inquiries, please contact us at hello@pi-optimal.com

Data Protection Officer

We are not required to appoint a Data Protection Officer under Art. 37 GDPR or § 38 BDSG and have not appointed one. Please address all data protection matters to the contact above.

2. Hosting and Server Log Files

This website is a static site hosted on Azure Static Web Apps. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The application region is Azure West Europe (Netherlands). Microsoft processes data on our behalf under a standard data processing agreement (DPA) in accordance with Art. 28 GDPR.

When you visit the site, your browser necessarily transmits data that is recorded in server log files: your IP address, the date and time of the request, the file requested, the referring page, and your browser and operating system version. This data is required to deliver the site and to detect and defend against attacks. We do not merge it with other data and we do not use it to identify you. Server log files are stored for a maximum of 90 days and then deleted automatically.

All data we store ourselves (log data and email) remains in the European Union. Delivery of the website itself is handled by the globally distributed network built into Azure Static Web Apps: a visitor located outside the EU is served by the nearest Microsoft region, which may lie outside the EEA, and the access data listed above is processed in that region. The EU Standard Contractual Clauses (Art. 46 GDPR) apply to any such processing outside the EEA.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in providing and securely operating our website).

3. Data You Actively Provide

This website contains no contact form, no newsletter signup and no registration form, and it has no server-side application logic. We therefore do not collect any data that you enter on this site.

If you contact us by email at the address given above, we process the data in your message in order to answer it: your email address, your name, company and position where you give them, the content of your message, and its metadata (date, time, subject line). The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries addressed to us). General enquiries are kept for three years or until you ask us to delete them, whichever comes first, unless a statutory retention period requires us to keep them longer.

Buttons that book an appointment ("Book a demo", "Get a sneak preview", "Meet us at DMEXCO") lead to our own appointment pages, hosted on Microsoft Bookings inside our Microsoft 365 tenant; Microsoft processes that data on our behalf under Art. 28 GDPR. Nothing is transmitted while you are on this site: the connection is made only once you follow the link. If you then book an appointment, we process the name, email address and answers you provide in order to arrange and hold the meeting (Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR where the meeting does not relate to a contract), and we keep that record for three years or until you ask us to delete it. The login link currently leads to our application at beta.pi-automate.com. Our LinkedIn link and the customer logos work the same way: they are plain links to someone else's site, and that operator's own privacy policy applies from the point you follow one. The Inter typeface is served from our own domain, so visiting this site opens no connection to Google Fonts.

4. Analytics and Session Replay

With your explicit consent, we use PostHog to understand how visitors use this website and to improve the landing page. PostHog, Inc. processes this data on our behalf under a data processing agreement in accordance with Art. 28 GDPR. We use the separate PostHog Cloud EU project for this website; its data is hosted in Frankfurt, Germany.

The following categories of data may be processed:

• a random anonymous visitor and session identifier, event timestamp, and consented session information;
• semantic website events such as qualified section views, navigation, calls-to-action shown or clicked, FAQ opens, case-study downloads, and interactions with the How-it-works section;
• the page path, referring domain, and separate campaign parameters such as UTM source, medium and campaign;
• browser, operating system, device class, language, viewport and screen size; and
• approximate country and first-level region derived during ingestion. The source IP address is discarded and is not stored with the event.

We do not send names, email addresses, phone numbers, form answers, booking details, or other free-text content to PostHog. Automatic event capture and anonymous person profiles are disabled. Before an event leaves the browser, query-string values and fragments are removed from page and session-entry URLs, referrers are reduced to their origin, and browser timezone fields are removed; the separate campaign fields listed above remain available. Fine location fields such as city, postal code, coordinates and GeoIP timezone are removed during ingestion. Session replay is used only after consent: all inputs and all page text are masked, and console logs, request headers, request bodies and captured network payloads are disabled.

The legal basis is your consent under Art. 6(1)(a) GDPR, and § 25(1) TDDDG for storing PostHog identifiers on your device. Providing this data is voluntary and is not required to use the website. We do not use it for automated decision-making or to identify you.

You can grant or withdraw consent at any time via the cookie banner or the "Cookie settings" link in the footer. Withdrawal does not affect the lawfulness of processing already carried out. When you withdraw consent, we stop analytics and replay and delete PostHog's cookies and local storage entries from your browser.

We retain analytics events for no longer than 24 months. PostHog does not currently provide an automatic per-project expiry setting for Product Analytics events, so we enforce this limit by rotating and deleting the dedicated website project no later than 24 months after its first event. Masked session recordings are deleted automatically after 30 days.

More information about PostHog's security, privacy safeguards and subprocessors is available in the PostHog Trust Center and privacy policy. PostHog Trust Center · PostHog Privacy Policy

5. Cookies and Local Storage

This site sets no cookies unless you consent to PostHog. To remember your choice, we store one record in your browser's local storage containing your decision, its timestamp and the version of the notice you saw. This record is strictly necessary to honour your decision, is never transmitted to us, and expires after 365 days, after which you are asked again.

If you consent to PostHog, PostHog sets its own cookies and local storage entries to recognise your session. Rejecting, or later withdrawing, removes them.

Legal Basis: § 25(2) no. 2 TDDDG for storing your consent decision (strictly necessary to provide a service you requested); § 25(1) TDDDG together with Art. 6(1)(a) GDPR for everything set by PostHog.

6. Storage Duration

We store personal data only for as long as it is needed for the purpose it was collected for, or for as long as a statutory retention period requires. In detail: server log files are stored for a maximum of 90 days; your consent decision is stored in your browser for 365 days; PostHog analytics events are retained for no longer than 24 months through the project-rotation process described above, and masked session recordings are deleted automatically after 30 days; email correspondence is kept for three years or until you ask for its deletion, unless a commercial or tax retention period (generally 6 or 10 years under §§ 257 HGB, 147 AO) applies.

7. Protection of Minors

This website is aimed at a business audience and is not intended for use by anyone under 16 years of age. We do not knowingly collect personal data from people under 16. If we become aware that we have collected such data without the consent of a parent or legal guardian, we will delete it promptly. If you believe this has happened, please contact us at hello@pi-optimal.com.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Object (Art. 21 GDPR)
• Right to Withdraw Consent (Art. 7(3) GDPR)
• Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website. You are under no statutory or contractual obligation to provide us with any data in order to use this website.

9. Contact

For questions about data protection, please contact:

pi-optimal UG (haftungsbeschränkt)
Jochen Luithardt
Unter den Linden 15
72762 Reutlingen
Germany

Email: hello@pi-optimal.com

We will respond to your request without undue delay, and in any event within one month of receiving it.

10. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Phone: +49 711 615541-0
poststelle@lfdi.bwl.de

https://www.baden-wuerttemberg.datenschutz.de

11. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to reflect changes in the law or in how the site works. Significant changes will be announced on the website; minor clarifications are made without separate notice. The "Last Updated" date at the top of this document always shows when it last changed, so please check it from time to time.