The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be personally identified with you. Detailed information on data protection can be found in our data privacy statement below this text.
Data Collection on this Website - Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Notice Regarding the Responsible Party" in this privacy policy.
How do we collect your data?
Your data is collected in two ways. Firstly, it is collected by you providing it to us, such as when you enter it into a contact form.
Other data is collected automatically or with your consent when you visit the website through our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or the time of the page visit). The collection of this data occurs automatically as soon as you enter this website.
For what purposes do we use your data?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to request information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke it at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. In addition, you have the right to file a complaint with the relevant supervisory authority.
You can contact us at any time regarding this and other questions on the topic of data protection.
Analytics tools and third-party tools
When visiting this website, your browsing behavior may be statistically evaluated. This primarily occurs with so-called analytics programs.
Detailed information on these analytics programs can be found in the following privacy policy.
We host the content of our website with the following provider:
This website is externally hosted. The personal data collected on this website is stored on the servers of the hosting provider(s). This may include IP addresses, contact requests, metadata and communication data, contract data, contact data, names, website accesses, and other data generated through a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online offering securely, quickly, and efficiently via a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG, as long as the consent includes the storage of cookies or access to information in the user's device (e.g., device fingerprinting) under TDDDG. The consent can be revoked at any time.
Our hosting provider will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.
We use the following hosting provider(s):
Vercel, Inc. 340 S Lemon Ave #4133 Walnut, CA 91789 USA
We have concluded a data processing agreement (DPA) to use the above service. This is a legally required contract that ensures the provider processes personal data of our website visitors only according to our instructions and in compliance with GDPR.
The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can personally identify you. This privacy policy explains what data we collect and for what purposes we use it. It also explains how and for what purposes this happens.
Please note that data transmission over the internet (e.g., when communicating via email) can have security gaps. A complete protection of data from third-party access is not possible.
Notice Regarding the Responsible Party
The responsible party for data processing on this website is:
Patrick Wenk - Bloherfelder Str. 112 26129 Oldenburg
Email: hello@faceforge.ai
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Data Retention Period
Unless a specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons cease to apply.
General Information on the Legal Bases of Data Processing on this Website
If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, provided special categories of data under Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is additionally based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access information on your device (e.g., via device fingerprinting), data processing is also based on § 25(1) TDDDG. The consent can be revoked at any time. If your data is necessary for the fulfillment of a contract or for pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. We also process your data if it is necessary to comply with a legal obligation based on Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The specific legal bases for each individual case will be discussed in the following sections of this privacy policy.
Recipients of Personal Data
In the course of our business activities, we collaborate with various external entities. In some cases, the transfer of personal data to these external entities is required.
We only transfer personal data to external entities if this is necessary for fulfilling a contract, if we are legally obligated to do so (e.g., data transfer to tax authorities), if we have a legitimate interest in the transfer according to Art. 6(1)(f) GDPR, or if another legal basis allows the data transfer. When using processors, we only transfer personal data of our customers based on a valid data processing agreement. In the case of joint processing, a joint processing contract will be concluded.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Specific Cases and Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES, INCLUDING PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).
Right to Lodge a Complaint with the Relevant Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the location of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process based on your consent or in the performance of a contract, in a structured, commonly used, and machine-readable format, or to request the transfer of such data to another controller, where technically feasible.
Right to Access, Rectification, and Deletion
You have the right under applicable law to obtain, at any time and free of charge, information about your stored personal data, its origin, recipients, and the purpose of data processing, and, if necessary, a right to rectification or deletion of this data. For this purpose and for further questions on the subject of personal data, you can contact us at any time.
Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time regarding this matter. The right to restrict processing exists in the following cases:
If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of the verification process, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion. If we no longer need your personal data, but you require it to assert, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion. If you have lodged an objection under Art. 21(1) GDPR, a balance must be made between your interests and ours. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may only be processed – aside from being stored – with your consent or for the assertion, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock icon in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to Advertising Emails
We hereby object to the use of contact details published in the context of the legal notice requirement to send advertising and informational materials that have not been explicitly requested. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.
Nature and Scope of Processing
If you submit inquiries to us via the contact form, your details from the form, including the contact details you provide, will be stored with us for the purpose of processing the inquiry and for any follow-up questions. We do not pass on this data without your consent.
Purpose and Legal Basis
The processing of the data entered into the contact form is based on Art. 6(1)(b) GDPR to fulfill pre-contractual measures and based on your consent according to Art. 6(1)(a) GDPR. We have concluded a data processing agreement (DPA) with the provider of the contact form service to ensure the security of your data.
Retention Period
Data collected via the contact form will be deleted as soon as the purpose for storing it no longer applies or if you request deletion. Statutory retention periods remain unaffected.
Our website uses cookies, including a cookie for Google Tag Manager, to analyze user behavior and deliver targeted advertising. Cookies are small text files stored on your device and serve various functions. Some cookies are necessary for the operation of the website, while others are used to analyze and optimize advertisements or to statistically evaluate website usage.
Use of Cookies:
You can adjust your cookie settings at any time via our cookie banner or in your browser settings and revoke your consent. More information can be found in our Cookie Policy.
You can insert this section directly under the "Data Collection on this Website" to complement the information about automatic data collection logically.
Nature and Scope of Processing
Our website uses Supabase, a service from Supabase Inc. to provide our backend services and store user data. Supabase processes user data such as contact information and orders.
Purpose and Legal Basis
The processing by Supabase is based on Art. 6(1)(b) GDPR (contract fulfillment) and, where necessary, based on your consent according to Art. 6(1)(a) GDPR. A data processing agreement (DPA) with Supabase Inc. ensures that personal data of our users is processed in accordance with GDPR.
Retention Period
Data processed by Supabase is subject to Supabase's internal policies. More information can be found in their privacy policy: Supabase Privacy.
Nature and Scope of Processing
Our website allows payments via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you pay via PayPal, the payment details you provide will be transmitted to PayPal.
Purpose and Legal Basis
The transmission of your data to PayPal is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing to fulfill a contract). You can revoke your consent at any time. Past data processing remains unaffected by a revocation.
Retention Period
More information on data retention can be found in PayPal's privacy policy: PayPal Privacy.
Nature and Scope of Processing
We also use Stripe, a service provided by Stripe Inc., to process payments. Stripe processes payment data, including credit card information and contact details, to execute transactions.
Purpose and Legal Basis
The processing by Stripe is based on Art. 6(1)(b) GDPR (contract fulfillment) and Art. 6(1)(a) GDPR (consent). We have concluded a data processing agreement (DPA) with Stripe Inc. to ensure the secure and GDPR-compliant processing of your payment data.
Retention Period
More information on data retention can be found in Stripe's privacy policy: Stripe Privacy.
Nature and Scope of Processing
We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertisements to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.
Google Ads collects information about user behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertisements based on behavioral profiles and geographic location. The provider receives your IP address and other identifiers, such as your user agent.
If you are registered with a Google Ireland Limited service, Google Ads may associate the visit with your account. Even if you are not registered with Google Ireland Limited or not logged in, the provider may still find and store your IP address and other identifiers.
The transmission of your data occurs in this case to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose and Legal Basis
The use of Google Ads is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. Data transmission to the USA is based on Art. 45(1) GDPR in conjunction with the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Retention Period
The specific retention period of the processed data is determined by Google Ireland Limited. More information can be found in the privacy policy for Google Ads: Google Privacy.
Nature and Scope of Processing
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and Legal Basis
The use of Google Tag Manager is based on your consent according to Art. 6(1)(a) GDPR and §25(1) TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. Data transmission to the USA is based on Art. 45(1) GDPR in conjunction with the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Retention Period
The specific retention period of the processed data is determined by Google Ireland Limited. More information can be found in the privacy policy for Google Tag Manager: Google Tag Manager Policy.
Consent Mode
Our website uses Google’s Consent Mode, which allows us to adjust the way our website collects data based on user preferences. Consent Mode respects user choices by adapting data collection methods. If you do not consent to data collection for analytics or advertising, we ensure that all data is only collected in anonymized form, and advertising cookies are disabled. You can modify your preferences at any time via our cookie banner.
Our website is hosted by Vercel. Vercel stores user data such as IP addresses and metadata to ensure the website's performance. Data processing by Vercel is based on Art. 6(1)(f) GDPR (legitimate interest). We have concluded a data processing agreement (DPA) with Vercel to ensure GDPR-compliant processing of your data.
More information can be found in Vercel's privacy policy: Vercel Privacy.
Type and Scope of Processing
We use Posthog, an analytics tool from Posthog Inc., to evaluate user behavior on our website. Posthog does not collect personal data and operates without using cookies if they are declined. Only aggregated, non-personal data is processed to analyze the usage of our website and improve its functionality.
Purpose and Legal Basis
The use of Posthog is based on our legitimate interest under Art. 6(1)(f) GDPR to improve the functionality and user experience of our website. Since no personal data is collected, consent under the GDPR or TDDG is not required.
Storage Duration
As Posthog does not collect personal data, there is no individual retention period for user data. For more information, please refer to the Posthog Privacy Policy: Posthog Privacy.
If you choose to log in to our website via Google, certain personal information (such as your name and email address) will be transferred from Google to us for the purpose of account registration and authentication. We use this information solely to authenticate your account, ensure a seamless login experience, and personalize your experience on our website. This data is stored securely and in compliance with our data protection standards.
As a data subject, you have the right to lodge a complaint with a supervisory authority in the event of a violation of data protection law, particularly in the Member State of your habitual residence, your place of work, or the location of the alleged violation. The following link provides a list of data protection officers and their contact details: Data Protection Officers.
You have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, and to have this data transmitted to another controller, where technically feasible (Art. 20 GDPR)."