Skip to content
Book your strategy call

We Take Your Privacy Seriously

Updated: February 15, 2026

Privacy Policy

Thank you for visiting our website www.stratavo.ai and for your interest in our company!

We take the protection of your personal data, such as date of birth, name, phone number, address, etc., very seriously.

1) General Information

The purpose of this privacy policy is to inform you about how we process personal data that we collect when you visit our website. Our data protection practices are guided by the legal requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This privacy policy serves to fulfill the information obligations under the GDPR, in particular pursuant to Articles 13, 14 et seq. GDPR.

2) Controller

The controller within the meaning of Article 4(7) GDPR is the person who alone or jointly with others determines the purposes and means of the processing of personal data.

The controller for our website is:

stratavo GmbH
Wittland 7e
22589 Hamburg
Germany

Email: info@stratavo.ai

2a) Hosting — STRATO

The provider is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter "STRATO"). When you visit our website, STRATO collects various log files including your IP addresses. For details, please refer to STRATO's privacy policy: https://www.strato.de/datenschutz/

The use of STRATO is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be revoked at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law that ensures STRATO processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3) Provision of the Website and Creation of Log Files

Each time our website is accessed, data and information about the device used (e.g., computer, smartphone, tablet, etc.) are automatically collected.

What personal data is collected and to what extent is it processed?

  • Information about the browser type and version used
  • Operating system of the device
  • Hostname of the accessing computer
  • IP address of the device
  • Date and time of access
  • Websites and resources (images, files, other page content) that were accessed
  • Websites from which the user's system reached our website (referrer tracking)
  • Notification of whether the access was successful
  • Volume of data transferred

This data is stored in the log files of our system. It is not stored together with personal data of individual users, so that identification is not possible.

a) Legal basis: Article 6(1)(f) GDPR (legitimate interest)
b) Purpose: Ensuring the provision, security, and optimization of the website, as well as error analysis and abuse prevention.
c) Storage period: Maximum one week, followed by automatic deletion.
d) Right to object: You have the right at any time, pursuant to Article 21 GDPR, to object to the processing for reasons arising from your particular situation.

4) Special Features of the Website

Our website offers various features during the use of which personal data is processed.

i) Application Form

  • Processing: Data from form fields and uploaded files
  • Legal basis: Article 6(1)(b) GDPR (pre-contractual measures)
  • Purpose: Processing of your application
  • Storage period: Deletion no later than 6 months after, if no employment relationship is established
  • Note: Required fields are mandatory; otherwise, processing is not possible

ii) Contact Forms

  • Processing: Information from form fields (pseudonyms are also possible)
  • Legal basis: Article 6(1)(f) GDPR (legitimate interest)
  • Purpose: Processing of your contact inquiry
  • Storage period: Immediate deletion upon completion, unless statutory retention obligations apply
  • Note: Use is voluntary

iii) Newsletter Form

  • Processing: Email address, possibly additional data
  • Legal basis: Article 6(1)(a) GDPR (consent, double opt-in)
  • Purpose: Sending the newsletter
  • Storage period: Deletion after unsubscription or incomplete registration
  • Revocation: Possible at any time

5) Use of HubSpot

a) HubSpot CRM and Marketing Platform

This website was created with HubSpot and uses services provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA (hereinafter "HubSpot"). HubSpot is used as a content management system (CMS), for hosting forms, live chat, newsletter distribution, analytics and tracking purposes, and as a CRM system. Further information: https://legal.hubspot.com/privacy-policy

b) Data Processed

When using HubSpot, the following data is processed, among others:

  • IP address (anonymized where possible)
  • Device and browser information
  • Date and time of access
  • Pages visited and click behavior
  • Referrer URL
  • Data entered via forms (e.g., name, email address, message)
  • Chat content
  • Newsletter registration data
  • Cookie data (HubSpot tracking cookie)

c) Storage in the EU

Data collected via HubSpot is stored on servers within the European Union. We have activated EU data storage with HubSpot. If, in exceptional cases (e.g., for support purposes), data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework pursuant to Article 45 GDPR or on the basis of Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

d) HubSpot Tracking Code and Cookies

This website uses the HubSpot tracking code, which places cookies on your device. Specifically:

  • "hubspotutk" — used for visitor recognition (duration: 13 months)
  • "__hstc" — main tracking cookie for session information (duration: 13 months)
  • "__hssc" — captures sessions and page views (duration: 30 minutes)
  • "__hssrc" — detects session restart (duration: end of session)
  • "__hs_opt_in" — stores cookie consent decision

The use of the HubSpot tracking code is based on Article 6(1)(f) GDPR. We have a legitimate interest in analyzing user behavior to optimize our web offering. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user's device within the meaning of the TTDSG. Consent may be revoked at any time.

e) Data Processing Agreement

We have concluded a data processing agreement (Data Processing Agreement) with HubSpot. This ensures that HubSpot processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

6) Statistical Analysis — Web Tracking

a) Google Tag Manager

This website uses Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking and statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analyses. It serves solely for the management and deployment of the tools integrated through it. Further information: https://policies.google.com/privacy?hl=en

b) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA. Google is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy?hl=en

IP Anonymization

We have activated the IP anonymization function (IP masking) on this website. As a result, your IP address is truncated by Google within member states of the EU or in other contracting states of the EEA before being transmitted to the USA.

Legal Basis

The use of Google Analytics is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be revoked at any time.

Opt-Out

You can prevent data collection by Google Analytics by downloading and installing the browser add-on for the deactivation of Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en

Data Processing Agreement

We have concluded a data processing agreement with Google that meets the requirements of data protection authorities.

c) HubSpot Analytics

The integrated analytics functions of HubSpot are described in Section 5.

7) Cookies

We use cookies (session cookies, persistent cookies, and possibly third-party cookies).

Legal basis:

  • Essential cookies: Article 6(1)(f) GDPR (legitimate interest) in conjunction with Section 25(2) TTDSG (technically necessary cookies)
  • Additional cookies (analytics, marketing): Article 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TTDSG (cookies requiring consent). Consent may be revoked at any time.

Purpose:

Ensuring functionality, improving user-friendliness, statistical analysis, integration of external content.

Revocation:

Possible at any time via cookie settings in the browser or via our cookie banner.

You can configure your browser so that you are informed about the placement of cookies and allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

8) Integration of External Web Services

External content and services are integrated on our website. When such content is accessed, data (e.g., IP address, device information) is transmitted to the respective providers. The legal basis is your consent (Article 6(1)(a) GDPR) or our legitimate interest (Article 6(1)(f) GDPR).

Google Fonts

This website uses Google Fonts by Google Ireland Limited for the uniform display of fonts. When you access a page, your browser loads the required fonts into your browser cache. For this purpose, the browser you are using establishes a connection to Google's servers. This gives Google knowledge that our website was accessed via your IP address. The legal basis is Article 6(1)(f) GDPR. Further information: https://developers.google.com/fonts/faq

YouTube

Videos from the provider YouTube (Google Ireland Limited) are embedded on our website. When you visit a page with a YouTube video, a connection is established to YouTube's servers, and your IP address is transmitted. The legal basis is Article 6(1)(a) GDPR (consent). Further information: https://policies.google.com/privacy?hl=en

Cloudflare

We use the Content Delivery Network (CDN) of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to increase the security and delivery speed of our website. In this process, data is routed through Cloudflare servers. Cloudflare is certified under the EU-US Data Privacy Framework. Further information: https://www.cloudflare.com/privacypolicy/

LinkedIn

Functions of the LinkedIn network (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) are integrated on our website. When you access our pages with LinkedIn content, a connection to LinkedIn servers is established. Further information: https://www.linkedin.com/legal/privacy-policy

9) SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries or applications that you send to us as the site operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

10) Use of Social Media Links

On our website, you will find links to our company profiles on Facebook, GitHub, Instagram, LinkedIn, X (Twitter), and YouTube. These links do not constitute plugins but are simple redirects.

11) General Information on Storage Duration

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods of up to 10 years); in the latter case, deletion will take place after these reasons cease to apply.

12) Your Rights

Pursuant to Articles 15–21 GDPR and Sections 34–37 BDSG, you have the following rights:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object (Article 21 GDPR)

Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)

Where data processing is based on Article 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Article 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Article 21(2) GDPR).

13) Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Hamburg Commissioner for Data Protection and Freedom of Information.

Hamburg Commissioner for Data Protection and Freedom of Information:

Name: The Hamburg Commissioner for Data Protection and Freedom of Information
Address: Ludwig-Erhard-Str. 22, 7th floor, 20459 Hamburg
Phone: +49 40 / 428 54 - 4040
Email: mailbox@datenschutz.hamburg.de

14) Exercising Your Rights

You may exercise your rights at any time by contacting:

stratavo GmbH
Wittland 7e
22589 Hamburg
Germany

Email: info@stratavo.ai

Data Protection Officer
c/o stratavo GmbH
Wittland 7e
22589 Hamburg
Germany

Email: info@stratavo.ai

15) Currency and Amendment of This Privacy Policy

This privacy policy is currently valid as of February 2026. Due to the further development of our website and offerings or due to changes in regulatory or legal requirements, we reserve the right to amend this privacy policy. The current version of the privacy policy can be accessed at any time on our website at https://www.stratavo.ai/datenschutz.