We only process personal data (hereinafter referred to mostly as "data") to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
In accordance with Article 4(1) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, storage, use, transmission, or erasure.
In the following privacy policy, we inform you about the nature, scope, purpose, duration, and legal basis for the processing of personal data.
This privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the controller
The controller responsible for this website under data protection law is:
auvisus GmbH
Alter Schlachthof 33
76131 Karlsruhe
Germany
Email: info@auvisus.com
Data Protection Officer: VELIT Consulting GmbH & Co. KG
II. Rights of users and data subjects
With regard to the data processing described below, users and data subjects have the right
– to obtain confirmation as to whether data concerning them is being processed, to access the processed data, and to receive copies of the data (Article 15 GDPR);
– to rectify or complete inaccurate or incomplete data (Article 16 GDPR);
– to obtain the immediate erasure of data concerning them (Article 17 GDPR) or, alternatively, to request the restriction of processing in accordance with Article 18 GDPR;
– to receive the data they have provided and to have this data transmitted to other controllers (Article 20 GDPR);
– to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed in violation of data protection regulations (Article 77 GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed of any rectification, erasure, or restriction of processing in accordance with Articles 16, 17(1), and 18 of the GDPR, unless this proves impossible or involves disproportionate effort.
In accordance with Article 21 of the GDPR, users and data subjects also have the right to object to the future processing of their data, provided that the data is processed in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purpose of direct marketing is permitted.
III. Information on data processing
Your data processed during the use of our website will be deleted or restricted as soon as the purpose of storage no longer applies, provided that there are no statutory retention obligations preventing deletion and no other provisions are stated below.
Hosting (Webflow)
This website is hosted by Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter "Webflow").
When you visit our website, Webflow, acting as our data processor, collects various log files, including your IP address. This processing is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring the reliable and secure provision of our website.
We have entered into a data processing agreement with Webflow. As data may be transferred to the USA, we base this transfer on the EU Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.
Further information: https://webflow.com/legal/privacy
Content Delivery Network and Security (Cloudflare)
We use the content delivery network and security services provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (hereinafter "Cloudflare"). Cloudflare provides high-performance delivery of our website content and protects it against attacks and misuse.
Cloudflare processes connection data, specifically your IP address, to deliver requests and ensure the security of our website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security, availability, and performance of our website.
Data may be transferred to the USA; we base this on the EU Commission's standard contractual clauses or the EU-US Data Privacy Framework. We have a data processing agreement in place with Cloudflare.
Further information: https://www.cloudflare.com/privacypolicy/
Server Log Files
For technical reasons, particularly to ensure a secure and stable website, data is transmitted to us or our service providers by your internet browser. These server log files collect information such as your browser type and version, operating system, referrer URL, pages visited, date and time of access, and your IP address.
Storage is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website. The data is deleted as soon as it is no longer required for the purpose of collection.
Cookies and Consent Management (Cookiebot)
Our website uses cookies and similar storage technologies. These process certain information from you, such as browser or location data or your IP address.
To obtain and manage your consent, we use the consent management tool Cookiebot. The provider is Usercentrics A/S (formerly Cybot ApS), Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot stores your consent decisions and makes them available for verification purposes. For this, your IP address (anonymized), the date and time of consent, and a consent key are processed.
We use technically necessary cookies based on Art. 6(1)(f) GDPR and Section 25(2) TDDDG. The use of the consent tool itself serves to fulfill our legal obligation to provide proof of consent (Art. 6(1)(c) GDPR). All non-essential cookies, as well as the use of analytics and marketing services, are only implemented after you have provided your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You can revoke your consent at any time with future effect by reopening the cookie settings. Additionally, you can prevent, restrict, or delete cookies via your browser. Please note that this may result in some features of our website not being fully functional.
Further information: https://www.cookiebot.com/de/privacy-policy/
Embedded Third-Party Content (iframes)
We embed third-party content at various points using iframes, specifically our contact and demo forms (HubSpot) and our careers and application page (join.com). When you visit a page with such embedded content, a connection is established to the servers of the respective provider, and at least your IP address is transmitted. We only load these integrations after you have provided your consent via our consent banner. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Details regarding the respective services can be found below.
Website Visitor Analysis (Leadfeeder / Dealfront)
We use Leadfeeder, a service for analyzing website visits for the purpose of B2B lead generation. The provider is Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany (hereinafter "Leadfeeder").
Leadfeeder captures your IP address and its approximate location, as well as page views and their duration, to determine which companies have visited our website. First-party cookies from Leadfeeder are used for this purpose. The goal is to identify companies (not individuals) as potential business leads.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in optimizing our marketing and sales. If consent is required for the use of cookies, processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Further information: https://www.leadfeeder.com/de/privacy/
[To be checked: Is IP anonymization enabled in Leadfeeder? If so, a corresponding note can be added.]
Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not collect personal data but serves to manage integrated services and tags. However, it triggers other tags that may collect data themselves.
If consent is required, processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG; otherwise, it is based on Art. 6(1)(f) GDPR.
Further information: https://policies.google.com/privacy
Contact Inquiries and Forms (HubSpot)
If you contact us via a contact or demo form or by email, the data provided will be used to process your request. Providing this data is necessary to process and respond to your inquiry.
We integrate our forms via an iframe from HubSpot and subsequently process the inquiries in HubSpot (customer relationship management). The provider is HubSpot Ireland Limited, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland; the parent company is HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA. When the form is loaded, a connection to HubSpot is established; the data you enter and technical usage data are processed and stored on HubSpot's servers.
The legal basis for processing inquiries is Art. 6(1)(b) GDPR if the inquiry is directed toward a contract, and otherwise Art. 6(1)(f) GDPR. Art. 6(1)(a) GDPR and Section 25(1) TDDDG apply to the loading of the embedded form and any cookies set by HubSpot.
Data may be transferred to the USA; we base this on the EU Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework. We have a data processing agreement in place with HubSpot.
Your data will be deleted as soon as your request has been fully answered and there are no legal retention obligations preventing such deletion.
Further information: https://legal.hubspot.com/de/privacy-policy
Careers and Applications (join.com)
We integrate our careers and job page via an iframe from the applicant management service join.com. The provider is JOIN Solutions AG, Eichenstrasse 2, 8808 Pfäffikon SZ, Switzerland (hereinafter "JOIN"); the EU representative pursuant to Art. 27 GDPR is JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, Germany.
When you visit our careers page, a connection to JOIN is established to display job advertisements and the application form; at a minimum, your IP address is transmitted. If you apply via join.com, your applicant and application data will be collected and processed for the purpose of conducting the application process.
The legal basis for displaying the embedded content is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The legal basis for processing application data is Section 26(1) sentence 1 BDSG in conjunction with Art. 88(1) GDPR and Art. 6(1)(b) GDPR.
JOIN processes application data as a data processor; we have entered into a data processing agreement with JOIN in accordance with Art. 28 GDPR. An adequacy decision by the EU Commission exists for Switzerland, ensuring an adequate level of data protection.
If an application is rejected, we generally delete the submitted data six months after notification of the rejection, unless legal provisions require longer storage or you have consented to longer storage (Art. 6(1)(a) GDPR).
Further information: https://join.com/de/datenschutz/
Social network linking (LinkedIn)
We promote our LinkedIn presence on our website. This is integrated via a linked graphic. You will only be redirected to LinkedIn once you click the link, at which point LinkedIn may collect data such as your IP address, date, time, and the page visited. If you are logged into LinkedIn at the same time, your visit may be associated with your account.
Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The legal basis for this link is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the external presentation and reach of our company.
Further information: https://www.linkedin.com/legal/privacy-policy
Last updated: 02.09.2026