Ayonic Privacy Policy (Datenschutzerklärung)
Status: July 2026
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data on our website [ayonic.com](https://ayonic.com), as well as in our mobile apps and during our advertising campaigns.
1. Data Controller
The entity responsible for data processing on this website and in the apps within the meaning of the General Data Protection Regulation (GDPR) is:
Mohammed Al Ayed· Ayonic, ( KYAANI GmbH )· Leipziger Platz 15 · 10117 Berlin, Germany
Email: info@ayonic.com · Phone: +49 152 22163333
2. Data Protection Officer
A statutory Data Protection Officer has not been appointed for our company at this time, as the requirements of Sec. 38 BDSG (e.g., at least 20 persons constantly en- gaged in automated processing of personal data) are not met. For questions regarding data protection, you can contact the data controller mentioned above directly.
3. Provision of the Website and Hosting (GoDaddy)
Our website is hosted by an external service provider (GoDaddy). Personal data collected on this website is stored on the host's servers.
Service Provider: GoDaddy.com, LLC, 2155 E. GoDaddy Way, Tempe, AZ 85284, USA.
Data Categories: IP addresses, technical data (browser, operating system, date/time of access), contact inquiries, meta and communication data.
- Legal Basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the website).
- Storage Duration: Server log data is automatically deleted after 14 days unless required for security incident investigation.
- Third-Country Transfer: Data may be transferred to the USA. This is based on the EU-U.S. Data Privacy Framework (DPF), provided GoDaddy is currently self-certified under the DPF at the time of processing, and additionally on Standard Contractual Clauses (SCCs) as a fallback safeguard. We have entered into a Data Processing Agreement (DPA) with GoDaddy pursuant to Art. 28 GDPR.
4. Lead Generation and Contact Forms
When you submit your data to us via our website or via advertisements (e.g., Meta Lead Ads), we process it as follows:
- Data Collected: Name, email address, phone number.
- Purpose: Processing your inquiry, contacting you for consultation, or preparing an offer.
- Legal Basis: Where the inquiry is directly aimed at concluding a contract, Art. 6(1)(b) GDPR (pre-contractual measures at your request) applies. Where no contractual context exists (e.g., a general newsletter or advertising opt-in), Art. 6(1)(a) GDPR (consent) applies instead.
- Storage Duration: We delete this data as soon as the purpose for storage no longer applies or you request deletion, provided that no statutory retention obligations (e.g., 6 or 10 years under German commercial and tax law, Sec. 257 HGB / Sec. 147 AO) prevent this.
5. Cookies and Consent Management
We use cookies and similar technologies. For cookies and technologies that are not technically necessary, we obtain your prior, informed, and revocable consent before they are set.
- Consent Tool: We use the consent management platform *Cookiebot* (Cybot A/S,
Havnegade 39, 1058 Copenhagen, Denmark) to record, store, and manage your cookie preferences.
- Legal Basis: Sec. 25(1) TDDDG (consent for storage of, or access to, information on your end device) in conjunction with Art. 6(1)(a) GDPR for any related processing of personal data.
- Storage Duration: Your consent status is stored for up to 12 months, after which renewed consent is requested. You may withdraw or change your consent at any time via the cookie settings on our website, with effect for the future.
- Categories and Retention: A current list of all cookies used, their purpose, provider, and individual storage duration is available within the consent tool's preference center / cookie banner.
6. Advertising and Analysis Tools (Ads)
We use tracking technologies to measure the success of our campaigns and to show you relevant advertising. These tools are only activated after you have given consent via our consent management tool (see Section 5).
A. Meta Pixel & Conversions API
* Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
* Purpose: Conversion tracking and retargeting (Facebook/Instagram Ads).
* Legal Basis: Art. 6(1)(a) GDPR (consent).
* Joint Controllership: For certain processing steps, joint controllership with Meta exists pursuant to Art. 26 GDPR. The essence of our arrangement with Meta is avail-
able at facebook.com/legal/controller_addendum. Meta has agreed to act as the primary point of contact for data subjects exercising their rights in relation to the
jointly controlled processing.
* Third-Country Transfer: Data may be transferred to Meta Platforms, Inc. in the USA. This is based on Standard Contractual Clauses (SCCs) and, where applicable, Meta's certification under the EU-U.S. Data Privacy Framework.
* Automated Decision-Making / Profiling: Ad personalization and lookalike-audience creation involve profiling within the meaning of Art. 4(4) GDPR. This does not produce legal effects or similarly significantly affect you, and no fully automated decision making within the meaning of Art. 22 GDPR takes place.
B. Google Ads & Remarketing
* Provider:Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
* Purpose: Placing ads in Google Search and the Google advertising network, and measuring their performance (remarketing/retargeting).
* Legal Basis: Art. 6(1)(a) GDPR (consent).
* Third-Country Transfer: Data may be transferred to Google LLC in the USA. This is based on Standard Contractual Clauses (SCCs) and, where applicable, Google's certification under the EU-U.S. Data Privacy Framework.
7. Mobile Applications (Apps) When using our mobile apps, additional data is processed:
* App Stores: When downloading the app, data is transferred to the respective store operator (Apple App Store / Google Play Store). This processing is carried out under the store operator's own responsibility as an independent controller; we have no influence on it.
* Permissions: The app may request access to device functions (e.g., notifications, camera). This only happens after your explicit consent via the device's operating
system, and you may withdraw such permissions at any time in your device settings.
* Analytics: We use Firebase (Google Ireland Limited / Google LLC) for crash analysis and app usage/behavior analysis. Data Categories: device identifiers, app usage events, crash logs, approximate location (if permitted). Legal Basis: Art. 6(1)(a) GDPR (consent).
* Third-Country Transfer: Firebase may transfer data to Google LLC in the USA. This is based on Standard Contractual Clauses (SCCs) and, where applicable, Google's certification under the EU-U.S. Data Privacy Framework.
8. Your Rights as a Data Subject
You have the right at any time to:
* Access (Art. 15 GDPR)
* Rectification* (Art. 16 GDPR)
* Erasure (Art. 17 GDPR)
* Restriction of processing (Art. 18 GDPR)
* Data portability (Art. 20 GDPR)
* Object to processing based on legitimate interest, including profiling (Art. 21(1)
GDPR), and to object to direct marketing at any time without giving reasons (Art. 21(2) GDPR)
* Withdraw consent with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR)
9. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The authority responsible for us is: Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219, 10969 Berlin, Germany
Email: mailbox@datenschutz-berlin.de