GermaNav
← Back to Home

Privacy Policy

Last updated: March 1, 2026 · Effective: March 1, 2026

Summary: GermaNav collects minimal data. We use Google Analytics with your consent for anonymous usage statistics. We do not sell, share, or transfer your personal data to third parties. All data processing complies with the EU General Data Protection Regulation (GDPR/DSGVO).

1. Controller

The controller responsible for data processing on this website pursuant to Art. 4(7) GDPR is:

Fai Digital
Faihane Gnon
Hochmuttinger Str. 22
85764 Oberschleißheim
Germany

Email: faihane@fai-digital.de
Phone: +49 176 48 08 65 86

2. Overview of Data Processing

2.1 Types of Data Processed

  • Usage data (pages visited, time of access, referral source)
  • Device and browser metadata (screen resolution, browser type, operating system)
  • IP address (anonymized — see Section 4)
  • Cookie consent preference (stored locally in your browser)
  • Conversation content within the GermaNav Companion app (processed in real-time, not stored on our servers — see Section 6)

2.2 Data We Do NOT Collect

  • Names, addresses, or identity documents
  • Email addresses (unless you voluntarily contact us)
  • Payment or financial information
  • Location data (GPS)
  • Biometric or health data

3. Legal Basis for Processing

We process data based on the following legal grounds under Art. 6(1) GDPR:

PurposeLegal BasisGDPR Article
Website delivery & technical functionLegitimate interestArt. 6(1)(f)
Analytics (Google Analytics)ConsentArt. 6(1)(a)
Cookie consent storageLegitimate interestArt. 6(1)(f)
Contact via emailConsent / Pre-contractual measuresArt. 6(1)(a), Art. 6(1)(b)
AI Companion conversationsConsent (by using the service)Art. 6(1)(a)

4. Analytics & Cookies

4.1 Google Analytics 4

We use Google Analytics 4 (Property ID: G-LXS8L24J5R), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is only activated after you give explicit consent via our cookie banner. Until you consent, no analytics data is collected. If you decline, the analytics script remains inactive for your session and all future visits.

When active, Google Analytics collects:

  • Pages visited and time spent
  • Scroll depth (25%, 50%, 75%, 100%)
  • Button click events (e.g., "Start Your Journey", "Contact Us")
  • Referral source and UTM campaign parameters
  • Device type, browser, screen resolution, and operating system

IP Anonymization: Google Analytics 4 does not log or store full IP addresses. IP addresses are used only for geographic region estimation (country/city level) and are then discarded. No full IP address is ever written to disk.

Data transfer: Google may transfer data to servers in the United States. Google Ireland Limited has committed to the EU-US Data Privacy Framework. For details, see Google's Privacy Policy.

Retention: Analytics data is retained for 14 months and then automatically deleted.

4.2 Custom Analytics Events

We track the following custom events (all anonymized, no personal data):

Event NamePurposeData Collected
cta_clickMeasure button engagementButton label, UTM parameters
scroll_depthUnderstand content consumptionPercentage scrolled (25/50/75/100%)
page_view_enrichedCampaign attributionUTM source, medium, campaign, content

4.3 Cookies

We use only technically necessary and analytics cookies. We do not use advertising, retargeting, or third-party tracking cookies.

Cookie / StorageTypePurposeDuration
germanav_cookie_consentlocalStorageStores your cookie preferencePersistent (until cleared)
_gaCookie (Google)Distinguishes users2 years
_ga_LXS8L24J5RCookie (Google)Maintains session state2 years

The Google Analytics cookies (_ga, _ga_*) are only set after you consent. You can withdraw consent at any time by clearing your browser cookies or localStorage.

4.4 How to Opt Out

  • Click "Decline" on the cookie banner when visiting the site
  • Clear your browser's cookies and localStorage (this resets your preference)
  • Use a browser extension such as Google Analytics Opt-Out
  • Enable "Do Not Track" in your browser settings

5. Hosting

This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. When you visit this website, Netlify processes your IP address and request metadata to deliver the page content. This is necessary for the website to function (Art. 6(1)(f) GDPR).

Netlify's privacy policy: netlify.com/privacy

Netlify has committed to the EU-US Data Privacy Framework and processes data in accordance with GDPR requirements.

6. GermaNav Companion (AI Application)

The GermaNav Companion app (companion.germanav.de) is an AI-powered chat application. When using it:

  • No registration required. You are not asked for your name, email, or any personal information.
  • Conversations are processed in real-time via the Google Gemini API. Your messages are sent to Google's AI servers for response generation.
  • We do not store your conversations on our servers. Conversation history exists only in your browser session and is lost when you close the tab or clear your browser data.
  • AI processing: Google processes your input to generate responses. Google's data processing terms apply: Google Cloud DPA.

Important: Do not enter sensitive personal information (passport numbers, financial details, medical records) into the Companion chat. While we do not store your conversations, the AI model processes your input in real-time.

7. Contact via Email

When you contact us via email (e.g., apps@fai-digital.de), we process your email address, name (if provided), and message content to respond to your inquiry. This data is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

We store your emails only for as long as necessary to handle your request, plus any legally required retention periods. Email communication is handled through standard email providers based in the EU.

8. Third-Party Services

This website uses the following third-party services:

ServiceProviderPurposeData Processed
Google Analytics 4Google Ireland Ltd.Usage analytics (consent-based)Anonymized usage data
NetlifyNetlify, Inc.Website hosting & CDNIP address, request metadata
Google Gemini APIGoogle LLCAI responses in Companion appConversation input/output

We do not use any social media plugins, advertising networks, or retargeting services.

9. Your Rights (GDPR Art. 15–21)

Under the EU General Data Protection Regulation, you have the following rights:

  • Right of access (Art. 15): Request information about whether and what personal data we process about you.
  • Right to rectification (Art. 16): Request correction of inaccurate personal data.
  • Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
  • Right to restriction of processing (Art. 18): Request limitation of data processing under certain conditions.
  • Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
  • Right to object (Art. 21): Object to data processing based on legitimate interest at any time.
  • Right to withdraw consent (Art. 7(3)): Withdraw consent for analytics at any time by clearing your cookies.

To exercise any of these rights, contact us at faihane@fai-digital.de.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR (Art. 77 GDPR).

The competent supervisory authority for Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: lda.bayern.de
Email: poststelle@lda.bayern.de

11. Data Security

We use industry-standard security measures to protect data in transit and at rest:

  • TLS/SSL encryption (HTTPS) for all website traffic
  • Netlify's enterprise-grade hosting infrastructure with DDoS protection
  • No storage of personal data on our own servers
  • Regular review of third-party service security practices

12. Data Transfers Outside the EU

Some of our service providers (Google, Netlify) may process data on servers located in the United States. These transfers are safeguarded by:

  • The EU-US Data Privacy Framework (adequacy decision by the European Commission, July 2023)
  • Standard Contractual Clauses (SCCs) as an additional safeguard

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be published on this page with an updated "Last updated" date. We recommend reviewing this page periodically.

14. Contact

For any questions about this privacy policy or your data rights:

Fai Digital
Faihane Gnon
Email: faihane@fai-digital.de
Phone: +49 176 48 08 65 86

© 2026 Fai Digital. All rights reserved.
Privacy Policy Impressum Terms of Service