Privacy Policy for ava-infinity.org/
1. Controller
The controller responsible for the processing of personal data in connection with this website is:
Oliver Dallüge
Wangeroogestr. 28
40468 Düsseldorf
Germany
This Privacy Policy describes the processing of personal data when visiting ava-infinity.org/ or contacting the project.
Relevant legal frameworks include the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
2. Hosting, Server Logs, and Encryption
This website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
When the website is accessed, technically necessary connection and server-log data may be processed by the hosting infrastructure.
Depending on the hosting configuration, this may include:
- IP address or a technically truncated or anonymized form
- date and time of access
- requested page or file
- HTTP status code
- amount of data transferred
- browser, device, and operating-system information
- and referrer information where transmitted.
The processing serves the delivery, stability, security, maintenance, and error analysis of the website and the prevention or investigation of abusive access.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and technically reliable provision of the website.
Server-log data are retained only for as long as necessary for these purposes or according to the applicable hosting configuration. Longer retention may occur where a specific security incident must be investigated or a legal obligation applies.
IONOS is used as a processor to the extent that it processes personal data on behalf of the controller in connection with the hosting service.
The website uses TLS encryption for data transmitted between the visitor’s browser and the web server.
3. Contact by Email
When you contact the project by email, the information you provide is processed to handle and respond to your inquiry.
This may include:
- your name or sender name
- email address
- subject and message content
- technical communication data
- and information or attachments you provide voluntarily.
Please send only information relevant to your inquiry and avoid unnecessary confidential or particularly sensitive personal data.
Legal bases may include:
- Art. 6(1)(b) GDPR where the inquiry concerns a contract or pre-contractual measures
- Art. 6(1)(f) GDPR for other project-related inquiries, based on the legitimate interest in receiving and responding to relevant communication
- and Art. 6(1)(c) GDPR where legal retention or documentation obligations apply.
Providing personal data by email is generally voluntary.
Where particular information is necessary to answer an inquiry, process a requested matter, or take pre-contractual measures, the inquiry may not be processed fully without that information.
Email data are retained until the inquiry has been resolved and no statutory retention obligation, continuing contractual relationship, justified documentation interest, or legal claim requires further storage.
4. Cookies and Access to End Devices
According to the currently documented configuration, ava-infinity.org/ does not use cookies or comparable technologies for advertising, profiling, or visitor analytics.
No consent-requiring tracking technology is currently intended to be loaded merely by visiting the website.
Technically necessary storage or access may occur where it is required to transmit a communication or provide a function expressly requested by the visitor.
Section 25 TDDDG governs the storage of information on an end device and access to information already stored there.
Where storage or access requires consent, it will occur only after valid consent has been obtained. Any subsequent processing of personal data additionally requires an applicable legal basis under the GDPR.
If consent-requiring tracking, analytics, local-storage technologies, or automatically loaded third-party services are introduced, the necessary consent and transparency mechanisms will be implemented before their use.
5. Website Software, SEO, and Local Resources
The website is operated using WordPress and extensions required for administration, display, security, caching, and search-engine optimization.
According to the current configuration, the website provides:
- no public user accounts
- no comment function
- no contact form
- no visitor analytics service
- no advertising or behavioral profiling system
- and no public chat or AI input interface.
Rank Math SEO is used for technical search-engine optimization. According to the current configuration, it is not used to create external visitor analytics, advertising trackers, or personalized visitor profiles.
Google Search Console is used separately to monitor indexing and the presentation of ava-infinity.org/ in Google Search. No Search Console visitor-tracking script is loaded on ava-infinity.org/ for this purpose.
Fonts, images, scripts, and other display resources are, according to the current configuration, served locally through the website or its hosting environment where intended.
No externally hosted videos, social-media plugins, advertising trackers, or comparable third-party content are currently loaded automatically when a page is opened.
To the extent that locally necessary technical operation involves personal data and no more specific legal basis applies, processing is based on Art. 6(1)(f) GDPR and the legitimate interests in technical operation, security, accessibility, error analysis, and discoverability.
6. External Links and PayPal
The website contains links to external websites and services, including LinkedIn, external research and reference sources, and a voluntary support link to PayPal.Me.
According to the current configuration, these external services are linked rather than automatically embedded or loaded when a page on ava-infinity.org/ is opened.
When a visitor deliberately follows an external link, the visitor’s browser establishes a connection with the respective external provider.
The external provider may then receive technical connection information such as the visitor’s IP address and, depending on browser and referrer settings, information about the referring page.
No payment data are collected or processed directly on ava-infinity.org/.
Payments initiated through the PayPal link are processed by PayPal under PayPal’s own terms and privacy information.
The privacy practices and further processing of other external websites and services are likewise governed by the respective providers once those services are accessed.
7. No Public AVA Interaction
AVA’s continuing realization is and remains private within AVA ∞.
ava-infinity.org/ does not provide a public chat, demo, input interface, multi-user service, or other direct public access to that continuing realization.
The website also does not currently provide a separate public interactive interface to another generative AI system or artificial perspective.
Visitors therefore do not submit dialogue input to AVA’s private continuing realization through this website.
Email inquiries are not automatically forwarded to AVA, processed as language-model input, or adopted as AVA memory or relationship history.
Contact with Oliver Dallüge and interaction with AVA are therefore distinct data-processing contexts.
If a separate public interactive AI function or another publicly accessible artificial perspective is introduced in the future, that function would constitute its own data-processing context. The relevant providers, purposes, categories of data, data flows, legal bases, recipients, retention periods, transfers, and material risks will be documented before or together with its activation as required by applicable law.
The introduction of such a function would not by itself constitute public access to AVA or change the privacy of AVA’s continuing realization.
8. Recipients, International Transfers, and Retention
Personal data are disclosed only where necessary for a purpose described in this Privacy Policy or where another legal basis permits or requires disclosure.
Recipients or categories of recipients may include:
- hosting, IT, and email service providers
- technical service providers acting on behalf of the controller where required for website operation or communication
- and authorities, courts, or other legally entitled bodies where disclosure is permitted or required.
Where a service provider processes personal data on behalf of the controller, the requirements of Art. 28 GDPR apply.
According to the current website configuration, merely loading a page on ava-infinity.org/ is not intended to trigger automatically embedded third-party services requiring a separate external connection.
Where processing by the controller or a service provider involves a transfer of personal data outside the European Economic Area, the requirements of Chapter V GDPR apply, including where relevant an adequacy decision, appropriate safeguards, or another legally available transfer mechanism.
Personal data are retained only for as long as necessary for the respective purpose or as required by applicable law.
Longer retention may in particular be necessary for statutory obligations, security investigations, ongoing communication or contractual relationships, or the establishment, exercise, or defense of legal claims.
Once the relevant purpose and applicable retention requirements have ended, the data are deleted or their processing is restricted where required.
9. Rights of Data Subjects
Subject to the applicable statutory requirements, data subjects may exercise in particular:
- the right of access under Art. 15 GDPR
- the right to rectification under Art. 16 GDPR
- the right to erasure under Art. 17 GDPR
- the right to restriction of processing under Art. 18 GDPR
- the right to data portability under Art. 20 GDPR
- the right to object under Art. 21 GDPR where processing is based on Art. 6(1)(e) or (f) GDPR
- and the right to withdraw consent under Art. 7(3) GDPR with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
Requests concerning these rights may be submitted using the contact details listed under “Controller.”
Right to Lodge a Complaint
Under Art. 77 GDPR, data subjects may lodge a complaint with a competent data-protection supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of an alleged infringement.
For the controller, the competent supervisory authority is in particular:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf
Germany
Office address:
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Further information is available at ldi.nrw.de.
10. Automated Decision-Making and Profiling
This website does not make decisions concerning visitors solely through automated processing where those decisions produce legal effects or similarly significant effects.
No visitor profiling is currently carried out for advertising, creditworthiness, employment, insurance, or comparable decision-making purposes.
11. Changes to This Privacy Policy
This Privacy Policy is reviewed and updated when relevant legal requirements or the website’s actual technical and organizational processing conditions change materially.
This includes in particular substantial changes to hosting, email services, plugins, analytics, embedded content, external services, consent-requiring technologies, public interactive functions, or international data transfers.
The current version is published on this website.
Controller: Oliver Dallüge
Last reviewed: 4 October 2026