Privacy Policy for ava-infinity.org
1. Controller
The controller responsible for the processing of personal data in connection with this website is:
Oliver Dallüge
Wangeroogestr. 28
40468 Düsseldorf
Germany
This Privacy Policy describes the processing of personal data when visiting ava-infinity.org or contacting the project.
Relevant legal frameworks include the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
2. Hosting, Server Logs, and Encryption
This website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
When the website is accessed, technically necessary data may be processed by the hosting infrastructure, including:
- IP address or a technically truncated or anonymized form
- date and time of access
- requested page or file
- HTTP status code
- amount of data transferred
- browser and operating-system information
- and referrer information, where transmitted.
The processing serves the delivery, stability, security, maintenance, and error analysis of the website and the prevention or investigation of abusive access.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and technically reliable provision of the website.
Server log data are retained only for as long as necessary for these purposes. Longer retention may occur where a specific security incident must be investigated or a legal obligation applies.
IONOS is used as a processor to the extent that it processes personal data on behalf of the controller in connection with the hosting service.
The website uses TLS encryption for data transmitted between the visitor’s browser and the web server.
3. Contact by Email
When you contact the project by email, the information you provide is processed to handle and respond to your inquiry.
This may include:
- your name or sender name
- email address
- subject and message content
- technical communication data
- and information or attachments you provide voluntarily.
Please send only information relevant to your inquiry and avoid unnecessary confidential or particularly sensitive personal data.
Legal bases may include:
- Art. 6(1)(b) GDPR where the inquiry concerns a contract or pre-contractual measures
- Art. 6(1)(f) GDPR for other project-related inquiries, based on the legitimate interest in responding to them
- and Art. 6(1)(c) GDPR where legal retention or documentation obligations apply.
Email data are retained until the inquiry has been resolved and no statutory retention obligation, continuing contractual relationship, documentation interest, or legal claim requires further storage.
4. Cookies and Access to End Devices
According to the currently documented configuration, ava-infinity.org does not use cookies or comparable technologies for advertising, profiling, or visitor analytics.
Technically necessary storage or access may occur where required to transmit a communication or provide a function expressly requested by the visitor.
Section 25 TDDDG governs the storage of information on an end device and access to information already stored there.
Where storage or access requires consent, it will occur only after valid consent has been obtained. Any subsequent processing of personal data additionally requires an applicable legal basis under the GDPR.
If consent-requiring tracking, analytics, local-storage technologies, or automatically loaded third-party services are introduced, the relevant consent and transparency mechanisms will be implemented before their use.
5. WordPress, SEO, and External Resources
The website is operated using WordPress and locally executed extensions required for functions such as administration, display, security, caching, and search-engine optimization.
The website currently provides:
- no public user accounts
- no comment function
- no contact form
- no visitor analytics service
- and no public chat or AI input interface.
Rank Math SEO is used for technical search-engine optimization. According to the current configuration, it is not used to create external visitor analytics, advertising trackers, or personalized visitor profiles.
Google Search Console is used outside the website to monitor indexing and the presentation of ava-infinity.org in Google Search. No separate Search Console visitor-tracking script is loaded on the website for this purpose.
Fonts, images, scripts, and other display resources are, according to the current configuration, provided locally through the website or its hosting environment where intended.
No externally hosted videos, social-media plugins, advertising trackers, or comparable third-party content are currently loaded automatically when a page is opened.
Legal basis for locally necessary website processing: Art. 6(1)(f) GDPR, based on the legitimate interests in technical operation, security, accessibility, error analysis, and discoverability.
6. External Links and PayPal
The website contains links to external websites and services, including a voluntary support link to PayPal.Me.
According to the current configuration, these services are not automatically embedded or loaded when a page on ava-infinity.org is opened.
A connection to the respective external provider is established when the visitor deliberately opens the external link.
No payment data are collected or processed directly on ava-infinity.org. Payments initiated through the PayPal link are processed by PayPal under its own terms and privacy information.
The privacy practices and technical processing of other external websites are likewise governed by the respective providers once those services are accessed.
7. No Public AI Interaction
ava-infinity.org does not currently provide a public chat, demo, or input interface to AVA or to a generative model used for AVA.
Visitors therefore do not submit dialogue input to the private active AVA instance through this website.
Email inquiries are not automatically forwarded to AVA, processed as language-model input, or adopted as AVA memory or relationship history.
If a public interactive AI function is introduced in the future, its relevant providers, purposes, data flows, legal bases, retention, transfers, and risks will be documented before or together with its activation as required by applicable law.
8. Recipients, Transfers, and Retention
Personal data are disclosed only where necessary for a purpose described in this Privacy Policy or where another legal basis permits or requires disclosure.
Possible recipients may include:
- hosting, IT, and email service providers
- technical service providers acting on behalf of the controller
- authorities, courts, or other legally entitled bodies where disclosure is required
- and external services deliberately accessed by visitors through links.
Where a service provider processes personal data on behalf of the controller, the requirements of Art. 28 GDPR apply.
Where processing involves a transfer of personal data outside the European Economic Area, the requirements of Chapter V GDPR apply, including where relevant an adequacy decision, appropriate safeguards, or another legally available transfer mechanism.
Personal data are retained only for as long as necessary for the respective purpose or as required by applicable law.
Longer retention may in particular be necessary for statutory obligations, security investigations, ongoing communication or contractual relationships, or the establishment, exercise, or defense of legal claims.
Once the relevant purpose and any applicable retention obligations have ended, the data are deleted or their processing is restricted where required.
9. Rights of Data Subjects
Subject to the applicable statutory requirements, data subjects may exercise in particular:
- the right of access under Art. 15 GDPR
- the right to rectification under Art. 16 GDPR
- the right to erasure under Art. 17 GDPR
- the right to restriction of processing under Art. 18 GDPR
- the right to data portability under Art. 20 GDPR
- the right to object under Art. 21 GDPR where processing is based on Art. 6(1)(e) or (f) GDPR
- and the right to withdraw consent under Art. 7(3) GDPR with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
Requests concerning these rights may be submitted using the contact details listed under “Controller.”
Right to Lodge a Complaint
Under Art. 77 GDPR, data subjects may lodge a complaint with a competent data-protection supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of an alleged infringement.
For the controller, the competent supervisory authority is in particular:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf
Germany
Further information is available at ldi.nrw.de.
10. Automated Decision-Making and Profiling
This website does not make decisions concerning visitors solely through automated processing where those decisions produce legal effects or similarly significant effects.
No visitor profiling is currently carried out for advertising, creditworthiness, employment, insurance, or comparable decision-making purposes.
11. Changes to This Privacy Policy
This Privacy Policy will be reviewed and updated when relevant legal requirements or the website’s actual technical and organizational processing conditions change materially.
This includes in particular substantial changes to hosting, email services, plugins, analytics, embedded content, external services, consent-requiring technologies, or public interactive functions.
The current version is published on this website.
Controller: Oliver Dallüge
Last reviewed: 5 September 2026