Privacy Policy

in accordance with Articles 13 and 14 GDPR
Last updated: February 2026

1. General Information

The protection of your personal data is of central importance to AVNSON GmbH.
We process personal data exclusively in compliance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

This Privacy Policy informs you about the nature, scope, and purposes of the processing of personal data when visiting this website.

Personal data means any information relating to an identified or identifiable natural person.

2. Controller

The controller responsible for data processing on this website is:

AVNSON GmbH
Sternstraße 81a
20357 Hamburg
Germany
E-mail: info@avnson.com

Managing Director: Sahabi Arouna

The appointment of a Data Protection Officer is not legally required.

3. Hosting

This website is hosted by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

4. Server Log Files

When accessing our website, the following data is automatically processed:

  • IP address

  • Date and time of access

  • Browser type and browser version

  • Operating system

  • Referrer URL

  • pages viewed

  • HTTP status code

Legal basis: Art. 6(1)(f) GDPR
(legitimate interest in ensuring technical stability, security, and system integrity)

Retention period: 7 days.

5. SSL/TLS Encryption

This website uses TLS encryption (https) to protect transmitted data against unauthorized access.

6. Cookies and Consent Management

This website uses cookies.

Strictly necessary cookies are stored on the basis of applicable legal provisions.

Non-essential cookies (e.g., analytics cookies) are used exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

Consent management is carried out via:

Borlabs GmbH

You may withdraw your consent at any time via the consent tool.
Proof of consent is stored for 12 months.

7. Google Analytics (GA4)

This website uses Google Analytics provided by:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Analytics is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

IP anonymization is activated.

User and event data retention period: 14 months.

Google Ireland Limited is certified under the EU-US Data Privacy Framework.
In addition, Standard Contractual Clauses pursuant to Art. 46 GDPR are in place.

Further information:
https://policies.google.com/privacy

8. Contact Requests

If you contact us via email or contact form, we process:

  • Name

  • Email address

  • Phone number (optional)

  • Message content

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual measures)

  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

Retention periods:

  • General inquiries: 6 months

  • Contract-related communication: 6 years

  • Tax-relevant documents: 10 years

9. Newsletter

If you subscribe to our newsletter, your data is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Registration takes place via a double opt-in procedure.

You may withdraw your consent at any time. Upon withdrawal, your data will be deleted unless statutory retention obligations apply.

10. Social Media Profiles

We maintain corporate profiles on:

  • Facebook

  • Instagram

  • YouTube

  • LinkedIn

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in presenting our company and communicating with customers, partners, and interested parties.

The platform operators process personal data independently.
Data transfers to third countries, particularly the United States, may occur in accordance with applicable safeguards.

Further information:

Facebook / Instagram: https://www.facebook.com/privacy/policy/
YouTube (Google): https://policies.google.com/privacy
LinkedIn: https://www.linkedin.com/legal/privacy-policy

11. International Data Transfers

Where personal data is transferred outside the European Union, this is carried out exclusively on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular:

  • EU-US Data Privacy Framework

  • Standard Contractual Clauses pursuant to Art. 46 GDPR

12. Your Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

Right to Object (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(f) GDPR, you have the right to object on grounds relating to your particular situation.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Competent supervisory authority in Hamburg, Germany:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg

14. Updates

We reserve the right to amend this Privacy Policy to reflect legal or technical changes.

This privacy policy was last updated on 01.01.2026.

Scroll to Top