Privacy policy

1. Controllers and contact

This website is operated jointly by PrefCo GmbH, Mittelstraße 4a, 98617 Meiningen, Germany, phone +49 3693 507090, email hello@preferp.ai, and Preference North America Inc., 36 York Mills Road, Suite 504, Toronto, ON M2P 2E9, Canada, phone +1 (416) 498-7751. They are joint controllers under Art. 26 GDPR.

PrefCo GmbH is responsible for operating the website, its hosting, consent management and for providing the information in this policy. Preference North America Inc. is responsible for handling enquiries from North America. Both are responsible for the contact form, lead handling and the Fenno chat. You can exercise your rights against either of them; they will coordinate your request. The essential content of the arrangement is available on request.

2. Data protection officer

Dieter Werner, eSourceONE GmbH, Kronacher Straße 60, 96052 Bamberg, Germany, d.werner@es1.de.

3. Overview

We process personal data only where needed to run this website, answer your enquiry and operate Fenno, our AI assistant. No advertising cookies are used. External media (Google Maps, YouTube) load only after you agree.

4. Hosting and server logs

The website is hosted by Lovable and delivered through Cloudflare's network. When you visit, your browser sends technical data (IP address, date and time, page requested, browser and operating system). This is needed to deliver the site securely (Art. 6(1)(f) GDPR). Logs are kept only as long as the providers need them for security. Our database runs on Lovable Cloud in the United States (Oregon).

5. Visitor statistics

Our hosting provider Lovable records visits to this site (page address, referring site, browser and language, approximate country, visit duration) to produce aggregated statistics. This happens only if you agree to "Statistics". Lovable then sets a cookie named "session-id" with a random ID that expires after 30 minutes. No advertising cookies are used. Legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future through "Cookie settings".

6. Consent and cookies

We store your consent choice and its date in your browser's local storage under the key "preferp-consent-v2". This is necessary to respect your choice (§ 25(2) TDDDG). You can change your choice at any time through "Cookie settings" in the footer. Rejecting means external media do not load and no visitor statistics are collected.

7. Contact form and lead handling

When you use the contact form we process your name, email address, company (optional), message and language. We store this in our database and create an internal page for our sales team in Atlassian Confluence [Confluence data region: to be confirmed].

To prepare a relevant reply, we automatically research publicly available information about your company using Google Gemini with Google Search through the Lovable AI gateway; the result (for example estimated location, market type and company size) is stored with your enquiry.

Legal basis is Art. 6(1)(b) GDPR for steps before a contract and Art. 6(1)(f) GDPR for our interest in answering enquiries efficiently. You can object to the research at any time. We delete enquiry data 24 months after the last contact, unless legal retention duties apply.

8. Fenno chat

Fenno answers questions about preferp. Your messages and the page you are on are sent to an AI provider for processing: Anthropic (Claude) through the Lovable AI gateway; to find relevant answers your question is also converted into a search vector by OpenAI through the same gateway. We do not store chat conversations in our database. Please do not enter sensitive personal data. Legal basis is Art. 6(1)(f) GDPR, our interest in offering an interactive information service.

9. External media

Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) shows our office locations on the About page. YouTube (same provider) shows product videos; we use the privacy-enhanced mode youtube-nocookie.com. Both load only after you agree to "External media". Google then receives your IP address and device data and may transfer it to the US. Legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with effect for the future.

10. Recipients and international transfers

Recipients are our processors: Lovable (hosting, database, AI gateway, visitor statistics), Cloudflare (delivery), Atlassian (Confluence), Google, Anthropic and OpenAI (AI processing), and the joint controller Preference North America Inc. in Canada. Transfers to Canada rely on the EU adequacy decision. Transfers to the US rely on the EU-US Data Privacy Framework where the recipient is certified, otherwise on EU Standard Contractual Clauses.

11. Retention

We keep data only as long as needed for the purpose stated above or required by law. Enquiry data is deleted 24 months after the last contact. Consent records stay in your browser until you clear them or change your choice.

12. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time (Art. 7(3)). You also have the right to lodge a complaint with a supervisory authority. For PrefCo GmbH this is the Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany.