1. General and controller#
The controller within the meaning of the GDPR is:
Georg Ortner
Rigaer Straße 47A
10247 Berlin
Email: support@dory-ai.com
2. Overview and purpose#
On this website, DoryAI uses Google Tag Manager to manage website tags and Google Analytics to analyse user interaction, produce statistics and improve our services. For payments we use Stripe.
3. Google Tag Manager#
Google Tag Manager itself sets no cookies and collects no personal data. The tags embedded through Tag Manager (for example Google Analytics) can, however, collect personal data. The legal basis for this is your prior consent given through a consent tool and, in certain cases, legitimate interests.
4. Google Analytics#
4.1 General and how it works#
Google Analytics is provided by Google Ireland Limited. It records usage data such as page views, session duration, bounce rate and user origin. Your IP address is processed in the course of this. Whether and how it is truncated depends on how the service is configured; Google describes how Google Analytics handles IP addresses in its own documentation.
4.2 Legal basis and consent#
The use of Google Analytics requires your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time through the cookie settings.
4.3 Data processing agreement and third-country transfers#
A data processing agreement ensures GDPR compliance. Data transfers to third countries are based on standard contractual clauses and on Google’s certification under the EU-US Data Privacy Framework.
4.4 Opt-out and browser plugin#
You can install the browser add-on to deactivate Google Analytics, or disable tracking through your browser settings.
5. Payment provider Stripe#
For payments we use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe is therefore a recipient of payment and invoice data.
- Legal basis: Art. 6 (1) (b) GDPR (performance of the contract), Art. 6 (1) (c) GDPR (tax retention obligations) and Art. 6 (1) (f) GDPR (legitimate interest in preventing fraud).
- Third country: Stripe processes data in the EU and in the USA. Transfers to the USA are based on EU standard contractual clauses under Art. 46 GDPR.
No payment takes place on this website. Which data is processed when you take out a subscription or buy credits, and how long it is kept, is set out in the privacy notice for the app. Stripe’s own privacy policy applies in addition.
6. Purpose limitation and retention#
The data collected through Google Analytics is used exclusively for analysis purposes. The retention period for user-level data is set in the Google Analytics account settings, where the maximum is 14 months. Google describes the available periods and when it deletes the data in its own documentation.
7. Your rights as a data subject#
You have the following rights:
- the right to information about the personal data stored about you
- the right to rectification of inaccurate data
- the right to erasure of your data
- the right to restriction of processing
- the right to data portability
- the right to withdraw consent you have given
- the right to object to the processing
- the right to lodge a complaint with a supervisory authority
8. Changes and updates#
DoryAI reserves the right to adapt this privacy policy in the event of technical or legal changes.
This document exists in German and English. In the event of any discrepancy, the German version prevails.