Privacy Policy

Last updated: 01 May 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

APARO UG (haftungsbeschränkt)
T5 5
68161 Mannheim
Germany

Email: privacy@aparo.io
Website: https://aparo.io

2. General information on data processing

We take the protection of personal data seriously. Personal data means any information
that can directly or indirectly identify a person, such as name, email address, IP address,
or usage data.

We process personal data only to the extent necessary to provide this website, communicate
with visitors, ensure website security, or where processing is based on consent.

3. Hosting and server log files

When you visit our website, technical access data is automatically processed by the hosting
provider. This may include in particular:

• IP address
• Date and time of access
• Page or file accessed
• Browser used
• Operating system used
• Referrer URL
• Amount of data transferred

This processing is carried out to technically provide the website, ensure the security and
stability of the website, and detect misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable
operation of this website.

Server log files are generally stored only for a limited period and then deleted, unless longer
storage is required for security reasons.

4. Contacting us

If you contact us by email or via a contact form, we process the data you provide, such as
your name, email address, telephone number, and the content of your message.

We use this data exclusively to process your request and for possible follow-up questions.

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual
measures. In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest
lies in processing incoming requests.

The data will be deleted as soon as it is no longer required for processing, unless statutory
retention obligations apply.

5. Cookies and consent management

Our website uses cookies and similar technologies. Cookies are small text files that are stored
on your device.

Some cookies are technically necessary for the website to function. Other cookies are used for
statistics or analytics purposes and are only set after you have given your consent.

We use the consent management tool Complianz to manage your consent.
You can use the cookie banner to choose which categories you wish to consent to. You can
change or withdraw your consent at any time via the cookie settings on our website.

The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR.
The legal basis for cookies requiring consent is Art. 6(1)(a) GDPR and Section 25 TDDDG.

6. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited,
Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website. This may include information
about pages visited, time spent on the website, devices used, browser information, and shortened
IP addresses.

Google Analytics is only loaded on this website after you have given your consent. Without your
consent, no Google Analytics cookies are set.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25 TDDDG.
You can withdraw your consent at any time via the cookie settings.

Further information can be found in Google’s privacy policy:

https://policies.google.com/privacy

7. Multilingual functionality with Polylang

This website uses the Polylang plugin to provide content in multiple languages.

Polylang may set a cookie named pll_language. This cookie stores the language you
have selected so that the website can be displayed in the appropriate language on your next visit.

This cookie is functional and serves to provide a user-friendly multilingual website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the correct language
display of our website.

8. Password-protected areas

If certain areas of this website are password-protected, a technical cookie may be set to store
that the correct password has been entered.

This cookie is technically necessary to provide the password-protected area.
The legal basis is Art. 6(1)(f) GDPR.

9. Embedded content from other websites

This website may include embedded content from other websites, such as videos, maps, posts,
images, or other external content.

Embedded content behaves as if you had visited the respective external website directly.
These providers may process data about you, set cookies, and record your interaction with
the embedded content.

Where such content requires consent, it will only be loaded after you have given your consent.

10. Comments

The comment function is currently not publicly enabled on this website.

If a comment function is made available, the data entered in the comment form, the IP address,
and the browser user agent may be processed in order to display comments and prevent misuse
or spam.

11. Media

If registered users upload images or other files to this website, they should avoid uploading
images with embedded location data, such as EXIF GPS data. Visitors to the website could download
such files and extract location information.

This section is only relevant if users are able to upload files to the website.

12. Storage period

We store personal data only for as long as required for the respective purposes or for as long
as statutory retention obligations apply.

Data from contact requests is stored for as long as necessary to process the request.
Technical data and log files are stored only for a limited period, unless longer storage is
required for security reasons.

13. Your rights

Within the scope of the statutory provisions, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing activities
• Right to withdraw consent you have given

If you have given consent, you may withdraw it at any time with effect for the future.

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe
that the processing of your personal data violates data protection law.

15. Changes to this privacy policy

We reserve the right to amend this privacy policy if the website, the services used, or legal
requirements change.