Privacy Policy
Privacy policy of Yura.to. Learn how we protect, process, and store your data. GDPR-compliant and transparent.
Your data security is our top priority. Learn how we collect, store, and protect your information in compliance with GDPR regulations.
Certified infrastructure
These certificates belong to our hosting partner and its data centres. Yura itself does not hold them – we run the service on this audited infrastructure.
Full compliance with EU data protection regulations
/images/gdpr/dsgvo.svg
Our hosting partner's data centres in Germany
/images/gdpr/hosted-in-germany.svg
Certified Datacenters
Certifications held by our hosting partner's data centres
/images/gdpr/certified-datacenters.svg
Encrypted transfer between your device and Yura
/images/gdpr/ssl-tls.svg
All data stored on servers located in the European Union
/images/gdpr/european-union.svg
CO2-neutral operation of the hosting infrastructure
/images/gdpr/seal_climate_friendly.svg
Cloud security certification held by our hosting partner
/images/gdpr/csa.svg
Privacy Policy & Legal Information on AI Usage & Website
1. Controller and General Information
The controller for data processing on this website and via the AI Assistant Yura.to is:
Teinacher Str. 46, 71634 Ludwigsburg, Germany
If you have any questions about data protection or wish to exercise your data subject rights (information, erasure, objection), please contact us using the details above.
2. Hosting, Server Log Files & CDN
External Hosting & CDN
This website and the AI assistant are hosted by an external service provider. The personal data collected on this website is stored on the hoster's servers. We have concluded a data processing agreement (DPA/AVV) with our hoster to ensure GDPR-compliant processing. We use a Content Delivery Network (CDN) to deliver content.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, fast, and efficient provision).
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
IP address (anonymized if applicable)
Browser type and browser version
Operating system used
Referrer URL (the previously visited page)
Hostname of the accessing computer
Time of the server request
This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR to ensure error-free provision and optimization of systems.
3. Cookies & Tracking
Our website and the chat assistant use cookies and similar technologies.
Technically necessary cookies (Session Cookies)
These are required to maintain the chat history during your visit and enable the basic functions of the site.
Legal basis: § 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR.
Analysis and Tracking Cookies
These are used to evaluate user behavior (e.g. interaction with the bot). We only set these with your explicit consent via our cookie banner.
Legal basis: Art. 6 (1) (a) GDPR.
4. Data Processing by the Yura AI Assistant
The AI Assistant (Yura) processes your inputs in real time.
AI Models Used, Third Country Transfer & Training
Server Location & US Data Transfer
Processing may take place on servers in the EU, but also in the USA. If data is transferred to the USA, we base this on the adequacy decision (EU-US Data Privacy Framework) or on EU Standard Contractual Clauses (SCCs) concluded with the providers to guarantee a European level of data protection.
No Training of AI Models
We exclusively use the business/enterprise APIs of the providers. We have contractually ensured that your chat inputs, documents, and company data are not used to train the global AI models.
Retention Period of Chat History
Chat histories (session data) are stored temporarily to process the respective query. Unless otherwise agreed by law or contract, no longer needed chat logs are automatically deleted after 30 days.
Art. 6 (1) (b) GDPR (performance of contract) and Art. 6 (1) (f) GDPR (legitimate interest in providing innovative services).
5. Contact Forms & Automated E-Mail Delivery by the Bot
Contact Forms in Chat
When the AI assistant triggers a contact form and you enter data (e.g. name, email, request), these are forwarded to our team and stored in our systems for the purpose of processing the request.
Legal basis: Art. 6 (1) (b) GDPR (if relating to contracts) or your consent pursuant to Art. 6 (1) (a) GDPR.
If the bot triggers an email, we use specialized email service providers for this. Data processing agreements (DPAs) also exist with these sub-processors.
6. Web Services (Google Fonts & Web Search)
This site uses Web Fonts from Google for uniform font presentation. If the fonts are loaded externally from Google servers (Google Ireland Limited), your IP address will be transmitted to Google servers. This only happens if you have previously given your consent via the cookie banner (Art. 6 (1) (a) GDPR).
