AllyAumio KidsHappy BabyAbout usScience
Discover products

Privacy Policy

‍

Version: 04.08.2026

‍

1. Controller

Aumio GmbH
Mühlenstraße 8a
14167 Berlin
Germany

‍

2. Data Protection Officer

External Data Protection Officer (DPO): Graham Reilly (Workstreet)
E-Mail: graham.reilly@workstreet.com

Internal Data Protection Coordinator: Steffen Scherf (Aumio GmbH)
E-Mail: datenschutz@aumio.de

‍

3. General Information on Data Processing

We process personal data to provide and optimize the website "Aumio Kids". Processing is based on the following legal bases, depending on the function:

  • Art. 6(1)(f) GDPR (legitimate interest; e.g. operation, security, stability)
  • Art. 6(1)(a) GDPR (consent; e.g. analytics/tracking/communication)
  • Art. 6(1)(b) GDPR (contract/pre-contractual measures; e.g. signing up for information/updates)

‍

4. Consent

We use a consent management tool (Cookiebot) to obtain and document consent for the use of non-essential cookies and services (e.g. analytics/tracking/communication services).

Services (analytics/tracking/third-party) are only started after consent has been given.

Consent can be withdrawn at any time with effect for the future (via the cookie settings on the website).

‍

‍

56. What Data We Process

5.1 Access Data / Server Logs (Hosting)

Each time the website is accessed, the following data is technically processed:

  • IP address
  • Date and time of the request
  • Accessed content / URL
  • Referrer URL
  • Browser type/version, operating system
  • Other technical log data (e.g. request ID)

‍

Purposes: Operation of the website, security, error analysis, abuse prevention.

Legal basis: Art. 6(1)(f) GDPR.

‍

5.2 Consent Data (Cookiebot)

To store your cookie/consent settings, consent data is processed (e.g. status/preferences).

Purposes: Collection, documentation, management of consent.

Legal basis: Art. 6(1)(c) GDPR and/or Art. 6(1)(f) GDPR; for non-essential cookies additionally § 25(1) TTDSG.

‍

5.3 Usage and Analytics Data (Website Analytics)

Depending on integration, we process events and usage data to evaluate website usage, e.g.:

  • Page views / sessions
  • Interactions (clicks, scrolls)
  • Technical information (device, browser, language)
  • Approximate location information (derived from IP)

Purposes: Product/website improvement, stability, bug fixing, usage evaluation.

Legal basis: Art. 6(1)(a) GDPR (consent), where tracking/analytics is used.

‍

67. Services Used (Hosting / Analytics / Communication)

‍

6.1 Hosting (Webflow)

Hosting/website delivery is provided by Webflow.

Purposes: Delivery of the website, operation, security, stability.

Legal basis: Art. 6(1)(f) GDPR.

‍

6.2 Analytics / Tracking (only after consent)

The following service is currently integrated and only started after consent:

  • Google Analytics (GA4)

Purposes: Reach measurement, usage analysis, optimization of website and content.

Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with § 25(1) TTDSG.

Note: Google Ads/Conversion tracking is not used on the website.

Depending on the provider, data may be transferred to third countries (in particular the USA) (see section 9).

‍

7. Recipients / Data Processors

We use service providers as data processors. Relevant recipients (website):

  • Webflow (hosting)
  • Cookiebot (consent management)
  • Google Analytics (website analytics)
  • CleverTap (communication/engagement; newsletter)

‍

8. Third Country Transfers

For transfers to third countries, appropriate safeguards pursuant to Art. 46 GDPR are used, in particular EU Standard Contractual Clauses (SCC).

Where providers are certified under the EU-US Data Privacy Framework, the transfer is based on this framework.

‍

9. Storage & Retention Periods

  • Access data/server logs are only stored as long as required for operation, security and error analysis.
  • Analytics/tracking data is stored according to the respective tool settings and retention policies.
  • Communication/newsletter data (CleverTap) is stored as long as required for communication/management or until withdrawal of consent, unless legal retention obligations apply.

‍

10. Rights of Data Subjects

Data subjects have – where applicable – the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR) with effect for the future
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Requests can be directed to datenschutz@aumio.de.

‍

11. Automated Decisions

No automated decision-making with legal or similarly significant effect within the meaning of Art. 22 GDPR takes place.

‍

12. Changes

The current version is always available on the website.

‍

EN