Privacy Policy
Postgate AI is a product of BUHIT GmbH. BUHIT GmbH is responsible for data processing on this website. This is a convenience translation - the German version (Datenschutzerklärung) prevails.
1. Privacy at a glance
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
This website is a purely informational website. We only process personal data insofar as this is necessary to provide the website or if you contact us of your own accord. On the information pages no cookies and no third-party tracking services are used. For audience measurement we exclusively use cookieless, self-hosted statistics software that does not store any personal data (see section 7); only the customer portal uses a strictly necessary login cookie (see section 6).
2. Controller
The controller for data processing on this website is:
BUHIT GmbH
Silberburgstraße 157
70178 Stuttgart, Germany
Phone: +49 711 400 96 400
Email: ed.tihub@olleh
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.
3. Hosting
We host the content of our website with the following provider:
netcup GmbH
Daimlerstraße 25
76185 Karlsruhe, Germany
When you visit our website, the host automatically collects information in so-called server log files, which your browser transmits. These are in particular: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and security of its website. Processing on our behalf is carried out on the basis of a data processing agreement (DPA) with the host.
4. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address line changing from “http://” to “https://”. With encryption enabled, the data you transmit to us cannot be read by third parties.
5. Contact form and contact by email
If you send us an enquiry via the contact form, the details you enter there (name, email address, subject, message and - optionally - company and phone number) are transmitted by email to our internal mailbox and stored there for the purpose of processing the enquiry and in case of follow-up questions. The data is not stored in a database of the website. The same applies if you contact us directly by email. We do not pass on this data without your consent.
To protect the form against automated abuse we use a self-hosted, invisible bot check (proof of work) and rate limiting; your IP address is processed briefly for technical purposes but is not stored permanently with your enquiry. No third-party services (e.g. external captcha providers) are used. The legal basis for this is our legitimate interest in the security of our website (Art. 6(1)(f) GDPR).
Your enquiry data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR). The data remains with us until you ask us to delete it or the purpose of storage no longer applies; mandatory statutory retention periods remain unaffected.
6. Cookies & no third parties
This information website does not use cookies or third-party analytics or marketing tools. Audience measurement is performed cookieless and without third parties on our own server (see section 7). No personal data is processed for advertising purposes.
Only in our customer portal and during the registration process (trial) do we set a strictly necessary cookie that stores your session (login) and protects the forms against forgery (CSRF). Without this cookie, signing in does not work. It serves this purpose only, is not used for analytics or advertising, and is exempt from consent under Section 25(2) TDDDG - which is why there is no cookie banner.
7. Audience measurement with Plausible Analytics (self-hosted)
For anonymous audience measurement we use the open-source software Plausible Analytics, which we operate entirely ourselves on our own server in Germany. No data is transferred to third parties.
Plausible does not set cookies and does not store any personal data. The IP address and browser identifier (user agent) are used only transiently to derive an anonymous numeric value (hash) that changes daily - they are not stored. This makes it impossible to identify individual persons or track them across sites. Only aggregated statistics are collected, such as pages visited, referrer, browser and device type, and country of origin.
The legal basis is our legitimate interest in an anonymous analysis of website usage (Art. 6(1)(f) GDPR). Since no cookies are set and no information is accessed on your device, no consent under Section 25 TDDDG is required.
8. Payment processing via Mollie
For billing paid subscriptions we use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. When you take out or renew a subscription, we transmit the data required for payment processing (including name, billing address, payment amount, and payment method data such as credit card, PayPal, or SEPA direct debit details) to Mollie. Mollie processes this data as an independent controller in accordance with Mollie's privacy policy (mollie.com/en/privacy).
The legal basis is Art. 6(1)(b) GDPR (performance of the contract for the use of Postgate AI). Without this data transfer we cannot process payments.
9. Data processing agreement (DPA) for the Postgate AI service
When using the Postgate AI service itself (as opposed to merely visiting this website), we process data from your Exchange mailboxes on your behalf. For this purpose, a data processing agreement pursuant to Art. 28 GDPR is concluded directly during registration - including documented technical and organisational measures and a list of subprocessors. Registered users can access the agreement at any time in the customer portal. The German original is the binding version. Convenience translations are available in every language this website is offered in.
10. Your rights
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. You also have a right to restriction of processing and a right to data portability.
You also have the right to object to the processing of your personal data, as well as the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding this and any other questions on the subject of data protection.