Privacy

Privacy notice.

This notice explains how NavAIgate GmbH & Co. KG, Gerhart-Hauptmann-Straße 59, 85055 Ingolstadt (the controller) processes personal data on navaigate.dev. Questions and requests: dw@navaigate.dev. The legal notice is at /impressum.

What this site processes

The public marketing site does not set cookies and does not run analytics, advertising or social pixels. Hosting and delivery are provided by Vercel. Server logs (IP address, user agent, requested URL, time) are processed for security and debugging on the basis of our legitimate interest in running a reliable site (Art. 6(1)(f) GDPR) and are retained only as long as the host keeps them.

Fonts are served from this site. We do not load fonts or other assets from Google. Embedded third-party forms and videos are described below.

Contact and booking

The homepage contact link opens your mail client to dw@navaigate.dev. Email you send us is processed to reply and, if you ask for work, to prepare a proposal (Art. 6(1)(b) GDPR). The “Book a discovery call” links go to Calendly, which is a separate controller for the booking itself.

The AIOS programme page embeds a Tally form. Tally processes the answers you type in that form on our behalf so we can follow up. Use of the form is optional.

Readiness review

The homepage “readiness review” sends the text you type to a language model (currently OpenAI) so a one-off paragraph can be generated. We do not store that text in our own database. The request is protected with Cloudflare Turnstile and a per-address rate limit. We use it on the basis of our legitimate interest in demonstrating the work (Art. 6(1)(f) GDPR). Do not paste secrets, health data or anyone else’s personal data. The model provider may process the prompt under its own terms; we configure the call so the output is streamed back to you and not kept as a NavAIgate record.

Testimonials

If you submit a testimonial we process your name, role, company, quote, optional photograph or video, a contact email (not published), and a consent record (time, wording version, and which permissions you granted). Cloudflare Turnstile is used to stop automated submissions.

We publish a testimonial only after we have reviewed it. Until then it is held in a private queue. Publication is based on your consent (Art. 6(1)(a) GDPR; for a likeness, § 22 KUG). It is voluntary and not a condition of any service. Written details and the consent record are held in our database (Supabase). Photos and videos are held in object storage (Backblaze B2), EU region eu-central-003. Processors are bound by a data-processing agreement; transfers outside the EU/EEA use the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We strip location and other EXIF metadata from photos before publication.

We keep a published testimonial for as long as it is on the site. When you withdraw consent we take it down, delete the media, and retain only the consent-and-withdrawal record for as long as we may need it to prove the processing was lawful.

Your rights

You can withdraw consent, or ask us to remove a testimonial, at any time without giving a reason — emaildw@navaigate.dev. Withdrawal does not affect the lawfulness of processing before you withdrew.

You also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to complain to a supervisory authority. Ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach. To exercise any of these rights, email dw@navaigate.dev and say what you want us to do. We will reply without undue delay and within one month.