Privacy policy

This privacy policy explains how Movia Technologies GmbH processes personal data when you visit www.movia-technologies.com. It is based on the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

Movia Technologies GmbH
Bahnhofstrasse 94a
82166 Gräfelfing, Germany
Represented by the managing director Dr. Klaus Büttner
Phone: +49 179 4236628
E-mail: datenschutz@movia-technologies.com

We are not legally required to appoint a data protection officer. Please send any data protection questions to the e-mail address above.

2. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the site, IONOS processes the data listed in section 3 on our behalf. We have a data processing agreement with IONOS under Art. 28 GDPR. The servers are located in the EU.

3. Server log files

Each time you visit the website, your browser automatically sends the following information, which is stored in server log files:

IP address of the requesting device
date and time of access
page requested and referrer URL
browser type and version
operating system

We need this data to deliver the website and to keep our systems secure. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a stable and secure website. Log files are deleted after a maximum of 8 weeks. We do not combine this data with other data sources.

4. Consent management and cookies

We only store information on your device, or read it from your device, where this is strictly necessary to provide the website (§ 25(2) TDDDG) or where you have consented (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

When you first visit the site, a banner asks which optional services you want to allow. We store your choice on your device so the banner does not reappear on every page. This storage is strictly necessary. You can change or withdraw your consent at any time under "Privacy settings" at the bottom of every page. Withdrawal applies to the future only.

We do not use advertising or cross-site tracking cookies.

5. Web analytics with IONOS SiteAnalytics

If you consent, we use IONOS SiteAnalytics to create statistics about how the website is used, for example which pages are viewed, the referring website, browser, operating system, device type and time of visit. Your IP address is shortened (anonymised) before the analysis. The data is processed by IONOS SE on servers in the EU on our behalf and is not used to identify individual visitors.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time under "Privacy settings".

6. Website translator (Google Translate)

If you consent, you can translate the website with Google Translate. Only then does your browser load a script from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives your IP address, the page content and technical browser data. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. More information: policies.google.com/privacy.

7. Contact form

If you use the contact form, we process the information you enter (name and message) to handle your request. The form is processed by IONOS as our hosting provider and sent to us by e-mail.

Legal basis: your consent given via the checkbox in the form (Art. 6(1)(a) GDPR). If your request concerns a contract or pre-contractual measures, the legal basis is also Art. 6(1)(b) GDPR. We delete the data once your request has been dealt with, unless statutory retention obligations apply.

8. AI chat assistant

Our website offers a chat assistant (bottom right). It is only used if you type a message. Your message is sent to a server operated by us in Germany and processed by an automated workflow (n8n). To generate the answer, the message is passed to an AI language model of OpenAI. For business customers in the EU, the provider is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes the data on our behalf under a data processing agreement (Art. 28 GDPR) and does not use it to train its models. OpenAI may keep inputs for up to 30 days to detect misuse and then deletes them.

We only process the text you enter. No cookies are set and we do not create user profiles. Chat messages are stored on our server for 2 hours and then deleted automatically.

Please do not enter any sensitive personal data in the chat. Answers are generated automatically and may be inaccurate.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is answering visitor questions quickly and demonstrating our AI solutions. Where your question concerns a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.

9. Voice assistant

On the page you can talk to a voice assistant. Your browser will ask for permission to use your microphone first. Audio is only recorded while you actively use the function. The recording is sent to our server in Germany, transcribed with OpenAI and answered automatically as described in section 8. The audio recording is not stored on our server after processing. The transcribed text is stored for 2 hours like a chat message.

Legal basis: your consent under Art. 6(1)(a) GDPR, given by starting the recording and allowing microphone access. You can revoke microphone access at any time in your browser settings.

10. Recipients

We only pass on personal data where this is needed for the purposes described above. Recipients are our hosting provider IONOS SE, OpenAI when you use the chat or voice assistant (sections 8 and 9) and, if you consent, Google (section 6). We may also pass on data to tax advisers or lawyers, who are bound by professional confidentiality, and to authorities where we are legally required to do so.

11. Transfers to third countries

Data may be transferred outside the EU/EEA in two cases:

Google Translate (section 6): Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR).
Chat and voice assistant (sections 8 and 9): OpenAI may process data in the USA through OpenAI, L.L.C. The transfer is based on the EU standard contractual clauses included in OpenAI's data processing agreement (Art. 46(2)(c) GDPR).

We do not transfer personal data to other third countries.

12. Storage period

We store personal data only for as long as needed for the purpose concerned. Statutory retention periods (for example under § 257 HGB and § 147 AO, up to ten years) remain unaffected. In those cases the data is restricted and deleted once the period ends.

13. Your rights

You have the following rights regarding your personal data:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
withdrawal of consent at any time, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, an informal message to datenschutz@movia-technologies.com is enough.

Right to lodge a complaint (Art. 77 GDPR): you can complain to a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

14. Obligation to provide data and automated decisions

You are not obliged to provide personal data. Without it, we may not be able to answer your request. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Data security

This website uses TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser. We use appropriate technical and organisational measures to protect your data. Please note that data transmitted over the internet, for example by e-mail, cannot be fully protected.

16. Changes

We update this privacy policy when the website or the law changes. Current version: October 2026.