Privacy Policy — Website
Last updated: July 2026
This privacy policy applies exclusively to the Drall website at drall.ai (the "Website").
1. Controller
TNT Ventures GmbH
Venloer Str. 240, 50823 Köln, Germany
Email: hello@tntventures.de
2. What Data We Collect
When you visit this Website, we collect only the minimum data necessary to serve the page and — with your consent — anonymous usage statistics:
- Server access logs — Your IP address, browser type, referring URL, and timestamp are logged by our hosting provider for security and abuse prevention. These logs are automatically deleted after 30 days.
- Cookie preference — We use a strictly necessary localStorage entry to store your cookie-consent choice. This is exempt from consent requirements under ePrivacy rules.
- Google Tag Manager & Google Analytics (consent-based) — If you accept analytics cookies via our cookie banner, we load Google Tag Manager, which manages our measurement tags, and Google Analytics 4 to collect anonymous usage data such as pages visited, session duration, and approximate geographic region. IP addresses are anonymized. No advertising or personalization features are enabled. If you decline or have not yet made a choice, neither Google Tag Manager nor Google Analytics is loaded, no analytics cookies are set, and no data is sent to Google.
- Demo booking (Cal.com) — If you book a demo on our demo page, our scheduling provider Cal.com processes the details you submit (such as your name, email address, and any notes you add) together with the date and time you select, in order to arrange and confirm the meeting. The Cal.com booking calendar is loaded only on our demo page.
3. Legal Basis
- Server access logs — Legitimate interest in ensuring the security and availability of the Website (Art. 6(1)(f) GDPR).
- Cookie preference — Strictly necessary; exempt from consent requirements under ePrivacy rules.
- Google Tag Manager & Google Analytics — Your explicit consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by clearing your browser's local storage or using your browser's cookie settings.
- Demo booking — Performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
4. Hosting & Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting & CDN | Edge network (EU nodes preferred); company based in US. EU Standard Contractual Clauses (SCCs) in place. |
| Google LLC | Google Tag Manager (tag/consent management) and Google Analytics 4 — anonymous website usage statistics (only with your consent) | US. EU Standard Contractual Clauses (SCCs) and EU–US Data Privacy Framework certification in place. |
| Cal.com, Inc. | Demo scheduling / booking calendar (EU instance, app.cal.eu) — processes your name, email, and meeting details | EU data residency (Cal.com EU instance); company based in US. EU Standard Contractual Clauses (SCCs) in place. |
5. International Transfers
Vercel operates a global edge network. Requests are routed to the nearest node, which for European visitors is typically an EU location. Where data may transit through non-EU infrastructure, appropriate safeguards are in place via EU Standard Contractual Clauses (SCCs) between TNT Ventures GmbH and Vercel Inc.
If you consent to analytics, anonymous usage data is processed by Google LLC in the United States. Safeguards include Google's EU–US Data Privacy Framework certification and EU Standard Contractual Clauses (SCCs).
Demo bookings are processed via Cal.com's EU instance (app.cal.eu), with data stored on EU-based infrastructure. Where data may be accessed from outside the EU by Cal.com, Inc., appropriate safeguards are in place via EU Standard Contractual Clauses (SCCs).
6. Data Retention
- Server access logs — automatically deleted after 30 days.
- Cookie preference — stored locally in your browser; no server-side retention.
- Google Analytics data — retained for 14 months (Google's default), then automatically deleted. Individual analytics cookies expire after 2 years of inactivity.
- Demo booking data — retained by Cal.com for as long as needed to schedule and manage the meeting; you may request deletion at any time (see "Your Rights").
7. Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict processing of, and object to the processing of your personal data. You also have the right to data portability and to lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at hello@drall.ai. We will respond within 30 days.
8. Changes
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page.
9. Contact
For privacy-related inquiries regarding this Website:
Email: hello@drall.ai
Company Information: View Imprint