Privacy Policy — Website
Last updated: June 2026
This privacy policy applies exclusively to the Drall website at drall.ai (the "Website").
1. Controller
TNT Ventures GmbH
Venloer Str. 240, 50823 Köln, Germany
Email: hello@tntventures.de
2. What Data We Collect
When you visit this Website, we collect only the minimum data necessary to serve the page and — with your consent — anonymous usage statistics:
- Server access logs — Your IP address, browser type, referring URL, and timestamp are logged by our hosting provider for security and abuse prevention. These logs are automatically deleted after 30 days.
- Cookie preference — We use a strictly necessary localStorage entry to store your cookie-consent choice. This is exempt from consent requirements under ePrivacy rules.
- Google Analytics (consent-based) — If you accept analytics cookies via our cookie banner, we use Google Analytics 4 to collect anonymous usage data such as pages visited, session duration, and approximate geographic region. IP addresses are anonymized. No advertising or personalization features are enabled. If you decline or have not yet made a choice, no analytics cookies are set and no data is sent to Google.
3. Legal Basis
- Server access logs— Legitimate interest in ensuring the security and availability of the Website (Art. 6(1)(f) GDPR).
- Cookie preference — Strictly necessary; exempt from consent requirements under ePrivacy rules.
- Google Analytics— Your explicit consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by clearing your browser's local storage or using your browser's cookie settings.
4. Hosting & Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting & CDN | Edge network (EU nodes preferred); company based in US. EU Standard Contractual Clauses (SCCs) in place. |
| Google LLC | Google Analytics 4 — anonymous website usage statistics (only with your consent) | US. EU Standard Contractual Clauses (SCCs) and EU–US Data Privacy Framework certification in place. |
5. International Transfers
Vercel operates a global edge network. Requests are routed to the nearest node, which for European visitors is typically an EU location. Where data may transit through non-EU infrastructure, appropriate safeguards are in place via EU Standard Contractual Clauses (SCCs) between TNT Ventures GmbH and Vercel Inc.
If you consent to analytics, anonymous usage data is processed by Google LLC in the United States. Safeguards include Google's EU–US Data Privacy Framework certification and EU Standard Contractual Clauses (SCCs).
6. Data Retention
- Server access logs — automatically deleted after 30 days.
- Cookie preference — stored locally in your browser; no server-side retention.
- Google Analytics data— retained for 14 months (Google's default), then automatically deleted. Individual analytics cookies expire after 2 years of inactivity.
7. Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict processing of, and object to the processing of your personal data. You also have the right to data portability and to lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at hello@drall.ai. We will respond within 30 days.
8. Changes
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page.
9. Contact
For privacy-related inquiries regarding this Website:
Email: hello@drall.ai
Company Information: View Imprint