Privacy Policy

Last updated: 29 September 2026

Who we are

This website is operated by AA-sec (“we”). For any privacy question or request, contact us at contact@double-a-sec.com.

What data we process

We process the following categories of personal data:

• Contact-form data — your name, email address, message, confirmation that you accepted the General Terms and Conditions, and any optional company or phone details you provide. We process this information to review and answer your request. Legal basis: steps prior to entering a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to business inquiries (Art. 6(1)(f) GDPR).
• Technical access data — our hosting and content delivery provider, Cloudflare, processes your IP address, user agent, and request metadata in server and security logs to deliver the site, process the form request, and protect the service from malicious traffic. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a secure website. See the Cloudflare Privacy Policy.
• Email correspondence — after the form is submitted, the request is sent to our contact mailbox through Cloudflare Email Service. We process subsequent email correspondence to answer your inquiry and manage any follow-up.

Aggregate interaction measurement

To understand interest in our product Demo and in our downloadable client, technical and investor presentations, and to improve this website, we count two interactions:

• Demo link activations — the page and the position of the link that was used (for example “home page, hero”).
• Successful Pitch Deck downloads — the deck type (client, technical or investor) and its language (English or German).

Each interaction only increases a counter for that day (UTC) and website environment. We store no IP address, user agent, referrer, full URL, query string, cookie, visitor or session identifier, device fingerprint or contact-form data with these counters, and we do not combine them into journeys, profiles or cross-site tracking. No analytics cookie is set and nothing is stored in your browser for this purpose; see the Cookie Policy. The request that reaches our servers is handled by Cloudflare like any other request, as described under technical access data above.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in measuring interest in the Demo and our presentations and in improving the website. The stored counters do not identify you, and we do not sell them.

Demo usage statistics

Our product Demo on demo.double-a-sec.com counts, for each UTC day and Demo version, how often each Demo screen was opened and each Demo action was used, and whether the answer succeeded or failed. Only these daily totals are sent to our website database. They contain no IP address, user agent, referrer, URL, query string, cookie, visitor or session identifier, device fingerprint or text you entered in the Demo, and we do not combine them into journeys or profiles. The changes you make in the Demo stay in a cookie in your browser; we never write them to disk, a database or external storage.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in understanding which parts of the Demo are used and in improving it. The totals do not identify you, and we do not sell them.

Required and optional fields

Your name, email address, message, and acceptance of the General Terms and Conditions are required to submit the form. Company and phone details are optional. If required information is not provided, we cannot process the request through the form.

Retention

Contact requests and related email correspondence are kept only as long as needed to handle the inquiry, complete any follow-up, meet legal obligations, and establish or defend legal claims. Cloudflare retains technical and email-delivery logs according to its own retention policies; we do not create a separate website database containing form submissions.

Aggregate interaction counters and Demo usage statistics are kept in our website database for as long as they remain useful for comparing interest over time, including year over year. They are not deleted automatically because they contain no personal data.

Recipients and transfers

Data is processed by Cloudflare, Inc. as our hosting, database, security, and email-delivery provider, and by the provider operating our contact mailbox. Cloudflare participates in the EU–U.S. Data Privacy Framework and offers EU Standard Contractual Clauses for international transfers. We do not sell personal data.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17) and restriction of processing (Art. 18);
• data portability where applicable (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• lodge a complaint with your local supervisory authority (Art. 77).

Cookies and local storage

This website sets no analytics or advertising cookies, including for the aggregate measurement described above. The Demo on demo.double-a-sec.com sets one strictly necessary cookie that keeps your changes in your browser. For information about it, about the preferences both sites keep in your browser’s local storage, and about the strictly necessary cookies Cloudflare may set, see the Cookie Policy.