Privacy Policy
Courtesy translation. The binding version is the German one.
1. Controller
DigitalAnna UG (haftungsbeschränkt)Prof. Heincke Str. 31, 27498 Helgoland, Germany
Represented by the Managing Director: Thore F. Laufenberg
Email: info@digitalanna.de
2. Overview
We process personal data insofar as necessary to provide the Service: when creating and paying for radio commercials, in the optional brokering of professional productions by external studios, and for the technical operation of the website. Creating and paying for a spot is generally possible without a customer account.
3. Website provision & server log files
When you access the Service, the server automatically stores information in server log files (IP address,
date/time, page requested, data volume, browser and OS, requesting provider) for technical delivery,
stability and security.
Legal basis: Art. 6 (1) (f) GDPR.
4. Cookies
We use only technically necessary cookies. After login we set an authentication cookie; we also store your
language choice. No tracking or marketing cookies are used.
Legal basis: § 25 (2) no. 2 TDDDG and Art. 6 (1) (b) GDPR.
5. Creating and buying a spot (order data & AI)
To create a spot we process the information you enter (company name, product/offer description, target audience, tone, language and voices), optionally your email address, and the resulting scripts, audio files and production report. To generate the content we use AI providers:
- Speech synthesis / sound generation: ElevenLabs, to which the texts to be spoken and sound descriptions are transmitted.
- Script/concept generation (language model): the AI provider we use, to which your brief is transmitted.
Legal basis: Art. 6 (1) (b) GDPR. Please do not enter special categories of personal data or third-party data you are not authorised to process.
6. Registration for studio brokering (magic link)
To request quotes from professional studios, registration by email is required. Login is passwordless via a
one-time login link (“magic link”). We process your email address and the time-limited login token.
Legal basis: Art. 6 (1) (b) GDPR.
7. Brokering professional productions (disclosure to studios & chat)
When you request quotes from up to three studios, we transmit your request, the files already produced and
the production report to the selected studios. Communication takes place via an on-platform chat; messages
are stored and automatically checked for contact patterns (e.g. email addresses, phone numbers) to ensure
the deal is handled via the platform.
Legal basis: Art. 6 (1) (b) and (f) GDPR.
8. Email dispatch
For sending login links and notifications we use an email/SMTP provider, to which the required data (email
address, notification content) is transmitted.
Legal basis: Art. 6 (1) (b) GDPR.
9. Payment processing (PayPal)
Payments are handled by PayPal. Payment data is processed by PayPal on its own responsibility; we receive a
confirmation and a transaction ID. Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal,
L-2449 Luxembourg.
Legal basis: Art. 6 (1) (b) and (c) GDPR.
10. Transfer to third countries
Where providers process data outside the EU/EEA (e.g. in the USA), this is done only under Art. 44 et seq. GDPR, in particular on the basis of EU standard contractual clauses.
11. Storage period
We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods.
12. Recipients / processors
Recipients are the service providers required to provide the Service (hosting, the named AI providers, the email provider and the payment provider) and – within brokering – the studios you select. Data processing agreements under Art. 28 GDPR are in place.
13. Your rights
Under the GDPR you have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). A message to info@digitalanna.de is sufficient to exercise them.
14. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For the controller this is the Independent State Centre for Data Protection Schleswig-Holstein (ULD).
15. No automated individual decision-making
There is no solely automated decision-making with legal effect within the meaning of Art. 22 GDPR.
16. Abuse protection: captcha and rate limiting
To protect against automated abuse and to cap costs, we verify a captcha before paid AI actions (production)
and limit the number of requests per IP address per day. For the captcha we use
Cloudflare Turnstile; your IP address is transmitted to Cloudflare and processed there for
bot detection. Turnstile uses no advertising cookies and builds no user profiles. For rate limiting we also
store your IP address with a timestamp for a short period.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in fraud/abuse prevention and
protection from disproportionate costs).
17. Changes to this privacy policy
We adapt this privacy policy as soon as changes to our processing make this necessary.
Last updated: July 2026