The registration details in this draft are supported by commercial registry directories. A current official Handelsregister extract has not been obtained. Company name, legal status, register number, registration date, address and representation remain pending official verification. The VAT ID is unconfirmed; no VAT number is published.
Service recommendations and optional CTA measurement
The Feed may recommend services belonging to the current brand based on article content. Recommendations can be selected by AI or an administrator. Article matching uses article text and service descriptions, without account or visitor profiles.
CTA measurement is off by default and requires deployment approval plus brand activation. When enabled, events contain the service, brand, article when relevant, placement, CTA language, recommendation origin and revision, event type and time. No account identifier, raw IP address, tracking cookie or persistent visitor identifier is stored by this feature. Signed short-lived tokens prevent duplicate events. Event data is retained for up to 90 days, with cleanup on the background worker schedule; temporary rate-limit counters are cleaned after one day. Infrastructure providers still receive network data. Activation, any required consent and legal basis must be reviewed before production use.
- Company
- aiDUS GmbH
- Registered address
- c/o K67, TechHub, Kasernenstraße 67, 40213 Düsseldorf, Germany
- Telephone
- +49 211 17450754
Who is responsible for your data?
The operator identified below is the proposed controller for personal data processed through this branded Feed. Contact the operator to ask about processing or exercise your rights. The allocation of responsibilities for shared technical infrastructure must be confirmed before release.
Accounts & saved articles
You can read public news without creating an account. If you register, we process your email address, authentication records and any name or avatar you supply, together with saved articles and newsletter preferences. These records support account access, saved content and requested services.
Supabase provides authentication and database services. The browser client persists session tokens in local storage and refreshes them to maintain your session. Passwords are handled by the authentication service; they must not be included in monitoring events.
Cookies & browser storage
The feed_locale cookie remembers the selected language for up to one year. In local and preview environments, feed_brand_preview remembers a test brand for up to seven days; it is removed on configured production domains.
Local storage retains the theme (feed_theme), section display preferences and authentication session data. These values support requested site functions. Clearing browser storage removes local preferences and may sign you out. No Session Replay consent is inferred from use of the site.
Error monitoring & technical data
Vercel receives technical request data needed to serve the site, such as IP address, request time and browser information. Sentry is configured for error monitoring in production builds. Diagnostic events may contain sanitized error messages, stack traces, route information and technical runtime details.
Automatic Session Replay, automatic log export and performance tracing are disabled. Default PII collection is disabled. The application removes user identity, request bodies, headers, cookies, query strings and fragments from outgoing error events and filters breadcrumbs. Error text is additionally filtered for common sensitive patterns. This reduces exposure but is not a guarantee of anonymity: infrastructure providers still receive network data.
There is no enabled Session Replay feature requiring a replay-consent decision. Any future replay or optional analytics feature must undergo a privacy review and receive the required consent before activation. Provider retention and Sentry data-residency settings remain to be confirmed by the account owner.
Providers & international processing
The Feed uses Vercel for hosting, Supabase for authentication and storage, Resend for email delivery, Inngest for background workflows and Sentry for error diagnostics. Backend AI services process source articles to produce summaries and translations; account data is not intentionally supplied to those article-processing prompts.
The connected Feed Supabase projects report the eu-central-1 (Frankfurt) region. This does not establish the location of every provider’s processing, backups or support access. The production project mapping, hosting regions, processor contracts and safeguards for any international transfers must be confirmed before approval. External article links take you to separately operated websites with their own privacy notices.
Retention & security
Account and subscription records are stored to provide the services you request, subject to applicable legal duties and your rights. A verified retention schedule for accounts, newsletter contacts, delivery logs, backups and monitoring events is still required. This draft does not claim a fixed provider retention period.
Access controls, encrypted transport and credential handling form part of the technical safeguards. Contact the operator to request deletion or ask about retention. Deletion procedures, backup handling and any statutory retention exceptions must be validated before publication.
Your rights & applicable law
The legal framework and rights applicable to this company are set out below. Contact the operator using the email provided. We may request proportionate information to establish your identity; a copy of an identity document is not automatically required for every request. The company must validate processing purposes, legal bases and the rights-handling procedure before release.
For aiDUS GmbH, GDPR and applicable German data-protection law are relevant. Depending on the processing, rights include access, rectification, erasure, restriction, portability, objection and withdrawal of consent, as well as a complaint to a competent supervisory authority. LDI NRW is the proposed regional authority, subject to verification. German law is the proposed framework for these terms, without overriding mandatory consumer protections. Purpose-specific legal bases must be approved before publication.
