Legal

Privacy Policy

Last updated: June 2026 · Pursuant to the EU General Data Protection Regulation (GDPR) and applicable German data protection law

1. Data Controller

The data controller responsible for the processing of your personal data is:

LazyFox Labs GmbH

Richardstraße 11

12043 Berlin, Germany

Email: contact@lazy-fox.ai

For all data protection enquiries — including requests to exercise your rights — please contact us at contact@lazy-fox.ai.

2. Data We Collect

2.1 Information you provide

When you register for early access, request a product demonstration, or contact us, we collect the following categories of personal data:

  • Name — first and last name
  • Business email address
  • Company name
  • Any additional information you voluntarily include in your message

2.2 Data collected automatically

When you visit our website, our web server and analytics tools may automatically collect:

  • IP address (anonymised where possible)
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of the visit
  • Pages viewed and time spent on pages

2.3 No sensitive data

We do not knowingly collect special categories of personal data (e.g. health data, racial or ethnic origin, political opinions) and do not target individuals under the age of 16.

3. Purposes and Legal Basis

We process your personal data for the following purposes on the following legal bases (Art. 6 GDPR):

3.1 Responding to enquiries & providing early access

We process name, email, and company to respond to your contact request, manage your early-access registration, and schedule product demonstrations.
Legal basis: Art. 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering a contract; and Art. 6(1)(f) GDPR — our legitimate interest in responding to business enquiries.

3.2 Product and service communication

With your consent, we will send you product updates, release announcements, and relevant content about LazyFox.
Legal basis: Art. 6(1)(a) GDPR — consent. You may withdraw consent at any time by clicking "unsubscribe" in any email or by writing to contact@lazy-fox.ai.

3.3 Website analytics and improvement

We use anonymised analytics data to understand how visitors use the website and to improve it.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding website performance. Where cookies are used, we rely on your consent pursuant to § 25 TDDDG.

3.4 Legal compliance

We may process your data to comply with applicable legal obligations (e.g. tax, commercial law retention requirements).
Legal basis: Art. 6(1)(c) GDPR.

4. Cookies and Analytics

4.1 Strictly necessary cookies

We use technically necessary cookies that are essential to operate the website. These require no consent.

4.2 Google Analytics

Our website may use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies to analyse your use of the website. The information generated by the cookie (including your IP address) is transmitted to and stored on Google servers. We have enabled IP anonymisation (IP masking) so that your IP address is truncated within the EU/EEA before transmission.

Google processes this data on our behalf as a data processor under a Data Processing Agreement (Art. 28 GDPR). Google may transfer data to the United States; such transfers are covered by the EU–US Data Privacy Framework and Google's Standard Contractual Clauses.

Google Analytics cookies are only set after you have given your consent via our cookie banner. You may withdraw consent at any time by adjusting your browser settings or by using the Google Analytics Opt-out Browser Add-on.

4.3 Managing cookies

You can control and/or delete cookies at any time through your browser settings. Disabling cookies may affect the functionality of certain parts of the website.

5. Third-Party Recipients

We share your personal data only where necessary and only with the following categories of recipients:

  • IT infrastructure and hosting providers — processing data on our behalf under Art. 28 GDPR data processing agreements
  • Google LLC — web analytics (see Section 4.2)
  • Email service providers — used to deliver transactional emails and product updates
  • Legal, tax, and auditing advisors — where required by law or to protect our legitimate legal interests
  • Authorities and courts — where required by applicable law or regulatory order

We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes.

6. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred to third countries, we ensure an adequate level of protection through one or more of the following mechanisms:

  • European Commission adequacy decisions
  • EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR
  • EU–US Data Privacy Framework certification (where applicable)

You may request a copy of the relevant safeguards by contacting contact@lazy-fox.ai.

7. Retention Periods

We retain personal data only as long as necessary for the purposes for which it was collected:

  • Early-access enquiry data — retained for up to 3 years from your last interaction, unless you request deletion earlier
  • Marketing communication data — retained until you withdraw consent or unsubscribe
  • Website analytics data — retained for up to 14 months in Google Analytics (configured via data retention settings)
  • Data subject to statutory retention — retained for the period required by applicable law (e.g. 10 years for commercial and tax records under §§ 147 AO, 257 HGB)

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us at contact@lazy-fox.ai. We will respond within one month (extendable by a further two months in complex cases).

Right of Access (Art. 15)

Obtain a copy of the personal data we hold about you and information on how we process it.

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17)

Request deletion of your personal data where processing is no longer necessary or was unlawful.

Right to Restriction (Art. 18)

Request that we restrict processing of your data in certain circumstances.

Right to Portability (Art. 20)

Receive your data in a structured, machine-readable format and transmit it to another controller.

Right to Object (Art. 21)

Object to processing based on legitimate interests or for direct marketing purposes. We will stop unless compelling grounds override your interests.

Right to Withdraw Consent

Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

Right Not to be Subject to Automated Decisions (Art. 22)

Not to be subject to decisions based solely on automated processing that produce significant legal effects.

We do not engage in profiling or automated individual decision-making as described in Art. 22 GDPR.

9. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data infringes the GDPR. The supervisory authority responsible for LazyFox Labs GmbH is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

(Berlin Commissioner for Data Protection and Freedom of Information)

Friedrichstr. 219, 10969 Berlin, Germany

Email: mailbox@datenschutz-berlin.de

Website: www.datenschutz-berlin.de

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "last updated" date at the top of this page indicates when the most recent revision was made. Where changes are material, we will notify you by email (if we hold your email address) or by a prominent notice on our website. We encourage you to review this page periodically.