Privacy Policy

Patalyze GmbH (“Patalyze”) operates patalyze.com (the "Site"). This page informs the individual who accesses the Site (“Visitor”) how Patalyze's services collect, use and disclose personal information.

Patalyze only uses Visitor’s personal data within the scope of legal regulations, in particular the General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). With this privacy policy, Patalyze informs Visitor - regardless of whether Visitor set up a user account, use Patalyze's Service or visit Patalyze's website - about the nature, scope and purposes of the collection, use and processing of personal data by Patalyze.

1. Data Controller#

The data controller responsible for data processing pursuant to the GDPR, BDSG, other data protection laws applicable in the member states of the European Union, and other regulations relating to data protection is:

Patalyze GmbH, Stadionstr. 6, 85716 Unterschleißheim, Germany

If Visitor has any questions or concerns about privacy, please contact info@patalyze.com. For the conclusion of a data processing agreement pursuant to Art. 28 GDPR and for general questions about Patalyze's Services, please contact info@patalyze.com. Further information on the data processing when contacting Patalyze can be found in section 9.

2. Scope of Data Protection#

Data protection applies to personal data as defined by the GDPR, i.e. all information relating to an identified or identifiable natural person. An identifiable natural person is deemed to be a natural person who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific attributes.

3. Using Patalyze’s Services#

When Visitor is logged into a Patalyze account, Patalyze’s Terms and Conditions apply.

According to its Terms and Conditions, Visitor may not process personal data in connection with Patalyze’s Services without the data subject’s consent or another sufficient legal basis. Records made available through the Services, such as patents and court and legal documents, may contain personal data; for example, patents contain inventor, applicant and assignee names, and court and legal documents may contain the names of parties and other individuals. Visitor is responsible as controller for any personal data it introduces or processes through the Services.

4. Account#

Visitor needs to create a Patalyze account for becoming a user of Patalyze (“User”). To create the account, the following personal data will be stored:

• E-mail address
• Password
• IP address
• Device identifiers
• Operating system
• Referrer URL
• First name, surname, and company name / organization name
• Company name
• Possibly other, additional data Visitor provided during the registration process

Patalyze processes the email address, password, first name, surname, company name, and possibly other, additional data Visitor provided during the registration process on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR to perform the contract of use. Visitor’s IP address, operating system, device identifiers, and referrer url are processed in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, as it is in Patalyze's legitimate interests to match Visitor’s IP address, operating system, device identifiers, and referrer url with data from other Visitor’s that have misused Patalyze's service in the past for fraud prevention purposes.

Creating a Patalyze account is a prerequisite for using Patalyze Services but does not oblige Visitor to purchase a paid offering. User can delete the Patalyze account at any time by sending an e-mail with such request to info@patalyze.com or deleting his account in on the account management page.

If Visitor uses Single Sign-On (SSO) to log in to Patalyze (via Google or Microsoft), there is no need for a separate registration with Patalyze. During the Single Sign-On, the Visitor allows Patalyze to store Visitor's email address, first and last name, profile picture, and unique identifier from the SSO provider. Patalyze processes this data on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.

Upon purchase of any paid offerings, Patalyze additionally collects the following personal data in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR:

• E-mail address
• Name
• Address
• Payment details such as credit card or SEPA direct debit (bank account / mandate) information
• Tax information (if applicable)
• Possibly other, additional data User provided during the payment process.

To process payments, Patalyze forwards the necessary payment data to Patalyze’s authorized payment service provider Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (“Stripe”). Where necessary, Stripe will transfer the data to Stripe, Inc., located in the USA. Further information on data protection at Stripe and compliance with the requirements of Art. 44 GDPR can be found in the Stripe Privacy Policy and the Stripe Privacy Center. Patalyze has concluded a data processing agreement with Stripe, which allows Stripe to process the data solely in accordance with Patalyze’s instructions and not for its own purposes.

In addition to the aforementioned data, Patalyze processes further (usage-)data relevant for the provision and billing of Services, such as the AI & Data Usage consumed across AI processing jobs (such as AI-Generated Mappings, AI Record Enrichment or AI Page Writing). The processing and storage of the aforementioned data is necessary for the conclusion of the contract as well as its performance and is therefore justified according to Art. 6 para. 1 sentence 1 lit. b) GDPR. If User himself/herself is not a party to the contract, but Patalyze is provided to User, e.g. by employer or an Organization to which he/she belongs, Patalyze justifies the processing of the data mentioned in section 4 and the aforementioned usage data via Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is necessary for the performance of the business relationship with Patalyze’s customers, i.e. User’s employer or User’s Organization.

Patalyze stores the data for the duration of the contract term and subsequently, if applicable, for the duration of statutory retention periods, insofar as these prescribe the retention for the respective types of data. Patalyze will delete User’s account if requested to do so. Otherwise, Patalyze will maintain User’s account so that it is available to Users in the event of a renewed use without the User having to register again. This is in User’s as well as in Patalyze's legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

In the account in the section “usage”, Users can also view data about usage behavior e.g. the Number of Records, the value of AI & Data Usage consumed and the AI & Data Usage Balance purchased. Patalyze justifies this data processing via Art. 6 para. 1 sentence 1 lit. b) GDPR, insofar as it is necessary for the performance of the contract, in particular for billing purposes or for managing the remaining AI & Data Usage Balance. Insofar as the processing goes beyond what is necessary for the performance of the contract, Patalyze bases the processing on Patalyze’s legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, as Patalyze seeks to meet Users' wish to visualize information on usage behavior in a transparent manner. The graphical representation of the development of consumption over the contract period is considered to be also in the interest of Users.

If User’s access to Patalyze Services is provided by the User’s employer or an organization to which User belongs, it is possible that Patalyze shares data about User’s usage (e.g. the value of AI & Data Usage consumed, Number of Records, last login date) with User’s employer or organization on request. Providing this data corresponds to Patalyze’s legitimate interests as well as the legitimate interests of Organization in receiving information about the use of the Services Organization has paid for.

5. Processing of Organization Content#

Patalyze processes the Input Users submit in order to provide the Service, and stores Organization Content for the duration of the contract for that purpose. The processing is justified by Art. 6 para. 1 sentence 1 lit. b) GDPR. To provide the AI-based Services, Patalyze transmits Organization Content to Google’s Gemini API (Google LLC, USA) for AI processing on Patalyze’s behalf; such transfers to the USA are safeguarded in accordance with Art. 44 et seq. GDPR (for example the EU standard contractual clauses and/or the EU-U.S. Data Privacy Framework). Organization Content is deleted upon deletion of the relevant Records or account, or on termination of the contract, subject to statutory retention periods and Patalyze’s log-retention practices.

6. Storage of Data When Using Services#

When using Patalyze’s Services, section 3 of this privacy policy applies. The following data is stored for each Database:

• Records (such as products, patents, scientific papers, technical standards, court and legal documents and Custom Objects)
• Number of Records
• Mappings between Records
• Attributes
• Table, dashboard and note pages
• Status/progress of AI processing jobs
• Errors that occurred during AI process jobs

This information is processed in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR based on Patalyze's legitimate interest in improving the functionality of Patalyze's Services, as this makes it easier to identify sources of error in Patalyze's AI processing jobs (such as AI-Generated Mappings, AI Record Enrichment or AI Page Writing). This data is retained for the duration of the contract and deleted when the corresponding Record, Database or Organization is deleted; related access logs and meta data may be retained for up to seven (7) years for security and compliance purposes. Access is limited to authorized personnel.

Patalyze maintains a security and compliance audit log recording administrative and security-relevant actions (such as the acting user, the action, the affected resource and the time). This audit log, and any records Patalyze must keep under statutory retention obligations (for example under commercial and tax law), are retained for up to seven (7) years and are preserved even after Visitor’s account or Organization has been deleted, on the basis of Art. 6 para. 1 lit. c) and f) GDPR and Art. 17 para. 3 GDPR.

7. Automatic Collection of Data via Website Access#

Regardless of whether visitors have an account registered with Patalyze, devices automatically transmit certain data for technical reasons when accessing Patalyze’s website patalyze.com. The following data that Visitor may send will be stored:

• Date and time of access
• Browser type and version
• Operating system
• URL of the website previously visited
• Volume of data transmitted
• Requested domain
• Notification of successful data retrieval
• Search term when using a web browser
• Abbreviated/anonymized IP
• Full IP address
• Diagnostic information in the event of errors

Processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR based on Patalyze's legitimate interest in improving the stability and functionality of Patalyze’s website. The data is stored for purely technical reasons. Website access data is used for error analysis, ensuring system security, logging access to Patalyze and for improving Patalyze’s Services. Based on visitor’s IP address, Patalyze uses geolocation to determine the region from which visitors are visiting Patalyze’s website. Patalyze uses this information to check whether Patalyze can offer Service in visitor’s region, which corresponds to Patalyze’s legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.. The storage of IP addresses of Users for the duration of the contract is justified by Art. 6 para. 1 sentence 1 lit. b) GDPR.

Patalyze’s website also uses services of Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"), which operates a so-called Content Delivery Network (CDN). To protect Patalyze’s website, the data transfer between Visitor’s browser and Patalyze servers is routed through Cloudflare's infrastructure in order to analyze whether it is an abusive attack. As part of this analysis, visitor’s data is transmitted to Cloudflare in encrypted form, if necessary also to Cloudflare servers in the USA. Visitor/User requests are encrypted in transit between visitor’s/User’s end device and the Patalyze servers, so in its content-delivery and bot-protection role Cloudflare processes primarily connection meta-data (such as visitor’s/User’s IP address). Separately, Patalyze uses Cloudflare’s R2 object storage to store certain Organization Content at rest, including exported Dataset and Object data, product images and logos. Cloudflare also determines a so-called bot score immediately before the login to Patalyze, which is based on the analysis of the metadata of the client (browser) used. The use of Cloudflare is in Patalyze’s legitimate interest to secure the use of Patalyze's website and to prevent and defend harmful attacks from outside, Art. 6 para. 1 sentence 1 lit. f) GDPR. Patalyze has concluded a data processing agreement with Cloudflare and Cloudflare may therefore only process the data according to Patalyze's instructions and not for its own purposes. Visitor can find more information about Cloudflare's handling of personal data in Cloudflare’s Privacy Policy.

8. Use of Cookies and Other Storage Technologies#

Patalyze uses cookies, web storage objects and other storage technologies to provide Visitor with a variety of features and improve Visitor’s experience. If Visitors do not want Patalyze to use such technologies, Visitors can change the browser settings accordingly. If Visitors completely disable the use of cookies, web storage objects and other technologies, the functionality and scope of the website may be impaired.

Patalyze specifically use cookies or web storage objects in the following categories:

• Necessary: These cookies or web storage objects are necessary for Patalyze's website to work properly, to enable smooth navigation and access Patalyze's most important functions. This includes essential security and accessibility features and preferences such as interface language as well as the handling of the checkout process for Patalyze. The collecting of data via the necessary cookies or web storage objects is justified according to § 25 para. 2 no. 2 TDDDG (“Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz”: German Telecommunications Digital Services Data Protection Act). The further processing of this data is either necessary in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR for performing the contract or justified due to Patalyze's legitimate interest in presenting Patalyze's Services and Patalyze in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
• Performance: These cookies or web storage objects measure how Patalyze’s site is used. Patalyze uses this information to improve its website and services. With these cookies Patalyze measures, for example, how often Visitor returns and which functions they use. Patalyze and its external service providers use these cookies or web storage objects with Visitor’s explicit consent in accordance with § 25 para. 1 TDDDG. The further processing of this data is also based on Visitor’s consent, Art. 6 para. 1 sentence 1 lit. a) GDPR.

The table below lists the different types of technologies that may be used on Patalyze’s website. Cookies or web storage objects are stored until the specified expiration time or until Visitor deletes them in Visitor’s browser or, if it is a session cookie, until the session has expired. Patalyze’s cookie banner offers a binary choice: Visitor can accept or decline non-essential cookies, which controls only the analytics cookie (PostHog). Visitor can change this choice at any time in the cookie banner.

To better understand how Patalyze’s Services are used and to better tailor Patalyze’s Services to the needs and desires of Patalyze’s customers, Patalyze analyzes pseudonymized data about the customers' use of Patalyze Services. The analysis allows Patalyze to understand general usage habits and derive different target and user groups. Patalyze can then address the identified user groups in a more specific way and, for example, point them to previously unused or unknown features of Patalyze Services. In this way, Patalyze enables customers to get to know and use all the features of Patalyze and can thus improve the user experience of the Patalyze Services. This corresponds to Patalyze’s legitimate interests according to Art. 6 para. 1 p. 1 lit. f) GDPR.

9. Contacting Patalyze’s Sales or Support Team#

Visitors have the possibility to contact Patalyze via various contact forms on Patalyze’s website. Visitors can also contact Patalyze directly by email via info@patalyze.com. Visitor can send support enquiries via patalyze.com/support and sales enquiries via patalyze.com/sales

For both support and sales enquiries including any subsequent correspondence , Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis for the processing of Visitor's personal data, as the processing is necessary for the initiation of the contract or the conclusion and performance of Patalyze's contract. Art. 6 para. 1 sentence 1 lit. b) GDPR also provides justification for the processing of personal data that may be contained in documents sent to Visitor’s support team. Patalyze will store Visitor’s data for the duration of Patalyze's business relationship and subsequently for the duration of the legal retention periods where this is required. The processing of Visitor’s personal data as part of Patalyze’s customer database and the analyses of Patalyze’s customer-related processes is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is in Patalyze’s legitimate interest.

Visitor’s also have the option of contacting info@patalyze.com with questions or concerns about data protection at Patalyze. Patalyze processes Visitor’s data in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR on the basis of Visitor’s voluntarily given consent.

10. Service Providers#

Patalyze may share your personal information with the third-parties listed below for the purposes that are described in this Privacy Policy or otherwise with Visitors consent.

Patalyze only shares Visitors personal information with those of its employees, contractors, and affiliated organizations that (i) need to know that personal information in order to process it on Patalyze's behalf or to provide services available on the Site, and (ii) that have agreed not to disclose it to others

Patalyze engages a number of service providers or partners to manage or support certain aspects of its business operations on Visitors behalf. Patalyze uses the following service providers who will handle Visitors personal information:

• Cloudflare: Cloud Data Hosting
• Convex: Application backend and database hosting
• Dub.co: External Link Management
• Google Cloud Platform: Cloud Data Hosting
• Google Workspace: Internal Collaboration Tools
• Google (Gemini API): AI processing of submitted content
• Hetzner: Cloud Data Hosting
• Microsoft: Single sign-on authentication
• Notion: Internal Collaboration Tools
• Posthog: Analytics & Error Tracking
• Resend: Email Server
• Stripe: Payment processing
• Vercel: Cloud Data Hosting

Patalyze service providers and partners are required by contract to safeguard any personal information they receive from Patalyze and are prohibited from using the personal information for any purpose other than to perform the services as instructed by Patalyze.

11. Newsletter#

Visitor can subscribe to the Patalyze Newsletter where Patalyze will occasionally send emails with news on Patalyze’s Services. Patalyze is entitled to use the email address Visitor provided when signing up for a Patalyze account in this way under the legal conditions of § 7 para. 3 of the German Act against Unfair Competition (UWG). Given the existing contractual relationship, it is also in Patalyze’s legitimate interest to inform Visitor as set out above (Art. 6 para. 1 sentence 1 lit. f) GDPR). If Visitor do not wish to receive such emails from Patalyze, Visitor can object to the use of his/her email address for this purpose at any time by sending an email to info@patalyze.com. All emails contain an unsubscribe link at the end.

Upon signing up to the Newsletter, Patalyze will forward Visitor’s email to Patalyze’s authorized service provider Plus Five Five, Inc., 2261 Market Street #5039 San Francisco, CA 94114 (“Resend”).

Patalyze may send Visitor information, within the scope of Visitor's consent, about offers, special offers, promotions and marketing campaigns and other news from time to time or get in touch with Visitor to discuss specific Services. The processing of Visitor’s data is based on Visitor’s consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Visitor can withdraw his/her consent at any time with effect for the future by sending an email to info@patalyze.com. Marketing emails each contain an unsubscribe link at the end.

12. Social Media Pages#

Patalyze operates several social media profiles (“Social Media Profiles”) on various social networks e.g., LinkedIn. Patalyze regularly publish posts about its Services, new Service features as well as new job offers. If Visitor interact with Patalyze’s pages or contacts Patalyze via them and Visitor is a member of the respective social network, Patalyze may receive and process data that identify Visitor. As operator of the Social Media Pages, Patalyze also have the option of viewing anonymous statistics on the interaction of Visitor with Patalyze's pages (insight function). For this purpose, the operators of the social networks record Visitor’s interactions with Patalyze’s pages using cookies and similar technologies. Visitor can find more information on this kind of data processing on the LinkedIn Privacy Policy.

The legal basis for the operation of Social Media Profiles and the insights function is Patalyze’s legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR in using the Social Media Pages as an information channel. With regard to the insights function, Patalyze has a legitimate interest in understanding the visits and interactions with Social Media Profiles in order to be able to respond to them and to further improve Patalyze's presence. Insofar as Visitor's consent given to the social network justifies the data processing within the framework of the respective social platform, processing is carried out on the basis of this consent.

Patalyze together with the operator of the respective social network are jointly responsible for the data processing operations triggered when Visitor accesses the Social Media Page. The essence of this joint-controller arrangement, in particular the allocation of responsibilities and the point of contact for exercising data-subject rights, is set out in the respective network’s joint-controller addendum (for LinkedIn, the LinkedIn Page Insights Joint Controller Addendum). In summary, Patalyze is responsible for its own posts and its use of the aggregate page-insights statistics, while the network operator is responsible for the platform’s own processing and is the primary contact for data-subject rights regarding that processing. However, the operators of the social networks may also process Visitor's data for their own purposes, which are not depicted in this privacy policy. It is also possible that data collected about Visitor will be transferred to third countries, in particular the USA. Patalyze has no influence on this data processing and refers to the privacy policies of the respective social networks.

13. Webinars#

Patalyze offers are video-based interactive events on the Services Patalyze offers (“Webinars”). Visitor and User can participate on the Webinars (“Participant”). Patalyze uses video conferencing services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on whose platform the webinars are held. Patalyze has concluded a data processing agreement with Google and Google may only process personal data according to Patalyze's instructions and not for its own purposes.

Patalyze collects the following personal information from Participants before or during the Webinar:

• User information (First name, last name, display name, email address, profile picture);
• Communication data (Data that the Participant independently enters, uploads or shares as part of the webinar);
• Meeting metadata and telemetry data (This technical data is, among other things, data relating to the use of the service, including when and how sessions were conducted (IP address, event logs, session information, etc.), as well as device and hardware information that Google needs to access in order for features such as camera, microphone, etc. to be operational in the context of participation).

Patalyze may record webinars and publish them afterwards on the Site or Social Media Pages. Visitors will not be visible or identifiable in these recordings. As participants can only ask written questions, they will not appear visually in the recording. The answer to the participant's question will be part of the webinar recording. If, contrary to expectations, personal data of the participants is visible during the recording, it will be made unrecognisable before publication. The recording and storage of the webinar is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as these processing operations are in Patalyze's legitimate interest to improve the quality of Patalyze's webinars. When the webinars are published, no further processing of personal data will take place, as Patalyze will make them unrecognisable beforehand - if they can be viewed at all.

14. Job Applications#

Patalyze offers Visitor the opportunity to apply for a position at Patalyze via Patalyze's career page and the integrated career portal, or by email. This digital recruitment process means that in order to complete the application procedure, Visitor's application data (usually name, contact information, cover letter, resume, as well as other supporting documents and credentials) is collected and processed electronically. The personal data Visitor provide will be used exclusively for processing Visitor's job application. Visitor's data will only be shared with persons involved in the application process. If Visitor submits Visitor's documents in German only, even though an English version of the documents was requested in the job advertisement, Patalyze reserves the right to translate Visitor's documents into English. The legal basis for the processing of Visitor's applicant data is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1, 8 sentence 2 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act). If Visitor applies for a freelance job at Patalyze, the legal basis for the processing of Visitor's applicant data is Art. 6 para. 1 sentence 1 lit. b) GDPR.

If, following the recruitment process, an employment contract is concluded, Patalyze will store Visitor's personal data as part of Visitor's personnel file for the purpose of standard organizational and administrative procedures, in compliance with the more extensive legal obligations. In this case, the legal basis for the processing of Visitor's data is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act). When working on a freelance basis for Patalyze, Patalyze will store Visitor's personal data for the purpose of executing Visitor's contract with us. In this case, the legal basis for the processing of Visitor's data is Art. 6 paragraph 1 sentence 1 lit. b) GDPR.

In the event of a rejection on Visitor's part or ours, Patalyze will retain the data submitted to Patalyze for up to a maximum of six months following notification of the rejection. Patalyze will subsequently delete the data unless legal regulations require Patalyze to store the data for a longer period.

If Visitor expressly agrees to a longer storage period of Visitor's data e.g., for Visitor's inclusion in Patalyze's internal applicant pool, the data will be further processed based on Visitor's consent in accordance with Art. 6. para. 1 sentence 1 lit. a) GDPR. Visitor's data will then be stored in Patalyze's pool of applicants for 1000 days. Visitor can withdraw Visitor's consent at any time with effect for the future.

15. Data Security#

Visitor's connections to Patalyze's website and Patalyze's apps are protected with encryption techniques in line with the current state of the art. The level of protection also depends on which encryption Visitor's Internet browser and/or mobile device supports. Visitor can tell whether an individual page of Patalyze's website is transmitted in encrypted form by looking at the closed key or lock symbol in the status bar of Visitor's browser. Patalyze also uses suitable technical and organizational security measures to protect Visitor's data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Patalyze's security measures are continuously improved in line with technological developments.

16. Visitor’s Rights#

The following rights are granted by European Union directives and regulations. If Visitor wishes to exercise any of the rights listed below, Visitor can contact Patalyze at patalyze.com/support

• Right to confirmation and right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to withdraw Visitor's consent
• Right to data portability: the right to receive the personal data Visitor provided in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible (Art. 20 GDPR)

The right to erasure does not apply to the extent processing is necessary to comply with a legal retention obligation or for the establishment, exercise or defence of legal claims (Art. 17 para. 3 GDPR). In such cases Patalyze restricts the relevant data instead of deleting it and deletes it once the applicable retention period has ended (see section 6).

In addition, Visitor can object to the further processing of Visitor's data if Patalyze processes Visitor's data based on Patalyze's legitimate interest (Art. 6 para. 1 sentence 1 lit. f), Art. 21 GDPR). If Patalyze processes Visitor’s data for the purpose of direct advertising, Visitor’s have a general right to object. If Patalyze does not process Visitor’s data for advertising purposes, the objection must be based on Visitor’s particular situation.

Visitor’s also have the right to lodge a complaint regarding the processing of Visitor's personal data with a supervisory authority, such as the data protection supervisory authority responsible for Patalyze: Landesbeauftragter für Datenschutz und Informationsfreiheit Bayern, Wagmüllerstraße 18, 80538 München, email: poststelle@datenschutz-bayern.de.

17. Changes to the Privacy Policy#

Patalyze reserves the right to amend this privacy policy. The current version of the privacy policy can be accessed at any time on Patalyze’s website.