Privacy Policy

Responsible party
GENERATOR.EU UG (limited liability)
Edisonstr. 8, 85716 Unterschleißheim, Germany
Email: info@generator.eu
Tel.: +49 89 20175987

Contact for data protection
If you have any questions about the processing of your personal data and your rights, please contact: info@generator.eu.
(A company data protection officer has not yet been appointed.)

Status: 02.09.2025

1. Hosting & server logs

We host our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Processing takes place exclusively in data centres within the EU/EEA. We have a data processing agreement with Hetzner in accordance with Art. 28 GDPR.

When you visit the website, we automatically process server log data (URL/file accessed, date/time, amount of data transferred, referrer, browser/OS, IP address, provider).

Purpose/legal basis: Stability, security and presentation of the website (Art. 6(1)(f) GDPR).

Storage period: Maximum 7 days, then deletion.

2. Data categories, purposes and legal bases (overview)

Processing Categories Purpose Legal basis
Website visit (without login) Log data, cookie IDs if applicable Operation/IT security, reach measurement (if consent given) Art. 6 (1) f GDPR; for non-essential cookies: Art. 6 (1) a GDPR in conjunction with § 25 (1) TDDDG
Customer account/order Master data, contact, delivery/invoice data, payment information (token) Contract/initiation, delivery, support, accounting Art. 6 (1) b, c GDPR
Communication (e-mail/telephone/chat) Contact/content data, metadata Responding to enquiries, support Art. 6 (1) b/f GDPR
Shipping notification Email/telephone Delivery notification/appointment coordination Art. 6 (1) a GDPR (consent)
AI voice agent (telephone/voice chat) Audio data, speech-to-text transcripts, conversation metadata; optional: recordings Consulting, support, order preparation

Art. 6 (1)

b (contractual), f (service/quality); a (for recordings/speech analysis)
Payment/creditworthiness (invoice) Identity/address data, payment information Payment processing, credit check Art. 6 (1) b, if applicable f in conjunction with Art. 22 GDPR
Marketing/analytics Cookie IDs, usage data Statistics/remarketing (only with consent) Art. 6 (1) a GDPR in conjunction with § 25 (1) TDDDG (German Telemedia Data Protection Act)

Retell AI, Inc., 548 Market St, PMB 30534, San Francisco, CA 94104-5401, USA

3. Processors & recipients

Hosting/CDN: Hetzner Online GmbH (AV contract; EU/EEA).

Shipping/forwarding: DPD Deutschland GmbH, DHL Paket GmbH, UPS, as well as commissioned forwarding agents (delivery/appointment notification).

Dropshipping: Manufacturers/wholesalers ship on our behalf; legal claims (e.g. warranty, revocation) continue to exist against us.

Payment service providers:

  • PayPal (Europe) S.à r.l. & Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg – Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

  • [enter additional card acquirer/PSP here]

    Credit agency (purchase on account only): Tesch mediafinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Germany.

Telecommunications/AI voice agent (processor):

  • ElevenLabs, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA – text-to-speech/speech-to-text.

  • Retell AI, Inc. [add address], USA – voice routing/agent logic.
    Data processing agreements within the meaning of Art. 28 GDPR exist with all of the above-mentioned service providers.

Third country transfers: Where services are processed in third countries (in particular the USA), this is done on the basis of EU Standard Contractual Clauses (SCCs); where the provider is certified under the EU-U.S. Data Privacy Framework (DPF), we additionally base transfers on this. Additional technical/organisational measures are taken (e.g. encryption/pseudonymisation) where necessary.

4. AI voice agent: Special features of speech processing

We optionally use an AI-supported voice assistant for telephone advice/support.

What data?

  • Real-time audio data for speech recognition (streaming),
  • Transcripts (text of the conversation),
  • Metadata (time stamp, duration, session ID),
  • If applicable, order/customer data that you provide during the conversation.

Purposes: efficient processing of enquiries, pre-qualification/recording of order requests, quality control, training of the system.

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual/contractual communication),
  • Art. 6(1)(f) GDPR (legitimate interest in efficient support).
  • Audio recordings (if offered) are made only with your prior consent (Art. 6 (1) (a) GDPR). Without consent, no storage of the raw audio takes place; at most, fleeting real-time processing occurs.
  • Speech analysis (e.g. quality measurement, intent training) also only with consent; otherwise, exclusively for specific purposes in real time.

Storage period:

  • Raw audio (if recorded with consent): [e.g. 30 days], then deletion or anonymisation.

  • Transcripts: [e.g. 180 days] for proof of interactions/service quality; then deletion/anonymisation.

  • Metadata (technical logs): [e.g. 90 days].
    Exact time limits may vary depending on legal retention requirements (e.g. for evidence purposes). You may revoke your consent at any time (see ‘Your rights’); upon revocation, further recordings will be discontinued and existing data will be deleted in accordance with the legal situation.

No automated individual decisions with legal effect (Art. 22 GDPR) – the voice agent does not make any legally binding decisions; orders only become effective once you have expressly confirmed them at checkout or once we have confirmed your order.

5. Communication & dispatch notification

If you contact us by email/telephone/contact form, we will process your details in order to handle your enquiry (Art. 6(1)(b)/(f) GDPR).

For delivery notifications/appointment arrangements (shipping), we will only pass on your email address/telephone number to the shipping service provider with your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time.

6. Payment & credit check

Depending on the payment method, we will transfer payment data to the commissioned institution/selected payment service (Art. 6 (1) (b) GDPR).

For purchases on account, we reserve the right to carry out a credit check with Tesch mediafinanz GmbH (Art. 6 (1) (f) GDPR – avoidance of payment defaults). The decision is not made exclusively by automated means; you can state your position and contest the decision.

7. Cookies, consent banners (CMP) & web analysis

Legal basis according to TDDDG/GDPR

  • We only use cookies/technologies that are not technically necessary (e.g. statistics, marketing) with your consent: Section 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
  • Technically necessary technologies: Section 25 (2) TDDDG in conjunction with Art. 6 (1) lit. f GDPR (operation, IT security).

You can change/revoke your consent at any time via the ‘Cookie settings’ link in the footer.

Google Analytics 4 (only with consent)

Provider: Google Ireland Limited (transfer to Google LLC/USA may occur). IP anonymisation is enabled. Transfers to the USA are based on SCCs and — where applicable — DPF certification of the provider.

Opt-out: via cookie settings or https://tools.google.com/dlpage/gaoptout.

Storage period/cookie duration: see our cookie policy.

Google Ads Remarketing (only with consent)

Provider: Google Ireland Limited; transfer to Google LLC/USA (SCCs/DPF) if necessary. Opt-out: Cookie settings or Google ad settings.

8. Social plugins (2-click solution)

Social plugins (e.g. Meta/Facebook, Instagram, YouTube) are deactivated until you load them actively (consent, Art. 6(1)(a) GDPR). Only then will a connection to the provider be established.

Privacy policy of the providers:

(Only list providers that are actually used.)

9. Storage periods (brief overview)

  • Server logs: max. 7 days.
  • Contract/invoice data: up to 10 years (statutory retention period).
  • Customer account: until deletion.
  • Contact enquiries: generally up to 3 years (evidence/claims).
  • AI voice agent: as above (audio/transcript/metadata).

After expiry: deletion or anonymisation.

10. Your rights

You have the right to information (Art. 15), rectification (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)).

To exercise these rights, please write to info@generator.eu.

Right of appeal:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18, 91522 Ansbach, Germany – https://www.lda.bayern.de/

11. Obligation to provide data

The provision of data is in some cases necessary for the conclusion of a contract/delivery (e.g. address/payment details). Without this information, no order can be processed. There are no disadvantages to not giving voluntary consent (analytics/remarketing/voice recordings).

12. Changes to this declaration

We will amend this declaration if the legal situation, services or processes change. The current version is available on this page at any time.