Privacy Policy
1. Introduction
Please read this Privacy Policy before using our Service including the Website, Widget and API (as defined below), referred to collectively as the "Service". This Privacy Policy governs the types of information and data we collect and how we use and share this information. Your access to and use of the Service are available for your use only on the condition that you agree to the Terms of Service available under the following address: Terms of Service which include the terms of the Privacy Policy set forth below. Chathero operates the Service. We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy.
2. Data protection officer
The person responsible for data processing on our online offer within the meaning of the General Data Protection Regulation (DSGVO) is:
Chathero GmbH
represented by the managing director Martin Burst
Elsässerstr. 24
81667 München
Contact details of our company data protection officer: [email protected]
3. Data collection when visiting our online offer
Already the visit of our internet pages (without registration) leads on our server automatically to the anonymized collection of the following data:
- Shortened IP address
- Date/time/time zone of access
- Access status
- Access type
- Protocol type
- Type and number of pages accessed on our site
- Name and size of the accessed files
- Source website
- Web browser used
- Operating system used
4. Contact forms
On our website, we have provided an online form that you can use to contact us electronically. The form requires your first and last name, e-mail address and telephone number. We need this information to process your request. Contacting us is always voluntary.
We process this data exclusively for the purpose of responding to your request or for the desired contact with you and the associated technical administration. The legal basis for this processing is Art. 6(1)(b) DSGVO.
5. Contact forms data processing when registering to open a customer account
You have the option of registering as a customer on our pages. We process this data exclusively for the execution of the contract concluded with you on the use of our online offer or for the processing of purchases. This data processing is justified according to Art. 6(1)(b) DSGVO.
6. Notes on the use of cookies
6.1 Which cookies do we use?
By type, we divide the cookies we use into the following classes: necessary cookies, function, analysis & statistics and advertising & marketing. Necessary cookies enable you to use our online offer (so-called session cookies). These session cookies are deleted after the end of the browser session.
6.2 For what purposes and according to what legal basis do we use cookies?
Most of the cookies we use do not store any information that identifies or makes you identifiable as a person. Rather, these cookies provide us with general and anonymized information about the visitors to our online offers.
6.3 Use of cookies from third-party providers
We sometimes work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your terminal device when you visit our online offers (third-party cookies).
7. Web analytics services
7.1 Google Analytics
We use the web analytics service Google Analytics in our online offer after consent has been granted. Google Analytics uses cookies that are stored on your computer and enable an analysis of the use of our online offer. We use Google Analytics exclusively with the extension "anonymize IP".
7.2 LinkedIn Insight Tag
We use the conversion tool "LinkedIn Insight Tag" in our online offer. This is a service of the Irish-based company LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
8. Retargeting / Remarketing / Referral Advertising
8.1 Facebook Custom Audience Pixel
We use the visitor action pixel from Facebook (so-called Custom Audience Pixel), a service provided in the EU, EEA and Switzerland by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. "Custom Audiences" means the creation of a "user-defined target group". This involves a piece of Javascript code. The use of this pixel on our pages allows us to mark and segment visitors and target them with ads.
The pixel is only used with your consent. We have also concluded a contract with Facebook between jointly responsible parties (Art. 26 DSGVO).
You can suppress or disable the javascript functions of the retargeting pixel via your web browser. You can also set the online-based advertising by Facebook yourself at the following page: https://www.facebook.com/ads/settings
8.2 Google Ads Manager
The Google Ad Manager is a platform for all ad formats. This service is operated in the EU, EEA and Switzerland by Google Ireland Limited, and in the USA by Google LLC. The ad manager uses cookies to present you with ads that are relevant to you.
You can prevent the collection of data by the Google Ads Manager as follows: prevent the storage of cookies by selecting the appropriate settings on your browser software, install a browser plugin, or deactivate Google cookies on the Digital Advertising Alliance site.
8.3 Google Tag Manager
We use the Google Tag Manager in our online offer for the purpose of personalized, interest and location-based online advertising. Google Tag Manager allows us to manage website tags via an interface. As a result, we do not use cookies, nor do we collect any personal data.
8.4 Google Ads Remarketing
Our online offering uses the remarketing functions of Google Ads, which we use to advertise our online offering in Google search results and on the websites of third party providers. For this purpose, we have embedded a pixel (so-called remarketing tag) in our online offer.
8.5 Google Ads Conversion-Tracking
Our online offer uses the online advertising program "Google Ads" and, within the framework of Google Ads, conversion tracking. The conversion tracking works technically via the conversion tracking code (so-called "tag"), which is integrated on our online offer. The data on ad clicks is collected using cookies.
Google LLC is certified under the EU-US Data Privacy Framework (DPF), which the European Commission recognized as providing an adequate level of data protection in its decision of July 10, 2023.
9. Integration of social media and other services
We integrate content from our profiles in social networks and other services in our online offer. You can only access this content via our online offer if you give your consent to the display of this integrated content (Art. 6 para. 1 letter a DSGVO).
9.1 YouTube-Videos
On our website, you will initially only see inactive screenshots of YouTube videos. No data transfer to YouTube takes place yet. Only when you click on this screenshot, a connection to YouTube is established.
YouTube is a service offered in the EU, EEA and Switzerland by Google Ireland Limited, and in the USA by Google LLC.
9.2 ChatGPT-Chatbot
We use the OpenAI API to power the ChatGPT chatbot on our website. Conversations with the chatbot are processed via the OpenAI API. You may provide data such as questions, commands, or other text when you interact with ChatGPT. We log these conversations for the purpose of improving the service and for analytical purposes. We recommend that you read OpenAI's Privacy Policy.
9.3 WhatsApp Business API
We process your phone number and your WhatsApp profile name for providing service requests. The legal basis for the processing is Art. 6 para. 1 a) DSGVO (your consent). If you would like to receive service requests from Chathero, you agree to receive it by clicking on the "Chat on WhatsApp" button on the website.
Chathero uses a service provider as a processor who supports strictly according to instructions. Your phone number will be transmitted to WhatsApp Ireland Limited and other companies affiliated with WhatsApp in third countries.
10. Social media appearances and use of social media icons
We do not use social plug-ins as active buttons in our online offer. We only refer to our offer in the following social networks via icons:
- Facebook: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
- Instagram: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
- Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
- YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
- Xing: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
We only display the social media icons on our site as inactive icons. When you click on such a social media icon on our site, it is activated with your consent and a connection to these third-party providers is established via your web browser in a separate tab.
Through your participation in social networks or by visiting our social media sites, your data may be processed outside the EU. We have concluded a joint responsibility agreement with the providers in each case (Art. 26 DSGVO).
11. Your rights as a data subject
We are pleased to inform you below about the rights you have as a data subject with regard to the processing of your personal data against us.
11.1 The right to information
You have the right to request confirmation from us as to whether your personal data has been processed. If this is the case, you have the right to obtain information about the data collected, stored or used about you.
11.2 Right to rectification
You have the right to request that we correct any inaccurate or incomplete personal data relating to you without undue delay.
11.3 Right to deletion
You may request that we delete your personal data without delay. We are obliged to delete your personal data immediately if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which we collected or otherwise processed it.
- You revoke the consent you have given and there is no other legal basis for the processing.
- You object (see below) to the processing.
- Your personal data have been processed unlawfully.
- The erasure of your personal data is necessary for us to comply with a legal obligation under Union or Member State law.
- We have collected the personal data on the basis of a child's consent.
11.4 Right to restriction of processing
You have the right to request us to restrict processing if one of the following conditions is met:
- You dispute the accuracy of the personal data.
- The processing of the data is unlawful and you object to the erasure and instead request the restriction of use.
- We no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims.
- You have objected to the processing and it is not yet clear whether our legitimate grounds outweigh yours.
11.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
11.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or on a contract and the processing is carried out with the help of automated procedures.
11.7 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. This also applies to profiling insofar as it is associated with such direct advertising.
11.8 Right to revoke consent
You can revoke your consent, once given, at any time with effect for the future. The revocation is possible at any time informally, e.g. by e-mail to us. However, the legality of the processing carried out until the revocation is not affected by this.
11.9 Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
Status: February 2026
