picsure.ai

Privacy policy

The legally binding version of this privacy policy is the German version.

1. Controller

Picsure GmbH, c/o Regus Doppel X, Heidenkampsweg 58, 20097 Hamburg, Germany. Represented by the managing director Enrico Bolloni. Phone: +49 176 73 229 112, email: info@picsure.ai.

2. Data protection officer

Florian Bischof, Picsure GmbH, email: florian@picsure.ai.

3. Principles

This website does not set cookies and uses no tracking or analytics tools. Fonts are served locally from our server; no data is transferred to Google or other third parties when you visit a page. The connection is encrypted with TLS. There is no automated decision-making, including profiling.

4. Hosting and server log files

This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.

When you visit the website, technically necessary data is processed to deliver the website and keep it secure. Our access logs store the date and time, the requested page, the status code, the amount of data transferred, the referrer and browser information, and the IP address in shortened form only (IPv4 without the last byte, IPv6 at most the first 48 bits). Error logs may contain the full IP address. All logs are deleted after 14 days at the latest. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).

5. Contacting us

If you contact us via the contact form, by email or by phone, we process your details (e.g. name, email address, company and your message) to answer your request. Providing these details is voluntary, but we cannot process your request without them. The legal basis is your consent (Art. 6 (1) (a) GDPR) or pre-contractual measures (Art. 6 (1) (b) GDPR). You can withdraw your consent at any time with effect for the future. We delete the data once your request has been dealt with and no statutory retention obligations apply.

Form data is received by our own server, is not stored in a database and is forwarded to us by email. To prevent abuse (limiting requests per sender), your IP address is briefly processed in memory but not stored; the legal basis is our legitimate interest in abuse-free operation (Art. 6 (1) (f) GDPR). We use Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) to send these emails. Processing takes place in the EU (data centre in Ireland); access from the USA cannot be ruled out.

Form submissions and emails to us are delivered to our mailbox at Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data may also be processed in the USA.

We have concluded a data processing agreement (Art. 28 GDPR) with both Resend and Google. Both providers or their US parent companies are certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR); the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) apply in addition.

6. Map (OpenStreetMap)

The map in the contact section is only loaded when you click “Load map”. Your IP address is then transferred to the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). The legal basis is your consent given by clicking (Art. 6 (1) (a) GDPR). The European Commission has adopted an adequacy decision for the United Kingdom.

7. External links

Links to other websites (e.g. our GHG quota portals, Fahrzeugschein24, LinkedIn or Google Maps) open the respective services, where their privacy policies apply.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object: Where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

As of: October 2026