Privacy policy

1. Controller

Berlin Alley GmbH, Wöhlertstraße 8, 10115 Berlin, Germany. Managing directors: Stephan Pfob and Benjamin Dageroth. Email: info@berlin-alley.com.

We run hypsh.ai and its services on our own servers.

2. Visiting the website

When you open a page, our web server stores technical data: IP address, date and time, requested address, status code, amount of data transferred, referrer and browser identifier. We need it to deliver the page, find faults and prevent abuse (Art. 6(1)(f) GDPR).

The logs are deleted after 14 days.

3. Usage measurement

We measure usage with Umami. It runs on our own server (analytics.hypsh.ai), sets no cookies and passes no data to third parties. We record the pages viewed and clicks on buttons to improve the site (Art. 6(1)(f) GDPR).

4. Cookies and consent

We place technically necessary storage on your device without consent (Section 25(2) TDDDG). All other storage, for example for advertising, only with your consent (Section 25(1) TDDDG), which you give or decline in our consent banner and can change at any time in the cookie settings.

You can also delete or block cookies in your browser. The website may then no longer work in full.

5. Google Ads

We run ads through Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and measure whether a click on an ad leads to a feed audit request or a finished check on our site (conversion measurement). For this we load the Google tag, but only after you have agreed in the consent banner.

Until you agree, and if you decline, we do not load the tag: your browser then makes no connection to Google for advertising measurement, and no data for that purpose goes to Google. If you agree, the tag loads and Google sets cookies. Google then records, among other things, your IP address, cookie and device identifiers, the page viewed (address and title, without anything you entered), the page language, the ad click and the conversion with a random operation ID. We do not send email addresses, addresses of products or feeds, or form contents to Google. Google can link the data to information from your Google account if you are signed in.

The measurement rests solely on your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time in the cookie settings. We then delete the Google cookies on our domain and send no further measurement data to Google. Processing carried out until then remains lawful.

Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework. More at policies.google.com/privacy.

6. Product data check

You enter the address of a product page or a feed, or upload a CSV file. We fetch the page or file, read product details and photos, and have AI models analyse them. For this we use Google Cloud AI services in data centres in Europe. Your data is not used to train these models.

We keep results, reports and uploaded files for 30 days and delete them afterwards. To prevent abuse we briefly process your IP address (rate limiting). The legal basis is carrying out your request and our interest in secure operation (Art. 6(1)(b) and (f) GDPR).

If you want a free feed audit, you give your email address and the link to your feed or shop after the check. We use both to handle your request and reply to you (Art. 6(1)(b) GDPR). After you submit, we build the report for the product you checked, keep it for 30 days and send you an email with thanks and the link to the report. No confirmation by link is needed. We then prepare the feed audit ourselves and get back to you by email. We send through our own mail server and send you no newsletter. To prevent abuse we limit the number of requests per IP address and per email address and store a keyed, one-way short value of your email address for at most three days for that.

7. Contact requests

When you write to us through a form or request a feed audit, we process the details you give (name, email address, company or link to your shop or feed, message) and the chosen language. If you reached the page through an ad or campaign, we take the source details from the address (UTM parameters, Google click ID and the “ref” parameter).

The request reaches us by email. We use it to reply to you and delete it once the purpose ends and no retention duty applies (Art. 6(1)(b) and (f) GDPR).

8. Embedded content

We load videos and podcasts from YouTube, Spotify and Apple only after you click. Before that, no data goes to these providers. Once you click, their privacy policies apply.

9. Recipients

We pass data on only where the purpose requires it: to Google Cloud for the AI analysis in the product data check, to Google Ireland Limited for Google Ads (only with your consent), and to technical service providers who help us run the service and are bound by our instructions.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You can withdraw consent at any time. Write to info@berlin-alley.com.

You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.