Privacy policy
Last updated: September 2026
1Controller
Responsible for data processing on this website:
COBACK GmbH, Pfarrgasse 4, 01067 Dresden
Email: info@coback.ai
2Hosting
When you visit this website, our hosting provider automatically processes server log files (incl. IP address, date/time, page requested, browser type). The legal basis is our legitimate interest in secure, reliable operation (Art. 6(1)(f) GDPR).
3Contact form
When you contact us via the contact form, we process your name, company, email address, and message to handle your request. The legal basis is Art. 6(1)(b) and (f) GDPR. The data is stored in a database within the EU, is not shared with third parties, and is not used to train AI models.
4Newsletter
For the newsletter we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time; the consent applies until revoked.
5Web analytics (Plausible and PostHog)
We use Plausible Analytics, a cookie-free, privacy-friendly analytics tool hosted in the EU. Plausible stores no cookies and no personal data, performs no cross-device tracking, and produces only aggregated statistics. It is loaded only after your consent via our notice (Art. 6(1)(a)/(f) GDPR).
We also use PostHog (PostHog Inc., USA), hosted in PostHog's EU cloud in Frankfurt, to understand how the website and the product are used and to find errors. PostHog records page views, clicks, actions taken in the product, errors, your browser and device, and an approximate location derived from your IP address. It also records a replay of each visit: what the page shows and how the mouse and keyboard are used, with what you type into form fields masked. For signed-in users, events carry the account ID, name and email address. If you send our contact form or subscribe to the newsletter, the name and email address you enter are added to your PostHog visitor profile. Until you accept our notice, PostHog keeps this data in your browser's memory only and stores nothing on your device (Art. 6(1)(f) GDPR, our legitimate interest in a working and improving product). If you accept, PostHog also stores an identifier in a cookie and in local storage so that visits can be linked (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you decline, PostHog is switched off on the website. In the product, from the login page on, PostHog always runs, whatever you chose in the notice; without your consent it keeps its data in your browser's memory only there too (Art. 6(1)(f) GDPR). You can object to this processing at any time (Art. 21 GDPR, see section 7). We have a data processing agreement with PostHog; transfers to the USA are safeguarded by EU standard contractual clauses. Details: https://posthog.com/privacy.
6Demo scheduling (Cal.com)
For booking demo meetings we embed the scheduling service Cal.com on the contact page (Cal.com, Inc., USA; transfers are safeguarded by EU standard contractual clauses). The calendar is only loaded once you actively pick a meeting length; at that point data such as your IP address is transferred to Cal.com. When you book, Cal.com additionally processes the details you enter (name, email address, chosen slot). Legal bases are pre-contractual measures (Art. 6(1)(b) GDPR) and your consent through actively loading the calendar (Art. 6(1)(a) GDPR). Details: https://cal.com/privacy.
7Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may revoke a given consent at any time. You also have the right to lodge a complaint with a data protection authority. To exercise these rights, contact info@coback.ai.