This is a translation for convenience. The German version is legally binding.

Privacy policy

1. Controller

The controller for data processing on this website and for AuftragPilot customer accounts is:

Email: auftragpilot@venturewerk.de

No data protection officer has been appointed, as the legal requirements for doing so are not met.

2. Overview and roles

AuftragPilot is software for trade businesses. There are two roles:

• We act as controller for visitors to this website, for enquiries sent to us (such as demo requests) and for the user accounts of trade businesses and their staff.
• We act as processor for enquiries that end customers send through a trade business's enquiry form, and for quotes, clarification questions, reminders and appointments. The trade business is the controller for this data. We process it only on its instructions under a data processing agreement pursuant to Art. 28 GDPR (see section 8).

3. Hosting and server log files

This website and the application are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. We have a data processing agreement with Hetzner pursuant to Art. 28 GDPR. All application data, including uploaded files and PDF quotes, is stored on this server in Germany.

When you visit the website, the server processes technically necessary data: IP address, date and time, requested address, referrer, amount of data transferred, and browser and operating system information. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is providing the website securely and reliably. Log data is kept only as long as necessary for these purposes and then deleted.

4. Cookies and local storage

We use strictly necessary cookies only. There is no tracking, and no analytics or advertising services, external fonts or third-party content are loaded.

The legal basis is § 25(2) no. 2 TDDDG, as this storage is strictly necessary for the service you request, and Art. 6(1)(f) GDPR. You can review your settings at any time using the “Cookie settings” link at the bottom of the page. If we use optional services in future, we will ask for your consent first; you can withdraw consent there at any time.

5. Contact and demo requests

If you contact us by email or request a demo, we process your details (such as name, business, email address, phone number and message) to answer your request. The legal basis is Art. 6(1)(b) GDPR where the request relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once the request has been dealt with, unless statutory retention obligations apply.

6. Email delivery

We send AuftragPilot emails, such as replies to requests, receipt confirmations, clarification questions, quotes, reminders and appointment confirmations, through Proton Mail by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. The European Commission has issued an adequacy decision for Switzerland (Art. 45 GDPR). We have a data processing agreement with Proton.

7. Trade business customer accounts

For trade businesses and their staff, we process account data (name, email address, hashed password, role), business data (company name, trade, contact details, services and prices) and logs of important actions in the application. The legal basis is Art. 6(1)(b) GDPR. If we access a business's workspace for support at its request, the access is time-limited and logged (Art. 6(1)(f) GDPR; legitimate interest in traceability and security).

The data is stored for the duration of the contract and then deleted, unless statutory retention obligations (for example under German commercial or tax law) apply.

8. End-customer enquiries (processing on behalf)

If you, as a customer of a trade business, use its enquiry form or answer a clarification question, the trade business is responsible for processing your data. This includes your contact details, project address, message, uploaded photos and documents, clarification answers, quotes and appointments. Please contact the trade business with questions or to exercise your rights; we support it in doing so.

Uploaded files are not stored publicly and can only be accessed by logged-in staff of the respective business.

9. AI-assisted analysis of enquiries

To prepare enquiries for the trade business, we send the enquiry text, the contact and project details provided, answers to clarification questions and corrections made by the business to OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Uploaded photos and documents are not sent; only whether photos exist is indicated. The AI identifies details such as the service, location and measurements and suggests which missing details to ask about.

We use the application programming interface (API) with response storage disabled; according to OpenAI, API data is not used to train models. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or the EU standard contractual clauses (Art. 45, 46 GDPR). We have a data processing agreement with OpenAI.

No automated decision-making within the meaning of Art. 22 GDPR takes place: prices are calculated from the business's own services, and every quote is reviewed and approved by a staff member before it is sent.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future. AuftragPilot users can download their data as a ZIP file and delete their account themselves at any time under “My profile”; company owners download and delete the complete company data. Otherwise, contact auftragpilot@venturewerk.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

11. Obligation to provide data

You are not legally or contractually required to provide your data. Without the details needed for contact, an account or an enquiry, however, we cannot provide the respective service.

12. Changes

We update this privacy policy when our processing or the legal situation changes. The version published on this page applies.

Last updated: September 29, 2026