Privacy policy
Last updated: 19 September 2026
1. Controller
The controller responsible for data processing on this website is:
Meliha Tanriverdi (private individual)
c/o EWRA AI
Torstraße 105–107
10119 Berlin, Germany
Email: privacy@ewra.ai
Phone: 030 80407092
The formation of a German limited liability company (GmbH) is planned.
2. General information on data processing
We process personal data only where necessary to provide a functional website, handle your enquiry or safeguard legitimate interests. The relevant legal bases include Article 6(1)(a), (b) and (f) GDPR and applicable provisions of the German Federal Data Protection Act (BDSG).
No automated decision-making, including profiling, takes place on this website.
3. Hosting and server logs
When you access the website, the hosting provider processes technically necessary connection data. This may include your IP address, date and time, page accessed, volume of data transferred, referrer, browser and operating system.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient provision of the website. Log data is retained only as long as necessary for security and error analysis and is then deleted unless a statutory retention obligation applies.
4. Contacting us
If you contact us by email, telephone or through the contact form on this website, we process your details (name, email address, institution, role and message) to handle your enquiry and any follow-up questions. The form sends your message directly to us using Lovable’s email delivery service with the sender domain notify.ewra.ai. Your details and technically necessary transmission data, particularly your IP address, are processed.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to steps prior to entering into a contract, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is the appropriate handling of enquiries and protection of the form against automated spam. Data is deleted once the enquiry has been fully resolved unless statutory retention obligations or legitimate interests require otherwise.
5. Consent management and essential storage
On your first visit, we display a consent window. Your choices regarding statistics and Google Maps are stored locally in your browser under the key “ewra-consent-v1”. This technically necessary storage prevents us from asking you again on every page view and records your choice on your device.
The legal basis for storing your choice is Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR. Our legitimate interest is reliable consent management. Your choice remains stored until you delete the website data in your browser or change it through “Privacy settings” in the footer.
The website is adapted to your screen size using technical display rules and requires neither cookies nor consent.
6. Audience measurement with Umami Analytics
This website uses Umami Analytics for cookieless, data-minimising measurement of website usage. Data collected includes page views, time spent, visibility of individual sections, clicks on key buttons, steps in the contact form and shortened or anonymised technical information about country, browser, operating system, screen size and referring domain.
Umami does not use cookies or create cross-device user profiles. According to the provider, IP addresses are not stored permanently and are processed only briefly to create a hash value that changes daily. Your browser’s Do Not Track setting is respected.
Umami is loaded only after your explicit consent. Processing is based on Article 6(1)(a) GDPR. Where information is stored on or read from your device, this is based on Section 25(1) TDDDG. You may withdraw consent at any time with future effect through “Privacy settings” in the footer.
Further information is available from Umami.
7. Google Maps
A Google Maps map is embedded on the contact page. When the map loads, your IP address may be transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the United States cannot be ruled out.
The map loads only if you allow Google Maps in the consent window or click “Load map”. Processing is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw it at any time with future effect through “Privacy settings” in the footer. For transfers to the United States, Google may rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
Further information: Google Privacy Policy.
8. External links and social networks
Our website contains a link to LinkedIn. Data is transferred to the provider only when you follow this link. The provider is responsible for subsequent processing.
9. Recipients and international transfers
Personal data is received only by parties that require it for the stated purposes and by the hosting, analytics, mapping and communication providers we use. Data is transferred outside the European Economic Area only where an adequacy decision, appropriate safeguards under Article 46 GDPR or another legal basis applies.
10. Retention period
We retain personal data only for as long as necessary for the relevant purpose. We then delete or anonymise it unless statutory retention periods or the establishment, exercise or defence of legal claims require longer storage.
11. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with future effect.
You also have the right to lodge a complaint with a data protection supervisory authority. The Berlin Commissioner for Data Protection and Freedom of Information is among the competent authorities.
Please send requests to privacy@ewra.ai.
12. Data security and changes
We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. We update this privacy policy when our processing activities or the legal framework change.
