Privacy Policy
Transparency and security in handling your data – our privacy policy informs you comprehensively.
Last updated: February 19, 2026
I. Name and contact details of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union, and other data protection provisions is:
Veyra Robotics GmbH
Kuckhoffstraße 15
04357 Leipzig, Deutschland
E-Mail: hello@veyra-robotics.com
Telefon: +49 341 9899 0013
Website: https://www.veyra-robotics.com
II. General information on data processing
1. Scope of processing of personal data
Veyra Robotics GmbH processes personal data of users of this website only to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by legal provisions.
2. Legal basis for the processing of personal data
Where we obtain consent for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis. Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures. Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis. Where processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis for the processing.
3. Data erasure and storage period
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may take place beyond that if provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or erasure of the data will also take place when a storage period prescribed by the aforementioned provisions expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
4. No online checkout
This website does not offer purchase processing. No payment data or order data is collected or processed in the context of an online checkout. Should this change in the future, the privacy policy will be updated accordingly.
III. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected: IP address of the requesting computer, date and time of access, name and URL of the file accessed, website from which access is made (referrer URL), websites accessed by the user's system via our website, browser used and the operating system of the requesting computer, and the name of the access provider. Hosting of this website is provided by Vercel Inc. Vercel Inc. is certified under the Data Privacy Framework and is subject to the Standard Contractual Clauses (SCC). Information on data protection from Vercel Inc. can be found at https://vercel.com/legal/privacy-policy.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is a legitimate interest pursuant to Art. 6(1)(f) GDPR.
3. Purpose of data processing
Storage in log files is carried out to ensure the functionality of the website. The data also serves to optimize the website and to ensure the security of our information technology systems. Evaluation of the data for marketing purposes does not take place in this context.
4. Duration of storage
The personal data in the log files is generally stored for a maximum of 3 days (standard hosting with Vercel Inc.). When using Observability Plus, logs may be retained for up to 30 days. After that, the data is erased.
5. Right to object and removal
You generally have the right to object to the processing of your personal data pursuant to Art. 21(1) GDPR. However, the collection and storage of log files is strictly necessary for the secure operation of the website. Compelling legitimate grounds (IT security, error analysis) override in this case, so that a complete cessation of processing cannot be granted. An objection may be submitted informally by email to Veyra Robotics GmbH.
IV. Email contact and contact form
1. Description and scope of data processing
Our website provides the possibility to contact Veyra Robotics GmbH directly by email or via a contact form. When a user avails themselves of this option, the email address, name, and optionally phone, address, company and subject, as well as the respective message are transmitted. At the time the message is sent, the IP address and date and time of transmission are also stored. Email transmission is carried out via the Resend service (Resend Inc., USA), which acts as a processor pursuant to Art. 28 GDPR exclusively on our instructions. The data is not passed on to other third parties. The data is used exclusively for processing the conversation.
2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an email or a message via the contact form is our legitimate interest pursuant to Art. 6(1)(f) GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.
3. Purpose of data processing
The purpose of processing personal data in connection with contact by email or contact form is to collect prospect data with the aim of concluding a contract and answering questions.
4. Duration of storage
The data is erased as soon as it is no longer required for the purpose for which it was collected. For personal data in the case of contact by email or contact form, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified, but no later than after 6 months. Excluded from this erasure period are emails that fall into the categories of business correspondence and booking receipts. In these cases, the provisions on retention periods pursuant to § 147 AO and § 257 HGB apply.
5. Right to object and removal
The user has the possibility to object to the storage of their personal data at any time. In such a case, the respective conversation cannot be continued. The objection can be made informally by email to Veyra Robotics GmbH. All personal data stored in the course of email contact and via the contact form will be erased in this case. A prerequisite for the erasure of the data is that no statutory retention periods oppose it.
V. Fonts
We use the fonts Inter, Montserrat and Bebas Neue for the display of our website. These fonts are loaded exclusively locally from our own server (from the /fonts directory). No requests are made to external font CDN services (e.g. Google Fonts). Due to local hosting, no personal data of our website users is collected or stored by third parties.
VI. Links to X (Twitter) and LinkedIn
1. Description and scope of data processing
This website contains links to X (formerly Twitter) and LinkedIn. These are plain links, so no cookies are set for X or LinkedIn when visiting this website. However, when clicking on these links, personal data (e.g. the IP address of the website visitor) may be transmitted to X or LinkedIn. X is operated by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. X's privacy policy can be found at https://twitter.com/de/privacy. LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn's privacy policy can be found at https://www.linkedin.com/legal/privacy-policy.
2. Legal basis for data processing
The legal basis for the processing of data in connection with the embedding of links to X and LinkedIn is a legitimate interest pursuant to Art. 6(1)(f) GDPR.
3. Purpose of data processing
The embedding of links to X and LinkedIn on this website serves to provide further information about Veyra Robotics and the possibility to connect via social networks.
4. Duration of storage
Veyra Robotics GmbH does not store any data in connection with linking to X and LinkedIn.
5. Right to object and removal
By clicking on the respective link, the website visitor accepts a possible transfer of data to X or LinkedIn. In this case, there is no possibility for the website visitor to object or have data removed.
VII. Newsletter dispatch
1. Description and scope of data processing
Our website offers the possibility to register for our newsletter to be sent to your email address. Your express consent is required for this. Before your email address is activated for newsletter dispatch, your confirmation that you are the owner of this mailbox is obtained again by sending a confirmation email using the double opt-in procedure. At the time of registration, the email address, IP address, date and time, user agent and selected language (locale) are stored. Your data is used exclusively for sending the newsletter. Storage of newsletter registrations takes place on Supabase servers in the EU North region (Stockholm, eu-north-1). For the technical dispatch of emails we use the Resend service (Resend Inc., USA). Resend processes your data as a processor pursuant to Art. 28 GDPR exclusively on our instructions. Standard Contractual Clauses (SCC) or the Data Privacy Framework are used for data transfers to the USA. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Resend. Further information on Resend's data protection can be found at https://resend.com/legal/privacy-policy and https://resend.com/legal/subprocessors.
2. Legal basis for data processing
The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR as well as § 7(3) UWG.
3. Purpose of data processing
The collection of your email address serves to deliver the newsletter and to inform you about news, products and services of Veyra Robotics GmbH.
4. Duration of storage
The data is erased as soon as it is no longer required for the purpose for which it was collected. The user's email address is therefore stored for as long as the newsletter subscription is active.
5. Right to object and removal
You can cancel your newsletter subscription at any time. For this purpose, each newsletter contains a corresponding unsubscribe link.
VIII. Robot Finder Quiz
1. Description and scope of data processing
Our website offers a Robot Finder Quiz that enables users to find a suitable robotics solution. When using the quiz, the email address, company and answers to the quiz questions are collected. A hidden field (honeypot) serves to protect against spam and is not evaluated. The data is transmitted by email via Resend (processor pursuant to Art. 28 GDPR) to Veyra Robotics GmbH. Quiz data is not stored in a database.
2. Legal basis for data processing
The legal basis for the processing of data in connection with the Robot Finder Quiz is our legitimate interest pursuant to Art. 6(1)(f) GDPR (lead generation, consultation requests).
3. Purpose of data processing
The purpose of the processing is to provide a personalized robotics recommendation and the possibility to contact you to process consultation requests.
4. Duration of storage
The quiz data transmitted by email is retained by Veyra Robotics GmbH only for as long as necessary to process the request, but no longer than 6 months. If a contractual relationship arises from the conversation, the statutory retention periods apply.
5. Right to object and removal
The user has the possibility to object to the processing of their personal data at any time. The objection can be made informally by email to Veyra Robotics GmbH.
IX. Cookies and third-party requests
Legal framework: TDDDG and GDPR
Access to information on the user's device (cookies, storage) is governed by § 25(1) TDDDG. The subsequent processing of personal data is governed by the GDPR. Technically necessary cookies are permitted (§ 25(2) No. 2 TDDDG). We use optional cookies only with your consent.
1. Description and scope of data processing
Our website uses technically necessary cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. In addition to technically necessary cookies, we use Google Tag Manager (GTM). GTM enables the integration and management of analytics and marketing tools. These tools (e.g. GA4) only fire after your consent. We use Google Consent Mode v2: before your consent, the signals analytics_storage, ad_storage, ad_user_data and ad_personalization are set to "denied". After your consent, they are updated according to your selection. You can change your cookie settings at any time under Cookie settings.
Our consent management (CMP)
We use our own consent management. Your consent status is stored in the veyra-consent cookie. It contains: categories (analytics, marketing), timestamp, version (1.0). No IP address is stored. The storage period is 12 months. You can change or revoke your settings at any time under Cookie settings.
2. Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is a legitimate interest pursuant to Art. 6(1)(f) GDPR. For processing in connection with optional cookies (e.g. Google Tag Manager), your consent pursuant to Art. 6(1)(a) GDPR is required.
3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of the website for users and to ensure basic functions. The user data collected by technically necessary cookies is not used to create user profiles. Optional cookies serve to analyze the use of our website and to optimize our offer.
4. Duration of storage, right to object and removal
Cookies are stored on the user's computer and transmitted from there to this website. Therefore, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. You can revoke or adjust your consent to optional cookies at any time under Cookie settings. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.
X. Links to other websites
We have embedded various links to other websites. This privacy policy does not govern the collection, disclosure or handling of personal data on other websites by third parties. Please check the privacy policy of the respective responsible party.
XI. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. Right of access
You may request confirmation from the controller as to whether personal data concerning you is being processed. If such processing is taking place, you may request the following information from the controller: the purposes for which the personal data is processed; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed; the envisaged period for which the personal data concerning you will be stored or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data concerning you or restriction of processing by the controller or to object to such processing; the existence of the right to lodge a complaint with a supervisory authority; any available information as to the source of the data if the personal data was not collected from the data subject; the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. Right to rectification
You have the right to obtain from the controller rectification and/or completion where the processed personal data concerning you is incorrect or incomplete. The controller must effect the rectification without undue delay.
3. Right to restriction of processing
Under the following conditions, you may request restriction of the processing of personal data concerning you: if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request restriction of their use instead; the controller no longer needs the personal data for the purposes of the processing but you need them for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds. Where processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
4. Right to erasure
You may request from the controller that the personal data concerning you be erased without undue delay, and the controller is obliged to erase such data without undue delay where one of the following grounds applies: the personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed; you withdraw consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR and there is no other legal ground for the processing; you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR; the personal data concerning you has been unlawfully processed; erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject; the personal data concerning you was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
5. Right to be informed
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to communicate any rectification or erasure of the data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.
6. Right to data portability
You have the right to receive the personal data concerning you which you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, where the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out by automated means. In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected thereby.
7. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
8. Right to withdraw data protection consent
You have the right to withdraw your data protection consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9. Automated individual decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into or performance of a contract between you and the controller; is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or is based on your explicit consent. As a responsible company, we do not use automated decision-making or profiling.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The competent supervisory authority for Veyra Robotics GmbH is the Saxon Data Protection Commissioner. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
XII. Changes to this privacy policy
Veyra Robotics GmbH reserves the right to amend this privacy policy at any time with effect for the future. The current version is available on our website.