The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:
io mates GmbH
Spinnereiinsel 3b
83059 Kolbermoor
Germany
Phone: +49 8031 9005770
E-mail: info@abomate.io
Managing Directors: Andreas Huber, Marcus Thaller
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Personal data is any data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for.
We point out that data transmission over the internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.
We host the content of our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter "Hetzner"). The servers are located in Germany. Hetzner collects and processes data in server log files that your browser automatically transmits. The use of Hetzner is in the interest of a secure, fast, and reliable provision of our online services (Art. 6 (1) (f) GDPR).
We have concluded a data processing agreement (DPA) with Hetzner pursuant to Art. 28 GDPR, which ensures that Hetzner processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
When you access our website, technically necessary information is processed. In addition, for the statistical evaluation of the use of our website, we collect the following data on the server side:
Important: Your IP address is never stored in plain text. It is processed exclusively as a cryptographic hash value (SHA-256) that is re-salted daily, does not allow any conclusions to be drawn about your person, and serves solely to detect multiple accesses and to protect against abuse. This analysis is cookie-free.
The legal basis is our legitimate interest in the technical provision and statistical optimization of our services (Art. 6 (1) (f) GDPR).
Our website uses cookies. Cookies are small text files that are stored on your device. Some cookies are technically necessary; others are used for analysis or marketing and are only set after your explicit consent.
To manage your consent, we use a consent management tool (CookieConsent) in conjunction with Google Consent Mode V2. When the site is first accessed, no consent-requiring services are loaded by default – with the exception of technically necessary cookies. Only when you agree via the cookie banner are the corresponding analysis and marketing services activated. You can withdraw or adjust your consent at any time via the cookie settings.
The following cookies and storage technologies are used:
The legal basis for technically necessary cookies is Art. 6 (1) (f) GDPR or § 25 (2) TDDDG. Consent-requiring cookies are stored on the basis of your consent (§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR).
We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate and manage tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It merely serves to manage and deploy the tools integrated through it, which in turn are only loaded after your consent.
Following your consent, this website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyze the behavior of website visitors and thus improve our services. For this purpose, cookies are used and information about your use of the website is processed. IP anonymization is activated.
Use takes place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
The transfer of data to the USA is based on the standard contractual clauses of the EU Commission and the EU-US Data Privacy Framework. You can also prevent collection by Google Analytics using the following browser add-on: https://tools.google.com/dlpage/gaoptout.
Following your consent, we use Google Ads, an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Within Google Ads, we use what is known as conversion tracking and remarketing. If you click on an ad placed by Google, a cookie for conversion tracking is set. This allows us to understand whether users perform certain actions (e.g. a registration) after clicking on an ad, and to serve our advertising in a targeted manner.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Data may also be transferred to the USA here, based on the standard contractual clauses and the EU-US Data Privacy Framework.
Following your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. With the help of the Meta Pixel, we can evaluate the effectiveness of our advertisements on Facebook and Instagram for statistical and market research purposes and record visitors to our website as a target audience for displaying advertising (custom audiences). Cookies may be set and information transmitted to Meta in this process.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Insofar as data is transferred to the USA with the help of the Meta Pixel, this is based on the standard contractual clauses and the EU-US Data Privacy Framework. Further information can be found in Meta's privacy policy: https://www.facebook.com/privacy/policy/.
If you send us inquiries via the contact form or by e-mail, your details from the inquiry form (name, e-mail address, company if applicable, and your message) will be processed by us for the purpose of handling the inquiry and in case of follow-up questions. The dispatch is carried out via the Microsoft 365 service (Microsoft Ireland Operations Limited). We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) (b) GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR).
The data you enter in the contact form will remain with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.
On our website we offer you the option of registering for our newsletter, the download of our whitepaper, or the early access list. For this we require your e-mail address and optionally your name and company.
For registration we use the so-called double opt-in procedure: after your registration, you will receive an e-mail asking you to confirm. Only after your confirmation will your e-mail address be activated for dispatch. To document your registration, we store the time of registration and confirmation as well as a pseudonymized (hashed) identifier of your IP address.
The processing is based on your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every e-mail. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal. After you unsubscribe, the associated data will be deleted, provided there are no statutory retention obligations.
If you register for our service or conclude a paid subscription, the data required for this (in particular company and contact data) will be processed. Payment processing is carried out via the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). The payment data collected during payment is processed exclusively by Stripe; we ourselves do not store any complete payment means data.
The legal basis is the performance of the contract or the implementation of pre-contractual measures (Art. 6 (1) (b) GDPR). Further information on how your data is handled can be found in Stripe's privacy policy: https://stripe.com/privacy.
This website uses so-called web fonts for the uniform display of fonts. The fonts used are integrated locally on our server (self-hosted). No connection to third-party servers (e.g. Google Fonts) takes place; in particular, no data is transferred to Google.
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion takes place after these reasons cease to apply.
Within the framework of the applicable statutory provisions, you have the following rights:
To exercise your rights, an informal message to the contact details listed under point 1 above is sufficient.
If personal data is processed on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. If your data is processed for the purpose of direct advertising, you have the right to object to the processing at any time; thereafter your data will no longer be used for these purposes.
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Last updated: June 2026