Auost Privacy Policy

Privacy Policy

1. Introduction

Auost is committed to protecting the privacy and security of our users — including host families and au pairs. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with:

  • EU General Data Protection Regulation (GDPR)

  • German Federal Data Protection Act (BDSG)

  • German Telecommunications Telemedia Data Protection Act (TTDSG)

  • California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA)

  • Children’s Online Privacy Protection Act (COPPA) (where applicable)

By using our services, you consent to the terms of this Privacy Policy.


2. Data Controller

Responsible for data processing:
Dr. Yasene Jesernik
Auf Hatterwiese 8, 63322 Rödermark, Germany
Tel: +49 6074 486 6351
Email: auost@auost.de


3. Information We Collect

We may collect the following categories of personal information:

3.1 Personal Information – Name, address, email, phone number, nationality, language proficiency, profile details, and documents provided during registration.
3.2 Technical Data – IP address, device type, browser details, operating system, and server log data.
3.3 Usage Data – Pages visited, match activity, chat history, and feature usage.
3.4 Payment Data – Billing address, payment method, transaction details.
3.5 Communication Data – Emails, chat messages, and customer service interactions.


4. Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following bases:

  • Contract Performance – To provide our services (Art. 6(1)(b) GDPR)

  • Consent – For marketing, analytics, or optional features (Art. 6(1)(a) GDPR)

  • Legal Obligation – To comply with applicable laws (Art. 6(1)(c) GDPR)

  • Legitimate Interests – To ensure security, improve services, and prevent fraud (Art. 6(1)(f) GDPR)


5. Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • Essential website functions

  • Preferences and settings

  • Analytics and performance

  • Marketing and personalization

Details are provided in our [Cookie Policy]. You can manage preferences via our cookie consent tool.


6. Data Sharing & International Transfers

We may share your data with:

  • Service providers (hosting, analytics, payment processors)

  • Partner agencies (with your consent)

  • Authorities (when required by law)

If transferred outside the EEA, we apply Standard Contractual Clauses (SCCs) or rely on adequacy decisions.


7. Data Retention

We keep your data only as long as necessary:

  • For active accounts – until deletion request

  • For legal obligations – up to 10 years

  • For backups/logs – up to 90 days unless longer required


8. Your Rights (EU/Germany)

You have the right to:

  • Access, rectify, or delete your data

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority


9. Your Rights (California/US Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect and use

  • Delete your personal information (subject to exceptions)

  • Opt-out of the sale or sharing of personal information (we do not sell data)

  • Non-discrimination for exercising your privacy rights

Requests can be made at: privacy@auost.de or via our “Do Not Sell or Share My Personal Information” link.


10. Children’s Privacy (COPPA Compliance)

Our services are not intended for children under 13. We do not knowingly collect data from children under 13.
If we learn we have inadvertently collected such data, we will delete it promptly.


11. Security Measures

We implement technical and organizational measures such as SSL/TLS encryptionfirewalls, and access controls to protect your personal information.


12. Changes to This Policy

We may update this policy to reflect changes in law, services, or technology.
The updated version will always include the last updated date.


13. Use of Artificial Intelligence (AI) Tools

We may use artificial intelligence (AI) technologies to generate, edit, or optimize text, images, or other digital content on our website and within our services.
No personal data of users is used for these purposes. The AI tools are applied solely to create or enhance generic or illustrative content.

If third-party providers are involved in the generation or processing of such content, this occurs on the basis of data processing agreements in accordance with Article 28 GDPR.
Any AI-generated content does not depict real persons or events unless explicitly stated.


 

14. Giveaway Events & Trade Shows

Purpose of Data Processing

Personal data collected as part of giveaway campaigns or trade show activities (e.g. spin-the-wheel promotions), such as name and email address, is used exclusively to create and manage a user profile on auost.de.

Legal Basis

Data processing is carried out in accordance with Art. 6(1)(b) GDPR (performance of the event/initiative) and, where applicable, Art. 6(1)(a) GDPR (consent, e.g. for marketing purposes).

Data Retention

Personal data will only be stored for as long as necessary to carry out the event. It will then be deleted unless statutory retention obligations apply.

Data Sharing

Personal data will not be shared with third parties unless this is necessary for the execution of the event.

Rights of Data Subjects

Participants have the right to access, rectify, delete, or restrict the processing of their data, as well as the right to data portability.
They also have the right to lodge a complaint with a supervisory authority.

Withdrawal of Consent

Any consent given can be withdrawn at any time with effect for the future.

Profile & Deletion

Created user profiles can be deleted بسهولة and independently by users at any time via auost.de.

Premium Services

Any awarded premium features or additional services will automatically expire after the specified period. No separate cancellation is required.


⚠️ Liability Disclaimer (Physical Prizes)

The organizer does not manufacture any physical products. All physical prizes distributed as part of the event are sourced from third parties.

No liability is assumed for these products, particularly with regard to quality, condition, materials, or manufacturing. Detailed information regarding production, ingredients, or materials cannot be provided.

By accepting a prize, the participant explicitly agrees to these conditions.


15. Contact for Privacy Matters

Auost
Auf der Hatterwiese 8
63322 Rödermark
Germany

📧 Email: auost@auost.de


16. Auost Magazine

16.1 Scope

This section explains the processing of personal data specifically in connection with the Auost Magazine. It supplements the general Auost Privacy Policy. The controller identified in Section 2 of this Privacy Policy is also responsible for processing personal data connected with the Magazine.

16.2 Accessing Magazine Articles

When you access a Magazine page, technical information may be processed automatically, including:

  • IP address;
  • date and time of access;
  • requested page or file;
  • referrer URL;
  • browser type and version;
  • operating system and device information;
  • response status and data volume.

This processing is necessary to display the Magazine, maintain technical stability, prevent misuse and protect the security of the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and user-friendly operation of the Magazine.

Server log data is retained for up to 90 days unless a longer period is necessary to investigate a security incident, prevent misuse or comply with a legal obligation. It is subsequently deleted or anonymised.

16.3 Cookies, Analytics and Embedded Content

The Magazine uses technically necessary cookies and similar technologies where required to provide requested website functions.

Analytics, marketing technologies, social-media integrations, videos or other external content that are not technically necessary are activated only after the user has provided the required consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Technically necessary technologies may be used in accordance with Section 25(2) TDDDG and the applicable legal basis under the GDPR.

Consent can be withdrawn or changed at any time through the cookie preference tool. Further information about the providers, purposes, cookie durations and possible international data transfers is provided in the Auost Cookie Policy.

16.4 Contact and Editorial Submissions

If you contact the Magazine or submit an interview, personal story, photograph, article proposal or other contribution, Auost may process your name, contact details, submitted material and related correspondence.

The processing is based on Article 6(1)(b) GDPR where it is necessary to review or perform an agreed editorial contribution and on Article 6(1)(f) GDPR where it is necessary to respond to enquiries, organise editorial work, moderate content or prevent misuse.

Names, photographs, biographies or other identifying information will be published only where an appropriate legal basis or valid permission exists. Separate contributor, image-use or publication agreements may be requested where necessary.

16.5 Information Concerning Children

Contributors must not submit identifiable photographs, personal information or private stories concerning children unless they are legally authorised to do so and have obtained all permissions required for publication.

Auost may request evidence of authorisation and may decline, anonymise, blur or remove material where this is necessary to protect the privacy and safety of a child.

16.6 Magazine Newsletter

If you subscribe to a Magazine newsletter, Auost processes your email address and the technical confirmation information required for the double-opt-in procedure. The legal basis is your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by using the unsubscribe link included in each newsletter or by contacting Auost. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

16.7 Recipients and International Transfers

Personal data may be processed by contracted service providers supporting hosting, website security, newsletter distribution, analytics or editorial operations. These providers process personal data only in accordance with applicable data-protection requirements.

Where data is transferred outside the European Economic Area, Auost uses an applicable adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism. Further details are provided in the general Auost Privacy Policy.

16.8 Your Rights

Your rights to access, rectification, erasure, restriction, data portability, withdrawal of consent, objection and lodging a complaint with a supervisory authority are described in the general Auost Privacy Policy.

Privacy-related requests may be sent to the contact address specified in the Privacy Policy.

 


Last updated: August 2026