Privacy

Last updated: 27 October 2026

1. Data controller

Represented by Patrycja Janina Etmanski. For privacy enquiries: info@payaltd.com
Phone: +49 176 36865572

2. Providing this website

This website is hosted through OpenAI Sites on Cloudflare infrastructure. When you visit, data including your IP address, the time of access, the requested URL, and browser and connection information is processed to deliver the website and protect it against misuse. The legal basis is our legitimate interest in maintaining a secure website (Article 6(1)(f) GDPR). Technical data is processed in accordance with the hosting providers’ retention policies.

Provider information: OpenAI and Cloudflare. Fonts, images and the film are served with this website. We have not integrated advertising pixels or analytics tools.

3. Contact form and email

The form collects your name and phone number. If you choose “Send enquiry by email”, these details and technical connection data are sent to the email delivery service FormSubmit. FormSubmit forwards the enquiry to our email inbox and, according to its documentation, retains a submission archive for 30 days.

We use your information to handle your enquiry and contact you. The legal basis is taking steps prior to entering into a contract (Article 6(1)(b) GDPR) or, for other enquiries, our legitimate interest in communication (Article 6(1)(f) GDPR). We need the information for as long as your enquiry is being handled; statutory retention obligations may require longer storage. You will not automatically be subscribed to marketing communications.

Further information: FormSubmit privacy policy, FormSubmit documentation. Alternatively, you can contact us directly by email or phone.

4. WhatsApp

WhatsApp is only opened when you choose this contact option. The name and phone number entered in the form are included in a message and in the WhatsApp link. You then send the message yourself. WhatsApp also processes technical usage data. For users in the European Economic Area, the provider is WhatsApp Ireland Limited. Its use is optional; email and phone are available as alternatives. The legal bases described in the contact section apply to our handling of your enquiry.

WhatsApp privacy policy

5. Optional AI assistant

The AI chat is only embedded after you select “Load AI chat”. This loads the chat software through unpkg and connects to the ElevenLabs service, transmitting technical data such as your IP address. ElevenLabs processes your messages and the generated responses to answer questions about PAYA. This assistant is configured to retain conversation data for seven days. It is a text chat; voice recording is disabled.

The legal basis for this optional integration is your consent (Article 6(1)(a) GDPR). Selecting “Disable AI chat” stops the integration for further use: the page reloads, and the chat is only loaded again if you choose to do so. This does not affect the lawfulness of processing carried out before you withdrew consent. Contact PAYA to request access to or deletion of data already transmitted. Please do not enter confidential or particularly sensitive information. AI responses may contain errors and do not constitute binding offers.

ElevenLabs privacy information. You can enquire about all of our services without using the AI assistant.

6. Processing outside the EU

The services listed above may also process data outside the EU or EEA, particularly in the United States. The providers’ applicable contractual terms and privacy policies govern this processing. Information about the transfer mechanisms and safeguards they provide can be found in the policies linked above. You can request further details from PAYA about the processing of your enquiry.

7. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future.

You may also lodge a complaint with a data protection supervisory authority, particularly in your place of residence or where the company is based. In Cyprus, this is the Commissioner for Personal Data Protection. This website does not make automated decisions about you that have legal effects.

This is a translation. The German version of the Privacy Policy is legally binding.