Privacy Policy

This policy explains which personal data Linra processes when you visit this website, contact us, or use Linra Studio, why we process it, and which rights you have under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller for the processing described in this policy is:

2. Visiting this website

2.1 Server log files

When you open a page, the server automatically records the following data:

• IP address of the requesting device
• date and time of the request
• page or file requested and the amount of data transferred
• referring page, if your browser sends it
• browser type, version, and operating system

We need this data to deliver the website, keep it secure, and detect misuse. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We do not combine this data with other sources and do not use it to identify you.

2.2 Hosting

This website is hosted on the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare delivers the pages and processes the log data listed in section 2.1, as well as the data needed to protect this website from attacks, on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare may process this data in the United States. Cloudflare is certified under the EU-US Data Privacy Framework, and the data processing agreement also contains the European Commission's Standard Contractual Clauses. The connection to this website is encrypted with TLS. For details, see the Cloudflare privacy policy.

2.3 No cookies, no tracking

This website does not set cookies, does not use analytics or advertising tools, and does not store anything in your browser. For this reason, it does not show a cookie banner. The fonts, images, and videos load from our own server, so viewing this website sends no data to Google or other third parties.

3. Contacting us

When you write to us by email, or use the contact or brief forms on this website, we process your name, your email address, your message, and any other details you include.

The forms on this website do not send data to our servers. They open your own email app with your message filled in, and you send it from there.

We use this data only to answer your request, for example to set up a demo or prepare an offer. If your request relates to a contract or to steps before a contract, the legal basis is Art. 6(1)(b) GDPR. Otherwise, it is our legitimate interest in answering the messages we receive (Art. 6(1)(f) GDPR). Our email runs on Google Workspace, provided by Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, which processes these messages on our behalf under a data processing agreement (Art. 28 GDPR). Google may also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and the data processing agreement also contains the European Commission's Standard Contractual Clauses.

4. Using Linra Studio

4.1 Account and billing data

For customers of Linra Studio, we process the name, business email address, company, account settings, and billing data of the people who use the account. We need this data to provide the service and to bill for it. The legal bases are the performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations under commercial and tax law (Art. 6(1)(c) GDPR).

4.2 Content you upload and create

Linra Studio processes what you put into it and what it makes for you: briefs, chat messages, footage, images, audio, logos, scripts, and the finished videos. We use this content only to provide the service to your company. We do not sell it, use it for advertising, or combine it across customers.

If this content contains personal data, for example people who appear in footage or voices in a recording, your company is the controller for that data and Linra processes it on your behalf as a processor. In that case, our Data Processing Agreement applies. You can request it at sebastian.wissmueller@linra.io.

4.3 AI model providers

To write scripts and create images, animation, video, and audio, Linra Studio sends the relevant parts of your content to AI model providers. They act as our subprocessors and may use the content only to deliver the requested output. A current list of subprocessors is available on request and as part of the Data Processing Agreement.

4.4 Operation and security

To keep the service running and secure, we process technical data such as usage logs, error reports, and performance metrics. The legal basis is our legitimate interest in a reliable and secure service (Art. 6(1)(f) GDPR). Where we analyze usage to improve the service, we use aggregated or pseudonymized data.

5. Recipients and transfers

We share personal data only as far as needed for the purposes in this policy, with these categories of recipients:

• hosting and infrastructure: Cloudflare, Inc.
• email: Google Workspace (Google Cloud EMEA Limited)
• AI model providers, for Linra Studio content
• payment and accounting providers, and our tax advisors
• public authorities, where the law requires it

Our service providers process data on our behalf and follow our instructions (Art. 28 GDPR). Where a provider processes data outside the European Union or the European Economic Area, we transfer it only under an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or under the Commission's Standard Contractual Clauses (Art. 44 to 46 GDPR).

6. Retention

• Server log files: deleted after a short period, unless we need them to investigate a security incident.
• Messages and requests: deleted once your request is fully handled, unless they are business letters that we must keep for 6 years (§ 257 HGB).
• Account data: kept until the account is deleted.
• Content in Linra Studio: kept until you delete it or the contract ends, then deleted under the Data Processing Agreement.
• Billing data: kept for the statutory retention periods of up to 10 years (§ 147 AO, § 257 HGB).

7. Your rights

Under the GDPR, you have the right to:

• get access to the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict the processing of your data (Art. 18)
• receive your data in a portable format (Art. 20)
• withdraw consent at any time, with effect for the future, where processing is based on consent (Art. 7(3))

To use any of these rights, write to sebastian.wissmueller@linra.io or use the contact page. We answer within one month.

If your request concerns personal data in content that a Linra Studio customer uploaded, please contact that company first, because it is the controller. We help the company respond.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Linra is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

8. Other information

Obligation to provide data. You are not required by law or contract to provide personal data on this website. Without your contact details, we cannot answer your request. To use Linra Studio, we need the account data described in section 4.1.

Automated decisions. We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you (Art. 22 GDPR).

Changes. We update this policy when our services or the law change. The current version is always on this page.

9. Questions

For questions about data protection, write to sebastian.wissmueller@linra.io.