Privacy notice
Information for businesses; the German wording of the legal documents governs.
Controller of personal data
The controller is AVOG UG (haftungsbeschränkt), Schulstraße 15, 95444 Bayreuth, Germany, represented by managing director Aaron Voigt. Contact for data protection: service@avog.info. Vergivo is a service brand of AVOG UG (haftungsbeschränkt).
Scope and principles of processing
This notice explains how we process personal data when you visit the website, contact us directly, or submit a company profile. Information about a legal entity is generally not personal data; information about a sole trader, managing director, or contact person may nevertheless be personal data. We process only data needed for the specific purpose and to the extent permitted by applicable law.
Website delivery and technical logs
When a page is loaded, technical data may be generated, including the IP address, request time, visited URL, referring page, browser and device information, language, transferred volume, status code, and security and error data. Processing is necessary for stable and secure website delivery, protection against misuse, and correction of technical errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is operation, security, and integrity of the service.
Company profile and contact form
When a form is submitted, we process the company name, legal form, year founded, team size and turnover category, country and registered office, registration details, language capacity, description of services and qualifications, references, certifications, capacity, preferred regions, and contract value. We also process the name, role, work email, telephone number, preferred language, preferred contact time, and voluntary notes of the contact person. The data is used to handle the enquiry, assess the profile, and prepare a possible contract. The legal basis is Art. 6(1)(b) GDPR; for business contact persons, Art. 6(1)(f) GDPR may also apply.
Cloudflare and Resend
A submitted form is delivered in encrypted form to a Cloudflare Worker, and Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) sends it as a transactional email to the corporate mailbox of AVOG UG (haftungsbeschränkt). We use Resend only for this message; we do not use it for our own analytics, marketing, DNS, or website delivery. A profile is not published automatically and is not sent to a contracting authority.
Transfers to third countries
Use of Resend may involve processing outside the European Economic Area. The transfer relies on safeguards stated in current Resend documentation, in particular the European Union standard contractual clauses or another lawful mechanism. Details about current processors and safeguards are set out in the Resend DPA and its privacy policy.
Direct contact
When you contact us by email or telephone, we may process your name, company, role, contact details, communication content, and materials sent voluntarily. Depending on the circumstances, the legal basis is Art. 6(1)(b) or (f) GDPR; statutory archiving duties rely on Art. 6(1)(c) GDPR. Do not send special categories of personal data without encryption, unnecessary copies of identity documents, or bank details.
Recipients and other processors
Access is limited to parties that need it to operate the service and handle an enquiry: Cloudflare for Worker, Assets, DNS, network, and security functions; Resend solely for sending the form email; our corporate mailbox; and, where applicable, commissioned IT providers. We disclose data to authorities, courts, or other persons only where legally required or on another permissible legal basis. We do not sell company profiles or provide them for address trading.
Retention period
We delete form and communication data after handling the enquiry unless a contractual relationship, statutory duty, or legitimate reason requires longer retention. Enquiries without continuation are generally removed no later than six months later. German commercial and tax retention periods apply to contractual and accounting data. Technical security and error logs follow the active Cloudflare functions, configuration, operational needs, and legal requirements. Resend messages are subject to its published retention periods; Resend generally states that customer data is deleted no later than 90 days after the Resend contract ends.
Technically necessary storage
Under the current implementation, we do not use our own analytics or marketing services. Fonts and images are delivered by the website or its Assets. If a requested digital service requires information to be stored on or accessed from a device, the legal regime of Section 25(2) TDDDG for technically necessary mechanisms applies. Cloudflare logs remain a separate part of operation and security.
External links and official sources
The website links, among other things, to TED, German public procurement portals, and services of European Union authorities. A connection to an external website operator is established only after a click; its own privacy policy applies to any processing there. A link does not imply official affiliation, partnership, or authorisation.
Data subject rights
Subject to the statutory conditions, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on Art. 6(1)(e) or (f) GDPR. Consent may be withdrawn with effect for the future. Send requests to service@avog.info; to prevent unauthorised disclosure, we may request reasonable identity verification.
Right to lodge a complaint
You have the right to contact a data protection supervisory authority. For our registered office, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, telephone +49 981 180093-0, email poststelle@lda.bayern.de. You may also contact the authority at your habitual residence or place of work.
Automated decision-making and security
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significant effects. Taking the nature and risks into account, we use appropriate technical and organisational measures, such as encrypted transmission, access restrictions, secure credential management, and component updates.
Updates to this notice
We will update this notice if functions, providers, processing operations, or the legal framework change. The version published on this website is authoritative for this notice. Status: 27 August 2026.
The German wording of the legal documents governs. This translation is provided to make the content easier to understand.