Privacy Policy

1Controller

The controller for data processing within the meaning of the GDPR is:

2Processing of personal data

We process personal data only insofar as this is necessary to provide our website and our SaaS platform. The data processed may include in particular:

Contact data

• Name
• Email address
• Phone number

Account and contract data

• Login data
• Billing data
• Contract information

Usage data

• IP address
• Date and time of access
• pages visited
• browser type and operating system

Platform data

When using our platform, data from connected Amazon accounts may also be processed, in particular:

• campaign data from Amazon Ads
• performance data such as clicks, costs and revenue
• product information and product content

This data is processed exclusively to provide our services. We do not process personal data of end customers of Amazon sellers.

3Purposes and legal bases of processing

Performance of a contract

To provide our SaaS platform, in particular to analyze and optimize advertising campaigns. Art. 6 (1) lit. b GDPR

Communication with users

To respond to inquiries and to support our customers. Art. 6 (1) lit. b & f GDPR

Payment processing

To process subscriptions and invoices. Art. 6 (1) lit. b GDPR

IT security and platform operation

To ensure stable and secure operation of our systems. Art. 6 (1) lit. f GDPR

Marketing

If users have consented, data may also be used for marketing purposes (e.g. newsletters). Art. 6 (1) lit. a GDPR

4Use of artificial intelligence

To support the analysis and optimization of advertising campaigns, artificial intelligence technologies may be used. The following information in particular may be processed:

• product information
• campaign data
• user inputs within the platform

We ensure that no personal data of end customers is transmitted to AI systems.

5Hosting and technical infrastructure

Our platform is operated on cloud infrastructure provided by Amazon Web Services (AWS). AWS provides infrastructure and hosting services for the operation of our platform.

6Service providers used

To provide our services, we use selected external service providers.

7Server log files

When accessing our website or platform, information transmitted by your browser is automatically collected. This includes in particular:

• IP address
• date and time of the request
• pages visited
• browser type and operating system
• referrer URL

This data is processed to ensure stable and secure operation of our systems.

8International data transfers

Some of the service providers we use may process data outside the European Union. In such cases, a transfer only takes place if appropriate safeguards under Art. 44 et seq. GDPR are in place, for example through:

• Standard Contractual Clauses of the European Commission
• the EU-US Data Privacy Framework

9Storage period

We store personal data only as long as necessary for the respective purposes. Typical storage periods:

Account data

• as long as a user account exists

Contract and billing data

• in accordance with statutory retention periods (usually 6 to 10 years)

Server log files

• usually a maximum of 30 days

10Rights of data subjects

Data subjects have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise these rights, you can contact us at any time: webmaster@campaign-concierge.com

11Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

12Changes to this privacy policy

We reserve the right to amend this privacy policy if this becomes necessary due to legal changes or changes to our services. The current version is available on our website at any time.

Last updated: May 2026