Privacy notice

Last updated: 16 September 2026

This notice explains how we handle personal data when you visit linro.io. We aim to collect as little as possible and to be straightforward about what we do collect.

Who we are

The data controller is Linro GmbH.

Postal address:
Linro GmbH
Kolonnenstr. 8
10827 Berlin
Germany

For privacy questions, contact privacy@linro.io. For everything else, contact@linro.io. Full company details are in the Impressum.

What we collect on this site

• Hosting. The site is hosted on GitHub Pages (GitHub, Inc.). GitHub records standard request data (IP address, user agent, referrer, timestamps) for security and abuse prevention. We do not have access to those logs and do not use them to profile visitors.
• Analytics — only if you accept. If you accept the cookie banner, we load Google Analytics 4 (measurement ID G-VGQRBZLJHW) with IP anonymisation enabled. Until you accept, the Google tracking script is not loaded and no analytics cookies are set. You can withdraw consent at any time using the Cookies link in the footer.
• Website visitor identification — only if you accept. If you accept the cookie banner, we also load the visitor identification script of Clay (Clay Labs, Inc., Brooklyn, NY, USA; served from claydar.com). It records your IP address, the pages you visit, how long you stay, the referring page and campaign (UTM) parameters, your interactions with the page (scrolling, clicks, typing activity), and technical characteristics of your browser and device (screen, graphics renderer, fonts, CPU cores, memory) from which it derives a device fingerprint. Clay matches the IP address against business databases to tell us which organisation you are visiting from, so that we can follow up with companies that show interest in Linro. Until you accept, the script is not loaded and nothing is collected. You can withdraw consent at any time using the Cookies link in the footer.
• Booking a call. Our booking section embeds Cal.com (loaded only after you accept cookies and scroll to the section). If you submit the form to book a call, the data you enter — name, email, and any notes — is processed by Cal.com on our behalf to schedule and follow up on the meeting.
• Email contact. If you write to contact@linro.io or privacy@linro.io, we receive your email address and the contents of your message. We process this to answer you and, where relevant, to take pre-contractual steps you ask for.

We do not run advertising trackers or session replay on this site. The Clay script described above does derive a device fingerprint; it is loaded only with your consent.

Legal basis (GDPR)

• Hosting / abuse prevention: our legitimate interest in delivering the website reliably and protecting it from abuse such as denial-of-service, scraping, and credential-stuffing (Art. 6(1)(f) GDPR).
• Analytics: your consent (Art. 6(1)(a) GDPR; § 25 (1) TDDDG, formerly TTDSG, for cookies and similar storage).
• Website visitor identification: your consent (Art. 6(1)(a) GDPR; § 25 (1) TDDDG for cookies, storage and reading device characteristics).
• Bookings: performance of pre-contractual steps you request (Art. 6(1)(b) GDPR).
• Email contact: legitimate interest in answering enquiries (Art. 6(1)(f) GDPR), or pre-contractual steps where applicable (Art. 6(1)(b) GDPR).

Sharing and international transfers

Personal data may be processed by the providers listed above (GitHub, Inc., Google LLC for Analytics, Clay Labs, Inc. for visitor identification, Cal.com Inc.). Where these providers process data outside the EEA, transfers rely on the EU-US Data Privacy Framework (where the recipient is certified) and the EU Standard Contractual Clauses. Clay Labs, Inc. processes visitor identification data in the United States on the basis of the EU Standard Contractual Clauses included in its data processing agreement.

Retention

Analytics data is retained for the default Google Analytics window (currently 2 months for user-/event-level data; configurable). Clay caches the result of an IP address lookup for 30 days. Visitor identification records are kept in our Clay workspace as part of our sales records for as long as the identified organisation remains of commercial interest to us. Booking data is retained while we maintain a relationship with you and afterwards as needed for tax and legal record-keeping (typically up to 10 years under § 147 AO for invoicing-relevant data, where applicable).

Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). You can also withdraw any consent you have given at any time, with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR). To exercise any of these rights, email privacy@linro.io.

Right to object (Art. 21 GDPR): where we process your personal data on the basis of legitimate interests — in particular, hosting / abuse prevention and answering email enquiries — you have the right to object at any time, on grounds relating to your particular situation. If you object, we will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests and rights.

Automated decision-making. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

You can also lodge a complaint with a supervisory authority. The authority competent for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de). You may also contact the supervisory authority in your EU member state of residence.

Cookies and similar technologies

The only cookies/local storage we set are:

• linro-consent-v2 in localStorage — remembers your consent choice. Strictly necessary; no consent required.
• Google Analytics cookies (_ga, _ga_*) — only set after you accept the banner.
• Clay visitor identification: claydar_device_id, claydar_session and radar_sn_* entries in sessionStorage (a random device ID, the current visit, and hashed device characteristics; deleted when you close the tab) and, once an organisation has been identified, spotter_data (also sessionStorage) — only set after you accept the banner. Clay sets no cookies in our configuration.
• Cal.com may set its own cookies if and when you interact with the booking widget; see their privacy notice for details.

Manage cookie preferences

Changes

We may update this notice as the site evolves. Material changes will be reflected by updating the date at the top.