Privacy Policy

Last updated: June 22, 2026

Data Controller

Pareo GmbH
Baumstraße 2
80469 München, Germany
Represented by the managing directors: Jonathan Kaleve, Björn Angelo Schick
Email:

Data We Collect

This is the Pareo marketing website. We collect:

  • Contact form submissions: name, email address, company name (optional), and message from the contact form.
  • Analytics data: page views and tracked-link clicks, measured with cookieless Vercel Web Analytics and stored on Pareo's own servers (our platform backend, hosted in the EU on Google Cloud, region europe-west1), kept for 90 days. No cookies are set and no personal profile is built.
  • Marketing data (with your consent): your IP address, used by HubSpot and Leadfeeder/Dealfront to identify the company (not you personally) that may be interested in Pareo, plus page-visit data. Only collected if you accept marketing cookies.
  • Server-side company identification (no cookies): your IP address is processed on our own servers (without any cookies, and regardless of your cookie choice) and matched against a public IP-to-organisation dataset to infer the company (never you personally) behind a visit. The IP address is used only momentarily for this lookup and then discarded; it is not stored and is never sent to any third party. Only the inferred company name, country and visited pages are retained.

Legal Basis for Processing

  • Contact form data: processed on the basis of your consent (Article 6(1)(a) GDPR) given by submitting the form, in order to respond to your enquiry.
  • Analytics data: processed on the basis of our legitimate interest (Article 6(1)(f) GDPR) in understanding how visitors use this site. It is cookieless, so no consent is required.
  • Marketing data: processed on the basis of your consent (Article 6(1)(a) GDPR) given via the cookie banner. No marketing cookies are set and no IP is sent to HubSpot or Leadfeeder unless you accept.
  • Server-side company identification: processed on the basis of our legitimate interest (Article 6(1)(f) GDPR) in understanding which organisations are interested in our B2B product. It is cookieless, company-level only, the IP is discarded immediately after lookup, and no data is shared with third parties. You may object at any time via the contact details below.

How We Use Your Data

  • Contact form data is used solely to respond to your enquiry. We do not add you to marketing lists without separate consent.
  • Analytics data is used to understand how visitors use this site so we can improve it.

Third-Party Processors

  • Mailgun: used to deliver contact form submissions to us. Data is processed in the EU. See Mailgun's Privacy Policy.
  • HubSpot: CRM and marketing platform used for visitor tracking and managing enquiries. Data is processed in the EU. Only active if you accept marketing cookies. See HubSpot's Privacy Policy.
  • Leadfeeder (Dealfront): B2B visitor intelligence that identifies the company (not the individual) behind a visit from the IP address. Data is processed in the EU. Only active if you accept marketing cookies. See Dealfront's Privacy Policy.

Links in Emails We Send You

When we send you a document by email, such as a onepager or a deck, the link may point to pareo.ai/r/... and forward you to the file. We record that the link was opened, which link it was, and when. This lets the colleague who wrote to you see whether the document reached you, and saves you a follow-up asking. The link contains an encrypted reference to the message it was sent with; we store no IP address and no browser information, we set nothing on your device, and we do not combine these opens into a profile. That reference stays encrypted in our own EU analytics and can be tied back to you only with a key we hold in one place; the one time it becomes a name is on an internal page that only our own staff can see. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in knowing whether our own correspondence arrived. You may object at any time under Art. 21 GDPR, and we will send you plain links from then on.

Data Retention

Contact form submissions are retained only as long as necessary to handle your enquiry. Analytics data is kept for 90 days.

Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Object to data processing
  • Withdraw consent at any time. For marketing cookies, decline via the cookie banner or clear your cookies
  • Data portability
  • Lodge a complaint with your local supervisory authority

Contact

For privacy-related inquiries, contact us at:

We use marketing cookies (HubSpot, Leadfeeder) to identify which companies are interested in Pareo. They are only set if you accept. Your data is processed in the EU. Cookie Policy