Legal

Privacy policy

Protecting your personal data matters to us. Below we explain which data we process when you visit this website, book an appointment or contact us.

1. Controller

SWX Venture Studio GmbH (Prevano project) Campus, Building A1.1 66123 Saarbrücken Germany

Represented by: Jan-Philipp Groth, Project Manager of Prevano

Email: hello@prevano.ai

2. Hosting and delivery of the website (Lovable)

This website is built and operated with Lovable. The provider is Lovable Labs Incorporated, Stockholm, Sweden. Lovable delivers the website through its infrastructure and the data centres of sub-processors, which may also be located outside the EU, in particular in the USA.

When you open the website, technical data is processed automatically: IP address, date and time of access, the page requested, the referrer URL, and browser and operating system information. This data is needed to deliver the website securely and reliably, and is deleted or anonymised after a short period.

Lovable also produces privacy-friendly, aggregated statistics on page views. No advertising cookies are set and no user profiles are created.

The legal basis is our legitimate interest in the secure and efficient provision of the website under Art. 6 (1) (f) GDPR. A data processing agreement under Art. 28 GDPR is in place with Lovable. Where data is transferred to third countries, this is based on the EU Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. More information: https://lovable.dev/privacy

3. Appointment booking (Cal.com)

To book demo appointments we embed the Cal.com calendar. The provider is Cal.com, Inc., 2261 Market Street #5166, San Francisco, CA 94114, USA.

When the embedded calendar loads, a connection to Cal.com's servers is established. In particular, your IP address and browser and device information are transmitted to Cal.com. If you book an appointment, Cal.com also processes the data you enter, such as your name, email address, the chosen slot and any optional details about your request, and passes it on to us.

The legal basis for the booking is Art. 6 (1) (b) GDPR (pre-contractual measures at your request). Embedding the calendar is based on our legitimate interest in straightforward scheduling under Art. 6 (1) (f) GDPR.

Transfers to the USA are based on the EU Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. We delete booking data once it is no longer required for its purpose and no statutory retention obligations apply. More information: https://cal.com/privacy

If you prefer not to use the calendar, you can also contact us directly by email.

4. Contact by email

If you email us, we process the information you provide (such as your name, email address and the content of your message) solely to handle your request and to explore a possible business relationship.

The legal basis is Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. We delete requests once they have been fully handled and no statutory retention obligations apply, at the latest after 24 months.

5. Cookies and local storage

We do not use advertising or tracking cookies. Your language choice (German or English) is stored locally in your browser, so the site appears in your preferred language on your next visit. This is permitted without consent under Section 25 (2) no. 2 TDDDG.

The embedded Cal.com calendar may use technically necessary cookies or local storage to complete a booking.

6. External links

This website contains links to external websites, for example to SouthwestX. When you click them, you leave our website. The respective provider is responsible for data processing on those sites.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Please contact hello@prevano.ai. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Independent Data Protection Centre of Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.

8. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

9. Changes to this policy

We update this privacy policy when our website, the services we use or the legal situation change. The version published here applies. Last updated: September 2026.