Privacy Policy
Symbionta Digital takes the protection of your personal data seriously. This policy explains what data we process when you visit this website, test or use our AI phone assistants, and contact us – and what rights you have.
Last updated: October 2026
1. Controller
Symbionta Holding UG
Rheingönheimer Str 61
67122 Altrip, Germany
E-mail: info@symbionta.com
Further company details: Imprint
2. Visiting this website
When you access our website, our hosting provider automatically processes technical data your browser transmits: IP address, date and time of access, page requested, referrer URL, browser and operating system. This is necessary to deliver the website securely and to detect misuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Log data is deleted after [14] days unless needed to investigate a security incident.
The website is operated on Odoo, provided by Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, as our processor under a data processing agreement pursuant to Art. 28 GDPR.
3. Cookies
We use technically necessary cookies (e.g. session, language, cookie consent, live chat session). Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR. Any non-essential cookies (e.g. analytics) are only set with your consent via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw consent at any time via [cookie settings link].
4. Free trial and contact forms
If you request a free EMMA trial or contact us through a form, we process the data you enter (e.g. name, company, e-mail, phone number, message) to send you your personal test link and to handle your request. This data is stored in our CRM. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (responding to enquiries). We delete the data when it is no longer needed, at the latest [24] months after our last contact, unless statutory retention periods apply.
5. Test calls with EMMA (AI phone assistant)
EMMA is an AI system. At the start of every call, callers are informed that they are speaking with an AI (transparency obligation under Art. 50 EU AI Act).
During a test call we process your voice, the call transcript, the phone number you call from, and the information you provide (e.g. name, request, appointment preferences). From this, EMMA creates a lead, contact and call note so you can see what would have arrived in your CRM. Speech processing and storage take place on servers in Germany. Legal basis: Art. 6(1)(b) GDPR. Audio recordings are [not stored / deleted after X days]; transcripts and CRM entries are deleted [X] days after the end of your trial unless you become a customer.
Speech processing provider(s): [Provider name, location – processor under Art. 28 GDPR].
6. Booking a demo
When you book an appointment through our online calendar, we process your name, e-mail, phone number, chosen time and any notes to schedule and hold the meeting. Legal basis: Art. 6(1)(b) GDPR. For video meetings we use [tool, provider, location].
7. Live chat
Our live chat is operated with Odoo. We process the chat content and, if you provide them, your name and e-mail address in order to answer your question. Chats may initially be answered by our AI assistant; you can ask to speak to a human at any time. Legal basis: Art. 6(1)(b) and (f) GDPR. Chat histories are deleted after [12] months.
8. Customers
For customers, the processing of caller data by EMMA is carried out on the customer's behalf. The details are governed by our data processing agreement (DPA), which is part of every contract.
9. Recipients and transfers outside the EU
We only share personal data with processors bound by instructions (hosting, speech processing, e-mail delivery) and, where legally required, with authorities. We do not sell personal data. Data is processed within the EU/EEA. Should a transfer to a third country become necessary, it will only take place on the basis of an adequacy decision or EU standard contractual clauses (Art. 44 ff. GDPR).
10. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). To exercise your rights, e-mail info@symbionta.com.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. the authority responsible for our registered office: [name of the state data protection authority].
11. Changes
We update this policy when our services or legal requirements change. The current version is always available on this page.