How Ananas GDS collects, uses, and protects your data — in compliance with the EU GDPR.
Last updated: June 2026. This policy should be reviewed by a GDPR-qualified legal advisor before production publication.
Ananas GDS UG (haftungsbeschränkt), Nutzweg 30, 97424 Schweinfurt, Germany. Email: business@ananas-gds.com.
We process your data on the basis of contract performance (Art. 6(1)(b) GDPR) for operating the platform, your consent (Art. 6(1)(a) GDPR) for analytics and marketing communications, and our legitimate interests (Art. 6(1)(f) GDPR) for securing and improving the service.
The marketing website uses first-party, privacy-friendly analytics that store anonymized usage events in your browser. No tracking fires until you accept via the consent banner. We do not sell or share your data with advertising networks. If Google Analytics is enabled in future, IP anonymization will be applied and consent will be required before any tags load.
Account and operational data are retained for as long as your account is active. Analytics events are retained for a maximum of 14 months. You may request deletion of your data at any time.
Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise any of these rights, contact business@ananas-gds.com. You also have the right to lodge a complaint with a supervisory authority.
We use Stripe for payment processing (Silver subscriptions only) and may use Google Analytics for website analytics where consent is given. Each processor handles data under its own GDPR-compliant terms.
All data in transit is encrypted via HTTPS. Partner access is token-based with no shared credentials. Infrastructure is EU-based and cloud-hosted with redundancy.
