Translation Notice: This is a Claude-assisted translation of the German privacy notice for the marketing website aaf-prep.com (dated 2026-05-20). The German text is the authoritative version of this data protection notice; the current authoritative version is published at https://aaf-prep.com/de/datenschutz. This English translation is provided for understanding purposes only. Any divergence between the German and English versions shall be resolved in favor of the German version. For data protection inquiries, please contact kraaz@aa-schmiede.com.

Privacy Notice — Website aaf-prep.com

As of: 20 May 2026

Section 1 Controller

The controller within the meaning of Article 4(7) GDPR is:

Inquiries regarding this Privacy Notice and the exercise of data subject rights should be directed to the e-mail address above.

A data protection officer has not been appointed; an obligation to do so under Article 37 GDPR in conjunction with Section 38 BDSG (German Federal Data Protection Act) does not currently apply to aa-Schmiede.

Section 2 Scope

(1) This Privacy Notice applies to the marketing and sales website at https://aaf-prep.com (hereinafter the „Website“).

(2) The processing of personal data in connection with the use of the installed software „aaf-Prep“ and the management of tester licenses is governed by a separate Privacy Notice, available at https://aaf-prep.com/en/privacy/software (hereinafter „Software Privacy Notice“). This notice does not cover software use.

Section 3 Server Logs / Access Data

(1) The Provider does not store any own server logs and therefore does not collect or process any access data of Website visitors.

(2) The hosting provider ALL-INKL.COM (see Section 4) collects technical server logfiles internally for the maintenance of IT security, error analysis, and abuse detection (in particular IP address, timestamp, requested URL, HTTP status, transferred data volume, user agent) for a maximum of seven (7) days. The Provider does not have access to these logs under the standard hosting plan; processing is carried out exclusively by ALL-INKL.COM on the basis of the existing data processing agreement (see Section 4). Deactivating these logs is not possible under the shared-hosting plan used.

(3) The legal basis for processing this technical data at the hosting provider is the legitimate interest in the security and functionality of the Website (Article 6(1)(f) GDPR).

(4) The privacy notice of ALL-INKL.COM is available at: https://all-inkl.com/datenschutzinformationen/

Section 4 Hosting at ALL-INKL.COM

(1) The Website is hosted by:

(2) A data processing agreement (DPA) within the meaning of Article 28 GDPR is in place with ALL-INKL.COM.

(3) Insofar as ALL-INKL.COM processes personal data within its own area of responsibility (e.g., the security logs referred to in Section 3(2)), this is governed by ALL-INKL.COM's own privacy notice.

Section 5 Closed Beta Phase — no payment processing

During the Closed Beta phase, no sales take place. Payment processing through external service providers will only occur after the conclusion of the Closed Beta phase. This Privacy Notice will be amended accordingly in due course.

Section 6 Reference to the Software Privacy Notice

Testers of the Closed Beta phase receive access to the installed software „aaf-Prep“. The processing of personal data in connection with software use — in particular license activation, tester management, and the processing of tester data by the involved processors — is governed by the separate Software Privacy Notice. It forms part of the Closed Beta EULA and is available at:

https://aaf-prep.com/en/privacy/software

Section 7 Cookies

No cookies are set on this Website — not even technically necessary ones, since the Website is operated as a static website without sessions, login functionality, or dynamic personalization.

Section 8 Tracking, Analytics, Profiling

No tracking, analytics collection, or profiling takes place on this Website. No external analytics, marketing, or advertising tools are used. No user profiles are created.

Section 9 External Content

Currently, no external content (e.g., videos via YouTube or Vimeo, social media plugins, external fonts, mapping services) is embedded. Should this change in the future, this Privacy Notice will be amended accordingly and the user will be informed separately about each third-party integration.

Section 10 Data Subject Rights

With respect to the personal data concerning you, you have the following rights vis-à-vis the Provider:

• right of access pursuant to Article 15 GDPR,
• right to rectification pursuant to Article 16 GDPR,
• right to erasure pursuant to Article 17 GDPR,
• right to restriction of processing pursuant to Article 18 GDPR,
• right to data portability pursuant to Article 20 GDPR,
• right to object to processing based on Article 6(1)(f) GDPR pursuant to Article 21 GDPR.

To exercise the above rights, an informal notification to the e-mail address listed in Section 1 is sufficient.

Since the Provider itself does not store any personal data of Website visitors (see Section 3(1)), the rights of access and erasure vis-à-vis the Provider are essentially limited to a reference to the processing carried out by the hosting provider mentioned in Section 3 (ALL-INKL.COM).

Section 11 Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to other remedies, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority. The authority competent for aa-Schmiede is:

Section 12 Amendments to this Privacy Notice

The Provider reserves the right to amend this Privacy Notice should changes to the technical configuration of the Website (e.g., embedding of external content, activation of analytics) or changes to legal requirements make this necessary. The currently applicable version is available at https://aaf-prep.com/en/privacy.

Section 13 Date and Languages

This Privacy Notice is provided in a German and an English version. In case of inconsistencies or differing interpretations between the two language versions, the German version shall prevail.

Diese Datenschutzerklärung steht in einer deutschen und einer englischen Fassung zur Verfügung. Bei Widersprüchen oder Auslegungsunterschieden zwischen den beiden Sprachfassungen ist die deutsche Fassung verbindlich.

Section 14 Document Date

1. 20 May 2026 (Closed Beta variant v2; a lawyer-finalized version will follow in due course).