Last updated: November 2026
We process personal data of visitors to this website only to the extent necessary for a functioning website, our content and our services. Here you can find out which data is processed when you visit outtra.com, for what purpose, on what legal basis and for how long. We use terms such as “processing” and “personal data” as defined in Art. 4 GDPR.
A) Controller
The controller within the meaning of the GDPR is:
81MEDIA GmbH
Ziegelbrennerstraße 5
70374 Stuttgart
Germany
Phone: +49 711 505 14 300
Email: info@outtra.com
B) Your rights
You have the following rights with regard to the personal data concerning you:
- Access to the data processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6(1)(f) GDPR, in particular to direct marketing (Art. 21 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
- Complaint to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
To exercise these rights, please contact us using the contact details above.
C) Hosting and delivery
Hosting
This website runs on servers operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you access the website, the server automatically processes access data (server log files): IP address, date and time, page accessed, referrer, browser type and version, operating system. This data is used to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after 14 days at the latest, unless they are needed to investigate a security incident. We have concluded a data processing agreement with Hetzner.
Content delivery network and protection against attacks
The website is delivered via the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare speeds up delivery and protects against attacks. For this purpose, data traffic, including your IP address, is routed via Cloudflare servers. The legal basis is Art. 6(1)(f) GDPR (secure and fast provision). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses are also in place. Further information: https://www.cloudflare.com/privacypolicy/
Fonts, images and videos
Fonts, images, videos and downloadable documents are loaded from our own servers. This website does not load Google Fonts or any third-party map services.
Webinar recordings from YouTube
Some webinar recordings, for example on the Resources and AI Market Report pages, are stored on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. No connection to YouTube is established when you open our pages. Only when you click on such a video do we load the player in privacy-enhanced mode (youtube-nocookie.com). In doing so, your IP address, the page accessed and technical information about your browser are transmitted to YouTube. YouTube may also store cookies or similar technologies on your device and transfer data to Google LLC in the USA. The legal basis is your consent, given by clicking on the video, pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). Google is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy
D) Cookies and local storage
This website does not set any cookies for analytics or advertising purposes. We store only one piece of technically necessary information in your browser. In the “pll_language” cookie, we remember whether you are using the German or the English version of the website. The cookie is deleted after one year. YouTube cookies are only set if you click on a webinar video (see C). The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.
Web analytics with PostHog
To understand how the website is used, we use PostHog. The provider is PostHog Inc., 2261 Market St. #4008, San Francisco, CA 94114, USA. The data is processed on servers in the EU (Frankfurt). We collect, for example, the pages you visit, clicks, the previously visited page, device, browser, approximate region and your IP address. PostHog does not set any cookies for this and does not store anything permanently in your browser. The identifier is only valid while the page is open. We only evaluate the data in aggregated form to improve the website. We have a data processing agreement with PostHog. Any transfer to the USA is covered by the EU Standard Contractual Clauses. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is analysing and improving our services. You can object to this processing at any time (see B). More information: posthog.com/privacy.
E) Contact form
If you write to us using the contact form, we process your details in order to handle your enquiry: first name, last name, email address, company, your selection of whether you are a brand, retailer, agency, distributor or other, and your message. Our server transmits the data to our CRM system HubSpot (HubSpot Ireland Ltd., 1 Sir John Rogerson’s Quay, Dublin 2, Ireland; parent company HubSpot, Inc., USA). To prevent automated submissions, we also pass your IP address to HubSpot. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (responding to enquiries). HubSpot is certified under the EU-US Data Privacy Framework; we have concluded a data processing agreement with HubSpot. We delete your enquiry once it has been dealt with in full, provided that no statutory retention obligations prevent this. Further information: https://legal.hubspot.com/de/privacy-policy
F) Newsletter
If you sign up for OUTTRA Updates, we process your first name, last name, company, email address and your selection of whether you would like news for brands or for retailers. Our server transmits this data together with your IP address to HubSpot (for the provider, see E). Your subscription only takes effect once you click the link in our confirmation email (double opt-in). This ensures that no one signs up using someone else’s email address. We store the time of sign-up and confirmation so that we can provide evidence of your consent.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time, via the link in every issue or by email to info@outtra.com. After you unsubscribe, we delete your data from the mailing list. We may keep your email address on a suppression list so that you do not receive any further emails.
HubSpot analyses whether a newsletter has been opened and which links have been clicked. We use this analysis to improve the newsletter. It is covered by your consent.
G) Appointment booking
The “Book a live demo” link takes you to a booking calendar from HubSpot Meetings (meetings.outtra.com). There we process your details (name, email address, selected time slot) in order to arrange and hold the appointment. The legal basis is Art. 6(1)(b) GDPR. The information under E also applies.
H) AI check, login, OUTTRA platform and AI Market Report
With the AI check on this website, you can check how visible a domain is in AI answers. The domain you enter is passed to the OUTTRA platform at in.outtra.com and opened there in a new window. We do not store your entry on this website.
On the contact page, retailers can enter their email address to sign in to the OUTTRA platform. The email address is passed to in.outtra.com and the platform opens in a new window. We do not store your entry on this website.
Sign-up, login, the AI check and the AI Market Report run on the OUTTRA platform at in.outtra.com. Processing there is governed by the platform’s privacy policy, which you can find there.
I) External links
This website links to websites of brands, retailers and partners, for example Sporting Insights, Frontnow, Chainbalance, LinkedIn and YouTube. By clicking, you leave our website. The respective operators are responsible for data processing there.
J) Data security and storage period
The website is delivered exclusively in encrypted form (HTTPS). We delete personal data as soon as the purpose of processing no longer applies and there are no statutory retention obligations.
K) Changes
We update this privacy policy when our website or the legal situation changes. The version published here at any given time applies.