You embed the widget on your website and are therefore responsible for your visitors' data. This page shows which data goes where, who is responsible for what, the data processing agreement and a text block for your privacy policy.

Who is responsible for what

Our own processing is described in the privacy policy.

Between you as operator of a website with the Accessify widget (controller) and Accessify GmbH (in formation), Mainzer Str. 33, 55252 Mainz-Kastel, Germany, represented by Marvin Malsy (Managing Director) (processor).

1. Subject and duration

Accessify processes personal data on your behalf for the AI features of the widget. Not covered by this agreement are delivering the widget, counting installations and feedback sent to Accessify, for which Accessify is controller itself, and page translation and read aloud, where the visitor's browser talks directly to third parties. The agreement applies as long as you use the AI features with your site key.

2. Nature and purpose of processing

• AI features: Accessify forwards texts of page sections and images to the AI provider you chose in the dashboard, using your access to that provider. For most providers only the image address is sent, for Google the image itself.
• Accessify stores the results per website so the same text is not processed again, and delivers them to your website's visitors.

3. Types of data and data subjects

Data: texts of your pages and the details they contain, image addresses (for the provider Google the images themselves), the address of the page and the IP address, which is counted against abuse for two minutes at most and kept in the request logs at Cloudflare for seven days at most. Data subjects: visitors of your website and people named in the texts of your pages.

4. Instructions

Your settings in the dashboard are your instructions. You give further instructions in text form, for example by email to datenschutz@goaccessify.de. If Accessify considers an instruction unlawful, Accessify tells you without delay (Art. 28 (3) sentence 3 GDPR).

5. Confidentiality

Only people bound to confidentiality who need the data for their task have access to it.

6. Technical and organisational measures

• Transfer exclusively encrypted via HTTPS
• Your access to the AI provider is stored encrypted
• Databases in the Western Europe region of Cloudflare D1
• Requests are only accepted from the domains belonging to your site key
• Rate limits per site key and IP address
• Visitors' IP addresses are not passed to the AI provider

7. Sub-processors

You agree to the sub-processors listed under Sub-processors. Accessify announces new or changed ones to you by email beforehand. You can object within 14 days. Accessify binds every sub-processor contractually to the same obligations.

8. Transfers to third countries

Transfers to countries outside the EU only take place where the conditions of Art. 44 to 49 GDPR are met. The basis for each sub-processor is given in the list.

9. Assistance

Accessify assists you with requests from data subjects (Art. 12 to 23 GDPR), with security of processing, with notifying data breaches and with data protection impact assessments (Art. 32 to 36 GDPR). Accessify reports a data breach to you without delay after becoming aware of it.

10. Deletion and return

The AI results remain in the database until you have the page processed again or delete the website or your account. Copies in the cache expire after 30 days at the latest. When the agreement ends, Accessify deletes the data or hands it to you beforehand on request, unless a statutory retention duty applies.

11. Evidence and audits

Accessify gives you the information you need to demonstrate the obligations under Art. 28 GDPR and allows audits by prior arrangement.

12. Final provisions

Liability follows Art. 82 GDPR. Changes require text form. If this agreement conflicts with other agreements, it prevails for data protection. German law applies.

The agreement applies from the first use of the AI features. If you need it signed, write to datenschutz@goaccessify.de.

Not on this list: your AI provider

You choose the AI provider (OpenRouter, OpenAI, Anthropic, Mistral AI or Google) yourself and use it with your own access. You conclude the contract with it directly when you create the access. Accessify only forwards your requests with that access and is not a party to your contract with the provider. Check whether your contract with the provider includes a data processing agreement and, if the provider is outside the EU, a basis for the transfer.

Always use the first block. You need the page translation block as long as translation is switched on, which it is by default. Use the others only if you use the feature. Replace text in square brackets with your details.

Always

Accessibility widget by Accessify

On our website we use the widget of Accessify GmbH (in formation), Mainzer Str. 33, 55252 Mainz-Kastel, Germany. It offers aids such as larger text, more contrast and read aloud. When it loads, your browser fetches the widget and its settings from servers Accessify runs at Cloudflare, Inc., USA. Your IP address is processed for technical reasons. For troubleshooting and operation, Cloudflare stores logs of these requests with IP address and browser identifier in Accessify's account for seven days at most. Accessify counts on which domain the widget runs and stores no details about you for this. The widget sets no cookies. Your widget settings stay in your browser (§ 25 (2) no. 2 TDDDG).

The legal basis is our legitimate interest in making our website accessible to as many people as possible (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

You can send Accessify feedback on the widget via the widget. Your message, the address of the page, the previous page, language, browser identifier, window size and, if you attach one, a screenshot go to Accessify. Accessify processes the feedback under its own responsibility to improve the widget. More in Accessify's privacy policy: https://goaccessify.de/en/rechtliches#datenschutz

If you use AI features

If you have texts simplified or images described, the widget sends the text of the section or the address of the image to Accessify, which forwards the request on our behalf to [name and seat of the AI provider], which we have engaged for this (Art. 28 GDPR). Your IP address is not passed to the AI provider. The legal basis is our legitimate interest in offering understandable content (Art. 6 (1) (f) GDPR). [Basis for the transfer to a third country if the provider is outside the EU.]

Page translation, as long as it is switched on

If you choose a language in the widget's language menu that differs from the page language, the widget translates the page. For this your browser sends the text of the page, including image descriptions and labels, together with your IP address to the translation service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. While the translation is active, this also applies to text that newly appears on the page. The language menu says "Translated by Google". Without your choice of language nothing goes to Google. The legal basis is our legitimate interest in offering our page in your language (Art. 6 (1) (f) GDPR); the translation is triggered by your choice of language. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR).

To switch it off, remove the „Translate“ feature from the feature list of your website in the dashboard. The widget then no longer translates the page, the language menu shows no Google note, and you do not need this block.

Read aloud

The read aloud feature uses your browser's voices. With online voices, for example in Chrome, your browser sends the text to be read to the browser maker.

This is a proposal, not legal advice. Check that it fits your website.