Privacy Policy

1. Who is responsible (controller)

PAA CAPITAL LLC, 1001 S Main St, Ste 49, Kalispell, MT 59901, USA.
Data Protection Officer: dpo[at]paacapital.com
EU representative (Art. 27 GDPR): PAA CAPITAL SE, Ludwigsplatz 5, 67547 Worms, Germany (Amtsgericht Mainz, HRB 55019); contact: dpo[at]paacapital.com

2. Data we collect

a) Data you give us: name, email address, company, country, the content of your message and any other information you choose to share. Please do not send identity documents or other sensitive data through the website.
b) Data collected automatically: IP address, browser and device information, pages visited, date and time, referring page, and cookie or similar identifiers (see section 6).

3. Why we use your data and on which legal basis

• To run, secure and improve the website (legitimate interest, Art. 6(1)(f) GDPR).
• To answer your enquiry and give you information about our services (steps prior to a contract, Art. 6(1)(b) GDPR, or our legitimate interest in responding).
• To produce anonymous visitor statistics without cookies, so we can see which pages are useful (legitimate interest, Art. 6(1)(f) GDPR). For detailed analytics with cookies (Google Analytics 4), only if you agree in the cookie banner (consent, Art. 6(1)(a) GDPR); you can withdraw consent at any time in the cookie settings.
• To meet legal obligations (Art. 6(1)(c) GDPR).

We do not sell or rent personal data, and we do not make automated decisions about you through the website.

4. Service providers we use

• Website hosting: netcup GmbH, Nuremberg, Germany.
• Content delivery and protection against attacks: Cloudflare, Inc., USA.
• Firewall and security: Wordfence (Defiant, Inc.), USA.
• Website analytics: Umami, hosted on our own server. It sets no cookies, does not store IP addresses and does not follow you across other websites.
• Detailed website analytics: Google Analytics 4 (Google Ireland Ltd / Google LLC), only with your consent. IP addresses are not stored by Google Analytics 4.
• Visitor statistics: WP Statistics, stored on our own server.
• Contact forms: stored on our own server and processed in our support system.
• Cookie consent: CookieYes.
• Website chat: answers generated by Claude (Anthropic PBC, USA); conversations stored on our own automation server (see section 5).

These providers process data on our behalf and under our instructions, or as independent controllers where stated in their own policies.

5. Website chat (Kylie)

If you use the chat assistant on our website, your messages are processed to answer your question. Answers are generated automatically by an AI model (Claude, provided by Anthropic PBC, USA, acting as our processor); Anthropic does not use these messages to train its models. Conversations are stored on our own automation server for up to 14 days and then deleted automatically. If you ask us to contact you, we create a support request with your email address and a summary of your question, which we keep like any other support request. Legal basis: our legitimate interest in answering enquiries and, where you are interested in our services, steps prior to entering into a contract (Art. 6(1)(f) and (b) GDPR). Please do not enter passwords, identity document numbers or account numbers in the chat. The chat only loads when you open it and stores a random conversation identifier in your browser.

6. Cookies

We use necessary cookies for security and basic functions. Analytics cookies (Google Analytics 4) are set only after you consent in the cookie banner; our own visitor statistics (Umami) work without cookies. We do not use marketing cookies. You can change your choice at any time via the cookie settings or your browser. Details are in our Cookie Policy.

7. International transfers

PAA CAPITAL LLC is based in the United States, so data you send us is processed in the United States. Some providers named above may also process data outside your country. For transfers from the EU/EEA, the UK or Switzerland we rely on the EU-U.S. Data Privacy Framework (where the recipient is certified), the EU Standard Contractual Clauses or other lawful safeguards.

8. How long we keep data

• Contact form messages and related emails: up to 12 months after the matter is closed, unless they become part of a client relationship.
• Visitor statistics (Umami and Google Analytics): up to 14 months.
• Website chat conversations: up to 14 days.
• Server and security logs: up to 180 days.

Longer retention applies only where the law requires it.

9. Security

We use encrypted connections (TLS), a web application firewall, access controls and regular updates. No transmission over the internet is completely secure.

10. Your rights

Depending on where you live, you may have the right to:

• access the data we hold about you and receive a copy;
• have it corrected or deleted;
• restrict or object to its processing;
• data portability;
• withdraw your consent at any time, without affecting earlier processing.

If you are in the EU/EEA, the UK or Switzerland, you can also complain to your local data protection authority. Residents of U.S. states with consumer privacy laws may have additional rights under those laws.

To exercise your rights, email dpo[at]paacapital.com. We may need to verify your identity.

11. Children

This website is not intended for anyone under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy. The current version is always available on this page.

13. Contact

PAA CAPITAL LLC, 1001 S Main St, Ste 49, Kalispell, MT 59901, USA. Data Protection Officer: dpo[at]paacapital.com