Privacy policy

The controller responsible for data processing on this website is AutoProbaho, a remote-first company established in Bangladesh. Its legal name and contact details are maintained in the legal settings of this website and are shown on the legal notice (Impressum) page and above this text once entered. AutoProbaho has no office, branch or other establishment in Germany or elsewhere in the EU/EEA; Germany is a market we serve remotely.

Visitors from the EU/EEA: although the company is established outside the EU, we handle your personal data in a GDPR-conscious way — with a lawful basis for every processing activity, data minimisation, defined retention periods and the data-subject rights described in section 7.

For all privacy-related requests you can write to info@autoprobaho.com.

We process personal data only when you actively submit it or when it is technically necessary to deliver the website securely.

• Contact and consultation forms: name, company, e-mail address, optional phone number, your message and the language you selected. Purpose: answering your enquiry and, if you request one, arranging a consultation. Submitted only with your consent by sending the form.
• Newsletter: e-mail address and, optionally, name and language. Purpose: sending the newsletter you subscribed to. You can unsubscribe at any time using the link in every e-mail or by writing to us.
• Interactive tools (for example the ERP readiness assessment, ROI calculator or solution advisor): the inputs you enter are processed to show you a result. They are stored only if you choose to submit them together with your contact details.
• Server and security logs: IP address, request time, requested page, browser type and referrer are processed by Cloudflare, on whose global infrastructure (Cloudflare Workers, D1 and R2) this website runs, to deliver the site, prevent abuse and diagnose errors.
• Cloudflare Web Analytics: privacy-friendly, cookieless page-view statistics that do not build user profiles and do not track you across websites.
• Google Analytics 4 (only where we have enabled it): usage statistics with IP anonymisation that help us understand which pages are read. If it is not enabled, no Google script is loaded on this site.
• Cloudflare Turnstile: a bot-protection check on forms that evaluates technical signals from your browser to distinguish humans from automated abuse without a traditional CAPTCHA.
• E-mail: newsletters and replies to your enquiries are sent through our transactional e-mail provider, which processes your e-mail address and the message content on our behalf.

The public website sets only functional cookies that are needed to remember your choices: ap_theme (light/dark/system) and ap_lang (your language preference), each stored for up to one year. Cloudflare may set security cookies required for bot protection. A session cookie (ap_session) is used only in the password-protected administration area and is not set for ordinary visitors. Local storage in the administration area remembers the admin theme. We do not use advertising or cross-site tracking cookies. Details are on the Cookies page.

We process personal data under applicable law, including the laws of Bangladesh and, for visitors from the EU/EEA, the GDPR. Where the GDPR applies, we rely on: your consent (Art. 6(1)(a)) for the newsletter and for form submissions; pre-contractual measures and contract performance (Art. 6(1)(b)) when you ask for a consultation or proposal; and our legitimate interests (Art. 6(1)(f)) in operating a secure, functioning website, in usage statistics and in preventing abuse. You may withdraw consent at any time with effect for the future.

The website runs on Cloudflare's global infrastructure: Cloudflare Workers serve the pages, Cloudflare D1 stores form, newsletter and tool submissions, and Cloudflare R2 stores uploaded files and media. Cloudflare processes this data on our behalf as a processor. Our e-mail provider sends newsletters and notifications on our behalf. We do not sell personal data and do not share it with third parties for advertising.

Because AutoProbaho is established in Bangladesh and uses global infrastructure, your data may be processed outside your own country, including outside the EU/EEA. For visitors from the EU/EEA we rely on appropriate safeguards, such as the EU standard contractual clauses provided by the respective provider, and on the GDPR-conscious practices described in this policy.

Enquiries are kept for as long as needed to handle them and for a reasonable follow-up period; if a business relationship arises, statutory retention duties for business correspondence apply. Newsletter data is kept until you unsubscribe. Server logs are kept for a short period for security purposes only. Tool inputs that you did not submit are not stored.

Subject to applicable law you have the right to access the personal data we hold about you, to have it rectified or erased, to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. We grant these rights to every visitor, whichever country you write from. Visitors from the EU/EEA also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of their residence or workplace.

To exercise your rights or ask a question about this policy, e-mail info@autoprobaho.com. Please describe your request clearly so that we can identify the data concerned. We may ask for reasonable information to verify your identity before releasing data.

We update this policy when the website, our services or the legal requirements change. The current version is always published on this page together with the date of the last update.