Back to home

Privacy policy

Last updated: October 2026

1. Controller

The controller responsible for data processing on this website is
Layer One GmbH, Warmbüchenstraße 30, 30159 Hannover, Germany
represented by the managing directors Julian Freitag and Jonas Gieselmann
Email: hello@get-adlas.com · Phone: +49 511 12290323

2. In short

3. Hosting and server log files

When you open this website, our server automatically processes technical data: IP address, date and time of the request, requested address, amount of data transferred, referrer, browser and operating system, and the response status code. We need this data to deliver the page, fix errors and prevent abuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Log data is only stored for a short time and then deleted or anonymised.

We run this website on our own server in Google Cloud Platform in Frankfurt am Main, Germany. The provider is Google Cloud EMEA Limited, Dublin, Ireland, which acts on our behalf (processing under Art. 28 GDPR). To make the site load quickly, Google’s content delivery network (Cloud CDN) serves cached copies from locations worldwide; in doing so, Google processes technical request data such as your IP address. This website’s pages, fonts, images and our own scripts come from our server or this CDN. Only the sign-up form (Section 5), the booking calendar once you open it (Section 6) and, with your consent, Google Tag Manager (Section 7) load from other providers. A transfer to the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Our emails, for example to hello@get-adlas.com, are handled by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, also as a processor. Provider information: ionos.de.

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

4. Consent and local storage

On your first visit, a banner asks whether we may load analytics and marketing services. We store your choice in your browser’s local storage (key “adlas-consent”, 12 months). This is technically necessary so that we can respect your decision (Section 25(2) no. 2 TDDDG). Without your consent we do not set any other cookies ourselves and store nothing else in your browser. The embedded sign-up form and booking calendar may set their own cookies (Sections 5 and 6). With your consent to “Analytics and marketing”, we also keep the campaign parameters of your visit in your browser’s session storage until the end of the session (keys “adlas_utm_…”), so that they still reach your sign-up after you switch pages.

We only load analytics and marketing (Section 7) with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer. We then reload the page so that anything already loaded disappears. The lawfulness of processing before withdrawal remains unaffected. If you decline, you can still use everything else on the page without restriction.

5. Beta waitlist (Tally)

The sign-up form is provided by Tally BV, Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium (tally.so). When you open the page, your browser loads the form from Tally’s servers (tally.so, api.tally.so). Tally receives technical data such as your IP address, browser, time of the request and the address of the page the form is embedded in, including its parameters, and may set cookies or similar storage.

Based on our review, the form additionally loads a Meta pixel (connect.facebook.net, Meta Platforms Ireland Ltd.) and an error monitoring service (Sentry). Both are part of the embedded form and load with it. The Meta pixel may set a cookie (_fbp). Provider information: Tally, Meta, Sentry.

In the form we collect your first and last name, your email address, your phone number, your company, optionally your website and your answers on your type of business, industry, advertising budget, advertising channels and what you want to use Adlas for. We use them to add you to the beta waitlist, to invite you at launch and to contact you about the beta by email or phone. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request); for loading the form we rely on our legitimate interest in providing the waitlist sign-up as the core function of this page (Art. 6(1)(f) GDPR, Section 25(2) no. 2 TDDDG). We keep your details for as long as you are on the waitlist and delete them on request or when the purpose no longer applies.

After you submit the form, we send you an email from hello@get-adlas.com (sent via IONOS, Section 3) with a personal confirmation link (double opt-in). Your sign-up only counts as confirmed once you click it. We store when we sent the email and when you confirmed, so that we can prove your sign-up and rule out sign-ups with other people’s email addresses (legitimate interest, Art. 6(1)(f) GDPR).

To know which channels lead to sign-ups, the page passes the campaign parameters of the address you opened (utm_source, utm_medium, utm_campaign, utm_content) to the form and, if present, the name of an ad network’s click parameter, for example “gclid” for Google ads or “fbclid” for clicks from Facebook and Instagram. We do not store the value of this click identifier. From this we assign your sign-up to a channel, such as Meta ad, Google ad, search or referral. The legal basis is our legitimate interest in measuring the effect of our marketing channels (Art. 6(1)(f) GDPR). Only if you agreed to “Analytics and marketing” does the page also pass the domain of the page you came from (for example google.com) and the Meta identifiers from Section 7.

Tally itself is based in the EU. The embedded Meta pixel and Sentry may transfer data to the USA. Meta Platforms, Inc. and Functional Software, Inc. (Sentry) are certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). If you prefer not to use the form, write to us at hello@get-adlas.com instead.

We automatically transfer your details from the form to our customer management in Notion. The provider is Notion Labs, Inc., 2300 Harrison Street, San Francisco, CA 94110, USA, acting on our behalf (Art. 28 GDPR). The transfer is handled by an automation (n8n) that we run ourselves on our own servers. Notion also processes data in the USA; Notion Labs, Inc. is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Provider information: notion.com.

6. Booking calendar (Cal.com)

We use the cloud service of Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA, to book calls. When you open the booking calendar, your browser connects to cal.com and app.cal.com. Cal.com receives technical data such as your IP address and may set cookies, for example to detect automated access.

When you book, Cal.com processes your name, email address, the chosen time slot and any details you provide voluntarily. We use them to arrange and hold the call with you. As with the sign-up form, we pass the campaign parameters and the name of a click parameter along with the booking so that we can assign the channel (Section 5). The legal basis is Art. 6(1)(b) GDPR; the service only loads when you open the booking calendar yourself, because it is required for that (Section 25(2) no. 2 TDDDG). Cal.com processes data in the USA. Cal.com, Inc. is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). Provider information: cal.com/privacy. Instead of Cal.com, you can simply email us.

When booking, you confirm your email address with a code that Cal.com sends you. The booking calendar also includes a Meta pixel by Meta Platforms Ireland Ltd. It is part of the booking calendar and loads with it, reports a booking as an event to Meta and may set a cookie (_fbp); this shows us which ads lead to calls. We automatically transfer the booking to our customer management in Notion (see Section 5).

7. Analytics and marketing (Google Tag Manager)

If you consent to “Analytics and marketing” in the banner, we load Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Tag Manager to embed and manage further services that measure reach and the performance of our advertising. Currently these are Google Analytics 4 by Google Ireland Limited (reach measurement), Microsoft Clarity by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (usage analytics: Clarity records how you move around the page, such as clicks, scrolling and mouse movements, and creates heatmaps and session recordings from this) and the Meta pixel by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (measuring our advertising on Facebook and Instagram). Tag Manager itself does not create user profiles, but it processes technical data such as your IP address. The services loaded through it may set cookies or similar storage and record data about your visit, such as pages viewed and clicks.

We pass your choice on to Google’s services via Google Consent Mode. Without your consent we load neither Tag Manager nor the services managed through it. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to the USA in the process. Google LLC, Microsoft Corporation and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). You can withdraw your consent at any time via “Cookie settings” in the footer; we then reload the page.

Without consent we do not load the scripts of these services and do not send them any consent signals. Their cookies may be called, for example, _ga, _gid, _gcl_au, _clck, _clsk or _fbp. When you withdraw consent, we delete such cookies as far as our site can access them. Data already stored by the provider and cookies on the providers’ own domains are not deleted by this. Provider information: policies.google.com/privacy, privacy.microsoft.com, facebook.com/privacy/policy.

Feedback to Meta (Conversions API)

If you agreed to “Analytics and marketing” in the banner and sign up for the waitlist or book a call via this website, we report to Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, how things continue afterwards, for example that you confirmed your sign-up, that we reached you by phone, that you got access to the beta or that a call is taking place. For this we transmit the stage and the time, your email address, phone number and name in hashed (encrypted) form, and your browser’s Meta identifiers (cookies _fbp, _fbc), which the page passes to our automation with your sign-up or booking. Meta uses this to measure the success of our ads and to show them to people who may also be interested in Adlas. The legal basis is your consent (Art. 6(1)(a) GDPR). Without this consent we send no feedback to Meta. You can withdraw via “Cookie settings” and, for a sign-up or booking that has already happened, by email to hello@get-adlas.com; after that we send no further feedback. We are jointly responsible with Meta for the transmission (Art. 26 GDPR, agreement); Meta is responsible for any further processing. Data may be transferred to the USA in the process; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Provider information: facebook.com/privacy/policy.

8. Contact by email or phone

If you write to or call us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). We delete them once your request is settled and no statutory retention periods apply.

9. Recipients

Recipients of your data are, depending on what you use: our hosting provider (Google Cloud), technical service providers for email and for managing the waitlist (processors), namely Tally and the services embedded by Tally (Meta, Sentry), our customer management Notion, after your consent Meta for feedback on your sign-up or booking (Section 7), Cal.com when you open the booking calendar and, after your consent, Google, Microsoft and Meta (Tag Manager and the services embedded through it). We do not pass data on to anyone else unless we are legally required to.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). To do so, contact hello@get-adlas.com.

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR, for example server log files, loading the sign-up form and assigning a channel), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

11. Storage period, mandatory information and automated decisions

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods. The specific periods are given in the individual sections.

You are not obliged to provide us with data. Without an email address, however, we cannot add you to the waitlist, and without contact details we cannot arrange a call with you.

We do not make any decisions based solely on automated processing within the meaning of Art. 22 GDPR.

12. Changes

We will update this notice when the website or the legal situation changes. The version published here applies.