Privacy Policy

1. Privacy at a glance

General information

This section gives an overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified.

Controller

AI-THINK. UG (haftungsbeschränkt)
Fährstr. 217, D-40221 Düsseldorf, Germany
Email: privacy@ai-think.de

How do we collect your data?

• Through your voluntary input in the contact form
• When booking a demo appointment via Calendly (name, email, phone number where provided, appointment time)
• When you play a product video, after your consent (connection to YouTube)
• When you submit an enquiry, after your consent (ad measurement via Google Ads)
• When you visit the website, after your consent (audience measurement via Google Analytics)
• Automatically when you visit the website (server log files)
• By storing display preferences in your browser (localStorage)

What do we use your data for?

• To provide the website and ensure its technical stability
• To process your enquiry
• To arrange and manage appointments for demo calls
• To store your language setting and display preference

Your rights

• Information about stored data
• Rectification, erasure or restriction of processing
• Objection to processing
• Withdrawal of your consent (at any time, without giving reasons)
• Complaint to the data protection supervisory authority

2. Hosting & infrastructure

Own web server

The website runs on our own web server (nginx) and is deployed via a GitLab CI/CD pipeline. SSL termination is handled by an upstream proxy infrastructure. No third-party hosting services are used for this website.

The servers we use are located within the European Union. Operating this website involves no transfer of personal data to a third country. The services listed separately in this policy, which you have to allow explicitly beforehand, are the exception.

Data processing

Server-side access data (server log files) is processed as part of operating the site. See section 5 for details. No analytics or tracking tools are used on this web server.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in the technical operation and security of the website)

3. General information on data processing

Principles

We only process your data if at least one of the following conditions is met:

• Consent (Art. 6(1)(a) GDPR)
• Initiation or performance of a contract (Art. 6(1)(b) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)

Retention period

Data is deleted as soon as the purpose no longer applies or statutory retention periods have expired.

4. Technical storage in the browser

This website uses only technically necessary storage in the browser (localStorage). No tracking cookies or third-party analytics services are used.

Stored entries

• config – language setting and display setting (dark/light mode), stored by Pinia (Vue state management)
• cn-v1 – acknowledgement of the privacy notice (value: "1" after confirmation)

Purpose: user convenience (saved preferences are retained)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in user convenience) in conjunction with § 25(2) no. 2 TDDDG (technically necessary storage)
Deletion: possible at any time by clearing your browser cache

Automatic language selection

On your first visit, the website selects the display language (German or English) automatically based on the language configured in your browser (evaluation of navigator.language). This evaluation takes place exclusively locally in your browser. There is no location determination based on your IP address, no geolocation and no transfer to third parties. A language choice you actively make is stored locally (see the "config" entry) and always takes precedence.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly language presentation). Consent is not required because no personal data is transferred to us or to third parties.

5. Server log files

When you visit our website, we automatically collect technical access data:

• IP address (anonymised after a short time)
• Browser type and version
• Operating system
• Referrer URL
• Time of the server request

Purpose: technical stability, troubleshooting and protection against attacks
Legal basis: Art. 6(1)(f) GDPR
Retention period: generally 7 days, then automatic deletion

6. Contact form

A contact form (/contact) is available on our website. Through it we collect the following information:

Mandatory fields

• First name, last name
• Email address
• Subject (category of the enquiry)
• Message (free text)

Optional fields

• Phone number

Purpose: processing general enquiries, clarifying interest and initial consultation
Legal bases: Art. 6(1)(a) GDPR (consent via mandatory checkbox) and Art. 6(1)(f) GDPR (legitimate interest in customer communication)
Technical details: the notification email carries the IP address and browser identifier recorded at the moment of sending. They serve abuse prevention only, for instance to identify automated submissions (Art. 6(1)(f) GDPR), and are not evaluated beyond that.
Transmission: the form is submitted over an encrypted connection (TLS) to our own server in the EU, which sends the details on to our internal address by email. The data is not stored in a database; it exists in that mailbox only. No third-party form service is involved.
Retention period: until the enquiry has been conclusively processed, or at the data subject's request
Withdrawal: at any time by email to privacy@ai-think.de

7. Appointment booking (Calendly)

For booking demo calls we use the service Calendly, provided by Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. If you follow an appointment link we send you, you are redirected to the external platform calendly.com. Calendly acts as a processor for AI-THINK. within the meaning of Art. 28 GDPR; a corresponding data processing addendum has been concluded.

Data processed

The following personal data is collected when booking an appointment on calendly.com:

• Date and time of the selected appointment, time zone
• Name (first and last name)
• Email address
• Phone number (for appointment reminders, where provided)
• Answers to optional booking questions (e.g. company, enquiry)
• Technical metadata: IP address, browser type, operating system, device information and approximate location (to provide and secure the service)

Data transfer to the USA

Calendly processes and stores personal data in the USA and possibly in other third countries. The transfer takes place on the following basis:

• EU-U.S. Data Privacy Framework (DPF): Calendly is certified under the EU-U.S. Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023.
• Standard Contractual Clauses (SCCs): the EU Standard Contractual Clauses pursuant to Implementing Decision (EU) 2021/914 additionally apply.

Note on data transmission

Booking data is transmitted directly to Calendly and used there for appointment management and for sending confirmation and reminder emails. AI-THINK. receives a notification of the booked appointment including the contact details provided.

Purpose: arranging and managing appointments for demo calls, sending appointment reminders
Legal bases: Art. 6(1)(a) GDPR (consent through active appointment booking) and Art. 6(1)(b) GDPR (initiation of a contract); for the third-country transfer Art. 45 GDPR (adequacy decision EU-U.S. DPF) in conjunction with Art. 46(2)(c) GDPR (Standard Contractual Clauses)
Retention period at AI-THINK.: until the end of the business relationship, or at the data subject's request
Calendly EU representative: eurep@calendly.com
Calendly privacy notice: https://calendly.com/legal/privacy-notice
Data processing addendum (DPA): https://calendly.com/legal/data-processing-addendum
Sub-processors: https://calendly.com/help/calendly-sub-processors-gdpr-ccpa

8. Social media & external links

Our website contains links to our social media profiles. These are plain links, not embedded content: as long as you do not click, no connection to the platforms is established and no data is transferred to them. When you click a link, you leave our website. The respective providers are responsible for data processing on the linked platforms.

9. Payment processing

11. Your rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent given (Art. 7(3) GDPR), at any time and without giving reasons, without affecting the lawfulness of processing carried out up to the withdrawal

Data protection contact:privacy@ai-think.de