Privacy policy

Types of data processed

• Master data (e.g. names, company)
• Contact data (e.g. email, phone numbers)
• Content data (e.g. text entries, process descriptions)
• Usage data (e.g. pages visited, access times)
• Meta/communication data (e.g. device information, IP addresses)

Categories of data subjects

Visitors and users of the online offering (collectively "users").

Purpose of processing

• Providing the online offering, its functions and content
• Responding to enquiries and communicating with users
• Running the AI potential check and AI process analysis
• Scheduling and managing appointment bookings
• Security measures

Legal bases

Pursuant to Art. 13 GDPR: consent is based on Art. 6(1)(a) and Art. 7 GDPR; processing to provide our services and pre-contractual measures on Art. 6(1)(b) GDPR; legal obligations on Art. 6(1)(c) GDPR; and legitimate interests on Art. 6(1)(f) GDPR.

Security measures

In accordance with Art. 32 GDPR we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, including safeguarding the confidentiality, integrity and availability of data.

Processors and third parties

We only disclose data to other persons and companies on the basis of a legal permission, your consent or our legitimate interests.

AI potential check and enquiry forms

When you use the AI potential check, submit an AI process analysis or use an enquiry form, we process the data you enter (name, company, email, optionally phone and message, your selections or process description and analysis) to handle your request, based on your consent (Art. 6(1)(a) GDPR) or pre-contractual measures (Art. 6(1)(b) GDPR). The data is stored in a protected database and is not publicly accessible.

AI process analysis

For the AI process analysis your process description is sent to an AI service provider for evaluation. Please do not enter personal or confidential data. Unless you explicitly submit it, we do not store the analysis.

AI chat assistant

On our website you can ask questions to an AI chat assistant. To answer them, your messages are sent via our server to an AI service (Lovable AI Gateway with connected AI models) and processed there. We do not store chat contents on our servers; the history is saved only locally in your browser (localStorage) and can be removed at any time via “New chat” or by clearing your browser data. Please do not enter sensitive personal data in the chat. The legal basis is our legitimate interest in answering inquiries quickly (Art. 6(1)(f) GDPR) or pre-contractual measures (Art. 6(1)(b) GDPR).

Document extraction live demo

In the live demo you can paste text or upload an image (e.g. an invoice or email). The content is sent via our server to an AI service (Lovable AI Gateway) solely for a one-time analysis; the result is only shown in your browser. We store neither the inputs nor the results. Please do not upload documents containing sensitive personal data of third parties – ideally use sample data. The legal basis is Art. 6(1)(f) GDPR (providing a product demonstration).

Bookings via Calendly

We use Calendly (Calendly LLC) for online appointment booking. When you book a slot, your booking data (e.g. name, email, chosen slot and your entries in the booking form) is transferred to and processed by Calendly to manage the appointment and send confirmations and reminders. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR). Calendly's own privacy notices are available on the Calendly website. Bookings do not run through our own database.

Rights of data subjects

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right of withdrawal

You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object

You may object to the future processing of your data at any time in accordance with Art. 21 GDPR, in particular to processing for direct marketing.

Cookies and local storage

We may use technically necessary cookies or local browser storage. You can disable or delete cookies in your browser settings.

Deletion of data

Data is deleted or restricted in accordance with Art. 17 and 18 GDPR as soon as it is no longer required for its purpose and no statutory retention obligations apply.

Hosting

The hosting services we use provide infrastructure and platform services, computing capacity, storage and database services. We process master, contact, content, usage and meta/communication data on the basis of our legitimate interests (Art. 6(1)(f) GDPR).

Access data and log files

Based on our legitimate interests we collect data on every server access (server log files): page name, date and time, data volume, browser type, operating system, referrer URL, IP address and requesting provider. Log files are stored for a maximum of 7 days and then deleted.