Privacy Policy

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:

ai Consult GmbH
Haferwende 36A
28357 Bremen
Germany
Telephone: +49 421 278478-0
Email: bremen@ai-consult.eu

Name and Address of the Data Protection Officer

The controller’s Data Protection Officer is:
dsgvoschutzteam.com – Lukmann Consulting GmbH
Packerstraße 131a
A-8561 Söding
Telephone: +49 7223 95 666 77
Email: service@dsgvoschutzteam.com

General Information on Data Processing

Legal Basis for the Processing of Personal Data

In accordance with Article 13 GDPR, we inform you of the legal bases on which we process personal data. Unless the applicable legal basis is expressly specified in this Privacy Policy, the following applies:
The legal basis for obtaining consent is Article 6(1)(a) in conjunction with Article 7 GDPR. The legal basis for processing necessary to provide our services, perform contractual measures and respond to enquiries is Article 6(1)(b) GDPR. The legal basis for processing necessary to comply with our legal obligations is Article 6(1)(c) GDPR.
Where the processing of your data is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and those interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for such processing.
Where processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

Data Erasure and Retention Periods

We comply with the principles of data minimisation pursuant to Article 5(1)(c) GDPR and storage limitation pursuant to Article 5(1)(e) GDPR.
We retain your personal data only for as long as is necessary to achieve the purposes specified in this Privacy Policy or for as long as statutory retention periods require. Once the relevant purpose ceases to apply or the applicable retention period expires, the corresponding data will be erased as soon as possible.

External Links

This website may contain links to third-party websites or to other websites for which we are responsible. If you follow a link to a website outside our responsibility, please note that such websites have their own privacy information.
We accept no responsibility or liability for external websites or their privacy policies. Before using such websites, you should therefore check whether you agree with the privacy policies applicable to them.
External links can generally be identified by their colour, which may differ from the surrounding text, or by underlining. Your cursor may also indicate an external link when you move it over the link.
Your personal data will only be transmitted to the destination of an external link once you click on that link. In particular, the operator of the other website may then receive your IP address, the time at which you clicked the link, the page from which you clicked the link and other information described in the respective provider’s privacy policy.
Please also note that individual links may result in data being transferred outside the European Economic Area. This may allow foreign public authorities to access your data. You may not have legal remedies available against such access.
If you do not want your personal data to be transferred to the destination of a link or potentially be subject to access by foreign authorities, please do not click on external links.

Rights of the Data Subject

As a data subject within the meaning of the GDPR, you may exercise various rights. The rights of data subjects under the GDPR include the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right to Withdraw Consent

Certain processing activities may only be carried out with your express consent. You may withdraw any consent you have given at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

Right to Object

Where processing is based on Article 6(1)(e) or (f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you. This right also applies to profiling within the meaning of Article 4(4) GDPR where such profiling is based on those provisions. Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims, we will cease processing your data following your objection.

Where personal data is processed for direct marketing purposes, you also have the right to object at any time to such processing. The same applies to profiling to the extent that it is related to direct marketing.
Once you object, we will no longer process your personal data for such purposes.

Right to Lodge a Complaint with a Supervisory Authority

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority.
This applies in particular to a supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Right to Data Portability

Where your data is processed by automated means on the basis of your consent or for the performance of a contract, you have the right to receive such data in a structured, commonly used and machine-readable format. You also have the right to request that the data be transmitted and made available to another controller, where this is technically feasible.

Right of Access, Rectification and Erasure

You have the right to obtain information about the personal data concerning you that we process, including the purpose of the processing, the categories of data concerned, the recipients of the data and the period for which the data will be stored. If you have any questions regarding this matter or any other matters relating to personal data, you may of course contact us using the contact details provided in our Legal Notice.

Right to Restriction of Processing

You may request restriction of the processing of your personal data at any time if one of the following conditions applies:

• You contest the accuracy of the personal data. For the period during which the accuracy of the data is being verified, you have the right to request restriction of processing.
• If the processing is unlawful, you may request restriction of the use of the data instead of erasure.
• If we no longer require your personal data for the purposes of processing, but you require the data for the establishment, exercise or defence of legal claims, you may request restriction of processing instead of erasure.
• If you object to processing pursuant to Article 21(1) GDPR, your interests and our interests will be weighed against each other. Until it has been determined whose interests prevail, you have the right to request restriction of processing.

Where processing has been restricted, personal data may, with the exception of storage, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Provision of the Website

When you access our website, we automatically collect and store information in server log files. This information is automatically transmitted by your browser to our server or to the server operated by our hosting provider.
The information collected includes:

• IP address of the website visitor’s device
• Device used
• Host name of the accessing computer
• Visitor’s operating system
• Browser type and version
• Name of the file accessed
• Time of the server request
• Amount of data transferred
• Information as to whether the retrieval of the data was successful

This data is not combined with data from other sources.

Instead of operating this website on our own server, we may have it hosted on the server of an external service provider (hosting provider), which, where applicable, is identified above. Personal data collected by this website is then stored on the hosting provider’s servers. In addition to the data listed above, the web hosting provider may also store on our behalf, for example, contact enquiries, contact details, names, website access data, metadata and communication data, contract data and other data generated via a website.
The legal basis for processing this data is Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the technically error-free presentation and optimisation of this website. Where the website is accessed for the purpose of entering into contractual negotiations with us or concluding a contract, Article 6(1)(b) GDPR serves as an additional legal basis. Where we have engaged a hosting provider, we have concluded a data processing agreement with that service provider.

Use of Local Storage Items, Session Storage Items and Cookies

Our website uses Local Storage Items, Session Storage Items and/or cookies.
Local Storage is a mechanism that enables data to be stored within the browser on your device. Such data generally includes user preferences, for example a website’s “day” or “night” mode, and remains stored until you delete it manually.
Session Storage is very similar to Local Storage, except that the data is stored only for the duration of the current session, i.e. until the current browser tab is closed. The Session Storage Items are then deleted from your device.
Cookies are pieces of information placed on your device by a web server, i.e. a server providing web content, in order to identify that device. They may either be stored temporarily for the duration of a session (session cookies) and deleted at the end of your visit to a website, or stored permanently on your device (persistent cookies) until you delete them yourself or they are automatically deleted by your web browser.
These items may also be stored on your device by third-party companies when you visit our website (third-party requests). This allows both us as the website operator and you as a visitor to make use of certain third-party services integrated into this website. Examples include payment processing services or the display of videos.
These mechanisms can be used for a variety of purposes. They may improve the functionality of a website, control shopping basket functions, enhance the security and convenience of website use and enable analyses of visitor traffic and behaviour.
Their use must be assessed under data protection law depending on the respective function.
Where Local Storage Items, Session Storage Items or cookies are necessary for the operation of the website and the provision of certain functions, such as a shopping basket, or are used to optimise the website, for example by measuring visitor behaviour, they are used on the basis of Article 6(1)(f) GDPR.
As the website operator, we have a legitimate interest in storing Local Storage Items, Session Storage Items and cookies in order to provide our services in a technically error-free and optimised manner.
In all other cases, Local Storage Items, Session Storage Items and cookies are stored only with your express consent pursuant to Article 6(1)(a) GDPR.
Where Local Storage Items, Session Storage or cookies are used by third parties or for analytical purposes, we will inform you separately in this Privacy Policy. Where your consent is required, it will be requested and may be withdrawn at any time.

Use of External Services

We use external services on our website. External services are services provided by third parties and integrated into our website. They may be used for various purposes, for example to embed videos or to enhance website security. When such services are used, personal data may also be transferred to the respective external service providers. Where we do not have a legitimate interest in using such services, we obtain your consent as a visitor to our website before using them. You may withdraw this consent at any time. The legal basis is Article 6(1)(a) GDPR.

Analytics

We process personal data relating to website visitors in order to analyse user behaviour.

By evaluating the data obtained, we are able to compile information about the use of individual components of our website and thereby improve its user-friendliness. For example, the analytics tools used may enable user profiles to be created for the delivery of targeted or interest-based advertising, website visitors to be recognised when they return to our website, click and scrolling behaviour and downloads to be measured, heat maps to be created, page views to be recorded, the duration of visits and bounce rates to be measured, and the origin of website visitors to be traced, for example by city, country or referring website.
Analytics tools can therefore help us improve our market research and marketing activities.
Such processing only takes place if you consent to it via our website consent banner. The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. Without your consent, the data processing described above will not take place. If you withdraw your consent, for example via the consent banner or another mechanism provided on this website, we will discontinue such processing. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.

Interface Software

Business processes can be carried out more cost-effectively, quickly and with fewer errors when they are automated using software interfaces. This makes it possible to integrate them efficiently into business processes via a company’s own website or through social networks. We use interface software on our website to connect different applications and to transfer personal data securely from one application to another.

Such processing only takes place if you consent to it via our website consent banner. The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. Without your consent, the data processing described above will not take place. If you withdraw your consent, for example via the consent banner or another mechanism provided on this website, we will discontinue such processing. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.

Google Tag Manager

We use the Google Tag Manager service on our website.

The provider of this service is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
The use of this service may result in data being transferred to a third country, namely the United States. The provider is certified under the EU-U.S. Data Privacy Framework and therefore provides an adequate level of data protection. Further information can be found in the provider’s privacy information at:

https://business.safety.google/privacy.

Contact by Telephone or Email

In accordance with statutory requirements, we provide a telephone number and email address on our website. Data transmitted to us by these means is automatically stored so that we can process the relevant enquiry or contact the person making the enquiry. We do not disclose this data to third parties without consent.

Where you contact us by telephone or email for pre-contractual or contractual purposes, the processing of personal data is based on Article 6(1)(b) GDPR. For all other forms of contact initiated by you, the processing of personal data is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

Applicant Pool

If no employment relationship is established, an applicant may be included in our applicant pool. In this case, all information contained in the application will be stored so that we can contact the person concerned in connection with suitable job vacancies.
Data is stored in the applicant pool only after consent has been given and on the basis of Article 6(1)(a) GDPR. This consent may be withdrawn at any time. The corresponding data will then be deleted unless statutory retention requirements apply. In any event, the data will be deleted no later than two years after consent was given. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.

Processing of Applicant Data

You may submit an application to us, for example by post, via an online application form or by email. The personal data received in this way will be stored and processed by us for the purposes of the recruitment process.

The legal basis for processing is Article 6(1)(b) GDPR and, where consent has been given, Article 6(1)(a) GDPR. You may withdraw your consent at any time. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.

If the application results in an employment relationship, the data collected will be stored for the purposes of administering the employment relationship on the basis of Article 6(1)(b) GDPR.
If no employment relationship is established, the data will be stored on the basis of Article 6(1)(f) GDPR for the duration of applicable statutory claims, particularly claims relating to discrimination in the recruitment process. This is necessary in order to defend against potential legal claims or allegations. Where consent has been given, the data may be retained for a longer period on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.

If no employment relationship is established, the applicant may be included in our applicant pool. In this case, all information contained in the application will be stored so that the person concerned can be contacted in connection with suitable job vacancies.

Data is stored in the applicant pool exclusively after consent has been given and on the basis of Article 6(1)(a) GDPR. This consent may be withdrawn at any time. The corresponding data will then be deleted unless statutory retention requirements apply. The data will automatically be deleted no later than two years after consent was given. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.

Presence on Facebook

Social networks process extensive amounts of personal data relating to their users. When you visit our profiles, your IP address and other information relating to the devices you use are processed, among other data. This may allow IP addresses to be associated with individual users. We have no influence over this processing. Please note that you use our profiles on social networks and the functions they provide at your own responsibility. Details regarding the processing of personal data can be found in the privacy policy of the respective platform operator.

We maintain a profile on Facebook. The provider of this service is:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
Further details can be found in Facebook’s Privacy Policy:

https://www.facebook.com/about/privacy/.

The purpose of our profiles on social media platforms is to increase our online presence and, consequently, our public visibility. The legal basis for this is our legitimate interest pursuant to Article 6(1)(f) GDPR. With regard to processing carried out by the social networks themselves, reference should be made to their own legal bases, for example consent pursuant to Article 6(1)(a) GDPR, as described in the respective privacy policies.

As a general principle, we and the social media platform are joint controllers in respect of processing operations triggered by visits to our profile. You may therefore exercise your rights as a data subject pursuant to Articles 15 et seq. GDPR both against the social media platform and against us. Please note, however, that we have no influence over the processing carried out by the social media platform.

Presence on Instagram

Social networks process extensive amounts of personal data relating to their users. When you visit our profiles, your IP address and other information relating to the devices you use are processed, among other data. This may allow IP addresses to be associated with individual users. We have no influence over this processing. Please note that you use our profiles on social networks and the functions they provide at your own responsibility. Details regarding the processing of personal data can be found in the privacy policy of the respective platform operator.

We maintain a profile on Instagram. The provider of this service is:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
Detailed information regarding the processing of personal data can be found in Instagram’s Privacy Policy:

https://help.instagram.com/519522125107875.

The purpose of our profiles on social media platforms is to increase our online presence and, consequently, our public visibility. The legal basis for this is our legitimate interest pursuant to Article 6(1)(f) GDPR.
With regard to processing carried out by the social networks themselves, reference should be made to their own legal bases, for example consent pursuant to Article 6(1)(a) GDPR, as described in the respective privacy policies.

As a general principle, we and the social media platform are joint controllers in respect of processing operations triggered by visits to our profile. You may therefore exercise your rights as a data subject both against the social media platform and against us. Please note, however, that we have no influence over the processing carried out by the social media platform.

Presence on LinkedIn

Social networks process extensive amounts of personal data relating to their users. When you visit our profiles, your IP address and other information relating to the devices you use are processed, among other data. This may allow IP addresses to be associated with individual users. We have no influence over this processing. Please note that you use our profiles on social networks and the functions they provide at your own responsibility. Details regarding the processing of personal data can be found in the privacy policy of the respective platform operator.

We maintain a profile on LinkedIn. The provider is:
LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland
LinkedIn uses advertising cookies. Detailed information regarding the processing of personal data can be found in LinkedIn’s Privacy Policy:

https://www.linkedin.com/legal/privacy-policy.

The purpose of our profiles on social media platforms is to increase our online presence and, consequently, our public visibility. The legal basis for this is our legitimate interest pursuant to Article 6(1)(f) GDPR. With regard to processing carried out by the social networks themselves, reference should be made to their own legal bases, for example consent pursuant to Article 6(1)(a) GDPR, as described in the respective privacy policies.

As a general principle, we and the social media platform are joint controllers in respect of processing operations triggered by visits to our profile. You may therefore exercise your rights as a data subject pursuant to Articles 15 et seq. GDPR both against the social media platform and against us. Please note, however, that we have no influence over the processing carried out by the social media platform.

Presence on XING

Social networks process extensive amounts of personal data relating to their users. When you visit our profiles, your IP address and other information relating to the devices you use are processed, among other data. This may allow IP addresses to be associated with individual users. We have no influence over this processing. Please note that you use our profiles on social networks and the functions they provide at your own responsibility. Details regarding the processing of personal data can be found in the privacy policy of the respective platform operator.

We maintain a profile on XING. The provider of this service is:
New Work SE
Dammtorstraße 30
20354 Hamburg
Germany
Further details can be found in XING’s Privacy Policy:

https://privacy.xing.com/de/datenschutzerklaerung.

The purpose of our profiles on social media platforms is to increase our online presence and, consequently, our public visibility. The legal basis for this is our legitimate interest pursuant to Article 6(1)(f) GDPR. With regard to processing carried out by the social networks themselves, reference should be made to their own legal bases, for example consent pursuant to Article 6(1)(a) GDPR, as described in the respective privacy policies.

As a general principle, we and the social media platform are joint controllers in respect of processing operations triggered by visits to our profile. You may therefore exercise your rights as a data subject pursuant to Articles 15 et seq. GDPR both against the social media platform and against us. Please note, however, that we have no influence over the processing carried out by the social media platform.