Zum Hauptinhalt springen

Legal

Privacy policy

Last updated: March 2026

1. Controller

AI-Z GmbH
Königstraße 26, 70173 Stuttgart
Email: info@ai-z-group.com
Phone: +49 157 52105947
Managing Director: Oumar Langer

2. Contact for data protection enquiries

For questions regarding data protection you can reach us at:
Email: info@ai-z-group.com
Postal address: see above

3. Overview of processing activities

We only process personal data where a legal basis permits it. The following categories are processed:

  • Server log data when visiting the website
  • Contact details when using our forms
  • Applicant data when using the application form
  • Usage data via web analytics

4. Server log data

When you visit our website, the hosting provider automatically records: IP address, browser type, operating system, referrer URL, page requested, time of access.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and optimisation of the website).
Retention period: Log data is deleted after 30 days.

5. Contact form

If you use our contact form, the following data is processed: name, company, email address, phone number (optional), message.

Purpose: responding to your enquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent by submitting the form).
Retention period: your data will be deleted as soon as your enquiry has been finally processed, unless statutory retention obligations apply.

6. Contact form (Brane AIF)

If you submit an enquiry via the Brane AIF contact form, the following data is processed: name, company, email address, role within the company (optional).

Purpose: handling your enquiry and providing product information.
Legal basis: Art. 6(1)(a) GDPR (consent).
Retention period: until you withdraw your consent.

7. Application form

When you apply via our careers form, the following data is processed: name, email, phone (optional), desired position, cover letter, CV (PDF/DOC), and optional profiling questions.

Purpose: conducting the recruitment procedure.
Legal basis: Art. 6(1)(b) GDPR (initiation of an employment relationship) in conjunction with § 26 BDSG.
Retention period: applicant data is deleted no later than 6 months after completion of the procedure, unless consent to longer storage has been given.
File upload: uploaded CVs are stored encrypted in the EU (Supabase Storage, Frankfurt).

8. Hosting and content delivery

8.1 Vercel (hosting)

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit our website, your data is processed on Vercel servers. Vercel may collect access data (IP address, time, page requested) in the process.

Legal basis: Art. 6(1)(f) GDPR.
Safeguards: Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.
Privacy policy: vercel.com/legal/privacy-policy

8.2 Cloudflare (DNS)

We use Cloudflare Inc. for DNS services. In doing so, Cloudflare may process technical data (IP address).

Legal basis: Art. 6(1)(f) GDPR.
Safeguards: Standard Contractual Clauses (SCC).
Privacy policy: cloudflare.com/privacypolicy

9. External services and CDNs

9.1 Fonts

All fonts used (Inter, Open Sans, Plus Jakarta Sans, JetBrains Mono) are hosted locally on our servers. No IP addresses or other user data are transmitted to external font providers such as Google Fonts.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent appearance without external data transfer).

9.2 Content Delivery Networks (CDNs)

We load technical libraries (Bootstrap, Font Awesome, Phosphor Icons) via the following CDNs:

  • cdn.jsdelivr.net (jsdelivr)
  • cdnjs.cloudflare.com (Cloudflare)

Your IP address is transmitted to these services in the process.
Legal basis: Art. 6(1)(f) GDPR.

9.3 Formspree (form processing)

Form data is additionally processed via Formspree Inc. in order to send email notifications.

Legal basis: Art. 6(1)(b) GDPR.
Privacy policy: formspree.io/legal/privacy-policy

9.4 Supabase (database & storage)

Applicant data and uploaded documents are stored on Supabase (region: Frankfurt, EU).

Legal basis: Art. 6(1)(b) GDPR.
Privacy policy: supabase.com/privacy

10. Web analytics

10.1 Vercel Web Analytics & Speed Insights

We use Vercel Web Analytics and Speed Insights to analyse website usage and performance. These services collect anonymised usage data (page views, load times). No cookies are set and no personal data is stored.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website optimisation).

11. Local storage (localStorage)

We use the localStorage feature of your browser to save your language preference (German/English). This is technically necessary for the functionality of the website. No personal data is stored.

Legal basis: Art. 6(1)(f) GDPR.

12. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from „http://“ to „https://“ and by the lock symbol in your browser bar.

13. Your rights (Art. 12–22 GDPR)

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): you can request information about the data we process about you.
  • Right to rectification (Art. 16 GDPR): you can request the rectification of inaccurate data.
  • Right to erasure (Art. 17 GDPR): you can request the deletion of your data, unless statutory retention obligations apply.
  • Restriction of processing (Art. 18 GDPR): you can request the restriction of processing of your data.
  • Right to data portability (Art. 20 GDPR): you can receive your data in a machine-readable format.
  • Right to object (Art. 21 GDPR): you can object to the processing of your data at any time.
  • Withdrawal of consent (Art. 7(3) GDPR): you can withdraw any consent given at any time.

To exercise your rights, please contact: info@ai-z-group.com

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Website: baden-wuerttemberg.datenschutz.de

15. Amendments to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to any subsequent visit.