Datenschutzbestimmungen

Principle
We appreciate your interest. Data protection is a high priority for AIghty20 Elevate AG. You can generally use our websites without providing any personal data. However, if you wish to use our services via our website, the processing of personal data may be required. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent. The processing of personal data, such as your name, address, telephone number, or email address, always complies with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to AIghty20 Elevate AG. Through this privacy policy, we aim to inform the public about the nature, purpose, and scope of the personal data we collect, use, and process. Additionally, this privacy policy aims to inform you about your rights. As the data controller, AIghty20 Elevate AG has implemented numerous organizational and technical measures to ensure the most comprehensive protection possible of personal data processed through this website. Nevertheless, internet-based data transmissions can inherently have security vulnerabilities, meaning absolute protection cannot be guaranteed. Therefore, you are free to transmit personal data to us through alternative means, such as by mail or telephone.

Controller
The controller, in the sense of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions of a data protection nature, is:
‍
AIghty20 Elevate AG
Florian Muff
Kapellstrasse 6
8355 Aadorf / Switzerland
thomas@aighty20.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

You can contact us directly at any time with all questions and suggestions regarding data protection.

Our Websites
Our websites ("online presences") include the domains:
www.aighty20.com
member.aighty20.com (Member Portal)
or websites associated with
*.aighty20.com / .ch
*.aighty20elevate.com / .ch
*.elevateaighty.20.com / .ch

The following information refers to and applies to the domains listed above.

Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal email notification to us is sufficient for this. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. You can find the respective legal basis for processing in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection according to Art. 21 para. 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection according to Art. 21 para. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority.

In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch/

For persons in the EU/EEA, the competent supervisory authority is the data protection authority of your place of residence or work.

Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done if it is technically feasible.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the padlock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Blocking, Deletion, and Rectification
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to rectification, blocking, or deletion of this data. For this and for further questions on the subject of personal data, you can contact us at any time at the address given above.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. For this, you can contact us at any time at the address given above. The right to restriction of processing exists in the following cases:

- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.

- If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

- If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Objection to Promotional Emails
The use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information material is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example, via spam emails.

Applicable Legal Bases under the GDPR
Below you will find an overview of the legal bases under the GDPR on which we process personal data. Please note that in addition to the GDPR regulations, national data protection requirements may apply in your or our country of residence or establishment. Furthermore, if more specific legal bases are applicable in individual cases, we will inform you of these in the privacy policy.
Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR): The data subject has given consent to the processing of their personal data for one or more specific purposes.
Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR): Processing is necessary for compliance with a legal obligation to which the controller is subject.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

The following overview summarizes the types of data processed, the purposes of their processing, and the data subjects involved.
‍
‍Types of Data Processed
- Master data (e.g., names, addresses)
- Content data (e.g., entries in online forms)
- Contact data (e.g., email, phone numbers)
- Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status)
- Usage data (e.g., visited websites, interest in content, access times)
- Contract data (e.g., subject matter of contract, term, customer category)
- Payment data (e.g., bank details, invoices, payment history)
- Event data (e.g., data via Facebook Pixel, Meta Pixel, LinkedIn Insight Tag)

Categories of Data Subjects
- Business and contractual partners
- Prospective customers
- Communication partners
- Customers
- Users (e.g., website visitors, users of online services)

Purposes of Processing
- Provision of our online services and user-friendliness
- Office and organizational procedures
- Content Delivery Network (CDN)
- Direct marketing (e.g., via email or postal mail)
- Feedback (e.g., collecting feedback via online form)
- Interest-based and behavioral marketing
- Conversion measurement (measuring the effectiveness of marketing campaigns)
- Contact inquiries and communication
- Marketing
- Profiles with user-related information (creation of user profiles)
- Reach measurement (e.g., access statistics, recognition of returning visitors)
- Remarketing
- Security measures
- Tracking (e.g., interest-based/behavioral profiling, use of cookies)
- Management and response to inquiries
- Audience segmentation
- Provision of contractual services and fulfillment of contractual obligations

In accordance with legal requirements and considering the state of the art, implementation costs, the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security commensurate with the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as controlling access, input, disclosure, and separation of the data, and ensuring its availability. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data, and responses to data breaches. Moreover, we consider the protection of personal data already during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default.

These security measures include, in particular, the encrypted transmission of data between your browser and our server using TLS encryption.

In the course of our processing of personal data, it may occur that data is transmitted to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data, which serve to protect your data.

Data processing in third countries: If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA), or Switzerland) or if processing occurs in the context of using third-party services or disclosing/transferring data to other individuals, entities, or companies, this is done only in compliance with legal requirements.

Subject to explicit consent or contractually or legally required transfer, we only process or have data processed in third countries with a recognized level of data protection, contractual obligation through so-called standard contractual clauses of the EU Commission, upon the existence of certifications, or binding internal data protection regulations (Art. 44 to 49 GDPR, EU Commission information page).

EU-US Data Privacy Framework
Within the framework of the so-called "Data Privacy Framework" (DPF), the EU Commission has recognized the level of data protection for certain companies from the USA as adequate. You can find the list of certified companies and further information on the DPF on the website of the U.S. Department of Commerce. We will inform you in our privacy policy which service providers we use are certified under the Data Privacy Framework.

The data we process will be deleted in accordance with legal requirements as soon as the consents permitting their processing are revoked or other permissions cease to apply (e.g., if the purpose for processing these data has ceased or they are no longer required for that purpose). If the data are not deleted because they are required for other legally permissible purposes, their processing will be restricted to these purposes. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.
Our privacy policy may also contain further information on data retention and deletion, which take precedence for the respective processing activities.

Retention periods for various data categories
– Technical data (server log files, IP addresses): 6 months
– Registration data (member portal): 12 months after contract termination
– Communication data (email, telephone): 12 months after completion of the process, tax-relevant communication 10 years
– Master data (name, address, customer contact details): 10 years after contract termination
– Contract data: 10 years after contract termination
– Payment data: 10 years after contract termination
– Usage data (Google Analytics): 14 months (automatic deletion)
– Cookie data: max. 2 years, depending on cookie type
Newsletter data: Until consent is revoked

As a data subject, you have various rights under the GDPR, particularly those arising from Articles 15 to 21 of the GDPR:

Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether data concerning you is being processed, and to access this data, as well as to receive further information and a copy of the data in accordance with legal requirements.

Right to Rectification (Art. 16 GDPR)
In accordance with legal requirements, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.

Right to Erasure and Restriction of Processing (Arts. 17 and 18 GDPR)
In accordance with legal requirements, you have the right to demand that data concerning you be erased without undue delay, or alternatively, in accordance with legal requirements, to demand a restriction of the processing of the data.

Right to Data Portability (Art. 20 GDPR)
You have the right to receive data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format in accordance with legal requirements, or to request its transmission to another controller.

Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

Withdrawal of Consent
You have the right to withdraw granted consents at any time.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
In accordance with legal requirements and without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a data protection supervisory authority, in particular a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

We process data of our contractual and business partners, e.g., customers and prospective customers (collectively referred to as "contractual partners"), within the scope of contractual and similar legal relationships, as well as related measures and communication with the contractual partners (or pre-contractually), e.g., to answer inquiries.

We process this data to fulfill our contractual obligations. This includes, in particular, obligations to provide agreed services, any update obligations, and remedies for warranty and other performance disruptions. We also process the data to safeguard our rights and for administrative tasks associated with these obligations, as well as for corporate organization. Furthermore, we process the data based on our legitimate interests in proper and economical business management, and in security measures to protect our contractual partners and our business operations from misuse, endangerment of their data, secrets, information, and rights.

Types of data processed: Inventory data (e.g., names, addresses); payment data (e.g., bank details, invoices, payment history); contact data (e.g., email, phone numbers); contract data (e.g., subject matter of contract, term, customer category); usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, time stamps, identification numbers, consent status).
Data subjects: Prospective customers; business and contractual partners; customers.
Purposes of processing: Provision of contractual services and fulfillment of contractual obligations; contact inquiries and communication; office and organizational procedures; management and answering of inquiries.
Legal bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR); legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

We process user data to provide them with our online services. For this purpose, we process the user's IP address, which is necessary to transmit the content and functions of our online services to the user's browser or end device.
Types of Data Processed: Usage data (e.g., visited web pages, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status); Content data (e.g., entries in online forms).
Data Subjects: Users (e.g., website visitors, users of online services).
Purposes of Processing: Provision of our online offering and user-friendliness; IT infrastructure (operation and provision of information systems and technical devices); Security measures; Content Delivery Network (CDN).
Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

When contacting us (e.g., by mail, contact form, email, phone, or social media) and within the scope of existing user and business relationships, the information provided by the inquiring persons is processed to the extent necessary to answer contact inquiries and any requested measures.

Types of data processed: Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).

Data subjects: Communication partners. Purposes of processing: Contact inquiries and communication; Management and answering of inquiries; Feedback (e.g., collecting feedback via online form); Provision of our online offering and user-friendliness.

Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).

For communication purposes, we use messengers and therefore ask you to observe the following information regarding the functionality of the messengers, encryption, the use of communication metadata, and your options for objection.

You can also contact us via alternative channels, e.g., by phone or email. Please use the contact options provided to you or those listed within our online offering.

In the case of end-to-end encryption of content (i.e., the content of your message and attachments), we point out that the communication content (i.e., the content of the message and attached images) is end-to-end encrypted. This means that the content of the messages is not visible, not even to the messenger providers themselves. You should always use an up-to-date version of the messenger with encryption activated to ensure the encryption of message content.

However, we also inform our communication partners that while messenger providers cannot view the content, they can ascertain that and when communication partners communicate with us, as well as process technical information about the device used by the communication partners and, depending on their device settings, also location information (so-called metadata).

Types of data processed: Contact data (e.g., email, phone numbers); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status); Content data (e.g., entries in online forms).
Data subjects: Communication partners.
Purposes of processing: Contact inquiries and communication; Direct marketing (e.g., via email or postal mail).
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

We use software services accessible via the internet and executed on the servers of their providers (so-called "cloud services," also referred to as "Software as a Service") for storing and managing content (e.g., document storage and management, exchange of documents, content, and information with specific recipients, or publication of content and information).
In this context, personal data may be processed and stored on the providers' servers, insofar as they are part of communication processes with us or are otherwise processed by us as outlined in this privacy policy. This data may include, in particular, master data and contact data of users, data on processes, contracts, other procedures, and their contents.
Types of data processed: Inventory data (e.g., names, addresses); Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Data subjects: Customers; employees (e.g., staff, applicants, former employees); interested parties; communication partners.
Purposes of processing: Office and organizational procedures; Information technology infrastructure (operation and provision of information systems and technical devices).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

We send newsletters, emails, and other electronic notifications (hereinafter "newsletters") only with the consent of the recipients or a legal authorization. If the content of a newsletter is specifically described during registration, this description is decisive for the user's consent. Otherwise, our newsletters contain information about our services and us.

To subscribe to our newsletters, it is generally sufficient to provide your email address. However, we may ask you to provide a name for personalized addressing in the newsletter, or other information if it is necessary for the purposes of the newsletter.

We conduct surveys and polls to gather information for the communicated survey or polling purpose. The surveys and polls we conduct (hereinafter "surveys") are evaluated anonymously. Personal data is processed only to the extent necessary for the provision and technical execution of the surveys (e.g., processing of the IP address to display the survey in the user's browser or to enable the resumption of the survey using a cookie).
Types of data processed: Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Data subjects: Communication partners; Participants.
Purposes of processing: Feedback (e.g., collecting feedback via online form).
Legal bases: Legitimate interests (Art. 6 para. 1 lit. f GDPR).

Web analysis (also referred to as "reach measurement") serves to evaluate the visitor flows of our online offering and can include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify at what times our online offering or its functions or content are most frequently used or invite re-use. We can also understand which areas require optimization.
In addition to web analysis, we may also use testing procedures to, for example, test and optimize different versions of our online offering or its components.
Unless otherwise stated below, profiles, i.e., data summarized for a usage process, can be created for these purposes, and information can be stored in and read from a browser or an end device. The collected data includes, in particular, visited websites and elements used there, as well as technical information such as the browser used, the computer system used, and usage times. If users have consented to the collection of their location data by us or by the providers of the services we use, location data may also be processed.
User IP addresses are also stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, within the scope of web analysis, A/B testing, and optimization, no clear user data (such as email addresses or names) is stored, but rather pseudonyms. This means that neither we nor the providers of the software used know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.
Types of Data Processed: Usage data (e.g., visited web pages, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, time stamps, identification numbers, consent status).
Data Subjects: Users (e.g., website visitors, users of online services).Purposes of Processing: Reach measurement (e.g., access statistics, recognition of returning visitors); Profiles with user-related information (creation of user profiles); Tracking (e.g., interest/behavior-based profiling, use of cookies); Provision of our online offering and user-friendliness.
Security Measures: IP masking (pseudonymization of the IP address).
Legal Bases: Consent (Art. 6 para. 1 lit. a) GDPR); Legitimate Interests (Art. 6 para. 1 lit. f) GDPR).

We process personal data for online marketing purposes, which may include, in particular, the marketing of advertising space or the display of promotional and other content (collectively referred to as "content") based on users' potential interests, as well as measuring their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (a "cookie") or similar methods are used, by means of which information relevant for displaying the aforementioned content about the user is stored. This information may include, for example, viewed content, visited websites, online networks used, as well as communication partners and technical data such as the browser used, the computer system used, and information on usage times and functions utilized. If users have consented to the collection of their location data, this may also be processed.
User IP addresses are also stored. However, we use available IP masking procedures (i.e., pseudonymization by shortening the IP address) to protect users. Generally, within the online marketing process, no clear data of users (such as email addresses or names) are stored, but rather pseudonyms. This means that neither we nor the providers of the online marketing procedures know the actual identity of the users, but only the information stored in their profiles.
The information in the profiles is usually stored in cookies or by similar methods. These cookies can generally also be read out later on other websites that use the same online marketing procedure, analyzed for the purpose of displaying content, supplemented with further data, and stored on the server of the online marketing procedure provider.
Exceptionally, clear data may be assigned to the profiles. This is the case, for example, if users are members of a social network whose online marketing procedure we use, and the network links the user profiles with the aforementioned information. Please note that users may enter into additional agreements with the providers, for example, through consent during registration.
In principle, we only receive access to aggregated information about the success of our advertisements. However, through so-called conversion measurements, we can check which of our online marketing procedures have led to a so-called conversion, i.e., for example, to a contract conclusion with us. Conversion measurement is used solely to analyze the success of our marketing measures.
Unless otherwise stated, please assume that cookies used are stored for a period of two years.
Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status); Event data (e.g., data transmitted by us to the platforms via Facebook Pixel, Meta Pixel, LinkedIn Insight Tag).
Data Subjects: Users (e.g., website visitors, users of online services).
Purposes of Processing: Reach measurement (e.g., access statistics, recognition of returning visitors); Tracking (e.g., interest/behavior-based profiling, use of cookies); Conversion measurement (measuring the effectiveness of marketing measures); interest-based and behavior-based marketing; Profiling (creating user profiles); Audience creation; Remarketing; Provision of our online offering and user-friendliness.
Security Measures: IP Masking (pseudonymization of the IP address).
Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Opt-Out Option: We refer to the privacy policies of the respective providers and the opt-out options (so-called "opt-out") provided by them. If no explicit opt-out option is specified, you can disable cookies in your browser settings. However, this may limit the functionality of our online offering.

We maintain online presences within social networks and process user data in this context to communicate with active users there or to offer information about us. We would like to point out that user data may be processed outside the European Union. This may entail risks for users, for example, because the enforcement of user rights could be made more difficult.
Types of data processed: Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Contact inquiries and communication; Feedback (e.g., collecting feedback via online form); Marketing.
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

We integrate functional and content elements into our online offering that are sourced from the servers of their respective providers (hereinafter referred to as "third-party providers"). These may include, for example, graphics, videos, or social media buttons and posts.
Types of data processed: Usage data (e.g., visited web pages, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

We use services, platforms, and software from other providers for the purposes of organizing, managing, planning, and delivering our services.Legal Bases: Legitimate Interests (Article 6(1)(f) GDPR).

In the context of contractual and other legal relationships, we offer efficient and secure payment options to data subjects and, for this purpose, use additional payment service providers in addition to banks and credit institutions. Legal bases: Fulfillment of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).

AI is our lever for your efficiency. We analyze, structure, and automate your processes. Fast and precise. We work pragmatically, not dogmatically.

Locally operated models ensure your data security. If your task demands raw performance, we connect the most powerful external systems like OpenAI, Google, or Anthropic. But we don't feed a black box.

Before data leaves our infrastructure, we intervene. We filter, shorten, and pseudonymize the content locally. Truly sensitive information remains with us. At the same time, we know: the best models in the world don't run on a local computer. That's why we combine systems. External AI services receive only the exact information they need for their job. Not a single byte more.
Whether it's about your emails, tickets, system data, or contact details – we reduce everything to the absolute minimum.

We exclusively use restrictive APIs. Your data does not train external models. This is not wishful thinking, but strict system configuration.

Finally, the most important principle: The machine computes, we think. We expertly review every draft and analysis. The AI prepares. However, it never makes individual decisions with legal consequences for you. The responsibility always remains with us.

We kindly ask you to regularly review the content of our Privacy Policy. We will update the Privacy Policy whenever changes to our data processing activities require it. We will inform you as soon as the changes require an action on your part (e.g., consent) or any other individual notification.