1. General Information and Principles of Data Processing
We are pleased that you are visiting our website. Protecting your privacy and your personal data—i.e., personal data—when using our website is important to us.
According to Art. 4 No. 1 GDPR, personal data includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, address, phone number, email address, and IP address.
Data that cannot be linked to you, such as anonymized data, is not considered personal data. Processing (e.g., collecting, storing, reading, querying, using, transmitting, deleting, or destroying) personal data under Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted once the purpose of the processing has been fulfilled and no further statutory retention obligations exist.
Here you will find information about the handling of your personal data when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you.
We also explain the type and scope of each data processing activity, its purpose, the corresponding legal basis, and the relevant retention period.
This Privacy Policy applies only to this website. It does not apply to other websites we may link to via a hyperlink. We cannot assume responsibility for the confidential handling of your personal data on third-party websites, as we have no influence over whether these companies comply with data protection regulations. For information on the handling of your personal data by these companies, please refer to their respective websites.
2. Responsible Party
The party responsible for the processing of personal data on this website is (see imprint):
aicall.io GmbH, Bastian Schrap
3. Provision and Use of the Website/Server Log Files
a) Type and Scope of Data Processing
When you use this website without transmitting data to us in other ways (e.g., by registering or using the contact form), we collect technical data necessary to display the site through server log files automatically sent to our server, including:
IP address
Date and time of the request
Name and URL of the requested file
Website from which access is obtained (Referrer-URL)
Access status/HTTP status code
Browser type
Language and version of browser software
Operating system
b) Purpose and Legal Basis
This processing is technically required to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for this processing is Art. 6 (1) lit. f) GDPR, as processing these data is essential for providing a website and therefore serves a legitimate interest of our company.
c) Retention Period
Once the personal data mentioned above are no longer needed to display the website, they are deleted. Data collection and storage in log files are essential for the website’s operation. Therefore, users cannot object to this aspect. In certain cases, further storage may occur if legally required.
4. Use of Cookies
a) Type, Scope, and Purpose of Data Processing
We use cookies, which are small files sent to your device’s browser during your visit to our website and stored there.
Some website functions cannot be offered without essential cookies, while other cookies allow us to perform various analyses. Certain cookies recognize the browser you used on a repeat visit and transmit various information to us. We use cookies to make using our website easier and more efficient by tracking your website usage and recording your preferred settings (e.g., country and language preferences). If third parties process information via cookies, they collect this information directly through your browser. Cookies cannot run programs or transmit viruses to your device.
Various types of cookies are used on our website, as outlined below:
Temporary Cookies/Session Cookies: These cookies are deleted automatically when you close your browser. They enable the collection of session IDs, allowing us to associate multiple browser requests into a single session and recognize your device on future visits.
Permanent Cookies: Permanent cookies remain stored in your browser for an extended period and may transmit information. Storage duration varies per cookie, and you can delete them via your browser settings.
Third-Party Cookies: We use analytical cookies to observe anonymized user behavior on our website. We also use advertising cookies to track user behavior for targeted marketing. Social media cookies allow connections to your social networks and content sharing.
Browser Configuration Settings
Most browsers are configured to accept cookies automatically. However, you can configure your browser to accept only certain cookies or none at all, although this may limit website functionality. You can also delete cookies already stored in your browser or adjust settings to be notified before storing cookies. If you deactivate cookies, a permanent cookie may need to be stored on your computer to remember your preferences.
b) Legal Basis
The legal basis for processing personal data via cookies is Art. 6 (1) lit. f) GDPR due to the purposes described. If you have provided consent based on a notice on our website ("cookie banner"), the additional legal basis is Art. 6 (1) lit. a) GDPR.
c) Retention Period
Data collected via cookies will be deleted once they are no longer necessary for the purposes described above. Additional storage may occur if legally required.
5. Data Collection for Pre-Contractual Measures and Contract Fulfillment
a) Type and Scope of Data Processing
In the pre-contractual phase and upon contract conclusion, we collect personal data, such as your first and last name, address, email, phone number, or bank details.
b) Purpose and Legal Basis
We collect and process these data solely to fulfill the contract or pre-contractual obligations. The legal basis is Art. 6 (1) lit b) GDPR. If additional consent has been provided, the legal basis is also Art. 6 (1) lit. a) GDPR.
c) Retention Period
Data are deleted once they are no longer needed for processing purposes. Legal retention obligations, such as commercial or tax retention requirements under the German Commercial Code (HGB) or the Tax Code (AO), may require further storage, in which case we will block or delete your data at the end of these periods.
6. Order Form
Our website includes an order form for electronic pre-orders.
a) Type and Scope of Data Processing
We collect only the following data:
First and last name
Phone number
Email address
Bank details
Product name
b) Purpose and Legal Basis
The purpose of data processing is to properly handle your order. The legal basis is Art. 6 (1) lit. b) GDPR, as processing is necessary to fulfill a contract or carry out pre-contractual measures at the request of the individual.
c) Retention Period
The data are deleted once they are no longer needed for processing purposes.
There may also be legal retention obligations, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will block or delete your data once these retention periods expire.
7. Registration Option
a) Type and Scope of Data Processing You can register on our website. When you register, we collect and store the data you enter in the input fields (e.g., last name, first name, email address). Data will not be shared with third parties.
b) Purpose and Legal Basis for Data Processing Your registration is necessary to access certain content and services on our website or to fulfill a contract or take steps prior to entering into a contract. After registering, you may modify or delete the personal data provided during registration from the database of the data controller at any time. The legal basis for the processing is your consent under Art. 6 (1) lit. a) GDPR. If your registration serves the purpose of preparing a contract, Art. 6 (1) lit. a) GDPR is an additional legal basis.
c) Retention Period The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.
8. Data Transfer
We only transfer your personal data to third parties if: a) You have given your explicit consent under Art. 6 (1) lit. a) GDPR. b) It is legally permissible and necessary under Art. 6 (1) lit. b) GDPR to fulfill a contractual relationship with you or to carry out pre-contractual actions. c) There is a legal obligation for the transfer under Art. 6 (1) lit. c) GDPR. We are legally obligated to transmit data to government authorities, such as tax authorities, social security agencies, health insurance funds, supervisory authorities, and law enforcement agencies. d) The transfer is necessary under Art. 6 (1) lit. f) GDPR to protect legitimate corporate interests, as well as to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data. e) We use external service providers (so-called data processors) under Art. 28 GDPR for processing, who are obligated to handle your data carefully. We use such service providers in areas like IT, logistics, and telecommunications. When transferring data to third countries, i.e., outside the EU or EEA, we ensure that these entities handle your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries if the EU Commission has confirmed an adequate level of protection or if we ensure careful handling of the personal data through contractual agreements or other suitable guarantees.
9. Application Option
a) Type and Scope of Data Processing You can apply via our website or by email. When you apply, we collect and store the data you enter in the input field or send to us by email.
b) Purpose and Legal Basis We process your data solely for the purpose of handling your application. Data will not be shared with third parties. The legal basis for processing is Art. 88 (1) GDPR in conjunction with § 26 BDSG, as well as Art. 6 (1) lit. b) GDPR. If you consent to inclusion in our applicant pool, the legal basis is Art. 6 (1) lit. a) GDPR.
c) Retention Period If we are unable to offer you a position, we will retain your data for up to six months after the application process ends, taking into account § 61b (1) ArbGG in conjunction with § 15 AGG. The retention period begins upon receipt of the rejection letter. If you consent to be included in our applicant pool, we will retain your data for a maximum of two years.
d) Data Sharing Only entities involved in the decision-making process (responsible HR and specialist departments, management, works council) will have access to your data. Additionally, we are obligated to provide your data to public authorities and institutions (e.g., public prosecutor’s office, police, supervisory authorities, tax authorities, social security agencies, etc.). Further data recipients may include entities to whom you have given us consent for data transfer.
10. Comment Function
a) Type and Scope of Data Processing You can comment on posts on our website. When you comment on a post, we collect and store the data you enter in the input field. In addition to the comments you leave, information such as the time of the comment and any username (pseudonym) chosen will be stored and published. Additionally, the IP address assigned by the Internet Service Provider (ISP) to the person concerned is saved. Data is not shared with third parties.
b) Purpose and Legal Basis The data (e.g., IP address) provided by you is collected for security reasons, in case the person concerned infringes on third-party rights or posts illegal content through a comment. This data is not passed on to third parties unless legally required or for the defense of the data controller. The legal basis for processing personal data transmitted during the use of the comment function is Art. 6 (1) lit. a) GDPR, insofar as your consent has been given. You may revoke this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Another legal basis is Art. 6 (1) lit. f) GDPR. We have a legitimate interest in processing data to protect third-party rights or in case of unlawful content. This serves security purposes in the event of illegal content in comments and posts (insults, prohibited political propaganda, etc.).
c) Retention Period Comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content is fully deleted, or the comments must be deleted for legal reasons.
11. Contact Form
a) Type and Scope of Data Processing On our website, we offer the option to contact us through a provided form. During the submission of your inquiry via the contact form, a reference to this privacy policy is included to obtain your consent. When using the contact form, we process the following personal data from you: salutation, first name, last name, title, company, industry, position, street, street number, postal code, city, country, email address, phone number, subject, and message content.
b) Purpose and Legal Basis Your email address is used solely to respond to your inquiry via email. No data entered in the contact form will be shared with third parties. The legal basis for processing is your consent under Art. 6 (1) lit. a) GDPR, which you voluntarily provide and may revoke at any time with future effect.
c) Retention Period The data you enter in the contact form remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage ceases (e.g., after your inquiry has been completed). Mandatory legal provisions, particularly retention periods under the Commercial Code (HGB) or the Tax Code (AO), remain unaffected.
12. Contact Options via Email
On our website, you have the option to contact us via email.
a) Nature and Scope of Data Processing
You can reach out to us via email. Our data collection is limited to the email address you use to contact us, as well as any personal data you provide as part of the communication.
b) Purpose and Legal Basis
The purpose of data processing is to address your inquiry appropriately. The legal basis for this is Art. 6(1)(f) of the GDPR. We have a legitimate interest in processing the above-mentioned personal data to handle your request adequately.
c) Storage Duration
The duration of the storage of the above data depends on the reason for your inquiry. Your personal data is regularly deleted once the purpose of the communication has been fulfilled and storage is no longer necessary, for example, after processing your request.
13. Newsletter
a) Nature and Scope of Data Processing
On our website, you can subscribe to a free, regular email newsletter. To send the newsletter to you regularly, we need your email address.
For newsletter distribution, we use the double opt-in procedure. This means we will only send you an email newsletter if you have expressly confirmed that you consent to receive the newsletter. We will send you a confirmation email asking you to confirm by clicking a link that you would like to receive the newsletter in the future.
This ensures that only you, as the owner of the specified email address, can sign up for the newsletter. Your confirmation must be made promptly after receiving the confirmation email; otherwise, your newsletter registration will be automatically deleted from our database.
When you subscribe to the newsletter, we collect and store the data you enter in the input fields (e.g., last name, first name, email address).
In addition, when registering for the newsletter, we store the IP address entered by the Internet Service Provider (ISP), along with the date and time of registration, to be able to trace any misuse of your email address at a later date. We also store the date and time of clicking the confirmation link and the IP address entered by the ISP for the verification email sent for control purposes (double opt-in email).
b) Purpose and Legal Basis
The data we collect upon newsletter registration is used exclusively for advertising purposes through the newsletter.
The processing of your email address for the newsletter is based on Art. 6(1)(a) of the GDPR and § 7(2)(3) of the German Act against Unfair Competition (UWG), on your voluntary consent, which you can withdraw at any time for the future.
Additionally, the processing is based on Art. 6(1)(f) of the GDPR due to our legitimate interest in documenting proof of the necessary consent.
c) Storage Duration
Your email address is stored as long as you subscribe to the newsletter. After unsubscribing from the newsletter, your email address is deleted unless you explicitly consent to further use of your data.
14. Tracking and Analysis Tools
A detailed overview of the web analysis and social media tools we use can be found here: [Link]
15. Data Security and Safeguarding Measures
We are committed to protecting your privacy and treating your personal data confidentially. We take extensive technical and organizational security measures, which are regularly reviewed and adjusted to technological advances.
This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data transmitted unencrypted, such as via unencrypted email, may potentially be read by third parties. We have no control over this. It is the responsibility of each user to protect the data they provide from misuse, such as by encrypting it or otherwise safeguarding it.
We reserve the right to update this policy as needed at any time.
17. Your Rights
Here you can find your rights regarding your personal data, detailed in Articles 7, 15-22, and 77 of the GDPR. You can address these concerns to the responsible contact (see Section 2).
Right to Withdraw Consent according to Art. 7(3)(1) GDPR
You may withdraw your consent to the processing of your personal data at any time with effect for the future. The legality of processing based on consent up to the point of withdrawal remains unaffected.
a) Right of Access according to Art. 15 GDPR
You have the right to request confirmation of whether we process personal data concerning you. If this is the case, you have the right to access this data and additional information, such as processing purposes, categories of processed data, recipients, and planned storage duration, or criteria for determining storage duration.
b) Right to Rectification according to Art. 16 GDPR
You have the right to request the correction of incorrect data without delay. Considering the purposes of processing, you have the right to request the completion of incomplete data.
c) Right to Erasure ("Right to be Forgotten") according to Art. 17 GDPR
You have the right to erasure if processing is no longer necessary. This may be the case, for example, if your data is no longer needed for the original purposes, if you have withdrawn your consent, or if the data has been unlawfully processed.
d) Right to Restrict Processing according to Art. 18 GDPR
You have the right to restrict processing, for example, if you believe that the personal data is incorrect.
e) Right to Data Portability according to Art. 20 GDPR
You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format.
f) Right to Object according to Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you. In the case of direct advertising, you have the right to object to processing your data for such advertising at any time; this also applies to profiling related to such direct advertising.
g) Automated Decision-Making Including Profiling according to Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing – including profiling – except in the cases mentioned in Art. 22 of the GDPR. Automated decision-making based solely on processing – including profiling – does not occur.
h) Right to Lodge a Complaint with a Data Protection Supervisory Authority according to Art. 77 GDPR
Furthermore, you can lodge a complaint with a data protection supervisory authority at any time, for instance, if you believe that data processing does not comply with data protection regulations.