Privacy Policy
Controller
General information
This privacy policy explains how we process personal data when you visit this website and use our services.
We process personal data only to the extent necessary to provide the website, handle requests, send summary reports and communicate with you.
Hosting
Provider: Vercel Inc.
The website is hosted on Vercel. When you access the site, technical access data may be processed, such as IP address, date and time of access, pages viewed, browser and device information, and log data.
Server logs
When you visit the website, technical log data may be processed to ensure security, stability and availability.
AI Exposure Selfcheck
The selfcheck may include information about AI usage, governance maturity, risks and organizational assessments.
Evaluation initially takes place in your browser. Personal data is processed only when you request a summary report or submit an inquiry.
Summary report request
When you request a summary report, we process your email address, company, optional role, selfcheck result, scores, answers and a timestamp.
Purpose: sending the summary report, handling your request and follow-up communication.
Pilot request form
When you submit a pilot request, we process name, email, company, role, company type, employee count, AI usage details, concerns, message and a timestamp.
Purpose: handling the pilot request and written follow-up.
Email delivery via Resend
Provider: Resend
We use Resend to send form and system emails. Email addresses, form contents and technical delivery data may be processed.
Business email communication
Business email services may process data when emails are sent or received. The Business email services provider is Microsoft Office
Cookies and tracking
We currently do not use our own analytics or marketing cookies.
Technically necessary browser storage may occur where required to provide the website.
Legal bases
Processing is based in particular on:
- Art. 6(1)(b) GDPR for pre-contractual requests and handling your inquiry
- Art. 6(1)(f) GDPR for our legitimate interest in secure operation, communication and website improvement
- Art. 6(1)(a) GDPR where you give consent via a checkbox
Retention
We retain personal data only as long as necessary for handling requests, communication, documentation or legal obligations.
Recipients / service providers
Personal data may be shared with:
- Vercel for hosting
- Resend for email delivery
- Microsoft Office for Business Email
International transfers
When using service providers located outside the EU or the EEA, data may be transferred to third countries. To ensure an adequate level of data protection, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and, in the case of US-based service providers, on their certification under the EU-U.S. Data Privacy Framework.
Your rights
You have the following rights in particular:
- Access to your personal data
- Rectification
- Erasure
- Restriction of processing
- Objection
- Data portability
- Withdrawal of consent
- Complaint to a supervisory authority
Contact for privacy questions
For privacy questions, contact us at: datenschutz@aicustody.de
Last updated
Last updated: June 2026