Data Privacy

With this privacy policy, we inform you about the handling of your personal data with regard to the type, scope and purpose of its collection, processing and use. The privacy policy applies only to this website and not to other sites to which our website links.

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (“GDPR”) and other national data protection laws of the member states as well as other applicable data protection regulations (“applicable data protection law”) is

DXAI GmbH (in Foundation)

E: info@dxai.de
www.dxai.de

Munich | Deutschland

E-Mail: info@dxai.de

Website: www.dxai.de

II. General information on data processing on our website

1. Description and scope of the processing of personal data

The processing of personal data of our users only takes place insofar as this is necessary for the provision of our website and our content and services. Insofar as this is required by law, processing will only take place in individual cases with the user's consent. Exceptions apply in cases in which the processing of personal data is already permitted by other statutory provisions.

2. Legal bases for the processing of personal data

Insofar as the consent of the data subject is obtained for the processing of personal data, we process the data on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of personal data are processed. In the event of express consent to the transfer of personal data to third countries outside the EU/EEA, data processing is also carried out on the basis of Art. 49 para. 1 sentence 1 lit. a GDPR. Insofar as the processing of personal data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. We also process personal data insofar as this is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR. Insofar as processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh this interest, Art. 6 para. 1 sentence 1 lit. f GDPR may be considered as the legal basis for processing. You can find out which legal basis is relevant in relation to the respective data processing in the further sections of this privacy policy.

3. Duration of storage and obligation to delete data

As a matter of principle, we only store personal data of data subjects for as long as this is legally permissible. If no specific storage period is specified for individual data processing operations, the data subject's personal data will be erased (or blocked) as soon as the purpose for which it was stored no longer applies. Beyond this, data can only ever be stored if this has been provided for by the European or national legislator in corresponding regulations, laws or other provisions applicable to us as the controller. Personal data may also be erased (or blocked) if a storage period or retention period prescribed by the aforementioned regulations ends, unless the storage of the data subject's personal data is necessary for the conclusion or performance of a contract or other legal reasons make further storage necessary.

4. Transfer of personal data outside the EU/EEA

In the context of the use of tools by third-party providers, data processing may take place in third countries outside the member states of the European Union (EU) or contracting states of the Agreement on the European Economic Area (EEA). We expressly point this out in this privacy policy should this be the case in the context of a data processing operation. In these cases, we will also explain to you the basis on which data processing takes place in the respective third country.

III. Data processing for the provision of the website and creation of log files

1. description and scope of the processing of personal data

Each time a user accesses our website, the system automatically collects data and information from the respective computer system of the user's accessing device. In particular, the following data is collected:

IP-Address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which access is made (referrer URL),
the browser used and, if applicable, the operating system of your end device and the name of your access provider.

The aforementioned data is also stored in the log files of our system. However, this data is not stored together with other personal data of the user.

Further information about the provider can be found here: https://www.all-inkl.com.

We also use cookies when you visit our website. You can find more detailed explanations on this under Section VI. of this privacy policy.

2. Purpose of the processing of personal data

The purpose of the temporary storage of the IP address by our system is to be able to deliver our website to the user's end device. For this purpose, it is essential that the user's IP address remains stored for the duration of the session.

The purpose of storing the data in the log files is to ensure the functionality of our website. We also use this data for technical optimization and to check the stability of the website and to ensure the security of our information technology systems.

3. Legal basis for the processing of personal data

The legal basis for the temporary storage of data and the storage of data in log files is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in data processing pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR also lies in the aforementioned purposes. It is not apparent that the interests, fundamental rights and freedoms of the data subject outweigh this interest.

4. Duration of storage and data deletion

In principle, the data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the collection of data for the provision of the website when the respective session has ended. No further storage of the data takes place.

If data is stored in log files, this is the case after seven days at the latest. If data is stored beyond this period, the IP addresses of the users are deleted or shortened so that it is no longer possible to identify the accessing end device.

5. Objection and removal options

As can be seen from the purpose of data processing, the collection of the aforementioned data for the provision of our website and the storage of the data in log files is absolutely necessary for the operation of the website. For this reason, the user has no option to object.

IV. Use of a consent management service (cookie consent manager)

1. Description and scope of the processing of personal data

We use the “CookieYes” plugin from CookieYes Limited, based in the United Kingdom, for consent management (hereinafter “CookieYes”). When you visit our website, the system automatically collects data and information from the computer system of the user's accessing device. In this case, the following data may be collected by or through the use of the service:

Translated with DeepL.com (free version)

Opt-in- und Opt-out-Data
Referer URL
User Agent
User Settings
Consent ID
Time of consent
Consent type
Template-Version
Banner-Language

In this respect, the provider is used as a processor. We have therefore concluded an order processing contract with the provider in accordance with the legal requirements, which you can find here: https://www.cookieyes.com/dpa/. The provider's privacy policy can be found here: https://www.cookieyes.com/privacy-policy/.

2. Purpose of the processing of personal data

The service is used to manage consents. This serves to comply with legal obligations, according to which data processing requiring consent may only be carried out via the website if the user has given their consent. The service is therefore used to store the consent obtained and to manage the consent obtained. This also applies in the event that consent is withdrawn.

3. Legal basis for the processing of personal data

Due to the legal obligation to store the aforementioned data, the legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR.

4. Duration of storage and data deletion

In principle, the transmitted data is deleted as soon as it is no longer required for the purpose for which it was collected. The retention period is the period during which the collected data is stored for processing.

Consent data (consent given and withdrawal of consent) is stored for three years. The data will then be deleted immediately.

5. Possibility of objection and removal

The collection and storage of data is required by law for the operation of the website. Consequently, the user has no option to object.

6. Transfer of personal data outside the EU/EEA.

The processing of personal data outside the EU/EEA is based on an adequacy decision of the EU Commission. The United Kingdom is classified as a safe third country on the basis of the existing adequacy decision of the EU Commission.

V. Provision of a contact form and e-mail contact

1. Description and scope of the processing of personal data

We provide you with a contact form on our website to contact us electronically. If and insofar as users send us an inquiry or message via the contact form, the data entered in the input mask will be transmitted to us and stored.

This involves the following data:

Last Name, First Name, Company
Your E-Mail-Address
Your request and the entry of your specific message to us.

If you wish to attach files to your request, you can do so voluntarily.

The following data is also stored at the time the message is sent:

IP-Addresse of the User
Date and Time of the Message

It is also possible to contact us via the e-mail address provided in our contact details. In this case, the user's personal data transmitted with the e-mail and the request communicated will be stored by us.

The data will not be passed on to third parties in this context. The data transmitted will be used exclusively for processing the contact and handling your request.

2. Purpose of the processing of personal data

We process the personal data from the input screen solely for the purpose of contacting you and processing your request. If you contact us by email, this also constitutes the necessary legitimate interest in the processing of the personal data transmitted.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal basis for the processing of personal data

If your request is aimed at the conclusion of a contract or is related to the fulfillment of a contract, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. The processing of personal data transmitted in the course of sending an e-mail and not aimed at the conclusion of a contract or related to the fulfillment of a contract is based on Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of storage and data deletion

In principle, the transmitted data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the personal data from the input mask of the contact form and the data transmitted by e-mail when the processing of the user's request has been completed or the conversation with the user has ended. It can be assumed that the processing of the request has been completed or the conversation has ended if it can be inferred from the circumstances that the matter in question has been conclusively clarified for the user.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of objection and removal

If users contact us via the contact form or by email, they can object to the storage and processing of their personal data at any time. Both the conversation with the user and the processing of the request cannot be continued in these cases.

All personal data stored in the course of contacting us will also be deleted in this case.

VI. Use of and data processing by cookies

1. Description and scope of the processing of personal data

We use cookies as part of the provision of our website. These are data records that are stored in the internet browser or by the internet browser on the user's end device. As soon as a user accesses a website, a cookie may be stored on the user's device. In this respect, the respective cookie contains a characteristic string of characters that generally enables the browser to be uniquely identified when the website is called up again. Cookies are either stored temporarily for the duration of a session (so-called “session cookies”) or permanently (so-called “permanent cookies”) on your end device.

We use cookies for different purposes. On the one hand, we use technically necessary cookies to make our website functional. In this respect, some elements of our website require that the accessing browser can be identified even after a page change.

Among other things, the following data is stored and transmitted in the cookies:

IP-Address of the User
Date and Time of Access
Amount of data transferred
Requesting domain

In addition, we use cookies on our website, which enable, for example, an analysis of the surfing behavior of users. The data collected in this way is explained in sections VII. and VIII. of this privacy policy.

When our website is accessed by the user, they are informed about the use of cookies for analysis purposes with reference to this privacy policy and their consent to the processing of the personal data used in this context is obtained.

2. Purpose of the processing of personal data

The purpose of using technically necessary cookies is to enable users to use websites at all. For example, they can be used to maintain user sessions and prevent security threats. There are some functions on our website that cannot be offered without the use of cookies. In these cases, it is essential that, for example, the browser is recognized even after a page change.

The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of optimizing the quality of our website and improving the display of content. Through the analysis cookies, we are able to determine how the website is received by the users and can thus constantly optimize our offer and make it more interesting for the users.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given consent to this.

The legal basis for the processing of personal data using technically necessary cookies within the meaning of Section 25 (2) TTDSG is Art. 6 (1) sentence 1 lit. f GDPR. In this respect, we have a legitimate interest in the use of necessary cookies for the technically error-free and optimized provision of our services. It is not apparent that the interests, fundamental rights and freedoms of the data subject outweigh this interest.

4. Duration of storage and data deletion

The duration of storage and data deletion depend on the type of cookie and how the user selects their browser settings. This is because cookies are stored on the user's device and transmitted from there to our website. In this respect, it is generally possible to completely deactivate or restrict the acceptance of cookies. Stored cookies can also be deleted independently by the user at any time, which can even be done automatically. Session cookies are automatically deleted at the end of the website visit. Permanent cookies remain stored on the user's end device until the user deletes them themselves or they are automatically deleted by the browser.

Please note that if you deactivate cookies for our website, you may no longer be able to use all the functions of our website to their full extent.

5. Possibility of objection and removal

As a user, you have the following objection and removal options:

You can revoke your consent to the use of analysis cookies at any time with effect for the future by notifying us or by changing your data protection or privacy settings in our Cookie Consent Manager.

You can also prevent the collection of the data generated by the respective cookie and related to your use of our websites (including your IP address) and the processing of this data by downloading and installing the plugin available for your browser.

6. Transfer of personal data outside the EU/EEA

By accepting the cookies for analysis purposes that go beyond the technically necessary cookies, you also consent to your data being processed in the USA in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR. We would like to point out that the USA is currently regarded by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In this respect, there may be no other suitable data protection guarantees. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not wish this to happen, click on “Reject all” in the data protection settings.

Furthermore, you can revoke your consent at any time with effect for the future. This does not affect the legality of the data processing that took place before you withdrew your consent.

VII. Use of web analysis by the Google Analytics service

1. Description and scope of the processing of personal data

We use “Google Analytics” on our website, a web analysis service of Google Ireland Ltd. based in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.

Google Analytics uses cookies, i.e. data records that are stored on your end device and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is initially processed within the EU or the EEA. If IP anonymization is activated on this website, your IP address will first be truncated by Google within the EU or EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The following user data is processed for this purpose:

IP-Address of the User
Date and Time of Access
Requesting Domain
Operating System and Version
Browser informationen
Location Data
Provider Details
Navigation and Click Behavior
Entry and Exit Pages

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. If Google Analytics is used with the extension “_anonymizeIp()”, the IP addresses of the users are further processed in abbreviated form in order to exclude the possibility of personal references.

We have concluded an order processing agreement with Google for this purpose. For the exceptional cases in which personal data is transferred to the USA, standard contractual clauses have been agreed with Google as part of the contractual regulations. You can find the provider's terms of use at: www.google.com/analytics/terms/de.html and the privacy policy at: www.google.de/intl/de/policies/privacy.

2. Purpose of the processing of personal data

The purpose of using the web analysis service is to analyze the use of our website and to be able to regularly optimize and improve the website on the basis of the analyses. We can use the statistics obtained to constantly improve our offer and make it more interesting for you as a user.

3. Legal basis for the processing of personal data

The legal basis for the use of the web analysis service is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given his or her prior consent.

4. Duration of storage and data deletion

According to Google, the data sent by Google and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months at the latest. According to Google, data that has reached the end of its retention period is automatically deleted once a month. We would like to point out that we have no influence on the duration of storage by Google.

5. Possibility of objection and removal

As a user, you have the following objection and removal options:

You can revoke your consent to the use of analysis cookies at any time with effect for the future by notifying us or by changing your data protection or privacy settings in our cookie consent manager.

You can prevent the storage of cookies by adjusting your browser settings accordingly.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used.

6. Transfer of personal data outside the EU/EEA

As described, the processing of personal data by Google in the USA is not completely excluded. If you give your consent to the use of cookies for analysis purposes, you also consent to your data being processed in a third country outside the EU/EEA in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR. We would like to point out that the USA is currently considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not wish this to happen, click on “Reject all” in the data protection settings.

Furthermore, you can revoke your consent at any time with effect for the future. This does not affect the legality of the data processing that took place before you withdrew your consent.

7. Use of the Google Tag Manager

We use the functions of Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage so-called website tags via an interface. The “Tag Manager” tool itself, which implements the tags, is a service that can collect personal data by setting cookies. The tool triggers other tags, which in turn may collect data. The Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. You can find more information about the provider and how the Tag Manager works here: https://www.google.com/analytics/tag-manager/use-policy/.

VIII. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR. In this respect, you have the following rights vis-à-vis the controller within the scope of the statutory provisions:

1. Right to information in accordance with Art. 15 GDPR

Within the scope of the statutory provisions, you have the right to receive information about your personal data stored by us at any time and free of charge. In this respect, you can also request confirmation as to whether your personal data is being processed by us.

2. Right to rectification in accordance with Art. 16 GDPR

Within the framework of the statutory provisions, you have a right to rectification and/or completion of your personal data if the personal data processed by us is incorrect or incomplete. The controller must make the correction without delay.

3. Right to erasure in accordance with Art. 17 GDPR

Within the framework of the statutory provisions, you can demand that we delete your personal data immediately if the purposes for which your personal data was collected or processed no longer exist

you withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing; you object to the processing pursuant to Art. 21 GDPR; your personal data has been processed unlawfully; the deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject as the controller your personal data have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

The right to erasure does not exist if the processing is still necessary for the following reasons, among others for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject as controller; or for the establishment, exercise or defense of legal claims.

4. Right to restriction of processing in accordance with Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data in the following cases:

if you dispute the accuracy of your personal data stored by us, you may request the restriction of the processing of your personal data for the duration of the verification; if the processing is unlawful, you may request the restriction of the processing instead of the erasure of your personal data;

if we no longer need the personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims, or

if you have lodged an objection to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whose legitimate interests prevail.

Where the processing of your personal data has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

5. Right to information in accordance with Art. 19 GDPR

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure or restriction of processing. This does not apply if this proves impossible or involves a disproportionate effort. You can request to be informed about these recipients within the scope of the statutory provisions.

6. Right to data portability pursuant to Art. 20 GDPR

As permitted by law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data directly to another controller, where

the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and

the processing is carried out by automated means.

The direct transfer of your personal data from one controller to another controller can only take place if this is technically feasible.

7. Right to object pursuant to Art. 21 GDPR

If your personal data is processed on the basis of Art. 6 para. 1 sentence 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be used for these purposes.

8. Right to revoke the declaration of consent under data protection law

In the event that you give us your prior consent for a data processing operation, you have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated decision-making in individual cases including profiling in accordance with Art. 22 GDPR

We do not use solely automated processing - including profiling - to make decisions that produce legal effects concerning you or similarly significantly affect you.

10. Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Status of the privacy policy: 20th February 2023