[ Rechtliches ]
Transparent information about the processing of your personal data under the GDPR
Last updated: 3 July 2026
Protecting your personal data is important to us. We process your data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This privacy policy explains which personal data we collect when you visit our website and how we process it. This is an English translation for your convenience; in case of any discrepancy, the German version prevails.
The controller within the meaning of the GDPR is:
Our website is hosted with Vercel and served from a data centre in Frankfurt am Main (EU). Each time the site is accessed, information that your browser transmits and that is technically required to deliver and secure the page is collected automatically:
If you contact us by email (info@aiplify.io), we process the details you provide (e.g. name, email address, content of your message) in order to handle your enquiry. This data is not passed on to third parties.
For online appointment scheduling we embed the Calendly service as a widget in our contact section. The widget is only loaded when you open the page containing the scheduler. When you book, Calendly processes the data you enter:
With your explicit consent, we use PostHog to understand how our website is used and to improve it. PostHog runs on infrastructure in the European Union. Only once you agree to the “Statistics” category in the cookie banner is PostHog loaded and started – without your consent no analysis takes place and no corresponding scripts or cookies are loaded.
The following is collected in particular:
On our campaign pages about subsidised training, available at aiplify.io/de/weiterbildung, you can request information without obligation using a form. We process the details you enter there:
The details are stored in a database at Supabase and are additionally delivered to us by email through the sending service Resend so that we can call you back. Both providers process the data solely on our behalf and in a data centre within the European Union.
To carry out the funding application we pass your data on to Akademie des deutschen Mittelstandes as the AZAV-accredited training provider and to the employment agency (Agentur für Arbeit) responsible for you. Without this transfer, funding under Section 82 SGB III or via an education voucher is not possible.
On our campaign pages we count how often a page is opened and how far it is read. This count works entirely without cookies and without any identifier: no information is stored on your device and none is read from it, no characteristic is created by which you could be recognised, and your IP address is not stored.
All that is stored is a counter value per day, page and stage — for example “this page was opened 412 times on 7 September”. No conclusions about individual people can be drawn from it, not even in combination with other data held by us. Four stages are counted:
This measurement supplements the web analytics described in section 2.4. It is necessary because otherwise we would only know about those page views for which consent has been given, and could therefore not assess how many people reach our pages at all.
Your personal data is processed on the basis of the following legal grounds under the GDPR:
Where you have given us your explicit consent, in particular for web analytics and session recording (cookie consent, “Statistics” category).
Where processing is necessary for the performance of a contract or pre-contractual measures (e.g. appointment booking, responding to your enquiry).
Where processing is necessary to protect our legitimate interests, unless your interests or fundamental rights override them. Legitimate interests are in particular:
Where processing is necessary to comply with a legal obligation (e.g. tax retention obligations).
Our website is provided via Vercel and served from an EU data centre (Frankfurt).
We use Calendly for online appointment scheduling (see section 2.3).
For reach and usage analysis we use PostHog – exclusively with your consent (see section 2.4).
To detect and fix technical errors and to ensure stability and security, we use Sentry. Sentry runs on infrastructure in the EU. Only technical error data is processed – no personal data is transmitted (no IP addresses, no form entries). Sentry does not perform any session recording.
With your consent to the “Marketing” category we use the Meta Pixel to measure the effectiveness of our advertising and to reach visitors again later on Meta platforms (Facebook/Instagram) (retargeting). In addition, we transmit completed conversion events (for example an appointment booking or a form submission) server-side via the Conversions API. Personal attributes (for example an email address) are transmitted exclusively in pseudonymised form (SHA-256 hashed).
Enquiries from the form on our campaign pages and the anonymous counter values of the reach measurement are held in a database at Supabase (see sections 2.5 and 2.6).
So that an enquiry from the form does not go unnoticed, Resend additionally delivers it to us by email.
We store your personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations:
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of processing, as well as a right to rectification or erasure of this data. For this and for any other questions regarding personal data, you can contact us at any time.
You have the right to request information about whether and which personal data we process about you. This also includes information about the purposes of processing, categories of data, recipients and the intended retention period.
You have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
You have the right to request the immediate erasure of your personal data where one of the following grounds applies:
The right to erasure does not apply insofar as processing is necessary to comply with legal obligations or to assert, exercise or defend legal claims.
You have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful, or we no longer need the data.
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you carried out on the basis of Art. 6(1)(e) or (f) GDPR.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.
Where processing is based on consent, you have the right to withdraw that consent at any time – for web analytics conveniently via “Cookie settings” in the footer. The lawfulness of processing carried out up to the withdrawal remains unaffected.
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.
To exercise your rights, you can contact us at any time using the following details:
We will respond to your request within one month. In complex cases we may extend this period by a further two months and will inform you accordingly.
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the padlock icon in your browser bar.
We take appropriate technical and organisational security measures to protect your personal data:
Our web analytics (PostHog) and our error monitoring (Sentry) run in the EU. Insofar as individual service providers (in particular Vercel and Calendly) may process data in the USA, this takes place on the basis of:
Please note that in third countries the same level of data protection as in the EU may not be guaranteed.
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. All decisions are made by humans.
We reserve the right to adapt this privacy policy to reflect changes in the legal situation or changes to our services and data processing. The version available at the time of your visit applies.
Please visit this page regularly to stay informed about any changes. The last update was made on 3 July 2026.
If you have any questions about this privacy policy or the processing of your personal data, please feel free to contact us: