1. Controller
AI LABS GmbH Am Heerdter Krankenhaus 4 40549 Düsseldorf Germany Email: office@ailabs.de
Managing Director: Daliah Salzmann
Data protection officer
You can contact our data protection officer at:
Dr. Stephan Schenk, Weser Datenschutz GmbH
Bucht Str. 13, 28195 Bremen
Germany
Email: datenschutz@ailabs.de
2. Visiting this website
Server logs: we process the requesting device’s IP address, access date and time, requested URL or file, HTTP status and transferred data volume, referrer, browser and operating system. This is necessary to deliver the website, secure it and prevent misuse. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in secure operation). Logs are deleted or anonymised within 30 days unless a security incident requires longer retention.
Hosting: we use Vercel Inc. (USA). Application functions are configured for Frankfurt (fra1). Delivery and operations also use Vercel’s international network; processing is not restricted to Germany. Vercel’s data processing terms and the safeguards for international transfers apply. The legal basis is Article 6(1)(f) GDPR.
Performance: Vercel Speed Insights measures loading and response times with page URL, browser, device and country information. According to Vercel, it does not identify users or reconstruct browsing sessions. We use it to improve technical reliability under Article 6(1)(f) GDPR.
Fonts are served locally. Visiting this website does not cause a connection to Google Fonts servers.
3. Contact enquiries
When you contact us by form or email, we process your name, email, optional company, topic and message to handle the enquiry and subsequent communication.
Form messages are delivered using Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Processing takes place in the EU under a data processing agreement pursuant to Article 28 GDPR.
The legal basis is Article 6(1)(b) GDPR for enquiries about entering into or performing a contract, otherwise Article 6(1)(f) GDPR (efficient handling of enquiries). We retain enquiries until they have been resolved and there is no further reason for retention. Statutory commercial and tax retention obligations, including section 147 AO and section 257 HGB, remain applicable.
4. Optional analytics
PostHog: with your consent we use PostHog Inc., 535 Mission Street, San Francisco, CA 94105, USA, with its EU cloud. It analyses page views, duration, interactions and device information using cookies or local storage and technical connection data. Processing is based on Article 6(1)(a) GDPR and access to your device on section 25(1) TDDDG. Its script is loaded only after consent. A data processing agreement under Article 28 GDPR and EU standard contractual clauses under Article 46(2)(c) GDPR provide the relevant contractual safeguards.
Google Analytics 4: where configured, and only with consent, we use Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may involve Google LLC in the USA. Data includes pages, visit duration, referral source, approximate location, browser and device information. IP addresses are processed to derive location; Google states that GA4 does not log or store individual IP addresses. Analytics cookies such as _ga are used. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. Advertising storage, ad user data and ad personalisation remain disabled. A data processing agreement, EU standard contractual clauses and, where applicable to a certified recipient, the EU–US Data Privacy Framework provide transfer safeguards.
You can refuse optional analytics without losing access to the website. Withdraw consent at any time through Cookie settings in the footer. Withdrawal stops subsequent analytics loading and removes the relevant accessible cookies; it does not affect processing that was lawful before withdrawal.
5. Cookies and local storage
We store your theme and privacy choices so the site can respect them. Necessary storage uses section 25(2)(2) TDDDG where applicable. Optional analytics storage requires consent. You can also control or delete cookies and local storage in your browser.
6. Recipients and international transfers
Recipients include our hosting provider, Brevo and, if you consent, PostHog and Google. They receive data only for their respective purposes. Where processing outside the EU/EEA occurs, the applicable safeguards include standard contractual clauses and adequacy decisions where their conditions are met. You can request information or a copy of the applicable safeguards by contacting us.
7. Your rights
Subject to the legal conditions, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20), objection (Article 21) and withdrawal of consent (Article 7(3) GDPR). In particular, you can object to processing based on legitimate interests on grounds relating to your particular situation. Contact office@ailabs.de.
8. Complaints
You may lodge a complaint with a supervisory authority under Article 77 GDPR. Our competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; www.ldi.nrw.de.
9. Changes
We update this policy when our processing activities or legal requirements change. The version published on this website applies.