Skip to main content

Privacy policy

Last updated: March 2026

1. Controller

AI-Z GmbH
Königstraße 26, 70173 Stuttgart
Email: info@ai-z-group.com
Phone: +49 157 52105947
Managing Director: Oumar Langer

2. Contact for data protection enquiries

For questions regarding data protection you can reach us at:
Email: info@ai-z-group.com
Postal address: see above

3. Overview of processing activities

We only process personal data where a legal basis permits it. The following categories are processed:

  • Server log data when visiting the website
  • Contact details when using our forms
  • Applicant data when using the application form
  • Usage data via web analytics

4. Server log data

When you visit our website, the hosting provider automatically records: IP address, browser type, operating system, referrer URL, page requested, time of access.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and optimisation of the website).
Retention period: Log data is deleted after 30 days.

5. Contact form

If you use our contact form, the following data is processed: name, company, email address, phone number (optional), message.

Purpose: responding to your enquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent by submitting the form).
Retention period: your data will be deleted as soon as your enquiry has been finally processed, unless statutory retention obligations apply.

6. Contact form (BRANE AIF)

If you submit an enquiry via the BRANE AIF contact form, the following data is processed: name, company, email address, role within the company (optional).

Purpose: handling your enquiry and providing product information.
Legal basis: Art. 6(1)(a) GDPR (consent).
Retention period: until you withdraw your consent.

7. Application form

When you apply via our careers form, the following data is processed: name, email, phone (optional), desired position, cover letter, CV (PDF/DOC), and optional profiling questions.

Application video (voluntary): you may attach a self-recorded video of up to three minutes to your application (MP4, MOV or WebM, max. 300 MB). It contains image and sound of your person. Attaching it is voluntary; an application without a video is not treated less favourably.
Legal basis: Art. 6(1)(a) GDPR (consent, given by deliberately uploading the file). You may withdraw consent at any time and we will delete the video without delay. The legal basis below continues to apply to all other application data.
Retention period: as for all applicant data, no later than 6 months after completion of the procedure. Uploads that are never submitted are deleted automatically after two hours.

Purpose: conducting the recruitment procedure.
Legal basis: Art. 6(1)(b) GDPR (initiation of an employment relationship) in conjunction with § 26 BDSG.
Retention period: applicant data is deleted no later than 6 months after completion of the procedure, unless consent to longer storage has been given.
File upload: uploaded CVs and application videos are stored encrypted in the EU (see section 9.4). They reside in non-public storage; access is possible only for signed-in staff via short-lived, signed links.

8. Hosting and content delivery

8.1 Vercel (hosting)

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit our website, your data is processed on Vercel servers. Vercel may collect access data (IP address, time, page requested) in the process.

Legal basis: Art. 6(1)(f) GDPR.
Safeguards: Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.
Privacy policy: vercel.com/legal/privacy-policy

8.2 Cloudflare (DNS)

We use Cloudflare Inc. for DNS services. In doing so, Cloudflare may process technical data (IP address).

Legal basis: Art. 6(1)(f) GDPR.
Safeguards: Standard Contractual Clauses (SCC).
Privacy policy: cloudflare.com/privacypolicy

9. External services and CDNs

9.1 Fonts

All fonts used (Inter, Open Sans, Plus Jakarta Sans, JetBrains Mono) are hosted locally on our servers. No IP addresses or other user data are transmitted to external font providers such as Google Fonts.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent appearance without external data transfer).

9.2 Content Delivery Networks (CDNs)

We load technical libraries (Bootstrap, Font Awesome, Phosphor Icons) via the following CDNs:

  • cdn.jsdelivr.net (jsdelivr)
  • cdnjs.cloudflare.com (Cloudflare)

Your IP address is transmitted to these services in the process.
Legal basis: Art. 6(1)(f) GDPR.

9.3 Formspree (form processing)

Form data is additionally processed via Formspree Inc. (USA) in order to send email notifications. Application videos are not transferred there — they reach our own recruitment system only.

Legal basis: Art. 6(1)(b) GDPR.
Third-country transfer:processing takes place in the USA. It is based on the European Commission’s standard contractual clauses pursuant to Art. 46(2)(c) GDPR together with supplementary safeguards.
Privacy policy: formspree.io/legal/privacy-policy

9.4 Recruitment system (our own server)

Applicant data, CVs and application videos are stored in our own recruitment system. It runs on a server operated by us within the European Union; the database and storage software used there (Supabase) is self-hosted. There is no transfer to a cloud provider and no processor receives access.

Legal basis: Art. 6(1)(b) GDPR; for the voluntary application video Art. 6(1)(a) GDPR.

10. Web analytics

10.1 Vercel Web Analytics & Speed Insights

We use Vercel Web Analytics and Speed Insights to analyse website usage and performance. These services collect anonymised usage data (page views, load times). No cookies are set and no personal data is stored.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website optimisation).

11. Local storage (localStorage)

We use the localStorage feature of your browser to save your language preference (German/English). This is technically necessary for the functionality of the website. No personal data is stored.

Legal basis: Art. 6(1)(f) GDPR.

12. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from „http://“ to „https://“ and by the lock symbol in your browser bar.

13. Your rights (Art. 12–22 GDPR)

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): you can request information about the data we process about you.
  • Right to rectification (Art. 16 GDPR): you can request the rectification of inaccurate data.
  • Right to erasure (Art. 17 GDPR): you can request the deletion of your data, unless statutory retention obligations apply.
  • Restriction of processing (Art. 18 GDPR): you can request the restriction of processing of your data.
  • Right to data portability (Art. 20 GDPR): you can receive your data in a machine-readable format.
  • Right to object (Art. 21 GDPR): you can object to the processing of your data at any time.
  • Withdrawal of consent (Art. 7(3) GDPR): you can withdraw any consent given at any time.

To exercise your rights, please contact: info@ai-z-group.com

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Website: baden-wuerttemberg.datenschutz.de

15. Amendments to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to any subsequent visit.