1. Responsible Body
The &ai-Stiftung is responsible for data processing. Please refer to our Legal Notice for our full contact details and address.
2. Hosting & Technology
We host our website with Infomaniak Network SA in Switzerland.
- Why? To provide the website securely and quickly. During this process, server log files (e.g., IP addresses) are automatically recorded.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
- Security: We have entered into a Data Processing Agreement (DPA) with the host. Switzerland offers a recognized high level of data protection (EU adequacy decision).
3. Contact & Newsletter
Contact requests submitted via our website forms are received on our Infomaniak web hosting and forwarded to us by email (SMTP via Infomaniak).
- Contact: Providing your name and email address is voluntary and serves only to process your inquiry. Required fields are the message and acceptance of this privacy policy.
- Technical metadata: To process inquiries and help prevent spam, your IP address and browser user agent may be included in the forwarded email and/or stored briefly on the server.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual inquiry) or (f) (legitimate interest in responding and preventing abuse); for your explicit acceptance of this privacy policy also Art. 6(1)(a) GDPR.
- Newsletter: If you tick the newsletter option in the form, we note your interest in the inquiry email. This does not start an automated newsletter; where needed, we will obtain a separate consent (double opt-in).
- Storage: Form data is processed by email to handle your request and is generally retained for no longer than 12 months after the correspondence ends, unless longer statutory retention periods apply. It is not passed on to unauthorized third parties.
- Spam protection: We use technical measures (including a honeypot field and short rate limits). Temporary IP-related information may be stored on the server for this purpose.
4. Cookies, External Links & Donations
- Cookies: We do not set cookies and do not use tracking or analytics tools. Cookies are not required to operate the website or the contact forms.
- Links: Links to LinkedIn, PayPal, and other services are standard hyperlinks. You only leave our site upon clicking; the privacy policies of those providers then apply.
- Donations via PayPal: If you use the PayPal link, PayPal processes the data needed for the payment as an independent controller. No PayPal scripts or widgets are embedded on our pages.
5. Your Rights
Under the GDPR you have in particular the rights of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests, as well as to withdraw consent with effect for the future. You also have the right to lodge a complaint with the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.