Privacy Policy

Preamble

With this Privacy Policy, we would like to inform you about the types of personal data relating to you (hereinafter also referred to simply as “data”) that we process, the purposes for which we process such data, and the extent of such processing. This Privacy Policy applies to all processing of personal data carried out by us, both in connection with the provision of our services and, in particular, on our websites and within external online presences, such as our social media profiles (hereinafter collectively referred to as the “Online Offering”).

The terms used are not gender-specific.

Last updated: 17 July 2026

Table of Contents

Controller

Global Insight Group LLC
1209 Mountain Road PL NE #10154
Albuquerque, NM 87110
USA

Authorised representative: Management
Email: contact@global-insight-group.com
Legal Notice: https://www.schaaf-media.com/impressum/

Overview of Processing Activities

The following overview summarises the types of data processed, the purposes of processing and the categories of data subjects concerned.

Types of Data Processed

  • Account and master data
  • Contact data
  • Content data
  • Usage data
  • Meta, communication and procedural data
  • Log data

Categories of Data Subjects

  • Communication partners
  • Users

Purposes of Processing

  • Communication
  • Security measures
  • Direct marketing
  • Reach measurement
  • Tracking
  • Audience targeting
  • Feedback
  • Marketing
  • Profiles containing user-related information
  • Provision of our Online Offering and user-friendliness
  • Information technology infrastructure
  • Public relations

Applicable legal bases under the GDPR: The following provides an overview of the legal bases under the General Data Protection Regulation (“GDPR”) on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection laws may apply in your or our country of residence or establishment. Where more specific legal bases apply in individual cases, we will inform you accordingly in this Privacy Policy.

  • Consent (Art. 6(1)(a) GDPR): The data subject has given consent to the processing of personal data relating to them for one or more specific purposes.
  • Legitimate interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

Applicability of Data Protection Laws

Personal data is processed in accordance with the General Data Protection Regulation (GDPR), as our Online Offering is also directed at individuals within the European Economic Area. As the Controller is established in the United States, personal data may be transferred to the United States. Such transfers are carried out on the basis of the EU-U.S. Data Privacy Framework (DPF) and, where required, the European Commission’s Standard Contractual Clauses in order to ensure an adequate level of data protection.

Security Measures

We implement appropriate technical and organisational measures in accordance with applicable legal requirements, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to data as well as access, input, disclosure, availability and segregation of such data. We have also established procedures to ensure the exercise of data subject rights, the deletion of data and appropriate responses to threats to data security. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and procedures, in accordance with the principles of data protection by design and data protection by default.

TLS/SSL Encryption

In order to protect data transmitted by users via our Online Offering against unauthorised access, we use TLS/SSL encryption technology. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are fundamental technologies for secure data transmission on the internet. These technologies encrypt information transmitted between the website or application and the user’s browser, or between two servers, thereby protecting the data against unauthorised access. TLS, as the more advanced and secure version of SSL, helps ensure that data transmissions meet high security standards. Where a website is protected by an SSL/TLS certificate, this is indicated by HTTPS in the URL.

Solid Security

We use the Solid Security security plug-in (formerly iThemes Security) to defend against attacks and ensure the security of this website. In this context, security-related data such as IP addresses, the time and type of access attempts and, where applicable, usernames used may be stored in order to detect and automatically block unauthorised access.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in maintaining a secure and functional website). The collected data is used exclusively for security purposes and is automatically deleted after no more than 60 days.

Disclosure of Personal Data

In the course of processing personal data, such data may be transmitted to or disclosed to other bodies, companies, legally independent organisational units or persons. Recipients of such data may include, for example, service providers commissioned to perform IT-related tasks or providers of services and content integrated into a website. In such cases, we comply with the applicable statutory requirements and, in particular, conclude appropriate contracts or agreements with recipients where required to protect your data.

International Data Transfers

Data processing in third countries: Where we transfer data to a third country, i.e. a country outside the European Union (EU) or European Economic Area (EEA), or where such processing occurs in connection with the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, we do so in compliance with applicable legal requirements.

For transfers of data to the United States, we primarily rely on the EU-U.S. Data Privacy Framework (DPF), which was recognised as providing an adequate legal framework by the European Commission’s adequacy decision of 10 July 2023. In addition, Standard Contractual Clauses corresponding to the requirements of the European Commission may be concluded with the respective providers and impose contractual obligations concerning the protection of your data.

This dual safeguard provides additional protection for your data: the DPF forms the primary protection framework, while Standard Contractual Clauses may provide an additional safeguard. Should the legal status of the DPF change, the Standard Contractual Clauses can serve as an additional contractual basis for protecting transferred data.

Further information about the DPF and certified organisations:
https://www.dataprivacyframework.gov/

Information on third-country transfers and applicable adequacy decisions:
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=de

General Information on Data Retention and Deletion

We delete personal data that we process in accordance with applicable statutory provisions as soon as the underlying consent has been withdrawn or no other legal basis for processing exists. This applies where the original purpose of processing no longer applies or the data is no longer required. Exceptions apply where statutory obligations or special interests require longer retention or archiving of the data.

In particular, data that must be retained for commercial or tax law purposes, or whose retention is necessary for the establishment, exercise or defence of legal claims or for the protection of the rights of other natural or legal persons, must be archived accordingly. Our privacy notices contain additional information regarding retention and deletion periods applicable to specific processing activities.

Where different retention periods or deletion deadlines apply to the same data, the longest applicable period shall prevail. Data that is no longer retained for its original purpose but must be retained due to statutory requirements or other reasons will only be processed for the purposes justifying its continued retention. Personal data is deleted as soon as it is no longer required for the purposes for which it was collected and no statutory retention obligations prevent its deletion.

Rights of Data Subjects

Rights of data subjects under the GDPR: As a data subject, you have various rights under the GDPR, in particular pursuant to Articles 15 to 21 GDPR:

  • Right to object: You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data relating to you based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions. Where personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to the processing of such personal data for such marketing purposes.
  • Right to withdraw consent: You have the right to withdraw consent you have given at any time.
  • Right of access: You have the right to obtain confirmation as to whether personal data relating to you is being processed and, where applicable, to obtain access to such data together with further information and a copy of the data in accordance with applicable law.
  • Right to rectification: You have the right to request the completion of incomplete personal data relating to you or the correction of inaccurate personal data.
  • Right to erasure and restriction of processing: You have the right to request the erasure of personal data relating to you without undue delay or, alternatively, to request restriction of processing.
  • Right to data portability: You have the right to receive personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to request transmission of such data to another Controller in accordance with applicable law.
  • Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.

Provision of the Online Offering and Web Hosting

We process users’ data in order to provide our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.

  • Types of data processed: Usage data; meta, communication and procedural data; log data; content data.
  • Data subjects: Users, such as website visitors and users of online services.
  • Purposes of processing: Provision of our Online Offering and user-friendliness; information technology infrastructure; security measures.
  • Retention and deletion: In accordance with the section “General Information on Data Retention and Deletion”.
  • Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.

Provision of the Online Offering on Rented Hosting Infrastructure

To provide our Online Offering, we use storage capacity, computing capacity and software that we rent or otherwise obtain from a server provider, also known as a web hosting provider. Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.

Collection of Access Data and Log Files

Access to our Online Offering is logged in so-called server log files. Server log files may include the address and name of pages and files accessed, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL, and generally IP addresses and the requesting provider.

Server log files may be used for security purposes, for example to prevent server overload, particularly in cases of malicious attacks such as DDoS attacks, and to ensure server capacity and stability. Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.

Deletion: Log file information is stored for a maximum of 30 days and subsequently deleted or anonymised. Data whose further retention is necessary for evidentiary purposes is excluded from deletion until the relevant incident has been conclusively resolved.

Email Transmission and Hosting

The web hosting services we use also include the sending, receiving and storage of emails. For these purposes, recipient and sender addresses as well as other information relating to email transmission and the contents of the respective emails are processed. Such data may also be processed for spam detection.

Please note that emails transmitted over the internet are generally not end-to-end encrypted. Although emails are usually encrypted during transport, they are generally not encrypted on the sending and receiving servers unless an end-to-end encryption method is used. We therefore cannot accept responsibility for the transmission route of emails between the sender and receipt on our server. Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.

Web Hosting

Our website is hosted by an external service provider. Personal data collected on this website is stored on the hosting provider’s servers. Such data may include, in particular, IP addresses, contact enquiries, meta and communication data, contractual data, contact details, names, website access data and other data generated through a website.

The hosting provider is used for the purpose of fulfilling contracts with our prospective and existing customers pursuant to Art. 6(1)(b) GDPR and in our legitimate interest in providing our Online Offering securely, quickly and efficiently through a professional provider pursuant to Art. 6(1)(f) GDPR.

Hosting provider:
World4You Internet Services GmbH
Hafenstraße 35
4020 Linz
Austria
https://www.world4you.com

A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded.

Payment Service Providers

Stripe

For payment processing, we use the payment service provider Stripe (Stripe, Inc., USA). When using this service, personal data such as name, payment information and IP address may be transmitted to Stripe. Processing takes place for the performance of a contract pursuant to Art. 6(1)(b) GDPR.

Further information:
https://stripe.com/privacy

Lemon Squeezy

For the sale of digital products and payment processing, we use Lemon Squeezy, LLC, USA.

Lemon Squeezy, LLC
222 W Merchandise Mart Plaza
Suite 1212
Chicago, IL 60654
USA

When using this service, personal data such as name, email address, payment information and IP address is transmitted to and processed by Lemon Squeezy. Processing takes place for the performance of a contract pursuant to Art. 6(1)(b) GDPR. Lemon Squeezy may also transfer data to the United States. Such transfers are carried out on the basis of appropriate safeguards pursuant to Art. 46 GDPR, such as Standard Contractual Clauses.

Further information:
https://www.lemonsqueezy.com/privacy

Analytics, Monitoring and Optimisation

Google Search Console

We use Google Search Console, a service provided by Google Ireland Limited, to monitor the technical visibility of our website in Google Search and to identify and resolve errors, such as crawling errors, indexing status, search queries and click figures.

Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in maintaining a functional and visible website. Recipient / processing: Google Ireland Limited, with possible transfer to Google LLC in the United States; protection through the DPF and/or Standard Contractual Clauses.

We do not transmit personal data to Google through our use of Google Search Console. However, Google may process data in connection with providing the service.

Further information:
https://policies.google.com/privacy

Statify

This website uses the WordPress plug-in Statify to generate basic statistics regarding page views. Statify operates entirely without cookies and does not store visitors’ personal data. Only aggregated access figures relating to the content of this website are collected. Individual users cannot be identified.

Koko Analytics

This website also uses the analytics plug-in Koko Analytics. It records page views and visitor numbers directly on this website’s own server. The data is stored in anonymised form and is not disclosed to third parties. In the configuration currently enabled, the plug-in operates without cookies (“cookieless mode”). Individual visitors are not recognised across visits.

Use of Cookies

The term “cookies” refers to functions that store information on users’ devices or retrieve information from those devices. Cookies may be used for various purposes, for example to ensure the functionality, security and convenience of online services and to analyse visitor traffic.

We use cookies in accordance with applicable statutory requirements. Where required, we obtain users’ consent in advance. Where consent is not required, we rely on our legitimate interests. This applies where storing or accessing information is strictly necessary in order to provide content and functions expressly requested by the user. Consent may be withdrawn at any time.

Information regarding legal bases: Where we process personal data using cookies, processing may depend on consent. Where consent has been given, it serves as the legal basis for processing. Where processing does not require consent, we rely on our legitimate interests as explained above and in connection with the respective services and procedures.

Storage Duration

  • Temporary cookies, including session cookies: These are deleted at the latest after a user leaves the Online Offering and closes their browser or application.
  • Persistent cookies: These remain stored after the application or device has been closed. Unless users are provided with explicit information about the type and storage duration of cookies, they should assume that such cookies may be stored for up to two years.

Withdrawal and Objection

Users may withdraw consent they have given at any time and may object to processing in accordance with statutory requirements, including by using the privacy settings of their browser.

  • Types of data processed: Meta, communication and procedural data.
  • Data subjects: Users.
  • Legal bases: Legitimate interests pursuant to Art. 6(1)(f) GDPR; consent pursuant to Art. 6(1)(a) GDPR.

Processing of Cookie Data Based on Consent

We use a consent management solution through which users’ consent is obtained for the use of cookies or for the procedures and providers specified within the consent management solution. This procedure is used to obtain, record, manage and withdraw consent, particularly with regard to cookies and comparable technologies used to store, access and process information on users’ devices.

Consent declarations are stored in order to avoid having to request consent repeatedly and to provide evidence of consent in accordance with statutory requirements. Storage takes place server-side and/or in a cookie or comparable technology, allowing consent to be associated with a particular user or device. Unless specific information regarding the providers of consent management services is given, consent may be stored for up to two years.

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.

Borlabs Cookie

Consent management: Borlabs Cookie is used to obtain, record, manage and withdraw consent, in particular for the use of cookies and similar technologies used to store, retrieve and process information on users’ devices.

Service provider: Processing takes place on servers and/or computers under our own responsibility under data protection law.
https://de.borlabs.io/borlabs-cookie/

An individual user ID, language, types of consent and the time at which consent was given are stored server-side and in a cookie on the user’s device.

Legal bases: Art. 6(1)(c) GDPR in connection with the accountability obligation under Art. 7(1) GDPR in conjunction with Art. 5(2) GDPR, as well as Art. 6(1)(f) GDPR. Retention period: Two years or until consent is withdrawn. Evidence may be retained for longer where required by statutory obligations.

This website uses affiliate links provided by TradingView Inc. When a user clicks such a link, personal data such as the user’s IP address and browser information may be transmitted to TradingView in order to attribute referrals.

Processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in financing our Online Offering.

Further information:
https://www.tradingview.com/privacy-policy/

Newsletter and Electronic Communications

We send newsletters, emails and other electronic communications (hereinafter referred to as “Newsletter”) only with the consent of recipients or on another applicable legal basis. Where the content of the Newsletter is described during registration, that content forms the basis of the user’s consent.

Normally, providing your email address is sufficient to subscribe to our Newsletter. However, in order to provide a personalised service, we may ask you to provide your name so that we can address you personally in the Newsletter or request additional information where this is necessary for the purpose of the Newsletter.

Deletion and Restriction of Processing

We may retain unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them in order to demonstrate that consent had previously been given. Processing of such data is restricted to the potential defence of legal claims. An individual request for deletion may be made at any time, provided that the previous existence of consent is confirmed at the same time.

Where we are required to permanently observe objections, we reserve the right to store the relevant email address solely for this purpose in a suppression list (“blocklist”). The subscription procedure is logged on the basis of our legitimate interests in demonstrating that it was carried out properly. Where we commission a service provider to send emails, this takes place on the basis of our legitimate interests in maintaining an efficient and secure mailing system.

Content

Our Newsletter provides information about new blog articles, analyses and background reports concerning geopolitical, economic and structural risks, as well as information about digital reports and offers.

  • Types of data processed: Account and master data; contact data; meta, communication and procedural data; usage data.
  • Data subjects: Communication partners.
  • Purposes of processing: Direct marketing, for example by email.
  • Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
  • Right to opt out: You may unsubscribe from our Newsletter at any time, withdraw your consent or object to receiving further communications. An unsubscribe link can be found at the end of every Newsletter. Alternatively, you may use one of the contact methods provided above, preferably email.

Use of systeme.io as Mailing Service Provider

Our Newsletters are distributed via systeme.io, a service provided by ITACWT Limited (France/Ireland). Data provided during registration, such as your email address and, where applicable, your name, is stored on Amazon Web Services servers located within the EU.

systeme.io uses this information on our behalf to send and statistically analyse our Newsletters. systeme.io may use recipients’ data in pseudonymised form, meaning without directly identifying individual users, to optimise or improve its own services, for example for the technical optimisation of Newsletter delivery and presentation. The data is not disclosed to third parties.

systeme.io is required under the GDPR to protect our users’ data and process such data solely in accordance with our instructions. For this purpose, systeme.io uses Amazon Web Services (AWS, Ireland) as a sub-processor. A Data Processing Agreement pursuant to Art. 28 GDPR is in place between systeme.io and AWS to ensure the security and confidentiality of the data.

Privacy Policy:
https://systeme.io/de/privacy-policy

Measurement of Open and Click Rates

Newsletters contain so-called web beacons, i.e. pixel-sized files that are retrieved from our mailing service provider’s servers when the Newsletter is opened. Technical information, such as browser information, IP address and time of access, as well as information concerning Newsletter opens and clicks, may be collected in this process.

This data is used for the technical improvement of our Newsletters and to adapt our content to the interests of our readers. The analyses are assigned to individual Newsletter recipients and stored in their profiles until deletion. Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.

Social Media Presences

We maintain online presences on social networks and process user data in this context in order to communicate with users active on those platforms and to provide information about us.

Please note that user data may be processed outside the European Union. This may involve risks for users, for example because it may become more difficult to enforce users’ rights. Furthermore, user data within social networks is generally processed for market research and advertising purposes. Usage profiles may be created based on users’ behaviour and resulting interests and may be used to display advertisements within and outside the respective networks.

For detailed information regarding the respective forms of processing and available objection options, please refer to the privacy policies and information provided by the operators of the respective networks. With regard to requests for information and the exercise of data subject rights, these can generally be exercised most effectively directly with the respective providers. Should you nevertheless require assistance, you may contact us.

  • Types of data processed: Contact data; content data; usage data.
  • Data subjects: Users.
  • Purposes of processing: Communication; feedback; public relations.
  • Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.

X

Service provider: X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.
Website: https://x.com
Privacy Policy: https://x.com/de/privacy

YouTube

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.
Privacy Policy: https://policies.google.com/privacy
Basis for third-country transfers: EU-U.S. Data Privacy Framework (DPF).
Opt-out: https://myadcenter.google.com/personalizationoff

Mastodon

Our website contains an icon linking to our profile on the Mastodon platform. This is a simple hyperlink. No connection to Mastodon servers is established merely by visiting our website. Only when you click the icon do you leave our website and are redirected to Mastodon.

Service provider: Mastodon gGmbH, Mühlenstraße 8a, 14167 Berlin, Germany.
Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR. Our legitimate interest consists in making our online presence conveniently accessible via other platforms.
Privacy Policy: https://mastodon.social/privacy-policy

Plug-ins, Embedded Functions and Content

We integrate functional and content elements into our Online Offering that are obtained from the servers of their respective providers, hereinafter referred to as “third-party providers”. Such elements may include graphics, videos or maps.

Integration of such content generally requires third-party providers to process users’ IP addresses, as the content could not otherwise be transmitted to users’ browsers. We endeavour to use only content whose respective providers use the IP address solely for the purpose of delivering the content.

Third-party providers may also use pixel tags or web beacons for statistical or marketing purposes. Pseudonymous information may also be stored in cookies on users’ devices and may include technical information regarding the browser and operating system, referring websites, visit times and other information regarding use of our Online Offering.

Where we request users’ consent to the use of third-party providers, consent constitutes the legal basis for processing. Otherwise, user data is processed on the basis of our legitimate interests in providing efficient, economical and user-friendly services.

Google Fonts

Fonts and symbols may be retrieved from Google servers for the purpose of ensuring technically secure, maintenance-free and efficient use of fonts and symbols with regard to their current versions, loading times, consistent presentation and possible licensing restrictions.

The font provider receives the user’s IP address so that the fonts can be made available in the user’s browser. Technical data such as language settings, screen resolution, operating system and hardware used may also be transmitted where necessary.

When users visit our Online Offering, their browsers may send HTTP requests to the Google Fonts Web API. These requests may include the IP address used to access the internet, the requested URL on Google’s server and HTTP headers including the user agent and referrer URL.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.
Website: https://fonts.google.com/
Privacy Policy: https://policies.google.com/privacy
Basis for third-country transfers: EU-U.S. Data Privacy Framework (DPF).
Further information: https://developers.google.com/fonts/faq/privacy?hl=de

X Plug-ins and Content

Plug-ins and buttons provided by the X platform may include content such as images, videos or text, as well as buttons allowing users to share content from this Online Offering on X.

Service provider: X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.
Website: https://x.com/de
Privacy Policy: https://x.com/de/privacy
Settings: https://x.com/personalization
Data Processing Agreement: https://privacy.x.com/en/for-our-partners/global-dpa
Basis for third-country transfers: Standard Contractual Clauses.

YouTube Videos

Our Online Offering includes embedded videos hosted on YouTube. Depending on the context, YouTube videos are integrated either through a consent management tool or using a click-to-load mechanism under which data is transferred only following active user interaction.

YouTube videos are integrated through a dedicated domain using the “youtube-nocookie” component in YouTube’s so-called Privacy-Enhanced Mode. Before a video is played, only information required to display, control and optimise video playback may be stored or processed. Once you play the video, additional information may be processed by YouTube for analysing usage behaviour, storing information in user profiles and personalising content and advertisements. Cookies may be stored for up to two years.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
Website: https://www.youtube.com
Privacy Policy: https://policies.google.com/privacy
Basis for third-country transfers: EU-U.S. Data Privacy Framework (DPF).
Further information: https://support.google.com/youtube/answer/171780?hl=de-DE#zippy=%2Cturn-on-privacy-enhanced-mode%2Cerweiterten-datenschutzmodus-aktivieren

Social Media Sharing Functions

Our website contains buttons enabling users to share content via social networks, including LinkedIn, X (Twitter), Facebook, Reddit, Telegram and WhatsApp, as well as via email and through a “Copy to Clipboard” function.

These buttons have been implemented in a privacy-friendly manner. A connection to the respective service is established only when you actively click the relevant button. When you click the button, you are redirected to the respective platform or application. The respective provider may then process usage data and, where applicable, personal data.

Further information:

AI Analysis Tool / AI Agent

Use of the AI-Powered Analysis Tool

On this website, we provide an AI-powered analysis and information tool. Users can enter business-related questions, challenges or general topics in text form in order to receive automatically generated structured assessments, analyses or general informational output.

Content entered by users is processed in order to handle the respective request and generate a response and, to the extent described below, for quality assurance, system security, prevention of misuse and the further development of our AI-powered services.

Please do not enter sensitive personal data, confidential company information, trade secrets or any other information requiring confidentiality.

Use of External Service Providers / AI Systems

For the technical provision of the tool, we use external infrastructure, hosting and AI service providers. These may include, in particular, services provided by Google, such as Google Cloud Platform, Gemini API / Google AI Services.

When the tool is used, it may be technically necessary for entered content to be transmitted to and processed by systems operated by these providers to the extent necessary to provide the requested functionality.

Further information:
https://policies.google.com/privacy

Technical Logs / Security Data

When using the AI tool, log data may be processed for technical reasons, in particular:

  • IP address for immediate technical processing and a pseudonymised hash value generated from the IP address for usage control;
  • date and time of the request;
  • technical request data;
  • error logs;
  • security and abuse-prevention data.

This processing is carried out to ensure system security and stability, enable error analysis and protect against misuse.

Storage and Analysis of User Inputs

Questions and content entered by users into the AI Agents are stored in a dedicated database. In addition, information may be stored regarding the AI Agent used, the date and time of the request, processing status, technical error information and processing duration.

The data is stored for the technical provision and traceability of requests, quality assurance, error analysis, prevention of misuse, cost control and the further development and improvement of our AI-powered services.

In order to limit free usage and prevent abusive repeated requests, IP addresses are not stored in plain text. Instead, a pseudonymised hash value is generated from the IP address using a secret server-side key. This hash value is used to associate requests within a specified period and to enforce usage limits.

Full user inputs and technical log data are stored for a limited period and subsequently deleted or anonymised. The specific retention period is 90 days. Non-personal, aggregated analyses may be retained beyond this period.

Legal Bases

Processing of content entered by users for the purpose of providing the requested AI analysis is based on Art. 6(1)(b) GDPR, insofar as such processing is necessary to provide the requested service.

The storage and analysis of requests for the purposes of system security, abuse prevention, quality assurance, error analysis and further development of our services is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Our legitimate interests consist in the secure, economical and high-quality operation of the AI Agents and in improving our services.

Notice Regarding Generated Content

Automatically generated content is provided solely for general informational purposes and does not constitute legal, tax, financial, investment, compliance or individual business advice.

Created using the free Privacy Policy Generator by Dr. Thomas Schwenke:
https://datenschutz-generator.de/

Notice: This website is regularly reviewed from a technical and legal perspective for GDPR compliance.

Last GDPR compliance check: 20 April 2026 – Status: OK