1. An Overview of Data Protection

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data comprises all data by which you can be personally identified. We process your data in strict compliance with the European General Data Protection Regulation (GDPR) and adhere to the security recommendations of the Federal Office for Information Security (BSI).

SSL/TLS Encryption (Technical & Organizational Measures)

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL/TLS encryption (Art. 32 GDPR). You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

2. Controller & Media Owner

The responsible party (Controller) for data processing on this website according to Art. 4 Para. 7 GDPR is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

3. Data Collection on Our Website

Hosting

Our website is hosted on secure servers operated by Hetzner Online GmbH. The physical server is located in Falkenstein, Germany. This ensures that all website data remains strictly within the European Union and is fully protected under the GDPR.

Security Standards: Hetzner’s data centers are certified according to DIN ISO/IEC 27001. This guarantees the highest level of IT security, including strict access controls, DDoS protection, and continuous monitoring. We have also concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with Hetzner to ensure your data is processed only according to our instructions and in compliance with the GDPR.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer (IP address, anonymized where possible)
• Time of the server request

This data is not merged with other data sources. The legal basis for this data processing is Art. 6(1)(f) GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures, and to ensure the technical security and stability of our systems.

AI Potential Analysis (Chatbot Interface)

When interacting with our “AI Potential Analysis”, we collect the data you voluntarily provide (e.g., industry, revenue range, FTE count). This processing is strictly for assessing your automation potential and initiating pre-contractual business relations (Art. 6(1)(b) GDPR).

Data Storage and Processing Location: All data entered into the AI analysis tool is processed and temporarily stored on secure, ISO 27001-certified servers located exclusively within the European Union (e.g., Frankfurt, Germany) to guarantee strict GDPR data sovereignty.

Third-Party AI Processors: To generate insights, the entered text may be securely transmitted via API to our LLM providers (e.g., Google Generative AI). Data is transmitted encrypted. We explicitly instruct these processors not to use our B2B interaction data to train their foundational models. If data is transferred to the US, it is safeguarded by the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs).

Google Calendar Integration

If you choose to book a strategy workshop, you will be redirected to Google Calendar. The data you enter there (Name, Email, Time) is processed to schedule and manage the appointment (Art. 6(1)(b) GDPR). Please refer to Google’s Privacy Policy for details on their data handling.

4. Data Storage & Retention

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods according to Art. 6(1)(c) GDPR); in the latter case, the deletion will take place after these reasons cease to apply.

5. Your Rights as a Data Subject

Under the GDPR, you have comprehensive rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You have the right to request information about your stored personal data, its origin, recipients, and the purpose of data processing at any time, free of charge.
• Right to Rectification (Art. 16 GDPR): You have the right to demand the immediate correction of incorrect or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your personal data, provided there are no legal retention obligations overriding this right.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data under certain conditions.
• Right to Data Portability (Art. 20 GDPR): You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
• Right to Object (Art. 21 GDPR): If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
• Right to Complain (Art. 77 GDPR): In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation.

To exercise these rights, simply send an email to [email protected].

6. Media Responsibility & Transparency

This medium does not pursue any political goals. All content is created under the supervision of BOP BLUEOCEAN PRIVACY LTD, acting in accordance with the applicable laws of the Republic of Cyprus and the EU.

Specifically, the company complies with the following EU media regulations for maximum transparency:

• Austria: Media Act (§25) regarding disclosure of owners and editors.
• Germany: TMG & RStV for imprint obligations and editorial responsibility.
• France: Loi sur la liberté de la presse (1881) for publisher transparency.
• Italy: TUSMAR regarding transparency of media owners.
• Spain: Ley General de la Comunicación Audiovisual.
• Cyprus: Cyprus Broadcasting Corporation Law.
• (And other EU member states: NL, BE, GR, PT, PL, CZ, FI, SE, DK, IE as specified in our compliance framework).