Privacy Policy

1) Introduction and Contact Details of the Controller

Thank you for visiting our website. Below we inform you about how we handle your personal data when using our website. Personal data is any data with which you can be personally identified.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ThinkLocAI UG (haftungsbeschränkt), Brandweg 1, 73432 Aalen, Germany, Tel.: +4916099653283, Email: support@thinklocai.com.

2) Data Collection When Visiting Our Website

When using our website for informational purposes only, we only collect the data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data that is technically required to display the website:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (possibly in anonymized form)

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), while others remain longer on your device and enable page settings to be saved (so-called “persistent cookies”).

If individual cookies we use also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR and Section 25 TDDDG to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the page visit.

You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contact

When you contact us (e.g. via contact form or email), personal data is collected. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been conclusively processed, provided no statutory retention obligations apply.

5) External Links

Our website contains links to social networks (LinkedIn, GitHub). These are simple hyperlinks that do not transfer any data to the respective platforms until you actively click on them.

6) Language Detection

Language Detection: For automatic language selection, our website uses your browser's language settings (navigator.language). No personal data is transferred to third parties.

7) Tools and Other

Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the page in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by checking a box.

8) Your Rights

8.1

Applicable data protection law grants you the following rights vis-à-vis the controller with regard to the processing of your personal data:

• Right of access according to Art. 15 GDPR
• Right to rectification according to Art. 16 GDPR
• Right to erasure according to Art. 17 GDPR
• Right to restriction of processing according to Art. 18 GDPR
• Right to notification according to Art. 19 GDPR
• Right to data portability according to Art. 20 GDPR
• Right to object according to Art. 21 GDPR
• Right to withdraw consent according to Art. 7 para. 3 GDPR
• Right to lodge a complaint according to Art. 77 GDPR

8.2 RIGHT TO OBJECT

If we process your personal data on the basis of our overriding legitimate interest within the framework of a balancing of interests, you have the right at any time to object to this processing with effect for the future for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.

9) Duration of Storage

The duration of storage of personal data is based on the respective legal basis, the processing purpose and, if applicable, additionally on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned is stored until you revoke your consent.

If statutory retention periods exist for data processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided it is no longer required for contract performance or contract initiation and/or there is no longer a legitimate interest on our part in continued storage.

10) Hosting

Our website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The use of the hoster is for the purpose of contract performance towards our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions regarding this data. We use the following hoster: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. A Data Processing Agreement has been concluded with Vercel. Data transfer to the USA is carried out on the basis of the EU Commission's Standard Contractual Clauses.

11) Notice Regarding Minors

Our offering is intended exclusively for businesses and adult individuals. It is not directed at children or young people under the age of 16. We do not knowingly collect or process personal data from individuals under the age of 16. If we become aware that personal data of a person under 16 has been transmitted to us without the consent of a parent or legal guardian, we will delete this data immediately.

Cookies and tracking technologies that require consent (in particular Google Analytics) are activated exclusively after active consent via our cookie consent tool, in accordance with Art. 8 GDPR and Section 25 TDDDG. By granting such consent, the user confirms that they have reached the age of 16. Parents or legal guardians who become aware that their child has transmitted personal data to us may contact us at any time at support@thinklocai.com to request deletion of such data.

12) Artificial Intelligence and the EU AI Act

This website does not operate an AI system that interacts with you. In particular, no chatbot is used, and no automated decision-making including profiling within the meaning of Art. 22 GDPR takes place. The interactive demonstrations on our feature and product pages are simulations using prepared sample data; they process no input from you and show no output from a live AI model. They are labelled accordingly.

Our product ThinkLocAI is an AI system within the meaning of Regulation (EU) 2024/1689 (EU AI Act). ThinkLocAI UG (haftungsbeschränkt) acts as the provider under Art. 3(3) of that regulation. The product runs exclusively inside our customers' infrastructure. We receive no access to content, inputs, documents or log data from productive installations. The controller under the GDPR for processing within an installation is the deploying organisation.

We use AI tools in support when producing the content of this website, for drafts and phrasing suggestions among other things. Every published text is reviewed by a person before release; ThinkLocAI UG (haftungsbeschränkt) holds editorial responsibility within the meaning of Art. 50(4) of Regulation (EU) 2024/1689. No personal data of website visitors is processed in doing so.

Detailed information on the division of roles between provider and deployer, risk classification, the transparency obligations under Art. 50 and the deployer obligations under Art. 26 is available on our EU AI Act page.