Privacy Policy
Legal information on how agenticonsult handles your data. As of May 2024.
Data Controller:
The data controller within the meaning of data protection law is agenticonsult, represented by
Danny Scherer
agenticonsult
Oberheidt 1A
42349 Wuppertal
Tel. 0151 23454663
danny.scherer@agenticonsult.de
VAT ID: DE 367382528
Managing Director:
Danny Scherer
1. General Information about this Privacy Policy
1.1.
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data in connection with this website.
1.2.
For the terminology used, such as "personal data" or its "processing", reference is made to the definitions in Art. 4 of the General Data Protection Regulation (GDPR, DSGVO).
2. General Information on Data Processing
2.1. Scope of Processing Personal Data
agenticonsult processes personal data of users only to the extent necessary to provide a functioning website and deliver content and services.
2.2. Legal Basis for Processing Personal Data
Where consent of the data subject is obtained for processing operations, Art. 6(1)(a) GDPR serves as the legal basis.
Where processing is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures, in particular customer inquiries.
Where processing is necessary for compliance with a legal obligation to which agenticonsult is subject, Art. 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
Where agenticonsult processes special categories of personal data in exceptional cases (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for unique identification, health data, or data concerning sex life or sexual orientation), this is done pursuant to Art. 9(2) GDPR, in particular insofar as and for as long as:
You have given explicit consent (Art. 9(2)(a) GDPR),
the processing relates to personal data you have manifestly made public (Art. 9(2)(e) GDPR),
it is necessary for the establishment, exercise, or defence of legal claims (Art. 9(2)(f) GDPR).
2.3. Recipients
agenticonsult discloses personal data to third parties only where necessary to fulfil the described purposes, where you have given consent, or where disclosure is required by law or by court or regulatory order. Recipients may in particular include the following categories:
IT service providers
Marketing service providers
Print service providers
Logistics service providers
Consultants and advisors
Debt collection agencies
Distribution partners
Document and data carrier destruction services
Government authorities (e.g. tax authorities)
Government authorities (e.g. courts and public prosecutors)
Prospective and actual purchasers of the business
2.4. Transfer of Personal Data to Third Countries
Personal data is generally processed in Germany and in European countries. Where personal data is exceptionally processed in countries outside the European Union or the European Economic Area (third countries), this occurs only where appropriate safeguards ensure an adequate level of data protection. Typical safeguards include:
Adequacy decisions by the EU Commission for recipients in Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, South Korea, Switzerland, Uruguay, and the United Kingdom of Great Britain and Northern Ireland
Standard contractual clauses pursuant to Art. 46(2) GDPR for other recipients
Derogations pursuant to Art. 49 GDPR for other recipients.
2.5. Data Deletion and Storage Duration
Personal data is retained only as long as necessary to fulfil the described purposes. The required retention periods are determined by careful assessment:
Where personal data is processed on the basis of consent, this continues until consent is withdrawn.
Where personal data is processed on the basis of legitimate interests, this continues until a justified objection is raised.
Otherwise, personal data is retained only to the extent required to fulfil contractual and legal obligations or to preserve evidence within statutory limitation periods. Key statutory retention obligations arise from § 257 of the German Commercial Code (HGB) and § 147 of the Tax Code (AO), which provide for retention periods of six and ten years respectively. Statutory limitation periods under §§ 195 et seq. of the German Civil Code (BGB) may extend to thirty years, with the standard limitation period being three years.
Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised.
2.6. Voluntary Provision or Obligation to Provide Data
In principle, only personal data that is necessary for the respective processing purpose needs to be provided. Failure to provide required data (e.g. data required for a contract or legally mandated data) may mean that the respective processing purpose cannot be achieved. This may result, for example, in a contract not being possible or certain services not being provided.
2.7. Source of Personal Data
agenticonsult primarily processes personal data received directly from you.
agenticonsult also processes personal data not received directly from you, where such data is lawfully obtained from publicly accessible sources (e.g. the internet, press, commercial and association registers) or legitimately provided by third parties.
2.8. Automated Decision-Making within the Meaning of Art. 22 GDPR
agenticonsult does not use automated decision-making within the meaning of Art. 22 GDPR.
3. Provision of the Website and Creation of Log Files
3.1. Description and Scope of Data Processing
Each time the website is accessed, the system automatically collects data and information from the accessing computer system. The following data is collected:
IP address
Information about the browser type and version used
User's operating system
User's internet service provider
Date and time of access
Websites accessed via the website from the user's system
This data is also stored in the system's log files. This data is not stored together with other personal data of the user.
3.2. Legal Basis for Processing Personal Data
The legal basis for temporary storage of the data and log files is Art. 6(1)(f) GDPR.
3.3. Purpose of Data Processing
The purpose of data processing is to deliver the website to the user's computer. The IP address must be stored for the duration of the session for this purpose. Log files are stored to ensure the functionality of the website and to maintain the security of IT systems. Data is not evaluated for marketing purposes in this context. These purposes also constitute the legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
3.4. Duration of Storage
Data is deleted once it is no longer required for the purpose for which it was collected. For data collected to provide the website, this is when the respective session ends. For data stored in log files, deletion occurs after at most seven days. IP addresses are deleted or anonymised in such a way that attribution to the accessing client is no longer possible.
3.5. Right to Object and Removal
The collection of data to provide the website and storage in log files is strictly necessary for operation of the website. Users therefore have no right to object.
6. Download of Whitepapers and Other Documents
6.1. Description and Scope of Data Processing
To receive whitepapers and downloadable documents available on the website, you grant a marketing consent in return, and agenticonsult processes the data provided in connection with that consent, including:
Your first and last name,
Your email address,
If applicable, the name of your company and your position, and
Any additional information provided at the time of consent.
The double opt-in procedure is also used here (see section 5, Newsletter).
agenticonsult uses HubSpot, Inc. to manage whitepaper downloads. HubSpot, Inc. acts as a data processor (Auftragsverarbeiter) in this context.
6.2. Legal Basis for Processing Personal Data
Data processing for whitepaper delivery is based on a contract with you (Art. 6(1)(b) GDPR). Subsequent marketing communication is based on your consent (Art. 6(1)(a) GDPR). The legal basis for processing in the double opt-in procedure and for proof of consent is Art. 6(1)(c) in conjunction with Art. 5(1)(a), (2), Art. 7(1) GDPR and Art. 6(1)(f) GDPR.
6.3. Purpose of Data Processing
Data processing serves to provide the whitepaper and to carry out the marketing activities to which you have consented. The double opt-in procedure prevents misuse and proves consent.
6.4. Transfer of Data to Third Parties Regarding the "AI Trends Report"
The "AI Trends Report" is a special whitepaper co-authored with AI Hub GmbH, Frankfurt am Main, and offered for download on the website. By downloading this document, you also consent under the legal basis of section 6.2 to the transfer of your data as specified in section 6.1 to the co-author AI Hub GmbH, Frankfurt am Main. In this respect, your data is processed also on behalf of AI Hub GmbH. If you do not wish your data to be shared, the rights set out in section 6.5 apply accordingly.
6.5. Duration of Storage, Right to Object and Removal
Data is deleted once it is no longer required for the purpose for which it was collected.
After delivery of the whitepaper, data may be retained within statutory retention obligations for up to ten years.
If confirmation is not provided within 24 hours via the double opt-in procedure, information will be automatically deleted.
Marketing consent may be withdrawn at any time with future effect. Upon withdrawal, data will no longer be used for marketing purposes and personal data will be deleted. The email address and proof of consent may be retained in the legitimate interest of proving consent and defending against potential claims for the duration of the statutory limitation period, typically three years.
7. Contact Form and Email Contact
7.1. Description and Scope of Data Processing
The website provides a contact form for electronic contact. This may include general inquiries about agenticonsult, its prices and services, open positions or applications, as well as project-related inquiries for initiating cooperation or obtaining a non-binding offer (non-exhaustive). When using this form, the data entered is transmitted and stored if you choose to do so. This data includes:
Last name
First name
Phone number (mobile or landline)
Email address
Your position and the company you work for
Country of inquiry
Content of your message
Consent to processing of data pursuant to the Privacy Policy
Contact is also possible via the email address danny.scherer@agenticonsult.de. In this case, the personal data transmitted with the email, including the email address used and the content of the email, will be collected and stored.
7.2. Legal Basis for Processing Personal Data
The legal basis for processing is Art. 6(1)(f) GDPR, with the legitimate interest being the processing and answering of your inquiry and the maintenance of user and business relationships. For the processing of contractual and pre-contractual inquiries, Art. 6(1)(b) GDPR is the legal basis. There is also a legitimate interest in preventing misuse of the contact form and in maintaining IT system security, with data processing based on Art. 6(1)(f) GDPR or Art. 6(1)(c) in conjunction with Art. 5(1)(f), (2), Art. 32 GDPR.
7.3. Purpose of Data Processing
Personal data from the contact form is processed solely to handle and respond to your inquiry and to maintain user and business relationships. The same applies to contact via email. Other personal data processed during submission serves to prevent misuse of the contact form and to ensure IT system security, which constitutes the legitimate interest in processing.
7.4. Duration of Storage, Right to Object and Removal
Data from contact form and email inquiries is deleted once it is no longer required for the purpose. For personal data from the contact form and email correspondence, this is when the respective conversation with the user is concluded — i.e. when it can be determined from the circumstances, purpose, and nature of the communication that the matter has been conclusively resolved. Additional personal data collected during submission is deleted after no more than seven days. Users may object to the processing of their personal data, in which case the conversation may not be continued or may only be continued with difficulty. Statutory retention obligations may extend the storage duration to up to ten years.
8. Surveys and Use of Typeform
8.1. Description and Scope of Data Processing
agenticonsult uses Typeform, a survey tool provided by Typeform SL, C/Bac de Roda, 163 (Local), 08018 Barcelona, Spain (hereinafter: Typeform), to enable participation in surveys and to publish survey results if you so wish. Typeform acts as a data processor (Auftragsdatenverarbeiter). For some surveys, individualised reports based on your responses may be prepared and sent if you request them. Where marketing consent has been granted in advance, responses are analysed and data processed for the marketing purposes described in the consent to deliver personalised advertising and offers. The following data is processed:
Your (anonymised) survey responses
Your contact details, including company name
8.2. Legal Basis for Processing Personal Data
The legal basis is your prior consent (Art. 6(1)(a) GDPR). For the double opt-in procedure and proof of consent, the legal basis is Art. 6(1)(c) in conjunction with Art. 5(1)(a), (2), Art. 7(1) GDPR and Art. 6(1)(f) GDPR.
8.3. Purpose of Data Processing
Data processing serves to conduct surveys, publish results, and send individualised reports based on your responses. Processing also serves the marketing purposes described in the consent for personalised advertising and offers. The double opt-in procedure prevents misuse and proves consent.
8.4. Duration of Storage, Right to Object and Removal
Data is deleted once it is no longer required for the purpose for which it was collected.
After completion of the survey, data may be retained within statutory retention obligations for up to ten years.
Consent may be withdrawn at any time with future effect. Upon withdrawal, data will no longer be used and personal data will be deleted. The email address and proof of consent may be retained in the legitimate interest of proving consent and defending against potential claims for the duration of the statutory limitation period, typically three years.
8.5. Cookies and Similar Technologies
Cookies are used for the Typeform integration on the basis of your consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings, where consent may also be withdrawn at any time.
9. Data Processing in the Context of the Application Process
9.1. Description and Scope of Data Processing
For applications submitted via the online application portal or by email, personal data is processed for the purpose of conducting the application process and preparing potential contract documents. By submitting an application, you express your interest in working with agenticonsult. Personal data is processed and temporarily stored exclusively for the purpose of conducting the application process. Only the data necessary for the application process is processed, such as:
Name, first name
Email address
Phone number
Possible start date
Salary expectations
Information on professional background and qualifications
Meaningful documents such as a cover letter, CV, references, or employment certificates from previous employers may also be submitted. These contain additional personal data. Only authorised employees who are necessarily involved in the application and selection process have access to this data. Personal data is processed exclusively for the purpose of conducting the application process.
Please note that an unencrypted email is generally not a secure means of communication for applications. Applications submitted by email should therefore use a secure transmission method. The use of encrypted email is recommended.
9.2. Legal Basis for Processing Personal Data
The legal basis is Art. 6(1)(b) GDPR and § 26(1)(1) BDSG. Where longer retention of application documents is desired, for example to consider the application for other positions, consent pursuant to Art. 6(1)(a) GDPR (in conjunction with § 26(2) BDSG) is the legal basis.
9.3. Transfer of Personal Data in the Application Process
Personal data collected in the application process is stored using TLS encryption in a database operated by Personio GmbH, which provides software for applicant and HR management (www.personio.com/legal-notice). Personio acts as a data processor (Auftragsverarbeiter) pursuant to Art. 28 GDPR. Data processing is governed by a data processing agreement between agenticonsult and Personio GmbH.
9.4. Recruitment Service Providers
Where applications and associated personal data are received via external recruitment service providers, personal data from this source is processed accordingly.
9.5. Duration of Storage, Right to Object and Removal
Applicant data is deleted no later than six months after the conclusion of the application process. Where extended storage has been consented to, applicant data is deleted no later than twelve months. Statutory retention obligations may extend the storage duration to up to ten years.
10. Use of HubSpot
10.1. Description and Scope of Data Processing
For email marketing (e.g. newsletters, automated mailings, whitepaper delivery), contact and customer management, and reporting on user activities (e.g. traffic, page views), agenticonsult uses software provided by HubSpot Inc., Two Canal Park, Cambridge, MA 02141, USA (HubSpot). HubSpot processes in particular:
Contact data
Device and browser information (e.g. IP address, operating system, browser type, device model and version)
User activities (e.g. page views, referring URL, pseudonymised user IDs, visit duration, access times, geographic location)
10.2. Legal Basis for Processing Personal Data
For email marketing and user activity reporting, the legal basis is generally your consent pursuant to Art. 6(1)(a) GDPR. For the double opt-in procedure and proof of consent, the legal basis is Art. 6(1)(c) in conjunction with Art. 5(1)(a), (2), Art. 7(1) GDPR and Art. 6(1)(f) GDPR. For contact and customer management, the legal basis is the legitimate interest (berechtigtes Interesse) pursuant to Art. 6(1)(f) GDPR, with the legitimate interest being the handling of your inquiry and the maintenance of user and business relationships; for pre-contractual or contractual activities, Art. 6(1)(b) GDPR applies. Data transfers outside the EU/EEA are based on EU standard contractual clauses.
10.3. Purpose of Data Processing
HubSpot is used for email marketing, contact and customer management, and user activity reporting.
10.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
Marketing consent and consent for user activity reporting may be withdrawn at any time with future effect. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. The email address and proof of consent may be retained in the legitimate interest of proving consent and defending against potential claims for the duration of the statutory limitation period, typically three years. User activity data is deleted after no more than three months.
Data from contact inquiries is also deleted once it is no longer required. This is generally when the respective conversation with the user is concluded — i.e. when the matter has been conclusively resolved. Additional personal data collected during submission is deleted after no more than seven days. Users may object to processing; in such cases the conversation may not be continued or may only be continued with difficulty. Statutory retention obligations may extend the storage duration to up to ten years.
10.5. Cookies and Similar Technologies
Cookies are used for the HubSpot integration on the basis of your consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings, where consent may also be withdrawn at any time.
11. Use of Google Analytics
11.1. Description and Scope of Data Processing
agenticonsult uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google), to evaluate usage of the website and compile reports on website activity. Web analytics enables identification of, for example, at what time the website is visited or which functions or content are used most frequently and which areas require optimisation. The following data is processed:
IP address (truncated via "IP masking")
Device and browser data
Usage information including online identifiers such as cookie identifier, device identifier, and client identifier
Pseudonyms are used in general — the actual identity of users is not known. Cross-device and cross-location functions of Google Analytics have been disabled. Google Signals has been disabled to prevent linking with your Google account. Additionally, Google Analytics is used without cookies. Google processes personal data as a data processor (Auftragsverarbeiter).
11.2. Legal Basis for Processing Personal Data
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
11.3. Purpose of Data Processing
Google Analytics is used for web analytics, reach measurement, and measurement of user flows.
11.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
Consent may be withdrawn at any time via the Data Privacy Settings. Additionally, Google Analytics can be disabled via the browser add-on available at https://tools.google.com/dlpage/gaoptout. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after no more than three months even if consent has not been withdrawn by then.
11.5. Cookies and Similar Technologies
Tag technology, tracking pixels, and tracking code are used for Google Analytics; in connection with Google Consent Mode, cookies, tag technology, tracking pixels, and tracking code are used to the extent you have given consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings.
12. Use of Google Ads Conversion Tracking and Google Consent Mode
12.1. Description and Scope of Data Processing
agenticonsult uses Google Ads Conversion Tracking, an analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google), to determine whether users perform a specific action on the website (a "conversion", e.g. contacting agenticonsult) after clicking on a Google Ads advertisement. Keywords, ads, or campaigns that lead to conversions can also be analysed and optimised. The following data is processed:
IP address
Device and browser data
Usage information (e.g. ads clicked, date and time of visit, website visits) including online identifiers such as cookie identifier
The "Consent Mode" feature of Google is used. Google Consent Mode enables advanced settings for advertising and analytics in connection with Google Ads campaigns.
Google Consent Mode enables you to decide whether to allow cookies for advertising and/or analytics in connection with Google Ads campaigns. If you do not allow analytics and advertising via Consent Mode, the corresponding cookies are not used. In cases where you have declined cookies for advertising and analytics in connection with Google Ads campaigns, a cookie-free ping is received that helps better understand advertising measures without cookies.
The default setting is that no advertising and no analytics take place in connection with Google Ads campaigns. Via consent settings on the website, you can decide whether certain tracking codes or related code fragments (tags) and associated cookies may be used for advertising and/or analytics ("tag granted" or "tag denied"). This uses a Google solution to further strengthen privacy protection.
"Modelling" is also performed, which provides more precise information enabling reporting and optimisation of advertising activities. Modelling enables better quantification of the impact of marketing efforts where consent has been given in connection with Consent Mode. This modelling uses a probabilistic process — i.e. it takes into account probabilities — based on available data using machine learning and historical trends. In this context, the extent to which you as a user represent a conversion (see above) is taken into account.
The "Enable URL passthrough" function is also used. With this function, "Google Click Identifier" (GCLID) parameters are appended to URLs and passed on upon clicking an ad, enabling attribution of ads to campaigns. It is also possible to link data with functions of Google Ads, Google Analytics, or internal systems (e.g. CRM) or to perform offline conversion tracking.
The following personal data is processed in connection with Google Consent Mode: your IP address (anonymised), the URL (including advertising click information in URL parameters such as GCLID), and device IDs.
12.2. Legal Basis for Processing Personal Data
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
12.3. Purpose of Data Processing
Google Ads Conversion Tracking — including in connection with Google Consent Mode — is used to determine whether users perform specific actions after clicking on Google Ads advertisements, and to analyse and measure which keywords, ads, or campaigns are successful or require optimisation.
12.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
Consent may be withdrawn at any time via the Data Privacy Settings. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after no more than three months even if consent has not been withdrawn by then.
12.5. Cookies and Similar Technologies
For Google Ads Conversion Tracking, cookies, tag technology, tracking pixels, and tracking code may be used; in connection with Google Consent Mode, cookies, tag technology, tracking pixels, and tracking code are used to the extent you have given consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings.
13. Use of Google Tag Manager
13.1. Description and Scope of Data Processing
agenticonsult uses Google Tag Manager, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google), to integrate tags centrally via a user interface. Google Tag Manager enables integration and control of script codes from other tools and determines when a specific tag is used. Tags are small code snippets that can track activities. The following data is processed:
Device and browser data
Aggregated, usage-related information on tag activation
13.2. Legal Basis for Processing Personal Data
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
13.3. Purpose of Data Processing
Google Tag Manager is used for the management and control of tags.
13.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
Consent may be withdrawn at any time via the Data Privacy Settings. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after no more than three months even if consent has not been withdrawn by then.
13.5. Cookies and Similar Technologies
Pixels are used for Google Tag Manager on the basis of your consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings.
14. Use of Google Maps
14.1. Description and Scope of Data Processing
agenticonsult uses Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google), to provide a map function on the website including route planning. The following data is processed:
Device and browser data
Usage information
Location information
14.2. Legal Basis for Processing Personal Data
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
14.3. Purpose of Data Processing
Google Maps is used to provide the map function including route planning.
14.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
Consent may be withdrawn at any time via the Data Privacy Settings. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after use of the map function at the latest, even if consent has not been withdrawn by then.
14.5. Cookies and Similar Technologies
Cookies are used for Google Maps on the basis of your consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings.
15. Use of Google reCAPTCHA
15.1. Description and Scope of Data Processing
agenticonsult uses Google reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google), to verify whether inputs or interactions are made by humans or abusively by automated machine processing (e.g. bots). The following data may be processed:
IP addresses
Device and browser data
Usage information including results of manual recognition operations (e.g. answers to questions posed or images selected)
15.2. Legal Basis for Processing Personal Data
The legal basis is the legitimate interest (berechtigtes Interesse) pursuant to Art. 6(1)(f) GDPR to protect the website against misuse. Google reCAPTCHA thereby contributes to website security.
15.3. Purpose of Data Processing
Google reCAPTCHA is used to verify human inputs and interactions and prevent misuse.
15.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
You may object to data processing at any time via the Data Privacy Settings. Upon objection, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after use at the latest, even if an objection has not been raised by then.
15.5. Cookies and Similar Technologies
Script technologies are used for Google reCAPTCHA pursuant to § 25(2)(2) TTDSG. Details can be found in the Data Privacy Settings.
16. Use of Hotjar
16.1. Description and Scope of Data Processing
agenticonsult uses Hotjar, a web analytics service provided by Hotjar Limited, Level 2, St Julian's Business Center, 3, Elia Zammit Street, St Julian's STJ 1000, Malta (hereinafter: Hotjar), to analyse website usage and optimise the website accordingly. Pseudonymised user profiles are created and the following data may be processed:
IP addresses
Device information (e.g. screen size and resolution) and browser data (e.g. browser used) including device type (unique device identifier)
Usage information (e.g. pages visited, clicks on links or maps) including data for the creation of heat, click, move, and scroll maps, and user settings (e.g. language settings)
Location data
16.2. Legal Basis for Processing Personal Data
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
16.3. Purpose of Data Processing
Hotjar is used for web analytics to design and optimise the website in accordance with user needs.
16.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the purpose.
Consent may be withdrawn at any time via the Data Privacy Settings. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after no more than three months even if consent has not been withdrawn by then.
16.5. Cookies and Similar Technologies
Cookies, pixel tags, and web storage technologies are used for Hotjar on the basis of your consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings.
17. Use of EmailJS
17.1. Description and Scope of Data Processing
For sending emails via the contact form on the website, agenticonsult uses the EmailJS service provided by EmailJS Pte. Ltd., 139 Cecil Street #03-10 YSY Building, Singapore 069539 (hereinafter: EmailJS). EmailJS enables data entered in the contact form to be transmitted directly as an email without requiring a server-side email sending infrastructure. EmailJS acts as a data processor (Auftragsverarbeiter) pursuant to Art. 28 GDPR. The following data is processed:
Your name
Your email address
The content of your message
Any additional information provided in the contact form
Technical metadata (e.g. IP address, timestamp) for abuse prevention
Processing takes place on Amazon Web Services (AWS) servers in the United States. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with EmailJS. EU standard contractual clauses pursuant to Art. 46(2) GDPR serve as the transfer mechanism for the transmission of personal data to the USA as a third country.
17.2. Legal Basis for Processing Personal Data
The legal basis is Art. 6(1)(f) GDPR (legitimate interest), with the legitimate interest being the technical delivery of your contact request. Where contact serves to carry out pre-contractual measures, Art. 6(1)(b) GDPR additionally applies.
17.3. Purpose of Data Processing
EmailJS is used for the technical transmission of your contact request by email. EmailJS acts exclusively as a transmission service for the data you enter in the contact form.
17.4. Duration of Storage, Right to Object and Removal
EmailJS stores transmitted data only for the duration of the technical transmission process. Upon termination of the contract with EmailJS, personal data is deleted from EmailJS production systems within 30 business days.
Users may object to the processing of their personal data. In such a case, contact via the contact form cannot be continued. Direct contact by email remains available as an alternative.
17.5. Cookies and Similar Technologies
The EmailJS SDK integrated into the website does not set cookies on your device. Communication takes place via API calls in which no information is stored on your device.
18. Use of Facebook Pixel
18.1. Description and Scope of Data Processing
agenticonsult uses Facebook Pixel, a tracking technology provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter: Facebook Pixel), to track interactions of users on the website after clicking on a Facebook or other Meta-provided advertisement. This enables analysis and optimisation of advertising effectiveness, and delivery of retargeted and personalised advertising via Facebook Pixel. The following data may be processed:
IP addresses
Device (e.g. operating system) and browser data (e.g. browser type)
Usage information (e.g. interactions with advertisements such as clicks, displayed ads/content, website visits) including identifiers (e.g. Facebook user ID, pixel ID, device ID)
Location data
agenticonsult and Meta Ireland are jointly responsible for these data processing operations. A joint controller agreement pursuant to Art. 26 GDPR has been concluded with Meta Ireland to establish respective responsibilities: https://www.facebook.com/legal/controller_addendum. agenticonsult provides this privacy information; Meta Ireland is responsible for fulfilling data subject rights pursuant to Art. 15 to 20 GDPR with respect to personal data stored by Meta Ireland under joint responsibility. agenticonsult is responsible for the correct technical implementation and configuration of Facebook Pixel.
Meta Ireland's privacy information, including the legal bases relied upon and how to exercise data subject rights against Meta Ireland, is available at: https://www.facebook.com/about/privacy.
18.2. Legal Basis for Processing Personal Data
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
18.3. Purpose of Data Processing
Facebook Pixel is used to analyse Facebook and Meta-provided advertising and to optimise it accordingly. It also enables retargeted and personalised advertising.
18.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the respective purpose.
Consent may be withdrawn at any time via the Data Privacy Settings. Upon withdrawal, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after no more than three months even if consent has not been withdrawn by then.
18.5. Cookies and Similar Technologies
Cookies, pixel technologies, web storage technologies, and conversion APIs are used for Facebook Pixel on the basis of your consent pursuant to § 25(1) TTDSG. Details can be found in the Data Privacy Settings.
19. Facebook Page
19.1. Description and Scope of Data Processing
agenticonsult operates a Facebook Page on Facebook, a platform provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter: Facebook Page), to present agenticonsult and to analyse how the Facebook Page is used via "Page Insights", in order to optimise it accordingly. The following data may be processed:
IP addresses
Device and browser data
Usage information
Location data
A joint controller agreement pursuant to Art. 26 GDPR has been concluded with Meta Ireland to establish respective responsibilities for data processing: https://www.facebook.com/legal/controller_addendum. agenticonsult provides this privacy information; Meta Ireland is responsible for fulfilling data subject rights pursuant to Art. 15 to 20 GDPR. agenticonsult is responsible for the correct technical implementation and configuration of the Facebook Page.
Meta Ireland's privacy information, including legal bases and how to exercise data subject rights, is available at: https://www.facebook.com/about/privacy.
19.2. Legal Basis for Processing Personal Data
The legal basis is the legitimate interest (berechtigtes Interesse) pursuant to Art. 6(1)(f) GDPR. The legitimate interest is to present agenticonsult via the Facebook Page and to analyse its usage via Page Insights. Anonymised statistics are provided by Meta Ireland — agenticonsult has no access to personal data processed by Meta Ireland.
19.3. Purpose of Data Processing
The Facebook Page serves to present agenticonsult on Facebook and to analyse usage of the page to optimise it accordingly.
19.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the respective purpose.
You may object to data processing at any time via the Data Privacy Settings. Upon objection, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after use at the latest, even if an objection has not been raised by then.
20. LinkedIn
20.1. Description and Scope of Data Processing
agenticonsult operates a company page on LinkedIn, a professional networking platform provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn), to present agenticonsult and maintain its network. Usage of the company page is also analysed via "Page Insights" to optimise it accordingly. The following data may be processed:
IP addresses
Device and browser data
Usage information (e.g. reach of posts and page views, demographic and geographic information about target audiences, clicks on posts, or use of share or comment functions)
Location data
agenticonsult and LinkedIn Ireland are jointly responsible for Page Insights data processing. A joint controller agreement pursuant to Art. 26 GDPR has been concluded: https://legal.linkedin.com/pages-joint-controller-addendum. agenticonsult provides this privacy information. LinkedIn Ireland is responsible for fulfilling data subject rights; further information is available at https://www.linkedin.com/legal/privacy-policy. Data subject rights may also be exercised against agenticonsult, which will forward the request to LinkedIn Ireland.
LinkedIn Ireland ensures the security of processing and provides appropriate technical and organisational measures for Page Insights. Further information is available at https://security.linkedin.com/.
20.2. Legal Basis for Processing Personal Data
The legal basis is the legitimate interest (berechtigtes Interesse) pursuant to Art. 6(1)(f) GDPR. The legitimate interest is to present agenticonsult via LinkedIn and to analyse usage of the company page via Page Insights. Anonymised statistics are provided by LinkedIn Ireland — agenticonsult has no access to personal data processed by LinkedIn Ireland.
20.3. Purpose of Data Processing
The LinkedIn company page serves to present agenticonsult on LinkedIn and to analyse usage to optimise it accordingly.
20.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the respective purpose.
You may object to data processing at any time via the Data Privacy Settings. Upon objection, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after use at the latest, even if an objection has not been raised by then.
21. YouTube
21.1. Description and Scope of Data Processing
agenticonsult operates a channel on YouTube, a video platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: YouTube), to present agenticonsult and maintain its network. Usage of the channel is also analysed to optimise it accordingly. The following data may be processed:
IP addresses
Device and browser data
Usage information (e.g. reach of posts, profile visits, followers, and follower count development)
YouTube's terms of use are available at https://www.youtube.com/t/terms. YouTube's privacy information is available at https://policies.google.com/privacy.
21.2. Legal Basis for Processing Personal Data
The legal basis is the legitimate interest (berechtigtes Interesse) pursuant to Art. 6(1)(f) GDPR. The legitimate interest is to present agenticonsult via YouTube and to analyse channel usage using data made available. Anonymised statistics are provided by YouTube — agenticonsult has no access to personal data processed by YouTube.
21.3. Purpose of Data Processing
The YouTube channel serves to present agenticonsult on YouTube and to analyse usage using available data to optimise it accordingly.
21.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the respective purpose.
You may object to data processing at any time via the Data Privacy Settings. Upon objection, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after use at the latest, even if an objection has not been raised by then.
22. TikTok
22.1. Description and Scope of Data Processing
agenticonsult operates a company page on TikTok, a social media platform operated under joint data protection responsibility by TikTok Technology Limited, 10 Earlsfort Court Dublin 2, Dublin, D02 AK70, Ireland and TikTok Information Technologies UK Limited, One London Wall 6th Floor, London, EC2Y 5EB, UK (hereinafter: TikTok), to present agenticonsult and maintain its network. Usage is also analysed to optimise the page accordingly. The following data may be processed:
IP addresses
Device and browser data
Usage information (e.g. reach of posts, interactions with advertisements on TikTok, video and profile views, likes, comments, shared content, profile visits, follower demographics such as age and gender, and follower count development)
TikTok's terms of use are available at https://www.tiktok.com/legal/page/eea/terms-of-service/de-DE?lang=de-DE. TikTok's privacy information is available at https://www.tiktok.com/legal/privacy-policy-eea?lang=de.
22.2. Legal Basis for Processing Personal Data
The legal basis is the legitimate interest (berechtigtes Interesse) pursuant to Art. 6(1)(f) GDPR. The legitimate interest is to present agenticonsult via TikTok and to analyse page usage using data made available. Anonymised statistics are provided by TikTok — agenticonsult has no access to personal data processed by TikTok.
22.3. Purpose of Data Processing
The TikTok page serves to present agenticonsult on TikTok and to analyse usage using available data to optimise it accordingly.
22.4. Duration of Storage, Right to Object and Removal
Processed data is deleted once it is no longer required for the respective purpose.
You may object to data processing at any time via the Data Privacy Settings. Upon objection, data will no longer be used for those purposes and personal data will be deleted. Personal data is deleted after use at the latest, even if an objection has not been raised by then.
23. Your Rights Regarding Your Personal Data
Under the General Data Protection Regulation (GDPR), you have various data subject rights. Please understand that individual rights may be restricted in certain cases. If this is the case, you will be informed of the reason:
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR).
Where consent has been given, it may be withdrawn at any time with future effect. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.
Where processing is based on legitimate interests, you have the right to object (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for agenticonsult is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden.
For questions about data protection, please contact agenticonsult at any time.
25. Use of Stripe
25.1. Description and Scope of Data Processing
For payment processing, agenticonsult uses the payment service provider Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA (hereinafter: Stripe). Stripe acts as an independent data controller for payment processing. The following data is processed:
Payment data (credit card number, bank details)
IP address
Transaction data (amount, time, currency)
Device and browser data for fraud prevention
25.2. Legal Basis
The legal basis for data processing is Art. 6(1)(b) GDPR (contract performance). For fraud prevention by Stripe, Art. 6(1)(f) GDPR (legitimate interest) is the legal basis.
25.3. Data Transfer to Third Countries
Stripe transfers personal data to the USA. The basis for data transfer is EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
25.4. Retention Period
Transaction data is retained for 10 years due to tax law retention obligations (§147 AO, §257 HGB). Further information on Stripe's privacy practices: https://stripe.com/privacy
26. Use of PayPal
26.1. Description and Scope of Data Processing
As an alternative payment method, agenticonsult offers PayPal, a payment service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: PayPal). PayPal acts as an independent data controller. The following data is processed:
Payment data and PayPal account information
IP address
Transaction data (amount, time, currency)
26.2. Legal Basis
The legal basis for data processing is Art. 6(1)(b) GDPR (contract performance).
26.3. Retention Period
Transaction data is retained for 10 years due to tax law retention obligations (§147 AO, §257 HGB). Further information on PayPal's privacy practices: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
27. Changes to the Privacy Policy
27.1.
agenticonsult reserves the right to amend this Privacy Policy to reflect changes in the legal situation or changes to the service and data processing. This applies only to statements on data processing. Where customer consent is required or where parts of the Privacy Policy contain provisions governing the contractual relationship with customers, changes will only be made with customer consent.
27.2.
Customers are requested to regularly review the content of this Privacy Policy.