General information and principles of data processing
We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data, so-called personal data, when using our website is important to us.
We, adacta AG, take the protection of your personal data seriously and would like to inform you about data protection in our company.Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.We also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period. This privacy policy applies only to this website.
We are the party responsible for processing your personal data within the meaning of Art. 4 No. 7 GDPR:
For further information about our company, please see the imprint on our website: https://www.adacta.ai/legal-imprint.
Definitions
Following the example of Art. 4 GDPR, this data protection notice is based on the following definitions:
"Personal data" (Art. 4 No. 1 GDPR) is all information relating to an identified or identifiable natural person ("data subject"). A person is identifiable if he or she can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, an online identifier, location data or with the help of information about his or her physical, physiological, genetic, psychological, economic, cultural or social identity characteristics. Identifiability can also be given by linking such information or other additional knowledge. The creation, form or embodiment of the information is not important (photos, video or sound recordings can also contain personal data). This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.
Data that cannot be linked to you personally, such as through anonymization, is not personal data. Processing (e.g. collection, storage, reading, querying, use, transmission, deletion or destruction) in accordance with Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention periods.
"Processing" (Article 4 No. 2 GDPR) is any process in which personal data is handled, whether with or without the aid of automated (i.e. technology-based) procedures. This includes in particular the collection (i.e. procurement), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or other provision, comparison, linking, restriction, erasure or destruction of personal data as well as the change of a target or purpose on which data processing was originally based.
“Controller” (Article 4 No. 7 GDPR) is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data.
"Third party" (Article 4 No. 10 GDPR) means any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or processor; this also includes other legal entities belonging to the group.
"Processor" (Art. 4 No. 8 GDPR) is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g. IT service providers). In the sense of data protection law, a processor is in particular not a third party.
“Consent” (Article 4 No. 11 GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes in the form of a statement or other unambiguous confirmatory act by which he or she signifies agreement to the processing of personal data concerning him or her.
Type and scope of data processing
Processing of personal data when visiting our website
When you use the website for information purposes, i.e. simply viewing it without registering and without otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. This includes as standard:
IP address
Date and time of the request
Date and time of access including URL accessed
HTTP method used
HTTP headers, in particular but not exclusively, include browser type, operating system, etc.
returned status code, as well as
the transmission volume.
Additional features and offers on our website
In addition to the purely informational use of our website, we offer various services that you can use if you are interested, and use other common functions to analyze or market our offers, which are presented in more detail below. To do this, you usually have to provide additional personal data or we process such additional data that we use to carry out the respective services. The data processing principles mentioned above apply to all data processing purposes described here.
We sometimes use external service providers to process your data. We select these carefully.
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
If you are interested in our product, we invite you to voluntarily register on our waiting list after agreeing to these data protection provisions. We use our partner “MailChimp” for this purpose. Further information about our subcontractors can be found in the following provisions.
We use the so-called double opt-in procedure to register for our waiting list. This means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to register for the waiting list. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. You can revoke your consent to be included on the waiting list at any time. You can revoke your consent by clicking on the link provided in every registration for the waiting list email, by email to hello@adacta.ai or by sending a message to the contact details provided in the imprint.
When you contact us by email, the data you provide will be processed and stored (e.g. gender, first and last name, address, company, email address, text content of the inquiry, and the time of transmission) in order to answer your questions. If the inquiry is associated with a contract, we will delete the data collected in this context after the contract term has expired, otherwise after storage is no longer required, or we will restrict processing if there are statutory retention periods.
Our application is currently in the development phase.
Our digital assistant is able to process texts, forms and documents using an intelligent learning system, so that the application supports the user in everyday information management. Our application is therefore able to process the personal data transmitted by the user or made available for retrieval through the user's legitimation. The data is end-to-end encrypted. The protection of your personal data, which you entrust to us as a potential future user, is important to us and has the highest priority.
When processing sensitive personal data, your prior consent is required in accordance with Art. 4 lit. b GDPR. The consent must expressly refer to this data in accordance with Art. 9 No. 2 a GDPR.
In addition to the consent, data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR to implement the user agreement.
Our legitimate interest is based on the processing of our customers' personal data as well as the continuous development and improvement of our services.
If the documents or content transferred contain personal data of third parties, you as the user are responsible for obtaining the appropriate consent of the persons concerned or for only transmitting personal data if there is a legal basis for doing so.
Exclusion
Your data will not be used for training purposes or for the development or improvement of general artificial intelligence (AI) models and/or general machine learning (ML) models. The same applies to data that is made available via APIs, for example.
Purpose and legal basis
The processing in accordance with section 3 for the purely informational use of our website is technically necessary in order to be able to display our website to you. For example, the temporary storage of the IP address by the system is necessary in order to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. We also use the data to ensure the security and stability of our website.
The legal basis for this processing is Art. 6 (1) (f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.
Your personal data will be deleted as soon as the purpose of storage no longer applies, as soon as the personal data mentioned is no longer required to display the website. The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. The user therefore has no option to object. The log files are stored centrally and deleted after a maximum of 30 days.
Data processing after consent:
For example, processing in accordance with point 3 letter d (entry on our waiting list) will only take place if you have voluntarily consented to data processing in accordance with these provisions in advance and have transmitted your data to us. The purpose of the survey is to send you information about our products and to create analyses, e.g. on product awareness, market potential, etc.
The legal basis is Art. 6 Paragraph 1 Clause 1 Letter a of GDPR ("Consent"): If the data subject has voluntarily, in an informed manner and unambiguously indicated by a statement or other unambiguous confirmatory act that he or she agrees to the processing of personal data concerning him or her for one or more specific purposes.
Your personal data will only be processed for as long as is necessary to achieve the processing purposes stated above, or until you revoke your consent, see Art. 7 Para. 3 GDPR. Further storage may take place in individual cases if this is required by law. Your consent can be revoked at any time, e.g. by contacting us by email at hello@adacta.ai. Such a revocation affects the legality of the processing of your personal data after you have expressed it to us. The legality of the processing of your data up to the time of your revocation remains unaffected.
The processing of personal data, which is collected and processed when you contact us by email, serves the purpose of enabling the processing and answering of customer inquiries. The legal basis is Art. 6 Para. 1 S. 1 lit. b or lit. f GDPR.
Possibility of objection
If you have given your consent to the processing of your data, you can revoke this consent at any time.
If we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary to fulfill a contract with you. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data in the way we do. If you object, we will examine the situation and either stop or adapt the data processing or show you our compelling legitimate reasons on the basis of which we continue the processing.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to object to advertising is to send an email to hello@adacta.ai.
Storage period
Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes and there are no statutory retention periods that prevent deletion.
Data collection for the implementation of pre-contractual measures and for the performance of the contract
In order to conclude a contract, you must provide your personal data, which we need to process your order. Mandatory information required to process the contracts is marked separately; further information is voluntary. For payment, you can provide your payment details to our payment service provider or we will pass your payment details on to our house bank, whereby these third parties are each independently responsible for payment processing. The legal basis for this is Art. 6 Para. 1 Clause 1 Letter b of GDPR.
During the ordering process, it is necessary to create a customer account through which we store your data. When you create an account under "My Account", the data you provide will be stored revocably. You can always delete all other data, including your user account, in the customer area.
Type and scope of data processing:
We collect personal data about you in the pre-contractual area and when concluding the contract. This includes, for example, your first and last name, address, email address, telephone number or bank details.
Purpose and legal basis of data processing:
We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations.
The legal basis for this is Art. 6 (1) (b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 (1) (a) GDPR.
Storage period:
The data will be deleted as soon as it is no longer required for the purpose for which it was processed. In addition, there may be statutory retention obligations, for example retention obligations under commercial or tax law in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.
Your rights
You can assert your rights as a data subject with regard to your processed personal data at any time using the contact details provided above. As a data subject, you have the right:
pursuant to Art. 15 GDPR, to request information about your data processed by us. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details
to immediately request the correction of inaccurate data or the completion of your data stored by us in accordance with Art. 16 GDPR;
to request the deletion of your data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
to request the restriction of the processing of your data in accordance with Art. 18 GDPR if you contest the accuracy of the data or if the processing is unlawful;
pursuant to Art. 20 GDPR, to receive the data you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller ("data portability");
to object to processing pursuant to Art. 21 GDPR, provided that the processing is carried out on the basis of Art. 6 Paragraph 1 Clause 1 Letter e or Letter f GDPR. This is particularly the case if the processing is not necessary to fulfill a contract with you. Unless it is an objection to direct advertising, when exercising such an objection we ask you to explain the reasons why we should not process your data as we do. If your objection is justified, we will examine the situation and will either stop or adapt the data processing or show you our compelling legitimate reasons on the basis of which we continue the processing;
pursuant to Art. 7 Para. 3 GDPR, you have the right to revoke your consent (even before the GDPR came into force, i.e. before May 25, 2018) – that is, your voluntary, informed and unambiguous will, made clear by a declaration or other unambiguous affirmative action, that you agree to the processing of the personal data in question for one or more specific purposes – at any time, if you have given such consent. This means that we may no longer continue the data processing based on this consent in the future and
pursuant to Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data in our company.
Security
We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. We use encryption technologies on our websites, taking into account the state of the art, the implementation costs and the nature, scope, context and purpose of the processing as well as the existing risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
Your information is transferred from your computer to our servers and vice versa via the Internet using SSL encryption. You can usually tell this by the fact that the lock symbol in your browser's status bar is closed and the address line begins with https://. We will be happy to provide you with further information on request.
Changes to the privacy policy
As data protection law continues to develop and technological or organizational changes occur, our data protection notices are regularly reviewed for any need for adjustment or additions. You will be informed of any changes, in particular, on our German website at https://www.adacta.ai/de/home . This data protection notice is current as of August 2024. The German version of the data protection notice takes precedence over the English version, which is to be understood as a translation aid.
Data transfer
We will only transfer your personal data to third parties for the purposes listed below and if:
You have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR,
the transfer is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation to disclose data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and
this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.
Subcontractors we use after careful selection:
We use tracking and analysis tools and for data analysis: Google Analytics, MailChimp, Meta and Capturly.
Cookies
In addition to the data mentioned above, when you use our website we use technical tools for various functions, in particular cookies that can be stored on your device. When you visit our website and at any time later, you have the choice whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager. Below we first describe cookies from a technical point of view (b.), before going into your individual selection options in more detail by describing technically necessary cookies (c.) and cookies that you can voluntarily select or deselect (d.).
Cookies are text files or information in a database that are stored on your hard disk and associated with the browser you use, so that certain information can be sent to the location that placed the cookies. Cookies cannot run programs or transmit viruses to your computer, but are primarily used to make the Internet faster and more user-friendly. This website uses the following types of cookies, the functionality and legal basis of which we will explain below:
Transient cookies: These, especially session cookies, are automatically deleted when you close the browser or log out. They contain a so-called session ID. This allows different requests from your browser to be assigned to the common session and your computer can be recognized when you return to our website.
Persistent cookies: These are automatically deleted after a specified period of time, which varies depending on the cookie. You can view the cookies set and their lifespans at any time in your browser settings and delete the cookies manually.
Mandatory functions that are technically necessary to display the website: The technical structure of the website requires that we use technology, in particular cookies. Without this technology, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you want to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 Para. 1 Clause 1 Letter f of GDPR.
Optional cookies when you give your consent: We only use various cookies with your consent, which you can select when you first visit our website using the so-called cookie consent tool. The functions are only activated if you consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or devices, to recognize you during a visit or to display advertising (possibly also to tailor advertising to your interests, measure the effectiveness of ads or show interest-based advertising). The legal basis for this processing is Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. You can revoke your consent at any time without affecting the admissibility of processing up to the time of revocation.
We use the Facebook pixel from Meta. This stores actions on our website in one or more cookies. This data enables Facebook to compare data such as IP address or user ID with the data from your Facebook account. This data is not visible to us and is anonymous; it is used for advertising purposes.
Changes
We reserve the right to change this privacy policy from time to time. We will not restrict your rights under this privacy policy without your express consent. In the event of significant changes, we will notify you and inform you of the content of the change via your stored contact details.