1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

This document can be printed for reference by using the print command in the settings of any browser.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e. the “controller”)? The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party” on this page.

Types of data collected — among the types of personal data that this website collects, by itself or through third parties, there are: first name; last name; company name; email address; Usage Data; Tracker. Complete details on each type of personal data collected are provided in the dedicated sections of this privacy policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form. Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access this website.

Depending on the user’s location, data transfers may involve transferring the user’s data to a country other than their own. To find out more about the place of processing of such transferred data, users can check the section containing details about the processing of personal data.

The data processing is carried out by us using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the data.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyse your user patterns. Any use of cookies – or of other tracking tools – by this website or by the owners of third-party services used by this website serves the purpose of providing the service required by the user, in addition to any other purposes described in the present document.

Retention time

Personal data shall be processed and stored for as long as required by the purpose they have been collected for. Personal data collected for the purposes of our legitimate interest shall be retained as long as needed to fulfill such purposes. We are allowed to retain personal data for a longer period whenever the user has given consent to such processing, as long as such consent is not withdrawn. Furthermore, we may be obliged to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency. Please do not hesitate to contact us at any time under the address disclosed in section “Data protection officer and contact” on this website if you have questions about this or any other data protection related issues.

How “Do Not Track” requests are handled

This website does not support “Do Not Track” requests. To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

2. Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

Execution of a contract data processing agreement — in order to guarantee processing in compliance with data protection regulations, we have concluded an order processing contract with our host.

3. General information and mandatory information

Personal data (or data): any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data: information collected automatically through this website (or third-party services employed in this website), which can include the IP addresses or domain names of the computers utilized by users, the URI addresses requested, the time of the request, the method used, the size of the file received in response, the numerical status code, the country of origin, the features of the browser and operating system, the various time details per visit, and details about the path followed within the website.

User: the individual using this website who, unless otherwise specified, coincides with the data subject. Data Subject: the natural person to whom the personal data refers. Cookie: trackers consisting of small sets of data stored in the user’s browser. Tracker: any technology (e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting) that enables the tracking of users.

Data protection

The operators of this website take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration. We advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (the “controller”)

apheris AI GmbH, Kolonnenstr. 8, 10827 Berlin. Owner contact email: dpo@apheris.com. The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data.

Data protection officer and contact

Information on data transfer to the USA

Our website uses certain tools from companies based in the USA. When these tools are active, your personal information may be transferred to the US servers of these companies. We must point out that the USA is not a safe third country within the meaning of EU data protection law. The possibility cannot be excluded that US authorities may process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence over these processing activities.

Right to object (Art. 21 GDPR)

Where data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to object at any time to the processing of your personal data based on grounds arising from your unique situation, including profiling. If your personal data is processed for direct advertising, you have the right to object at any time; your data will then no longer be used for direct advertising purposes.

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they maintain their domicile, place of work, or where the alleged violation occurred.

Right to data portability

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the browser address line switches from “http://” to “https://” and by the lock icon. If SSL/TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information about, rectification and eradication of data; processing restrictions

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients, and the purpose of processing. You may also have a right to have your data rectified or eradicated, and to demand the imposition of restrictions on processing in certain cases. To do so, contact us at the address provided in section “Data protection officer and contact”.

4. Recording of data on this website

Contact form

If you submit inquiries via our contact form, the information provided (including any contact information) will be stored to handle your inquiry and in case of further questions. We will not share this information without your consent. Processing is based on Art. 6 para. 1 lit. b GDPR where related to a contract or pre-contractual measures, otherwise on our legitimate interest (Art. 6 para. 1 lit. f GDPR) or your agreement (Art. 6 para. 1 lit. a GDPR). The information remains with us until you ask us to erase it, revoke your consent, or the purpose no longer applies — without prejudice to mandatory retention periods.

Mailing list or newsletter

By registering for the mailing list or newsletter, the user’s email address is added to the contact list and receives promotional email messages from us. You can opt out of these subscriptions anytime by contacting us.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request and all resulting personal data (name, request) will be stored and processed for the purpose of processing your request. We do not pass these data on without your consent. Data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR (contract/pre-contractual), our legitimate interest (lit. f), or your consent (lit. a). Data remain with us until you request deletion, revoke consent, or the purpose lapses — statutory retention periods remain unaffected.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics (Google LLC / Google Ireland Limited). Google Analytics enables the website operator to analyze visitor behavior patterns via technologies such as cookies or device fingerprinting. Recorded information is, as a rule, transferred to and stored on a Google server in the United States. This tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR, or exclusively on the basis of Art. 6 para. 1 lit. a GDPR where consent has been requested; consent can be revoked at any time.

IP anonymization is activated, so your IP address is abbreviated within the EU/EEA before transmission to the United States. A contract data processing agreement has been executed with Google. Data linked to cookies, user IDs or advertising IDs are anonymized or deleted after 26 months.

Google Tag Manager

Google Tag Manager is a tag management service (Google LLC / Google Ireland Limited) that helps us manage the tags or scripts needed on this website in a centralized fashion.

Hotjar

We use Hotjar to better understand our users’ needs and optimize our service and experience. Hotjar uses cookies and other technologies to collect data on users’ behavior and devices, including a de-identified IP address, screen size, device type, browser information, geographic location (country only), and preferred language, stored on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

HubSpot (Analytics, Email, CRM, Lead Management)

HubSpot, Inc. provides analytics, email, CRM, and lead-management services that let us monitor and analyse web traffic, manage email, and build user profiles from an email address or personal name and track user activities. Personal data processed: email address; Tracker; Usage Data; and various types of data as specified in HubSpot’s privacy policy. Place of processing: United States.

Matomo

Matomo is an analytics software used by this website to analyze data directly without the help of third parties. Personal data processed: Tracker; Usage Data.

LinkedIn conversion tracking (LinkedIn Insight Tag)

LinkedIn conversion tracking (LinkedIn Corporation) connects data from the LinkedIn advertising network with actions performed on this website, tracks conversions attributable to LinkedIn ads, and enables targeting of user groups. Users may opt out through their device or LinkedIn account settings. Personal data processed: device information; Tracker; Usage Data. Place of processing: United States.

6. Plug-ins and tools

YouTube

This website embeds videos from YouTube (Google Ireland Limited). When you visit a page with an embedded YouTube video, a connection to YouTube’s servers is established, notifying YouTube which of our pages you visited, and YouTube may place cookies or comparable technologies on your device. If you are logged into your YouTube account, you enable YouTube to directly allocate your browsing patterns to your personal profile; you can prevent this by logging out. Use of YouTube is based on our legitimate interest in presenting our online content in an appealing manner (Art. 6 Sect. 1 lit. f GDPR), or on consent (Art. 6 para. 1 lit. a GDPR) where requested.

Google Web Fonts (local embedding)

This website uses Web Fonts provided by Google to ensure the uniform use of fonts. These Google fonts are locally installed, so a connection to Google’s servers is not established in conjunction with this website.

Google Maps

Via an API, this website uses the mapping service Google Maps (Google Ireland Limited). To enable Google Maps features, your IP address must be stored and is, as a rule, transferred to a Google server in the United States. We use Google Maps to present our content appealingly and make locations easy to find — a legitimate interest under Art. 6 Sect. 1 lit. f GDPR, or on the basis of consent (lit. a) where obtained.

7. Custom services

Job applications

We offer website visitors the opportunity to submit job applications (e.g. via e-mail, postal services, or the online application form). If you submit a job application, we will process any affiliated personal data (e.g. contact and communications data, application documents, interview notes) required to make a decision concerning an employment relationship. The legal grounds are § 26 BDSG (German law), Art. 6 Sect. 1 lit. b GDPR, and — where you have given consent — Art. 6 Sect. 1 lit. a GDPR. Within our company, your data will only be shared with individuals involved in processing your application.

Data archiving period — if we are unable to make you a job offer, or you reject or withdraw your application, we may retain your data on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure, after which it is deleted and physical documents destroyed. Longer storage may occur where you have consented or where statutory retention requirements apply.

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation). This privacy policy relates solely to this website, if not stated otherwise within this document.