Agentic Corporate

Privacy Policy

Last updated: 4 August 2026

This is a translation of the German privacy policy. In case of any discrepancy, the German version is authoritative.

Protecting your data matters to us. This policy explains transparently which data is processed when you visit this website, for what purpose and on what legal basis. The website is deliberately data-minimal: it loads no external fonts, scripts or trackers and sets no non-essential cookies.

1. Controller (Art. 4(7) GDPR)

The controller for the data processing on this website is:

[German operating company / legal entity, legal form]
[Address]
[Email]

A data protection officer only has to be appointed where the conditions of Art. 37 GDPR / Section 38 BDSG are met. [if appointed: name, contact]

2. Hosting

This website is hosted by Vercel Inc. Delivery and server-side processing are pinned to the EU region Frankfurt am Main (identifier fra1). Vercel processes the data required for the delivery of the page and for the operation of our server-side functions, including the details you submit in the form (section 6), on our behalf as a processor under Art. 28 GDPR; a data processing agreement is in place. As the parent company is based in the USA, any transfer to a third country is safeguarded by appropriate measures under Art. 44 et seq. GDPR (the EU Commission's Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework). The legal basis is our legitimate interest in a secure, reliable provision of the service (Art. 6(1)(f) GDPR).

3. Server log files

When the website is accessed, the hosting provider automatically collects technical access data (server log files): IP address, date and time, resource accessed, volume of data transferred, browser type and operating system. This data serves the technical delivery, stability and defence against attacks. It is not combined with the form data described in section 6 and is deleted or anonymised after one hour at the latest. Legal basis: Art. 6(1)(f) GDPR.

4. Fonts and external content

The page itself loads no external font, script or media services (no Google Fonts, no CDNs, no analytics or advertising scripts). All fonts are embedded locally. When simply viewing the page, no data is therefore transferred to third parties beyond the technically necessary delivery by the hosting provider (section 2).

5. Cookies and analytics

This website sets no non-essential cookies and uses no tracking and no reach analysis. No usage profiles are created. A consent banner is therefore not required.

6. AI Readiness Check and contact form

The Readiness Check on this page is first evaluated entirely in the browser on your device. The selected answers and the calculated score do not leave the device as long as you do not submit the form.

If you submit the contact and readiness form, we process the following details:

Your IP address is not stored. It only appears temporarily in the server log files described in section 3 and is not linked to the form entry.

Purpose: to contact you about your result, answer your enquiry and prepare a possible offer.

Legal basis: your consent under Art. 6(1)(a) GDPR. Without your consent we cannot technically accept the form. If your enquiry leads to concrete steps towards a contract, we additionally process the details required for that on the basis of Art. 6(1)(b) GDPR; a withdrawal of consent does not affect that processing.

Recipients and processing: the form sends your details to a serverless function on the same domain (agentic-corporate.de) that runs at our hosting provider Vercel Inc. in the EU region Frankfurt am Main. In doing so, Vercel processes your form data exclusively on our behalf as a processor (section 2). From there the data is written into a database operated by Supabase Inc. The project used is located in the EU region Paris (France). Supabase processes the data exclusively on our behalf as a processor under Art. 28 GDPR; a data processing agreement is in place. Insofar as the parent company is based in a third country, any transfer is safeguarded by appropriate measures under Art. 44 et seq. GDPR (the EU Commission's Standard Contractual Clauses). The data is not passed on to any further third parties for their own purposes.

Storage period: we store the form data for 18 months from receipt. After that it is deleted automatically, provided that no contractual relationship has come about in the meantime. If a contract is concluded, the statutory retention periods apply. If you withdraw your consent earlier, we delete the data without undue delay unless a statutory retention obligation or an ongoing step towards a contract under Art. 6(1)(b) GDPR prevents this.

Withdrawal: you can withdraw your consent at any time with effect for the future, informally and without giving reasons, for example by email to [email address for withdrawal and data subject rights]. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

7. External appointment booking

Via the appointment button you are taken to an external booking page operated by Google (Google Calendar appointment scheduling, provider Google Ireland Limited). The page is loaded only when you click; no connection to Google is established beforehand. By clicking, you leave our website. The data you enter there (e.g. name, email address, chosen time) is processed by Google under its own responsibility; we have no influence over this. Google's privacy notice applies (policies.google.com/privacy). For the link itself we do not process any personal data; no referrer is transmitted to Google either. The controller for the processing on the booking page is Google alone.

8. Rights of data subjects

You have the following rights vis-a-vis the controller:

To exercise these rights, please contact [email address for data subject rights].

Independently of this, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is [competent supervisory authority by registered seat of the controller].

9. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that takes place on the basis of our legitimate interest under Art. 6(1)(f) GDPR. This concerns the processing described in sections 2 and 3. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms. The objection is not subject to any form requirement and can be addressed to [email address for objections].

10. No automated decision-making, no sale of data

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The score from the Readiness Check is purely a point of orientation for the conversation and has no legal effect on you. We do not sell your data and do not pass it on to third parties for advertising purposes.

11. Data security

The website is delivered exclusively over encrypted HTTPS. Access to the lead database is restricted to our server-side endpoint and to a narrowly limited set of administrative accounts. Access via the publicly reachable interfaces of the database is technically blocked.

12. Status and changes

This privacy policy is dated 4 August 2026. We update it when the processing or the legal situation changes.

This page is a working template and not legal advice. Have it reviewed legally before publication, in particular the controller/operating company, the data processing agreements with Vercel and Supabase, the retention periods and the competent supervisory authority.