Let's talk
Legal

Privacy Policy

An overview of data protection.

Website: https://thegoodai.eu
Last updated: July 2026

1. General

Below we explain which personal data we process when you visit our website and use our contact form. Personal data means any information that can be used to identify you personally.

Our website provides information about our services. We do not use web analytics tools (e.g. Google Analytics) and we do not embed social media plugins or video embeds (e.g. YouTube).

2. Controller

The controller responsible for data processing on this website is:

the good AI GmbH
Schloßstr. 19
82031 Grünwald
Germany

Managing Directors: Derk Möller, Wojciech Dominiak
Email: datenschutz(at)thegoodai.eu

3. Contact for privacy matters

A data protection officer is not legally required for our company and has not been appointed. For all privacy-related questions and to exercise your rights, please contact us directly:

the good AI GmbH
Schloßstr. 19
82031 Grünwald

Email: datenschutz(at)thegoodai.eu

4. Your rights

  • Access to your personal data stored by us (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent given (Art. 7(3) GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27 (Schloss), 91522 Ansbach, Germany, email: poststelle@lda.bayern.de, phone: +49 (0) 981 53 1300.

5. Hosting and server log files

Our website is hosted by the following provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

Website: https://all-inkl.com/
Phone: +49 35872 353-10
Email: support@all-inkl.com

The servers are located in Germany. When you visit our website, technical information is automatically collected in so-called server log files. This includes in particular:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the website). Log data is deleted after the retention periods specified by the hosting provider.

A data processing agreement pursuant to Art. 28 GDPR is in place with ALL-INKL.COM.

6. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and by the padlock symbol.

7. Cookies and consent management (CCM19)

Our website uses cookies and similar technologies. Cookies are small text files stored on your device.

7.1 Cookie consent tool CCM19

To obtain and document your consent, we use the cookie consent tool “CCM19” provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (https://www.ccm19.de).

CCM19 is loaded on all pages and is used in particular to activate non-essential services (Google reCAPTCHA) only after you have given consent. CCM19 stores your consent choices in cookies or comparable storage mechanisms.

Legal basis for storing your consent decision: Art. 6(1)(c) GDPR (compliance with legal documentation obligations) and Art. 6(1)(f) GDPR (legitimate interest in compliant consent management).

A data processing agreement pursuant to Art. 28 GDPR is in place with CCM19.

7.2 Language cookie (site_lang)

To store your language preference, we set the cookie “site_lang”. It stores the language you have selected (de, en or es) and has a lifetime of one year.

The cookie is set when you change the language via our language switcher, or on your first visit based on your browser language (Accept-Language header) if you have not yet selected a language.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly, multilingual website). You can delete the cookie at any time in your browser settings; the language is also reflected in the URL (/de/, /es/).

8. Contact form

If you send us a request via the contact form, we process the following data:

  • Name
  • Email address
  • Company (optional)
  • Topic (selection)
  • Message
  • Form language (de, en or es)
  • Time of submission
  • IP address at the time of submission

By submitting the form, you consent to the processing of your details for the purpose of handling your enquiry (Art. 6(1)(a) GDPR). Where your enquiry is aimed at concluding a contract or carrying out pre-contractual measures, Art. 6(1)(b) GDPR is an additional legal basis for processing.

The data is used to process your enquiry and is then deleted once the purpose no longer applies, and in any event no later than 24 months, unless statutory retention obligations require otherwise. You may withdraw your consent at any time with effect for the future (e.g. by email to hello(at)thegoodai.eu).

8.1 Local storage (messages.jsonl)

For technical backup and traceability, contact requests are also stored in a protected file on our server (messages.jsonl). Access to this file is blocked via the web server configuration. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and traceability of form submissions).

8.2 Email notifications (Microsoft 365 / SMTP)

After a successful submission, you receive an automatic confirmation email. In addition, a notification is sent to our internal team. Delivery is handled via our email service Microsoft 365 (SMTP: smtp.office365.com) of Microsoft Corporation or its affiliated companies.

Legal basis: Art. 6(1)(a) GDPR (consent by submitting the form) and Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft (Microsoft Product Terms / Data Protection Addendum).

8.3 HubSpot CRM

To centrally process and manage contact requests, we transmit the form data server-side to HubSpot (HubSpot Ireland Limited or HubSpot, Inc., depending on the region). The data transmitted comprises: name, email, company, topic, message and the form language.

Transmission takes place exclusively server-side via the HubSpot Forms API; no HubSpot tracking code is loaded in the browser.

Legal basis: Art. 6(1)(a) GDPR (consent by submitting the form) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication).

A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot. Where data is transferred to third countries (e.g. the USA), HubSpot relies on the EU Commission’s Standard Contractual Clauses.

Further information: https://legal.hubspot.com/privacy-policy

8.4 Google reCAPTCHA v3

To protect our contact form against automated submissions (spam/bots), we use “Google reCAPTCHA v3” on the contact page, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).

reCAPTCHA analyses user behaviour (e.g. IP address, mouse movements, time spent on the page) to assess whether the input is made by a human. The analysis begins as soon as reCAPTCHA is loaded.

The reCAPTCHA script is only loaded after you have consented to the use of Google reCAPTCHA in the cookie banner (CCM19). Without this consent, the contact form cannot be submitted with reCAPTCHA protection.

Legal basis for loading reCAPTCHA and transmitting the necessary data to Google: Art. 6(1)(a) GDPR (consent via CCM19).

Further information: https://policies.google.com/privacy and https://www.google.com/recaptcha/about/

9. Web fonts (self-hosted)

For a consistent visual appearance, we use the “Inter” typeface. The font files are hosted on our own servers and loaded directly from there when a page is accessed. No connection is made to external font providers (e.g. Google Fonts).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the website).

10. External links

Our website contains links to external websites (e.g. best-places-to-work.com). The operators of those sites are solely responsible for their content and privacy practices. When you click an external link, you leave our website.

11. Objection to promotional emails

We hereby object to the use of contact details published in the legal notice for the purpose of sending unsolicited advertising.

12. Updates

We reserve the right to update this privacy policy if our website, the services we use or the applicable legal framework change.