Legal information
Information about the processing of personal data under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
When you send us an enquiry, we process your name, company, email address and description so that we can review your enquiry personally and reply by email. We also receive the form language, the input method (text or voice), a randomly generated enquiry ID, and the time and version of your consent. Your enquiry is not assessed automatically by AI. Submitting an enquiry does not subscribe you to a newsletter.
Your submission is encrypted in transit and passes through our website host Vercel and our n8n instance to the Google Workspace mailbox we use. Google may also process data outside the EU. The form application does not store your entries in local storage or analytics events. Storage of execution contents is disabled for this n8n workflow. Technical enquiry IDs and timestamps are retained to detect repeat submissions within 24 hours. Expired entries are removed on the server when the form is next accessed.
We process your enquiry on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future using the contact details above. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent. We delete enquiries when they are no longer needed, unless statutory retention obligations require us to keep them.
Optional voice input starts only after your separate consent and permission to use the microphone. It uses your browser’s speech recognition. Depending on the browser, its provider may process audio on its own servers, including outside the EU; that provider’s privacy information also applies. AutoMates does not receive or store audio files. You can stop recording at any time, edit or delete the recognised text before submitting it, and use text input instead. Recording ends after no more than two minutes. Only the form text you confirm is submitted.
You have the right to obtain information about the personal data we hold about you, its source, its recipients and the purposes of processing (Article 15 GDPR). You also have rights to rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection to processing (Article 21 GDPR). Please use the contact details above to exercise your rights.
You also have the right to lodge a complaint with a competent supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA).
This website is hosted by Vercel Inc. (USA). Vercel is certified under the EU–U.S. Data Privacy Framework (DPF), providing a basis for an adequate level of protection for transfers of personal data to the United States. Processing is based on our legitimate interest in providing a reliable, efficient website (Article 6(1)(f) GDPR).
We use JustRelate etracker to analyse usage data. The etracker consent manager manages consent. The etracker tag manager can embed scripts from other tools. Together, these modules enable certain cookies and services to be activated when you provide the relevant consent. Usage data is also collected when you decline statistical cookies, in accordance with the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). This processing is based on our legitimate interests under Article 6(1)(f) GDPR in improving our website and integrating and managing additional services lawfully. Where you provide the relevant consent, other technologies are activated on the basis of Article 6(1)(a) GDPR. You may withdraw consent at any time.
JustRelate processes and stores the web analytics data generated by etracker exclusively in Germany on our behalf, subject to German and European data protection laws and standards. etracker has been independently audited and certified and awarded the ePrivacyseal. Data that could identify an individual, such as IP addresses, login identifiers or device identifiers, is anonymised or pseudonymised as early as possible. This analytics data is not used for other purposes, combined with other data or disclosed to third parties.
You can object to this processing at any time using the opt-out control below. Objecting has no adverse consequences. If the control is not displayed, data collection is already prevented by other blocking measures. Further information is available in JustRelate etracker’s privacy policy.
Object / opt outThe “Book a free fit call” button takes you to an external appointment booking page operated by HubSpot, Inc. HubSpot’s privacy policy applies to that page. If you book an appointment there, HubSpot, Inc. (Boston, USA) processes the information you provide, such as your name, email address and preferred appointment time, on our behalf to organise the appointment and prepare our communication with you. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). HubSpot is certified under the EU–U.S. Data Privacy Framework, providing a basis for an adequate level of protection for transfers to the United States.
When you enter your name and email address in the “Process Discovery Starter Kit” form on our homepage, these details are sent directly from your browser to HubSpot, Inc. (Boston, USA) and stored as a contact. This enables us to provide your personal workbook link and, if you are interested, follow up about an appropriate next step. The page does not load an additional HubSpot tracking script or set a HubSpot cookie for this purpose; only the information entered in the form is transmitted. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). The form submission is also reported anonymously to etracker as an event for conversion measurement, as described above. HubSpot’s privacy policy applies. HubSpot is certified under the EU–U.S. Data Privacy Framework.
Your entries in the interactive Starter Kit are initially stored only in your browser. To improve the workbook, we use a pseudonymous identifier to measure active reading time for each section, scroll depth, completion progress, and download and completion signals. Your IP address is not stored in the analytics database for this engagement tracking. Only when you expressly submit the completed workbook are your answers, name, email address and, where provided, company sent to HubSpot and associated with your contact record. The legal basis is your express request or consent (Article 6(1)(a) and (b) GDPR).
Our email service uses Google Workspace (Google Ireland Limited), with data storage in the EU. If you contact us by email, Google processes your message on our behalf to deliver it to us. The legal basis is our legitimate interest in reliable email communication (Article 6(1)(f) GDPR), or taking steps before entering into a contract when you contact us with an enquiry (Article 6(1)(b) GDPR).
Enquiries and booked appointments may be processed internally using the automation tool n8n, for example to add them to our task management system. We host n8n ourselves on servers within the EU. This does not collect additional data from you; it forwards information already received through HubSpot or email within our systems. The legal basis is our legitimate interest in handling your enquiry efficiently (Article 6(1)(f) GDPR).
When you open a password-protected proposal page provided specifically for you, we log the time and URL of the visit, your IP address, browser information and active reading time for each document page. Activity is associated with the specific proposal and a randomly generated session identifier that exists only while the browser window remains open. This measurement does not set cookies or store data in your browser’s local storage.
This processing protects confidential documents, records their availability and supports appropriate follow-up on the specific proposal. It is based on our legitimate interest in secure, traceable communication before entering into a contract (Article 6(1)(f) GDPR). Events are processed through our self-hosted n8n environment and stored in our internal database. They are deleted when they are no longer needed for the proposal and its follow-up. We do not disclose this data for advertising or create profiles across proposals. You can object to this processing using the contact details above.
Where we use advertising and remarketing technologies on this website, they are activated only after your express consent through the etracker consent manager. You can withdraw that consent with effect for the future. These technologies may include services from the providers listed below.
The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) of the German TDDDG. Transfers to third countries also require an appropriate transfer mechanism, such as an applicable adequacy decision or EU Standard Contractual Clauses. The LinkedIn-specific information below also applies.
We use LinkedIn to present AutoMates, communicate with interested people and promote our services. The provider for the European Economic Area and Switzerland is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The following information covers LinkedIn Marketing Solutions and related marketing features where we use them. The specific processing depends on the campaign, your interaction and the features enabled; this list does not mean that every product is active on every visit.
These features help us reach relevant professional audiences, respond to enquiries, measure advertising results and improve campaigns. Depending on the feature, LinkedIn processes profile and professional attributes, ad views and clicks, page interactions and conversion events. We generally receive aggregated audience and campaign reports. Information you actively send to us, for example through a Lead Gen Form or message, can identify you and includes the contact details, professional information and answers provided.
Where enabled, the Insight Tag transmits page and referrer URLs, IP address, browser/device information and timestamps. Website Actions can additionally record visits, button clicks and submission events with limited page/button metadata. Enhanced matching can transmit hashed email addresses. Cookies and similar identifiers can associate activity with LinkedIn members and support measurement and advertising across devices.
Where we use contact audiences, Conversions API or CRM integrations, the transferred information can include contact or matching identifiers, event type and time, conversion value and relevant business information. LinkedIn may match these signals with member data to attribute results, create audiences and optimise delivery. Hashing is pseudonymisation, not anonymisation. LinkedIn also processes marketing data for its own service provision, reporting and improvement purposes.
LinkedIn marketing tracking on this website requires your prior consent under Article 6(1)(a) GDPR and, for storage or access on your device, Section 25(1) TDDDG. We obtain consent through our consent management service. Consent-based contact matching and marketing-data transfers likewise require the applicable consent; a server-side transfer does not remove this requirement.
We process an enquiry or service request you submit through LinkedIn under Article 6(1)(b) GDPR where necessary to take steps at your request before a contract. Additional consent-based marketing uses Article 6(1)(a) GDPR. Operating our LinkedIn presence and evaluating aggregated Page Insights serves our legitimate interest in business communication and improving our content under Article 6(1)(f) GDPR, subject to your rights and interests.
LinkedIn acts as an independent controller for the Marketing Solutions processing covered by its Independent Controller Addendum. For the generation of Page Insights concerning EEA and Swiss members, we and LinkedIn are joint controllers under Article 26 GDPR. LinkedIn assumes the responsibilities described in the Page Insights addendum, including handling data-subject requests; you may also contact us.
We retain information received through LinkedIn only as long as needed for the stated purpose, subject to legal retention obligations. LinkedIn applies product-specific periods: Insight Tag direct member identifiers are removed within seven days; the remaining pseudonymous visit data is deleted within 180 days. LinkedIn retains sponsored and event leads for 365 days, and Company Page, product and LinkedIn Landing Page leads for 90 days. These periods do not automatically govern copies legitimately retained in our own systems.
Processing can involve LinkedIn Corporation and service providers outside the EU/EEA, including the United States. Transfers rely on applicable adequacy decisions where their conditions are met, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. LinkedIn describes its transfer arrangements and how to request further information in the linked notice.
You can withdraw website tracking consent through our consent management service at any time for the future. Withdrawal does not affect earlier lawful processing. For questions, withdrawal or requests concerning data we hold, contact imprint@aiautomates.business. You may exercise your GDPR rights, including access, rectification, erasure, restriction and, where applicable, portability, and complain to a supervisory authority.
You may object to processing based on legitimate interests on grounds relating to your situation. You can object to direct marketing, including related profiling, at any time; we will then stop processing your data for those purposes.
LinkedIn members can manage personalisation and the use of advertiser data in their advertising settings. Visitors without an account can use LinkedIn’s guest and cookie controls. Cookie-based choices depend on the browser and can be lost when cookies are cleared. These LinkedIn controls supplement the choices on our website and do not remove all advertisements.
We update this privacy policy when our processing of personal data changes. The current version published on this page applies.