Privacy Policy

1. Controller

aiXopt GmbH
Jülicher Str. 209 q/s, 52070 Aachen, Germany
Email: info@aixopt.ai
Phone: +49 157 89661077

2. Website

When you visit this website, our hosting provider processes technically necessary data such as your IP address, date and time, the page requested and browser information in order to deliver and secure the website. The legal basis is Art. 6(1)(f) GDPR, and our legitimate interest lies in secure and stable operation. The data is deleted after 30 days at the latest unless it is needed to investigate a security incident.

3. Contact, appointments and online meetings

If you contact us, book an appointment or take part in an online meeting with us, we process your information and the resulting communication data in order to handle your request and hold the meeting. The legal basis is Art. 6(1)(b) GDPR insofar as a contract or pre-contractual measures are concerned, and otherwise Art. 6(1)(f) GDPR, with our legitimate interest lying in handling enquiries. We delete enquiries and appointments that do not relate to a possible collaboration six months after the last message or the appointment. Where a possible collaboration is concerned, the periods in the section Business contacts apply. Statutory retention obligations, such as six years for business correspondence under Section 257 HGB and Section 147 AO, remain unaffected.

4. Business contacts

We process business contact details of customers, prospects and business partners in order to initiate and maintain business relationships, including approaching potential new customers. The legal basis is Art. 6(1)(b) GDPR insofar as a contract is concerned, and otherwise Art. 6(1)(f) GDPR, with our legitimate interest lying in maintaining business relationships and acquiring new customers.

Where we do not collect the data from you directly, it comprises name, company, position, business contact details, location, professional background and education, the address of your profile on professional networks, and public posts and publications. It originates from the B2B contact data provider Lusha Systems and from publicly available sources such as company websites, professional networks and the trade press.

If we do not contact you within one month of receiving this data, we delete it. If no exchange results within twelve months of our first contact, we also delete your data. If there was an exchange but no business relationship results, we delete the data 24 months after the last contact. During a business relationship, we store the data for its duration and afterwards only where statutory retention obligations apply. After an objection, we only keep the information needed to ensure we do not contact you again (Art. 6(1)(f) GDPR).

5. Job applications

We process application data to carry out the application process (Art. 6(1)(b) GDPR), and special categories of personal data only where this is required under employment or social security law (Art. 9(2)(b) GDPR in conjunction with Section 26(3) of the German Federal Data Protection Act, BDSG). If no employment relationship results, we delete the data six months after the end of the process. This period serves to defend against possible claims (Art. 6(1)(f) GDPR).

6. LinkedIn company page

For the page statistics (Page Insights) of our company page on LinkedIn, we are joint controllers with LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (Art. 26 GDPR). We only receive aggregated statistics in order to tailor our page to our target audience (Art. 6(1)(f) GDPR). Under the joint controller addendum, LinkedIn takes primary responsibility for informing you about this processing and for fulfilling your rights. We forward requests sent to us to LinkedIn. Otherwise, LinkedIn processes your data under its own responsibility in accordance with its privacy policy. We process messages you send us there in order to communicate with you (Art. 6(1)(f) GDPR).

7. Recipients and third countries

We use service providers for hosting, email, calendar, appointment booking and video conferencing, customer relationship management, internal documentation and AI services, who process data on our behalf (Art. 28 GDPR). Lusha Systems is an independently responsible data source and does not receive any data from us.

Further recipients are LinkedIn as joint controller (see LinkedIn company page), our tax adviser and, where necessary in individual cases, lawyers, banks for payment transactions and public authorities such as tax offices.

Data may be transferred to the USA in this context. Transfers are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) where the recipient is certified, or on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of the Standard Contractual Clauses from us.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), as well as the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR). You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

10. Further information

Providing your data is not a statutory requirement. However, the data required to conclude a contract is necessary for doing so; without it, we cannot conclude a contract. There is no automated decision-making within the meaning of Art. 22 GDPR.

Last updated: 13 October 2026