Privacy Policy

1. Controller

The data controller under the EU General Data Protection Regulation (GDPR) is:

Hermann Hundt Ing. GmbH
Laubanger 21
96052 Bamberg, Germany

Authorised representative: Michael Hundt
Phone: +49 9951 519280
Email: info@hundt-gmbh.de

For data-protection questions specific to this website, please contact the project lead Dr. Matthias Hundt at matthias.hundt@hundt-gmbh.de.

2. Hosting

This website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The server is located within the European Union. A data processing agreement pursuant to Article 28 GDPR is in place with netcup.

3. Server log files

When you access the website, your browser automatically transmits technical information that is recorded by our server:

  • IP address of the requesting device
  • Date and time of the request
  • Requested URL and HTTP status code
  • User agent (browser and operating system identifier)
  • Referrer (the previous page, if transmitted)

The legal basis is Article 6(1)(f) GDPR (legitimate interest in the stable and secure operation of the website). Log files are retained only briefly on the server and automatically overwritten, unless security-relevant events require longer retention.

4. Contact form

When you fill out the contact form on this site, we process the following data:

  • Name
  • Company / organisation
  • Email address
  • Phone number
  • Message (free text)
  • The intent you selected (e.g. "Request a demo" or "Become a partner")

In addition, technical metadata of the submission (timestamp, language, referrer) is stored to give context to the inquiry.

Purpose: handling your inquiry, getting back to you, and where applicable, initiating a business relationship.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) and/or Article 6(1)(f) GDPR (legitimate interest in efficient handling of B2B inquiries). If you tick the explicit consent checkbox in the form, the processing is additionally based on Article 6(1)(a) GDPR.
Retention: inquiry data is stored as long as necessary to handle your request and to comply with applicable commercial- and tax-law retention obligations (typically 6 or 10 years after the end of the correspondence). You may request earlier deletion at any time (see section 9).

5. CRM system (processor)

Data submitted via the contact form is transmitted to and stored in our customer relationship management (CRM) system, operated by Odoo S.A., Chaussée de Namur 40, 1367 Ramillies, Belgium. Odoo processes the data as a processor under Article 28 GDPR on servers located within the European Union. No transfer to third countries takes place.

6. Protection against automated requests (anti-spam)

To deter spam bots, two mechanisms are in place:

  • Honeypot field: an invisible form field that only bots fill in. If it is filled, we silently discard the submission without storing it.
  • IP-based rate limit: the sender's IP address is held in the server's memory for a maximum of 60 minutes in order to cap the number of form submissions per hour. No persistent storage takes place.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in protecting our IT infrastructure from misuse).

7. Fonts

The website uses the Inter typeface (SIL Open Font License). The font files are served entirely from this website's own server (self-hosted). No connection to third-party providers such as Google Fonts is made when loading the typeface.

8. Browser-local storage (sessionStorage)

When you click a button on the home page that carries an intent (e.g. "Request a Demo" or "Become a Partner"), your selection is stored under the key aitim-intent in your browser's sessionStorage. This information never leaves your device; it is used only to pre-fill the contact form. The value is automatically discarded when the tab is closed.

9. Cookies

This website does not set cookies. It uses no tracking services, no web analytics tool, no advertising networks, and no social-media plugins.

10. Data security

The connection to this website is encrypted via HTTPS (TLS). Data is also transmitted to the CRM system exclusively over encrypted connections.

11. Your rights

Under the GDPR you have the following rights:

  • Right of access to the data we hold about you (Article 15 GDPR)
  • Right to rectification of inaccurate data (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR), subject to statutory retention obligations
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing (Article 21 GDPR)
  • Right to withdraw consent with effect for the future (Article 7(3) GDPR)

Please send any such request informally to matthias.hundt@hundt-gmbh.de.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority (Article 77 GDPR). The competent authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

13. Currency of this notice

This privacy policy is currently in effect (last updated: May 2026). As the website evolves, updates may become necessary; the latest version is always available at this URL.