Artificial Intelligence (AI)

We use artificial intelligence (AI), which involves the processing of personal data. The specific purposes and our interest in using AI are mentioned below. According to the term "AI system" as defined in Article 3 No. 1 of the AI Regulation, we understand AI to be a machine-based system designed for varying degrees of autonomous operation, capable of adaptation after deployment, and producing outputs such as predictions, content, recommendations, or decisions that can influence physical or virtual environments.

Our AI systems are used in strict compliance with legal requirements. These include both specific regulations for artificial intelligence and data protection requirements. In particular, we adhere to the principles of lawfulness, transparency, fairness, human oversight, purpose limitation, data minimisation, integrity and confidentiality. We ensure that the processing of personal data is always based on a legal foundation. This may either be the consent of the data subjects or a statutory permission.

When using external AI systems, we carefully select their providers (hereinafter referred to as "AI providers"). In accordance with our legal obligations, we ensure that the AI providers comply with applicable provisions. We also observe our duties when using or operating the acquired AI services. The processing of personal data by us and the AI providers is carried out exclusively on the basis of consent or legal authorisation. We place particular emphasis on transparency, fairness and maintaining human oversight over AI-supported decision-making processes.

To protect processed data, we implement appropriate and robust technical as well as organisational measures. These ensure the integrity and confidentiality of processed data and minimise potential risks. Through regular reviews of AI providers and their services, we ensure ongoing compliance with current legal and ethical standards.

  • Processed data types: Content data (e.g. textual or pictorial messages and contributions, as well as information pertaining to them, such as details of authorship or the time of creation.); Usage data (e.g. page views and duration of visit, click paths, intensity and frequency of use, types of devices and operating systems used, interactions with content and features); Inventory data (For example, the full name, residential address, contact information, customer number, etc.); Payment Data (e.g. bank details, invoices, payment history); Contact data (e.g. postal and email addresses or phone numbers). Contract data (e.g. contract object, duration, customer category).
  • Data subjects: Users (e.g. website visitors, users of online services); Third parties; Service recipients and clients; Prospective customers. Business and contractual partners.
  • Purposes of processing and legitimate interests: Artificial Intelligence (AI); Provision of contractual services and fulfillment of contractual obligations; Communication; Office and organisational procedures. Business processes and management procedures.
  • Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Retention and Deletion".
  • Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Performance of a contract and prior requests (Article 6 (1) (b) GDPR). Compliance with a legal obligation (Article 6 (1) (c) GDPR).

Further information on processing methods, procedures and services used:

  • Adobe AI: AI-powered tools and features in Adobe products that support creative processes. Adobe AI offers functions such as automatic image editing, content generation, and intelligent image adjustments to optimize the creative workflow; Service provider: Adobe Systems Software Ireland, 4-6, Riverwalk Drive, Citywest Business Campus, Brownsbarn, Dublin 24, D24 DCW0, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://business.adobe.com/uk/ai/adobe-genai.html; Privacy Policy: https://www.adobe.com/privacy.html; Data Processing Agreement: Provided by the service provider. Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses (Provided by the service provider).
  • ChatGPT: AI-based service designed to understand and generate natural language and related input and data, analyze information, and make predictions ("AI", meaning "Artificial Intelligence" shall be construed in the applicable legal sense of the term); Service provider: OpenAI Ireland Ltd, 117-126 Sheriff Street Upper, D01 YC43 Dublin 1, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://openai.com/chatgpt/overview/; Privacy Policy: https://openai.com/policies/privacy-policy/. Opt-Out: https://privacy.openai.com/policies?modal=select-subject.
  • DeepL: Translation of texts into various languages and provision of synonyms as well as context examples. Support with the correction and improvement of texts in different languages; Service provider: DeepL SE, Maarweg 165, 50825 Köln, Germany; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://www.deepl.com; Privacy Policy: https://www.deepl.com/en/privacy. Data Processing Agreement: Provided by the service provider.
  • ElevenLabs: An AI-powered platform for speech synthesis that generates realistic-sounding voices. Users can convert text inputs into speech and clone their own voices. The platform offers features such as speech synthesis, lip-syncing, and support for multiple languages and dialects; Service provider: Eleven Labs Inc., 169 Madison Ave #2484, 10016 New York, USA; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://elevenlabs.io; Privacy Policy: https://elevenlabs.io/privacy-policy; Data Processing Agreement: https://elevenlabs.io/de/dpa Provided by the service provider. Basis for third-country transfers: Standard Contractual Clauses (https://elevenlabs.io/de/dpa).
  • FLUX: An AI-powered text-to-image service that enables users to generate images based on text inputs; Service provider: BFL GmbH, Bertoldstr. 48, 79098 Freiburg im Breisgau, Germany; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://bfl.ai/. Privacy Policy: https://bfl.ai/legal/privacy-policy.
  • Google Gemini: AI-powered system designed to provide advanced language and image processing functions. It uses machine learning to understand, generate natural language, and analyse images, offering versatile applications in various fields; Service provider: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://cloud.google.com/; Privacy Policy: https://policies.google.com/privacy; Data Processing Agreement: https://business.safety.google/processorterms/. Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses (https://business.safety.google/processorterms/).
  • LanguageTool: AI-powered tool for grammar and spell checking, using advanced algorithms to analyze texts in various languages and provide correction suggestions; Service provider: LanguageTooler GmbH; Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR), Compliance with a legal obligation (Article 6 (1) (c) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://languagetool.org/. Privacy Policy: https://languagetool.org/legal/privacy.
  • OpenAI API: An API (application programming interface) for artificial intelligence that provides developers with access to language and image models. It supports the integration of functions such as text generation, natural language processing (NLP), conversation, code creation, translation, as well as image generation and analysis into their own applications. The API thus provides a flexible interface to incorporate complex AI functions into digital products, processes, and services; Service provider: OpenAI Ireland Ltd, 117-126 Sheriff Street Upper, D01 YC43 Dublin 1, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://openai.com/; Privacy Policy: https://openai.com/policies/privacy-policy/; Data Processing Agreement: https://openai.com/policies/data-processing-addendum; Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses (https://openai.com/policies/data-processing-addendum). Opt-Out: https://privacy.openai.com/policies?modal=select-subject.