Privacy & Data Protection

1. Controller

2. Website delivery and server logs

When this website is accessed, technical data may be processed to deliver the requested content and protect the service. This can include IP address, date and time, requested URL, referrer, browser and operating-system information, response status and transferred data volume.

The purposes are secure and reliable delivery, error analysis and protection against misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are the security, integrity and availability of the website. Technical hosting, content-delivery and IT-security providers process data on our behalf where required.

3. Local media and fonts

Images, videos and fonts used on this website are delivered from the website infrastructure. The site does not currently embed third-party video players, maps, social-media plug-ins or externally hosted web fonts.

4. Cookies, analytics and tracking

GappAI does not currently use non-essential cookies, advertising pixels or audience analytics on this website. No consent banner is displayed because no optional tracking technology is intentionally activated. Technically necessary storage may be used only where required to provide a service expressly requested by the visitor.

If optional analytics, embedded platforms or marketing technologies are introduced, this notice and the consent mechanism will be updated before activation.

5. Business and general enquiries

If you contact us by email, we process the information you provide, typically your name, contact details, organisation, role, message and related correspondence. Processing is based on Art. 6(1)(b) GDPR where communication concerns a contract or pre-contractual steps, and otherwise on Art. 6(1)(f) GDPR for professional correspondence and relationship management.

6. Careers correspondence

Applications sent to contact@gappai.de are processed for recruitment and employment decisions under § 26 BDSG and, where applicable, Art. 6(1)(b) GDPR. Unsuccessful application data is generally deleted no later than six months after completion of the process, unless longer storage is required for legal claims or you separately consent to a talent-pool period.

7. Recipients and international transfers

Access is limited to authorised GappAI personnel and service providers that require the data for hosting, security, email, professional advice or business operations. We do not sell personal data.

Where infrastructure or support providers process data outside the EU/EEA, transfers are protected through an applicable EU adequacy decision, the EU Standard Contractual Clauses or another mechanism permitted by Chapter V GDPR.

8. Retention

Personal data is retained only for as long as necessary for the stated purpose. Retention is determined by the duration of the relationship, security requirements, statutory retention duties and applicable limitation periods. Data is then deleted or anonymised unless further storage is legally required.

9. Your rights

Subject to the legal conditions, you may request access, rectification, erasure, restriction, data portability and withdrawal of consent, and you may object to processing based on legitimate interests. Contact contact@gappai.de. A withdrawal does not affect processing that was lawful before withdrawal.

10. Right to complain

You may lodge a complaint with a data protection authority. The authority responsible for Berlin is:

11. Security and updates

We use appropriate technical and organisational measures proportionate to the risks of website and communications processing. This notice may be updated when the website, service providers or legal requirements change.

Last updated: 14 August 2026