Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:

Guided Buying AI GmbH
Im Mediapark 5
50670 Cologne
Germany
Phone: +49 221 975 847-30
Email: privacy@guidedbuying.com

2. General Information on Data Processing

This Privacy Policy provides information about the processing of personal data when you visit and use our public website, guidedbuying.com. Personal data refers to any information relating to an identified or identifiable natural person.

We process personal data only to the extent necessary to provide the website, when you provide us with data, when there is a legal obligation to do so, or when you have consented to such processing.

3. Website Provision, Hosting, and Server Log Files

Our website is provided via HubSpot CMS. For European customers, HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland, is specifically involved. The EU1 data region has been configured for our HubSpot portal. Cloudflare is used as an upstream security and network service to ensure secure delivery and protect the website.

When you visit our website, technically necessary information is processed. This may include, in particular, your IP address, the date and time of your visit, the pages or files you accessed, the referrer URL, your browser type and version, your operating system, and technical device information. Cloudflare may use technically necessary cookies, in particular __cf_bm and _cfuvid, to protect against automated access and attacks.

Data processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the secure, stable, and technically error-free operation of our website, as well as in preventing misuse and attacks. Technically necessary access to end devices is governed by Section 25(2) of the TDDDG.

Server and security logs are stored only for as long as necessary for the respective security and operational purposes. Statutory retention requirements remain unaffected.

4. Cookies and Consent Management

We use Cookiebot by Usercentrics as our consent management solution. Technologies that are strictly necessary from a technical standpoint may be used without consent, provided that the legal requirements are met. Non-essential analytics and tracking technologies will only be used after you have given your consent.

The legal basis for storing information on your device or accessing information stored there, in the case of technologies requiring consent, is Section 25(1) of the TDDDG. The subsequent processing of personal data is based on Article 6(1)(a) of the GDPR. Technically necessary access is governed by Section 25(2) of the TDDDG; the associated processing of personal data is carried out, where applicable, on the basis of Article 6(1)(f) of the GDPR.

You can revoke or modify your consent at any time, effective for the future, using the “Change Cookie Settings” feature provided on the website.

5. Contact Requests and Demo Bookings

If you contact us by email, phone, or through the demo form available on our website, we will process the information you provide. This may include, in particular, your name, business email address, phone number, company, and the content of your inquiry.

If your inquiry is intended to initiate or execute a contract, the processing is based on Article 6(1)(b) of the GDPR. For other business inquiries, the processing is based on Article 6(1)(f) of the GDPR; our legitimate interest lies in processing and responding to business inquiries.

The information submitted via the website form may be stored in our HubSpot CRM and assigned to the respective contact. If no business relationship is established, we generally delete personal data from such website inquiries no later than 24 months after the last business contact, provided there are no legal retention requirements or other legitimate reasons for longer storage.

6. HubSpot Website Tracking and Buyer Intent

On our website, we use the HubSpot tracking code and HubSpot Buyer Intent with your consent. These features are used to analyze website usage and can, in particular, be used to statistically evaluate visits and identify companies based on technical information such as IP addresses.

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect via the cookie settings.

7. Providing Documents via HubSpot Documents

On our website, we may link to documents provided via HubSpot Documents. When such documents are accessed, technical usage information, such as the opening of the document, the pages viewed, and the time spent, may be processed and, to the extent technically possible, associated with an existing contact.

To the extent that tracking technologies that are not technically necessary are used for this purpose, the processing is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

8. Web Analytics with Google Analytics 4

If you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics enables us to statistically analyze the use of our website and improve our offerings.

In particular, this may involve processing information about page views, sessions, interactions, click paths, technical device and browser information, referrer information, as well as approximate location and device information. Google Signals is disabled; a user ID is not used, and there are currently no product integrations with Google Ads or BigQuery.

This use is based on your consent in accordance with Article 6(1)(a) of the GDPR. To the extent that cookies or similar technologies are used, Section 25(1) of the TDDDG also applies. You may revoke your consent at any time with future effect via the cookie settings.

The retention period is currently 2 months for event data and 14 months for user data.

9. Recipients and Service Providers

In connection with the website processing activities described above, HubSpot, Google, Cloudflare, and Usercentrics/Cookiebot, in particular, may receive personal data to the extent necessary for the respective service. To the extent that service providers process personal data on our behalf, the legally required data processing agreements are concluded.

10. Data Transfers to Third Countries

Some service providers or their affiliated companies may process data outside the European Union or the European Economic Area. Such transfers are made only in compliance with the requirements of Articles 44 et seq. of the GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as the EU Standard Contractual Clauses.

11. Retention Period

As a general rule, we store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods. For website inquiries, the deletion policy described in Section 5 applies. For Google Analytics, the retention periods described in Section 8 apply.

If a business relationship is established, the data required for this purpose will be stored for the duration of the business relationship and beyond only to the extent required by statutory retention obligations or other legal grounds.

12. Your Rights

Subject to the statutory requirements, you have, in particular, the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

To exercise your rights, you can contact privacy@guidedbuying.com at any time.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes. Once you have objected, your personal data will no longer be processed for these purposes.

13. Automated Decisions

No decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you is made in connection with the website processing described in this Privacy Policy.

14. Right to File a Complaint with a Supervisory Authority

You have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data. The following supervisory authority has jurisdiction over us in particular:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
P.O. Box 20 04 44
40102 Düsseldorf
Germany
www.ldi.nrw.de

Privacy policy