Privacy policy

This English translation is provided for convenience only. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website is AIHRCON GmbH, An der Alten Spinnerei 2a, 83509 Kolbermoor, Germany, email: kontakt@aihrcon.com.

2. Hosting and server log data

This website runs on a server of Hetzner Online GmbH in Germany; a data processing agreement is in place with Hetzner. When you visit the website, we process technically necessary server log data (IP address, time of access, requested resource) to ensure secure and stable operation (Art. 6(1)(f) GDPR). Log data is deleted after seven days at the latest.

3. Cookies

This website does not set cookies and does not use any third-party tracking services that require consent. For audience measurement we use only our own, cookie-free statistics (see section 10). A cookie banner is therefore not required.

4. Webinar registration, trial audit and email contact

When you register for our webinar or request a trial audit, we process the data you provide (name, business email address, company, and optional details such as number of employees and your message) to run the webinar or handle your request (Art. 6(1)(b) GDPR). The same applies to enquiries sent by email to kontakt@aihrcon.com. You confirm your webinar registration via a confirmation email (double opt-in). We run the webinar via Google Meet (Google Ireland Limited, Ireland; processing with data region Europe, a data processing agreement is in place with Google); where data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework and standard contractual clauses (Art. 45, 46 GDPR). We also store your contact details to stay in touch with you with a view to establishing a business relationship (Art. 6(1)(f) GDPR); you may object to this at any time (see section 9). Providing your data is voluntary; however, we cannot process your registration or request without the required fields. We delete the data as soon as it is no longer needed for these purposes.

5. Newsletter

For our newsletter (updates on pay transparency legislation) we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). Registration uses a double opt-in procedure: you receive a confirmation email and are only added to the mailing list after you confirm. You may withdraw your consent at any time with effect for the future, via the unsubscribe link in every newsletter email or by emailing kontakt@aihrcon.com. After withdrawal, we delete your email address from the mailing list.

6. Email delivery via Brevo

We send our emails (confirmation, webinar and newsletter emails) via Brevo SAS, France. Processing takes place on servers in the EU; a data processing agreement is in place with Brevo.

7. Spam protection and proof of consent

To protect our forms against abuse, we use a self-hosted, cookie-free security check (ALTCHA) and briefly process your IP address to limit automated access; it is processed only transiently in memory and is not stored (Art. 6(1)(f) GDPR). To prove your consent, we log the time of your double opt-in confirmation together with a pseudonymised check value of your IP address (salted hash) (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). We retain this record for as long as we are required to prove consent; it is then deleted.

8. Your rights

Under Articles 15 to 20 GDPR you have the right to access, rectification, erasure, restriction of processing and data portability. You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR. Where your data is processed for direct marketing, you may object at any time without giving reasons. Send your objection informally to kontakt@aihrcon.com.

10. Audience measurement (first-party, cookie-free)

We measure the use of this website with our own, self-hosted, cookie-free statistics. We set no cookies and use no cross-device tracking or fingerprinting; your data never leaves our server. We process the pages visited, approximate time on page, the referring website (domain), campaign parameters (UTM), language and device type, plus a pseudonymous check value that we derive from your IP address and browser identifier using a secret key that changes daily (salted hash). Your IP address is processed only transiently and is not stored; the check value cannot be linked across days. The legal basis is our legitimate interest in a data-minimising, statistical analysis to improve our offering (Art. 6(1)(f) GDPR). We delete the individual records after six months at the latest; anonymous aggregate figures are retained for longer. You may object to this processing at any time (see section 9).

11. External links

Links to external sites (e.g. LinkedIn) lead to third-party services; their privacy notices apply there.