Privacy Policy
OVERVIEW
Last updated: March 26, 2026
exmachinAI GmbH ("exmachinAI", "we", "us" or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website exmachinai.com (the "Site").
We process personal data in compliance with the European Union General Data Protection Regulation (GDPR / EU 2016/679), the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG), and all other applicable data protection legislation.
DATA CONTROLLER
The data controller responsible for data processing on this website is:
exmachinAI GmbH
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Phone: +49-711-45978850
Email: dataprotection@exmachinai.com
TYPES OF DATA COLLECTED
When you visit our Site, we may collect the following categories of personal data:
Automatically collected data: When you access our Site, our web servers automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and time zone setting. This data is necessary to deliver the website content and to ensure system security and stability.
Contact data: If you contact us via email, we collect the data you voluntarily provide, such as your name, email address, company name, and the content of your message.
PURPOSE AND LEGAL BASIS OF PROCESSING
We process your personal data for the following purposes:
Website provision and functionality (Art. 6(1)(f) GDPR - legitimate interest): To operate, maintain and improve our website, and to ensure IT security.
Responding to inquiries (Art. 6(1)(b) GDPR - pre-contractual measures, or Art. 6(1)(f) GDPR - legitimate interest): To respond to your requests and communicate with you regarding our services.
Analytics and improvement (Art. 6(1)(a) GDPR - consent): Where we use analytics tools that process personal data, we do so only with your prior consent, which you may withdraw at any time.
Legal obligations (Art. 6(1)(c) GDPR): To comply with applicable legal requirements, such as tax and commercial law retention obligations.
DATA SHARING AND THIRD PARTIES
We do not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary:
Website hosting: Our website is hosted by our website platform provider, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). Server log data may be processed to deliver the Site and to ensure its security.
Legal authorities: We may disclose data where required by law, legal process, or governmental request.
INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Server log files are typically deleted after 30 days. Contact data is retained for the duration of the business relationship and any applicable statutory retention periods (typically 6 or 10 years under German commercial and tax law).
YOUR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and, if so, access to that data.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your data, subject to legal retention obligations.
Right to restriction of processing (Art. 18 GDPR): You may request restriction of processing under certain conditions.
Right to data portability (Art. 20 GDPR): You may request your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at dataprotection@exmachinai.com.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a supervisory authority. The competent authority for exmachinAI GmbH is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
COOKIES
Our Site uses only cookies that are technically necessary to deliver the website. We do not use advertising or cross-site tracking cookies. Should we introduce analytics or other non-essential cookies in future, we will obtain your prior consent and provide a means to withdraw it at any time.
SECURITY
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures are regularly reviewed and updated in line with current industry standards and applicable legal requirements.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.
CONTACT US
If you have any questions about this Privacy Policy or our data processing practices, please contact us at:
exmachinAI GmbH - Data Protection
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Phone: +49-711-45978850
Email: dataprotection@exmachinai.com
OVERVIEW
Last updated: March 26, 2026
exmachinAI GmbH ("exmachinAI", "we", "us" or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website exmachinai.com (the "Site").
We process personal data in compliance with the European Union General Data Protection Regulation (GDPR / EU 2016/679), the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG), and all other applicable data protection legislation.
DATA CONTROLLER
The data controller responsible for data processing on this website is:
exmachinAI GmbH
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Phone: +49-711-45978850
Email: dataprotection@exmachinai.com
TYPES OF DATA COLLECTED
When you visit our Site, we may collect the following categories of personal data:
Automatically collected data: When you access our Site, our web servers automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and time zone setting. This data is necessary to deliver the website content and to ensure system security and stability.
Contact data: If you contact us via email, we collect the data you voluntarily provide, such as your name, email address, company name, and the content of your message.
PURPOSE AND LEGAL BASIS OF PROCESSING
We process your personal data for the following purposes:
Website provision and functionality (Art. 6(1)(f) GDPR - legitimate interest): To operate, maintain and improve our website, and to ensure IT security.
Responding to inquiries (Art. 6(1)(b) GDPR - pre-contractual measures, or Art. 6(1)(f) GDPR - legitimate interest): To respond to your requests and communicate with you regarding our services.
Analytics and improvement (Art. 6(1)(a) GDPR - consent): Where we use analytics tools that process personal data, we do so only with your prior consent, which you may withdraw at any time.
Legal obligations (Art. 6(1)(c) GDPR): To comply with applicable legal requirements, such as tax and commercial law retention obligations.
DATA SHARING AND THIRD PARTIES
We do not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary:
Website hosting: Our website is hosted by our website platform provider, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). Server log data may be processed to deliver the Site and to ensure its security.
Legal authorities: We may disclose data where required by law, legal process, or governmental request.
INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Server log files are typically deleted after 30 days. Contact data is retained for the duration of the business relationship and any applicable statutory retention periods (typically 6 or 10 years under German commercial and tax law).
YOUR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and, if so, access to that data.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your data, subject to legal retention obligations.
Right to restriction of processing (Art. 18 GDPR): You may request restriction of processing under certain conditions.
Right to data portability (Art. 20 GDPR): You may request your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at dataprotection@exmachinai.com.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a supervisory authority. The competent authority for exmachinAI GmbH is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
COOKIES
Our Site uses only cookies that are technically necessary to deliver the website. We do not use advertising or cross-site tracking cookies. Should we introduce analytics or other non-essential cookies in future, we will obtain your prior consent and provide a means to withdraw it at any time.
SECURITY
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures are regularly reviewed and updated in line with current industry standards and applicable legal requirements.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.
CONTACT US
If you have any questions about this Privacy Policy or our data processing practices, please contact us at:
exmachinAI GmbH - Data Protection
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Phone: +49-711-45978850
Email: dataprotection@exmachinai.com
Connect.
EXMACHINAI GMBH
exmachinAI GmbH
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Phone: +49-711-45978850
Fax: +49-69-900-18835
Email: info@exmachinai.com
NAVIGATION
About
Services
Strategy
Offices
Imprint
Privacy Policy
CONTACT
info@exmachinai.com
stuttgart@exmachinai.com
vienna@exmachinai.com
zurich@exmachinai.com
