Privacy Policy
Last updated: March 26, 2026
exmachinAI GmbH (“exmachinAI,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website exmachinai.com (the “Site”).
We process personal data in compliance with the European Union General Data Protection Regulation (GDPR / EU 2016/679), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and all other applicable data protection legislation.
1. Data Controller
The data controller responsible for data processing on this website is:
exmachinAI GmbH
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Phone: +49-151-28199338
Email: dataprotection@exmachinai.com
2. Types of Data Collected
When you visit our Site, we may collect the following categories of personal data:
Automatically collected data: When you access our Site, our web servers automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and time zone setting. This data is necessary to deliver the website content and to ensure system security and stability.
Contact data: If you contact us via email or a contact form, we collect the data you voluntarily provide, such as your name, email address, company name, and the content of your message.
Cookies and tracking technologies: We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences at any time using the cookie consent banner on our Site.
3. Purpose and Legal Basis of Processing
We process your personal data for the following purposes:
Website provision and functionality (Art. 6(1)(f) GDPR – legitimate interest): To operate, maintain, and improve our website, and to ensure IT security.
Responding to inquiries (Art. 6(1)(b) GDPR – pre-contractual measures, or Art. 6(1)(f) GDPR – legitimate interest): To respond to your requests and communicate with you regarding our services.
Analytics and improvement (Art. 6(1)(a) GDPR – consent): Where we use analytics tools that process personal data, we do so only with your prior consent, which you may withdraw at any time.
Legal obligations (Art. 6(1)(c) GDPR): To comply with applicable legal requirements, such as tax and commercial law retention obligations.
4. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary:
Hosting providers: Our website is hosted by a professional hosting provider that processes data on our behalf under a data processing agreement (Art. 28 GDPR).
Google Fonts: Our Site uses Google Fonts for consistent typography. When you access our Site, your browser may connect to Google servers, transmitting your IP address. For more information, see Google’s Privacy Policy.
Legal authorities: We may disclose data where required by law, legal process, or governmental request.
5. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Server log files are typically deleted after 30 days. Contact form data is retained for the duration of the business relationship and any applicable statutory retention periods (typically 6 or 10 years under German commercial and tax law).
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and, if so, access to that data.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your data, subject to legal retention obligations.
Right to restriction of processing (Art. 18 GDPR): You may request restriction of processing under certain conditions.
Right to data portability (Art. 20 GDPR): You may request your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at dataprotection@exmachinai.com.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The competent authority for exmachinAI GmbH is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Website: www.baden-wuerttemberg.datenschutz.de
9. Cookies
Our Site uses cookies and similar technologies. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy. You can adjust your cookie settings at any time by clicking the cookie icon on our website or by managing preferences through the consent banner.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated in line with current industry standards and applicable legal requirements.
11. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data processing practices, please contact us at:
exmachinAI GmbH
Data Protection
Friedrichstraße 15
DE-70174 Stuttgart, Germany
Email: dataprotection@exmachinai.com
Phone: +49-151-28199338