Privacy Policy
1. Controller
The controller within the meaning of Article 4 (7) GDPR is:
academy4.ai GmbH
Sandstrasse 104
40789 Monheim am Rhein
Germany
Represented by the Managing Director: Marcel Pesch
Phone: +49 156 7908 5902
E-mail: hello@academy4.ai
Commercial Register: Local Court (Amtsgericht) of Duesseldorf, HRB 109554 VAT identification number: DE457846944
We have not appointed a data protection officer, as the statutory requirements for doing so do not apply to us. For all questions concerning data protection, please use the contact details above.
2. General Information
We process personal data exclusively on the basis of applicable data protection law, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person. This policy informs you which data we process for which purposes and on which legal basis, how long we store it, and what rights you have.
3. Your Rights as a Data Subject
You have the following rights in relation to your personal data:
Access (Article 15 GDPR): You may request information free of charge at any time about which data we process about you, for what purpose, from which source, and to which recipients it is disclosed.
Rectification (Article 16 GDPR): You may request that inaccurate data be corrected or incomplete data completed.
Erasure (Article 17 GDPR): You may request the deletion of your data, provided no statutory retention obligations apply.
Restriction of processing (Article 18 GDPR)
Data portability (Article 20 GDPR): You may request that we provide your data to you or a third party in a structured, commonly used and machine-readable format.
Objection (Article 21 GDPR): see the separate notice under section 3.1.
Withdrawal of consent (Article 7 (3) GDPR): Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.
Complaint to a supervisory authority (Article 77 GDPR)
An informal message to the contact details under section 1 is sufficient to exercise these rights.
3.1 Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (f) GDPR. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (Article 21 (1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing; this also applies to profiling connected with such direct marketing. If you object, your data will no longer be used for direct marketing purposes (Article 21 (2) GDPR).
3.2 Competent Supervisory Authority
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia) Kavalleriestrasse 2–4, 40213 Duesseldorf, Germany poststelle@ldi.nrw.de
4. Hosting and Server Log Files
Our website is provided via Framer, a service of Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. A data processing agreement pursuant to Article 28 GDPR is in place with Framer.
Each time our website is accessed, the server automatically records information transmitted by your browser:
browser type and version
operating system used
referrer URL
host name of the accessing device
date and time of the server request
IP address
This data is not merged with other data sources. The legal basis is Article 6 (1) (f) GDPR; our legitimate interest lies in the technically error-free provision and the security of our website.
Retention period: Access logs are automatically deleted after 30 days. Metrics transmitted for statistical purposes are stored for the duration of our contractual relationship with Framer and are deleted no later than 28 days after it ends.
Framer engages sub-processors to provide, monitor and analyse the website. Access logs are transmitted to New Relic, a technical monitoring service which automatically deletes the logs after 30 days. In addition, Framer transmits technical metrics including IP addresses to Tinybird, the service Framer uses for site statistics such as page view counts. This analysis does not involve the use of cookies and serves technical monitoring and the improvement of our offering. The hosting itself runs on Amazon Web Services infrastructure.
Some of these sub-processors process data outside the European Union. Framer bases such transfers on the adequacy decision relating to the EU-US Data Privacy Framework where the recipient is certified, and otherwise on standard contractual clauses pursuant to Article 46 (2) (c) GDPR. A current list of Framer's sub-processors is available at https://trust.framer.com. For further details on third-country transfers, see section 19.
5. SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the padlock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.
6. Cookies and Consent Management
Our website uses cookies and comparable technologies. Cookies are small text files stored on your device.
Technically necessary cookies are required for the website to function. They are stored on the basis of Section 25 (2) no. 2 TDDDG in conjunction with Article 6 (1) (f) GDPR and do not require consent.
All other cookies, in particular those used for statistics, marketing and reach measurement, are used exclusively with your prior consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR.
Consent is obtained and managed via the VibeTrack cookie notice (see section 7). Your selection is logged so that consent can be demonstrated.
Withdrawal: You may change or fully withdraw your consent at any time with effect for the future. To do so, click the cookie icon at the bottom left of any page on our website. There you can deselect individual categories or reject all non-essential technologies.
7. VibeTrack (Tracking Infrastructure and Consent Management)
We use the tracking solution VibeTrack, provided by VibeTrack GmbH, Am Hohenroth 16, 35614 Asslar, Germany. VibeTrack performs two functions for us:
Consent management. VibeTrack displays the cookie notice, obtains and logs your consent, and on that basis controls which of the advertising and analytics services described below are loaded at all. Without your consent, no consent-requiring technologies are activated.
Transmission of conversion data. If you consent, VibeTrack records your interactions on our website, such as visiting particular pages, submitting a form, or booking an appointment. It attributes these events to the advertisement through which you reached us. VibeTrack transmits the resulting data on our behalf to the advertising platforms we use (see sections 14 to 17).
The data processed includes IP address, device and browser information, timestamps, URLs accessed, referral source, and a pseudonymous identifier used to associate individual page views within a session.
The legal basis for the transmission of conversion data is your consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Insofar as consent management itself is concerned, processing is based on Section 25 (2) no. 2 TDDDG in conjunction with Article 6 (1) (c) GDPR, as we are legally required to be able to demonstrate consent.
A data processing agreement pursuant to Article 28 GDPR is in place with VibeTrack GmbH. Processing takes place in Germany.
8. Contact by E-mail or Telephone
If you contact us by e-mail or telephone, we process the data arising from this solely to handle your request. This includes your name, your contact details and the content of your enquiry.
The legal basis is Article 6 (1) (b) GDPR where the enquiry is directed at concluding a contract, and otherwise Article 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.
We store the data until the purpose of processing no longer applies or you ask us to delete it. Statutory retention periods remain unaffected, in particular under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
9. Contact Form on Our Website
We provide a contact form on our website. We process the data you enter, generally your name and e-mail address, together with the content of your message. Form submissions are transmitted and stored via our hosting provider Framer B.V. (see section 4) acting as a processor.
The legal basis is Article 6 (1) (b) GDPR where the enquiry is directed at concluding a contract, and otherwise Article 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.
Providing the data is voluntary. However, without the information marked as mandatory we cannot process your enquiry.
10. Enquiry Form via Typeform
For our detailed enquiry form we use Typeform, a service of TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain. The form is not embedded in our website but is opened via a link on a separate Typeform page. Merely visiting our website therefore does not transmit any data to Typeform.
If you open and complete the form, we process the data you provide, in particular your name, e-mail address, telephone number and your answers to the questions asked. Typeform additionally processes technical data such as IP address, device information, and the date and time of use in order to display the form and ensure it functions correctly.
The legal basis is Article 6 (1) (b) GDPR, as the enquiry serves to initiate a contractual relationship.
Providing the data is voluntary. However, without the information marked as mandatory we cannot process your enquiry.
A data processing agreement pursuant to Article 28 GDPR is in place with Typeform. Typeform engages sub-processors, including Typeform US LLC in San Francisco, USA. Standard contractual clauses pursuant to Article 46 (2) (c) GDPR apply to this transfer. For details, see section 19.
Typeform privacy information: https://admin.typeform.com/to/dwk6gt
11. Telephone Contact Following an Enquiry
If you provide your telephone number in the enquiry form and have expressly consented to being contacted by telephone, we use that number to advise you on your enquiry and on our services.
The legal basis is your consent pursuant to Article 6 (1) (a) GDPR in conjunction with Section 7 (2) no. 1 of the German Act Against Unfair Competition (UWG). You may withdraw this consent informally at any time without any disadvantage to you.
12. Appointment Booking via Calendly
For scheduling appointments we use Calendly, a service of Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, GA 30363, USA.
When you make a booking, the data you enter is transmitted to and processed by Calendly. This includes your name, your e-mail address, where applicable your telephone number, and the selected appointment. Calendly additionally processes technical data such as IP address and time zone.
The legal basis is Article 6 (1) (b) GDPR, as the booking serves to initiate a contractual relationship. A data processing agreement pursuant to Article 28 GDPR is in place with Calendly. For transfers to the USA, see section 19.
Calendly privacy policy: https://calendly.com/privacy
13. Newsletter via MailerLite
For sending our newsletter we use MailerLite, a service of MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland. The parent company MailerLite Inc. is based in the USA; access from the USA can therefore not be entirely ruled out (see section 19).
Registration uses a double opt-in procedure: after signing up you will receive an e-mail containing a confirmation link. Only after confirmation do we add you to the distribution list. The time of registration, the time of confirmation and the IP address are logged in order to demonstrate the sign-up.
MailerLite evaluates delivery statistically. This allows us to see, among other things, whether a message was opened and which links were clicked. This evaluation serves to improve our content.
The legal basis is your consent pursuant to Article 6 (1) (a) GDPR. You may withdraw it at any time, for example via the unsubscribe link at the end of every newsletter e-mail.
After you unsubscribe, we store your e-mail address on a suppression list to prevent future mailings. The legal basis for this is Article 6 (1) (f) GDPR.
A data processing agreement pursuant to Article 28 GDPR is in place with MailerLite.
14. Meta Pixel and Conversions API
We use the Meta Pixel and the Conversions API of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website.
This allows us to understand how visitors behave on our website after arriving via a Meta advertisement. It enables us to evaluate the effectiveness of our ads; in addition, visitors to our website may be shown advertisements within Meta's services (remarketing).
Transmission takes place in two ways: via the Meta Pixel executed in your browser and additionally server-side via the Conversions API. In server-side transmission, event data is sent to Meta from a server operated by VibeTrack GmbH (see section 7). In this process, information you have previously provided to us may also be transmitted in hashed and therefore cryptographically shortened form, for example your e-mail address or your telephone number. This allows Meta to attribute the event to a user account.
Joint controllership: With regard to the collection and transmission of the data, we and Meta Platforms Ireland Limited are joint controllers within the meaning of Article 26 GDPR. The essence of the arrangement between us is available at https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing following transmission.
The legal basis is your consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. You may withdraw it at any time via the cookie icon at the bottom left.
Meta privacy policy: https://www.facebook.com/privacy/policy
15. LinkedIn Insight Tag
We use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, on our website.
The Insight Tag allows us to evaluate campaigns on LinkedIn, measure conversions and deliver audience-specific advertising to visitors of our website. In doing so, IP address, device information, timestamps and the URL accessed, among other data, are transmitted to LinkedIn. Transmission takes place exclusively via the tag executed in your browser; no server-side transmission occurs.
Joint controllership: For parts of the processing, we and LinkedIn are joint controllers within the meaning of Article 26 GDPR.
The legal basis is your consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. You may withdraw it at any time via the cookie icon at the bottom left.
Independently of this, LinkedIn members may object to the use of their data for advertising purposes in their LinkedIn account settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy
16. Google Ads Conversion Tracking and Remarketing
We use Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to promote our offerings and measure the success of our advertising.
If you reach our website via a Google advertisement, a cookie is set. If you then perform a particular action, such as submitting a form, Google can attribute that action to the advertisement. Transmission takes place exclusively via the tag executed in your browser; no server-side transmission occurs.
The legal basis is your consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. You may withdraw it at any time via the cookie icon at the bottom left.
You can additionally deactivate personalised advertising in your Google ad settings: https://adssettings.google.com
17. Google Analytics
We use Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and comparable technologies to analyse your use of our website. The data recorded includes pages visited, time spent, approximate location, device type and referral source. The IP address is processed in truncated form, so that direct identification of an individual is excluded.
We use these evaluations to continuously improve our offering and our website.
The legal basis is your consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. You may withdraw it at any time via the cookie icon at the bottom left.
A data processing agreement pursuant to Article 28 GDPR is in place with Google. For transfers to the USA, see section 19.
Further information: https://policies.google.com/privacy
18. Embedded Videos
YouTube. We embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Embedding uses the extended data protection mode. In this mode, YouTube sets cookies only once you actively start a video. When a video starts, a connection to YouTube's servers is established and your IP address, among other data, is transmitted.
Vimeo. We embed videos from Vimeo, a service of Vimeo, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. When a video starts, a connection to Vimeo's servers is established and your IP address, among other data, is transmitted. For transfers to the USA, see section 19.
If you are simultaneously logged into your YouTube or Vimeo account when starting a video, the respective provider may associate your browsing behaviour with your profile. You can prevent this by logging out before visiting our website.
The legal basis is your consent pursuant to Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR.
19. Transfers to Third Countries
Some of the services we use process data in the USA or engage sub-processors based there. A transfer of personal data to the USA can therefore not be ruled out.
By its adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, the European Commission determined that an adequate level of data protection exists in the USA where the receiving company is certified under the Data Privacy Framework. Where a provider is not certified, we base the transfer on standard contractual clauses pursuant to Article 46 (2) (c) GDPR.
We point out that a level of protection comparable to that of the European Union cannot be guaranteed in every case in third countries, and that access by state authorities to the data in particular cannot be excluded.
20. Retention Periods
Unless a specific retention period is expressly stated in this policy, we process personal data only for as long as is necessary for the respective purpose.
The data is then deleted, provided no statutory retention obligations apply. Commercial retention periods are generally six years (Section 257 HGB) and tax retention periods generally ten years (Section 147 AO). In such cases processing is restricted and the data is held solely to fulfil the retention obligation.
21. No Automated Decision-Making
Automated decision-making in individual cases, including profiling within the meaning of Article 22 GDPR, does not take place.
22. Changes to This Privacy Policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services, for example when introducing new features. The version current at the time will apply to your next visit.
Last updated: August 2026
This is a translation provided for convenience. In the event of any discrepancy, the German version of this privacy policy shall prevail.