General Information
The following information provides a simple overview of what happens to your personal data when you visit this website.
Personal data means any data that can be used to personally identify you.
Detailed information on data protection can be found in our Privacy Policy listed below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator.
You can find the operator’s contact details in the website’s legal notice (Impressum).
How do we collect your data?
Your data is collected in part by you providing it to us – for example, data you enter into a contact form.
Other data is collected automatically or after your consent when visiting the website through our IT systems.
This mainly includes technical data (e.g. browser type, operating system or time of page access).
This data is collected automatically as soon as you visit this website.
What do we use your data for?
Part of the data is collected to ensure the website is provided without errors.
Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to request information, free of charge, about the origin, recipients and purpose of your stored personal data.
You also have the right to request the rectification or deletion of this data.
If you have given consent to data processing, you may withdraw this consent at any time with effect for the future.
Furthermore, you have the right, under certain circumstances, to request the restriction of processing of your personal data.
You also have the right to lodge a complaint with the competent supervisory authority.
For this purpose, as well as for any other questions relating to data protection, you may contact us at any time using the address provided in the legal notice.
Analytics Tools and Third‑Party Tools
When visiting this website, your surfing behaviour may be analysed.
This is done primarily with cookies and so‑called analytics programmes.
Detailed information about these analytics tools can be found in the Privacy Policy below.
2. Hosting
We host our website with the following provider:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (“IONOS”).
When you visit our website, IONOS collects various log files, including your IP address.
For details, please refer to the IONOS Privacy Policy: https://www.ionos.de/terms-gtc/terms-privacy
The use of IONOS is based on Art. 6(1)(f) GDPR.
We have a legitimate interest in ensuring the most reliable presentation of our website possible.
Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) as defined by the TTDSG.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with legal data‑protection regulations as well as this Privacy Policy.
When you use this website, various types of personal data are collected.
Personal data means any information that can be used to personally identify you.
This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this occurs.
Please note that data transmission over the internet (e.g. communication by email) may have security gaps.
A complete protection of the data from access by third parties is not possible.
Information on the Controller
The controller responsible for data processing on this website is:
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage Period
Unless a more specific storage period is stated within this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies.
If you request the deletion of your data or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it (e.g. statutory tax or commercial retention obligations).
In such cases, deletion will take place after these reasons cease to apply.
General Information on the Legal Basis for Data Processing on This Website
If you have given consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data (Art. 9(1) GDPR) are processed.
In the case of explicit consent to the transfer of personal data to third countries, processing additionally takes place on the basis of Art. 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), processing also takes place on the basis of § 25(1) TTDSG.
Consent may be withdrawn at any time.
If your data is required for the performance of a contract or for pre‑contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR.
Where processing is required for compliance with a legal obligation, it takes place on the basis of Art. 6(1)(c) GDPR.
Data may also be processed on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR.
The respective legal basis applicable in each individual case is explained in the sections below.
Notice Regarding Data Transfers to Non‑Secure Third Countries and Transfers to US Companies Not Certified Under the Data Privacy Framework
We use tools from companies located in countries that are not considered data‑secure under EU data‑protection law, as well as tools from US providers that are not certified under the EU‑US Data Privacy Framework (DPF).
When these tools are active, your personal data may be transferred to and processed in these countries.
Please note that in non‑secure third countries, an adequate level of data protection comparable to that of the EU cannot be guaranteed.
The United States is considered a secure third country if the recipient is certified under the EU‑US Data Privacy Framework.
A data transfer to the USA is therefore permissible if the provider holds such certification or if suitable additional safeguards are in place.
Information about transfers to third countries, including the respective recipients, can be found in this Privacy Policy.
Recipients of Personal Data
In the course of our business activities, we work with various external parties.
This may require the transfer of personal data to these external parties.
We only transfer personal data to external parties when necessary for contract performance, when we are legally obliged to (e.g. transfer of data to tax authorities), when we have a legitimate interest under Art. 6(1)(f) GDPR, or when another legal basis permits the transfer.
When using processors, we only transfer personal data based on a valid data‑processing agreement.
In cases of joint processing, a joint‑controller agreement is concluded.
Withdrawal of Your Consent to Data Processing
Many data‑processing operations are only possible with your explicit consent.
You may withdraw your consent at any time. An informal email notification to us is sufficient.
The lawfulness of data processing carried out before the withdrawal remains unaffected.
Right to Object to Processing in Special Cases as well as to Direct Marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions.
The relevant legal basis for processing can be found in this Privacy Policy.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).
If your personal data is processed for direct‑marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling insofar as it is related to direct marketing.
If you object, your personal data will no longer be used for direct‑marketing purposes (objection under Art. 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement.
The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive the data that we process automatically on the basis of your consent or in fulfilment of a contract in a structured, commonly used and machine‑readable format.
You also have the right to request the direct transfer of this data to another controller, where technically feasible.
SSL and TLS Encryption
For security reasons and to protect the transmission of confidential content (such as orders or enquiries sent to us as the website operator), this site uses SSL or TLS encryption.
You can recognise an encrypted connection by the browser address bar switching from “http://” to “https://” and by the padlock symbol displayed in your browser.
When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Right of Access, Erasure and Rectification
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing. You may also have the right to request rectification or erasure of this data.
For this purpose, and for any other questions regarding personal data, you may contact us at any time via the address provided in the legal notice.
Right to Restriction of Processing
You have the right to request the restriction of processing of your personal data.
You may contact us at any time via the address provided in the legal notice.
The right to restriction of processing applies in the following cases:
• If you contest the accuracy of your personal data stored by us, we usually require time to verify this. For the duration of the verification period, you have the right to request the restriction of processing of your personal data.
• If the processing of your personal data was or is unlawful, you may request the restriction of processing instead of deletion.
• If we no longer require your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of deletion.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of interests must take place. Until it is determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
Objection to Unsolicited Marketing Emails
We hereby object to the use of contact details published as part of the legal notice obligations for the purpose of sending unsolicited advertising or informational material.
The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.
4. Data Collection on This Website
Cookies
Our website uses “cookies”. Cookies are small data files and do not cause any damage to your device.
They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device.
Session cookies are deleted automatically after your visit. Persistent cookies remain stored on your device until you delete them or until your browser performs an automatic deletion.
Cookies may be placed by us (first‑party cookies) or by third‑party companies (third‑party cookies).
Third‑party cookies enable certain services from external companies to be integrated into the website (e.g. cookies for processing payment services).
Cookies serve various purposes. Many cookies are technically essential because certain website functions would not work without them (e.g. shopping cart functionality or video display).
Other cookies may be used to analyse user behaviour or for advertising purposes.
Cookies necessary for carrying out electronic communication processes, providing certain functions requested by you (e.g. shopping cart), or optimising the website (e.g. audience measurement cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified.
The website operator has a legitimate interest in storing necessary cookies to ensure the technically error‑free and optimised provision of its services.
Where consent has been requested for the storage of cookies or similar recognition technologies, processing is based exclusively on this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG).
Consent may be withdrawn at any time.
You can configure your browser to inform you when cookies are set, to allow cookies only in specific cases, to exclude the acceptance of cookies in certain situations or in general, and to activate the automatic deletion of cookies when closing the browser.
If cookies are disabled, the functionality of this website may be limited.
Information about the cookies and services used on this website can be found in this Privacy Policy.
5. Social Media
Social Media Elements
This website uses elements from social media platforms (e.g. XING, LinkedIn, YouTube).
You can usually recognise these social media elements by the respective platform logos.
A direct connection to the provider’s server is only established when you activate the social media element by clicking the corresponding button (consent).
As soon as you activate a social media element, the respective provider receives the information that you have visited this website with your IP address.
If you are simultaneously logged into your social media account (e.g. Facebook), the provider may associate your visit to this website with your user account.
6. Newsletter
Newsletter Data
For the distribution of e‑books and newsletters, we use the WordPress plugin “Newsletter”.
If you wish to subscribe to the newsletter or receive e‑books offered on the website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.
In addition, we collect your first and last name.
We use this data exclusively for sending the requested information and do not pass it on to third parties.
Processing of the data entered into the newsletter sign‑up form is based solely on your consent (Art. 6(1)(a) GDPR).
You may withdraw your consent at any time, for example via the “Unsubscribe” link in the newsletter.
The lawfulness of data processing already carried out remains unaffected by the withdrawal.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe and will be deleted from the mailing list after you cancel the subscription.
Data stored for other purposes remains unaffected.
7. Plugins and Tools
YouTube with Enhanced Privacy Mode
This website embeds videos from YouTube. The operator of the service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page that includes a YouTube video, a connection to YouTube servers is established.
The YouTube server is informed which of our pages you visited.
If you are logged into your YouTube account, YouTube can link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in enhanced privacy mode.
Videos played in enhanced privacy mode are, according to YouTube, not used to personalise browsing on YouTube.
Ads displayed in enhanced privacy mode are also non‑personalised.
No cookies are set in enhanced privacy mode. However, local storage elements may be saved in the user’s browser, which may contain personal data and be used for recognition purposes.
Details on enhanced privacy mode can be found here:
https://support.google.com/youtube/answer/171780
Additional data‑processing operations may be triggered after activating a YouTube video, over which we have no control.
The use of YouTube is in the interest of an appealing presentation of our online services. This constitutes a legitimate interest under Art. 6(1)(f) GDPR.
Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG (where consent includes storage of cookies or access to device information).
Consent may be withdrawn at any time.
Further information on YouTube’s data protection can be found here:
https://policies.google.com/privacy
The company is certified under the EU‑US Data Privacy Framework (DPF).
Information about the certification can be found at:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Fonts (Local Hosting)
This website uses Google Fonts for consistent font display.
Google Fonts are installed locally, and no connection to Google servers is made.
Further information:
https://developers.google.com/fonts/faq
and Google Privacy Policy:
https://policies.google.com/privacy
Google reCAPTCHA
We use “Google reCAPTCHA” (hereafter “reCAPTCHA”) in connection with forms provided via WPForms.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. into a contact form) is provided by a human or by an automated system.
reCAPTCHA analyses website visitor behaviour based on various characteristics.
This analysis begins automatically as soon as the visitor enters the website.
The analysis evaluates various data (e.g. IP address, time spent on the website, mouse movements).
The data collected during the analysis is transmitted to Google.
Visitors are not informed that an analysis is taking place.
Storage and analysis of data are based on Art. 6(1)(f) GDPR.
The website operator has a legitimate interest in protecting the website from misuse, automated spying and spam.
Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG (consent may be withdrawn at any time).
Further information:
Google Privacy Policy: https://policies.google.com/privacy
Google Terms: https://policies.google.com/terms
The provider is certified under the EU‑US DPF:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc.
Google Analytics uses cookies which enable analysis of website usage.
Information generated via cookies is usually transferred to a Google server in the USA and stored there.
IP anonymisation is activated on this website.
Your IP address is shortened by Google within EU Member States or other EEA states before transmission.
Only in exceptional cases is the full IP address sent to Google servers in the USA and shortened there.
Google processes data on behalf of the website operator to evaluate usage, compile reports, and provide services related to web and internet usage.
The IP address transmitted by your browser is not merged with other Google data.
Processing is based on the website operator’s legitimate interest.
You can disable cookies via your browser settings, but this may affect website functionality.
You may also prevent data collection by installing the browser plugin available here:
“Browser Add-On for disabling Google Analytics”.
Alternatively, you can prevent tracking by clicking the opt‑out link on your website, setting an opt‑out cookie.
Google Remarketing
This website uses Google’s remarketing function to display interest‑based advertising.
A cookie stored in the user’s browser enables recognition when visiting sites within the Google advertising network.
Ads may be shown based on previously visited websites that use remarketing.
Google states that no personal data is collected.
If you do not wish to use Google Remarketing, you can disable it at:
http://www.google.com/settings/ads
or via the Network Advertising Initiative:
http://www.networkadvertising.org/managing/opt_out.asp
Wordfence
We use Wordfence on this website.
Provider: Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.
Wordfence protects the website from unauthorised access and cyberattacks.
For this purpose, the website establishes a permanent connection to Wordfence servers to compare access data and block threats.
Use of Wordfence is based on Art. 6(1)(f) GDPR (legitimate interest in protecting the website).
Where consent is required, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG.
Data transfers to the USA rely on EU Standard Contractual Clauses:
https://www.wordfence.com/help/general-data-protection-regulation/
ElevenLabs Voice Agent
Our website uses the ElevenLabs Voice Agent to enable automated voice interaction.
The provider is Eleven Labs Inc., 228 Park Ave S, PMB 73564, New York, NY 10003, USA.
The Voice Agent processes the speech or text inputs you provide in order to respond to your requests automatically.
During use, the following data may be processed:
- audio inputs (voice)
- conversation transcripts
- technical metadata (e.g. IP address, timestamps)
Processing is carried out based on your consent (Art. 6(1)(a) GDPR).
Please do not submit any sensitive personal data (e.g. health data or special categories of personal data) through the Voice Agent.
ElevenLabs may process or store data to operate or improve the service.
Further information can be found in the ElevenLabs Privacy Policy:
https://elevenlabs.io/privacy
If data is transferred to the USA, this transfer is based on Standard Contractual Clauses (SCCs) implemented by ElevenLabs.
You may withdraw your consent to the use of the Voice Agent at any time.
Calendly
For appointment scheduling, we use Calendly.
Data such as your name and email address are transmitted to Calendly.
Use of Calendly is based on your consent.
Zoom
We use Zoom to conduct online meetings.
Polylang
We use Polylang to provide our website in multiple languages.
8. Online Marketing and Affiliate Programmes
Affiliate Links / Advertising Links
Links marked with an asterisk (*) are affiliate links.
If you click on one of these affiliate links and make a purchase, we may receive a commission from the respective online shop or provider.
There are no additional costs for you.
Affiliate Programmes on This Website
We participate in affiliate partner programmes.
In affiliate partner programmes, advertisements from a company (advertiser) are placed on websites of other companies within the affiliate network (publishers).
If you click on one of these affiliate advertisements, you will be redirected to the promoted offer.
If you subsequently carry out a specific transaction (conversion), the publisher receives a commission.
To calculate this commission, the affiliate network operator must be able to determine through which advertisement you reached the respective offer and completed the predefined transaction.
For this purpose, cookies or similar recognition technologies (e.g. device fingerprinting) are used.
Storage and analysis of this data is based on Art. 6(1)(f) GDPR.
The website operator has a legitimate interest in the correct calculation of its affiliate commissions.
Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG (where consent includes the storage of cookies or access to device information).
Consent may be withdrawn at any time.
We only participate in affiliate programmes of listed AI tools.
This list is password‑protected and accessible only to clients who have been fully informed in advance about the affiliate programmes.
9. Use of AI‑Powered Applications
1. General Information on the Use of AI
In the course of our business activities, we use various AI‑powered applications to support our processes.
We place the highest importance on data protection, transparency and the responsible use of Artificial Intelligence (AI).
2. AI Systems Used and Their Purpose
We use the following AI tools:
| AI System / Tool | Purpose of Use | Data Processing | Data Storage |
|---|---|---|---|
| ChatGPT & Custom GPTs until 12/2025, Langdock (Chat-GPT, Claude and Gemini Models) from 12/2025 | Research, text processing, translations | Processing of text inputs | No storage by us; processing via OpenAI, Langdock |
| Perplexity | Research | Storage of search queries by third‑party provider | Storage by Perplexity possible |
| Midjourney | AI image generation for marketing purposes | Processing of image inputs | Storage by Midjourney possible |
| Canva (AI tools) | Image editing | Processing of images | Storage by Canva possible |
| Fal.ai (Flux & Kling models), Higgsfield (Nano Banana, Veo 3.1, etc. models) | AI image and Video generation | Processing of image and video data | Storage by Fal.ai and Higgsfield possible |
| Heygen | AI avatar video creation | Processing of video data | Storage by Heygen possible |
| Elevenlabs | Website Voice Agent for support | Processing of user inputs (no sensitive data) | Storage by Elevenlabs |
| Zoom AI Companion & Recording | Meeting summaries, transcriptions, local recordings | Processing of audio, video and text data | Recordings stored locally only; Zoom may automatically process data to generate summaries |
3. Storage and Deletion of Data
- AI‑generated content is stored only for the period necessary for its intended purpose and is deleted accordingly.
- Zoom recordings are stored exclusively locally and deleted after 12 months.
- No sensitive or personal data is processed without explicit consent.
4. Safeguards & Compliance
We implement the following measures to comply with the EU AI Act and the GDPR:
- Transparency: Users are informed about the use of AI technologies.
- Data protection: No sensitive or personal data is processed without prior consent.
- Deletion periods: Data is deleted in accordance with legal requirements.
- Security: Local data (especially recordings) is protected through access restrictions.
5. Contact & Data Subject Rights
Data subjects may request information about stored data at any time or request its deletion.
Contact for data protection enquiries:
kontakt@innovativekiloesungen.de
Changes to Our Privacy Policy
We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes in our services, for example when introducing new features or offerings.
The updated Privacy Policy will apply to your next visit.
All texts are protected by copyright.
Questions for the Data Protection Officer
If you have any questions regarding data protection, please contact us via email.