Privacy policy
This is a translation for your convenience. The German version is authoritative.
1. Scope
This privacy policy applies to this website. Personal data that law firms process in the AS Legal application is governed by the contract and the data processing agreement.
2. Controller
3. Hosting
This website is hosted on Microsoft Azure. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. When you visit the website, Microsoft processes your IP address, the date and time, the page requested, the referrer URL, and your browser and operating system in order to deliver the website and protect it against attacks. We do not store this data ourselves.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely. We have concluded a data processing agreement with Microsoft under Art. 28 GDPR. Transfers to the USA are covered by the certification of Microsoft Corporation under the EU-U.S. Data Privacy Framework and by the European Commission’s standard contractual clauses.
4. Consent and analytics
On your first visit, a banner asks whether you consent to analytics with PostHog. We store your decision in your browser’s local storage; this is necessary to respect it (Section 25(2) no. 2 TDDDG, Art. 6(1)(c) GDPR). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.
With your consent, we use PostHog to understand how the website is used. The provider is PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. The data is stored on servers in Frankfurt am Main, Germany. PostHog processes pages visited, clicks, the referrer URL, device type, screen size, browser and operating system, and keeps a random identifier in your browser’s local storage for this purpose. Your IP address is not stored.
The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). If you withdraw it, we stop the analytics and delete the identifier from your browser. The data is deleted after 12 months. We have concluded a data processing agreement with PostHog under Art. 28 GDPR. Transfers to the USA are covered by the certification of PostHog Inc. under the EU-U.S. Data Privacy Framework and by the European Commission’s standard contractual clauses.
5. Demo requests
When you request a demo through the form on the demo page, we process your name, email address, law firm and message in order to handle the request and arrange an appointment. The request is sent to us as an email via Microsoft Azure (section 3). To prevent misuse, your IP address is held in memory for one hour.
The legal basis is Art. 6(1)(b) GDPR where your request prepares a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in handling your request. We delete the data once the request has been dealt with, unless statutory retention periods apply.
6. Contact by email
When you email us, we process your details in order to deal with your request. Our mailboxes are operated by Microsoft (Microsoft 365) as our processor. The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your request has been dealt with, unless statutory retention periods apply.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, contact kontakt@activesearch.ai.
Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen (State Commissioner for Data Protection and Freedom of Information, Bremen)Arndtstraße 127570 Bremerhaven, Germany