1. Data protection at a glance
General information
The following notices provide an overview of how personal data is processed when you visit this website. Personal data is any data by which you can be personally identified.
Data collection on this website
Who is responsible for data collection? Data processing is carried out by the website operator. You can find the contact details in the section "Information about the data controller".
How do we collect your data? Data is collected when you provide it to us (e.g. via contact forms or the AI Advisor). Other data is collected automatically or with your consent, in particular technical data such as internet browser, operating system or time of the page request.
What do we use your data for? Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse user behaviour (only with your consent).
What rights do you have? You have the right to receive free information at any time about the origin, recipient and purpose of your stored personal data. You may also request the correction or deletion of this data. You can withdraw consent you have given at any time. Under certain circumstances, you may request the restriction of processing. You also have the right to lodge a complaint with the competent supervisory authority.
2. Hosting
External hosting (Vercel)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (with the subsidiary Vercel GmbH for EU data processing). When you visit the website, technical data is transmitted to Vercel's servers — in particular IP addresses, browser information, referrer URL and timestamps. Vercel stores this data in the Frankfurt region (eu-central-1).
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a secure, fast and efficient provision of the website). A data processing agreement under Art. 28 GDPR is in place with Vercel. Details: vercel.com/legal/privacy-policy.
3. General notices and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. Personal data is treated confidentially and in accordance with statutory data protection regulations and this privacy policy. Please note that data transmission over the internet can have security vulnerabilities. Complete protection against third-party access is not possible.
Information about the data controller
The data controller for data processing on this website is:
AIGHT RE UG (haftungsbeschränkt)
c/o Eight Estates GmbH
Jungfernstieg 1
20095 Hamburg, Germany
Represented by: Carl Friedrich von Stechow
Email: nm@aightre.de
Storage period
Personal data remains with us until the purpose of the data processing ceases to apply, unless otherwise specified. In the case of justified deletion requests or withdrawal of consent, data is deleted, provided there are no other legally permissible reasons for storage.
Legal bases for data processing
- Consent: Art. 6 (1) lit. a GDPR (for special categories of data, Art. 9 (2) lit. a GDPR)
- Data transfer to third countries: additionally Art. 49 (1) lit. a GDPR
- Cookie consent and device access: additionally § 25 (1) TDDDG (German Telecommunications and Telemedia Data Protection Act)
- Contract / pre-contractual measures: Art. 6 (1) lit. b GDPR
- Legitimate interests: Art. 6 (1) lit. f GDPR
Withdrawal of your consent
You can withdraw consent you have already given at any time. The lawfulness of the processing carried out until the withdrawal remains unaffected. You can adjust cookie consents via at any time.
Right to object (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6 (1) lit. e or f GDPR, you have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data. If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Right to lodge a complaint with the supervisory authority
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG, 20459 Hamburg
Phone: +49 40 428 54-4040
Email: mailbox@datenschutz.hamburg.de
Right to data portability, access, rectification and erasure
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you in a common, machine-readable format. You also have the right to free information about your stored personal data, its origin, recipients and purpose, as well as the right to correction or deletion. To exercise these rights, please contact nm@aightre.de.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock symbol.
4. Data collection on this website
Cookies and similar technologies
Our website uses cookies. Cookies are small text files that are stored on your end device. They are either session cookies (deleted after the session ends) or permanent cookies (stored until manually deleted).
Necessary cookies (e.g. for storing your cookie consent itself) are stored on the basis of Art. 6 (1) lit. f GDPR (legitimate interest in technically error-free provision).
Statistics and functional cookies (Google Analytics, Pipedrive) are only set with your express consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. You can change or withdraw your selection at any time via .
Server log files
The provider of the site (Vercel) automatically collects and stores information in server log files: browser type and version, operating system used, referrer URL, host name, time of the request and IP address. This data is not combined with other data sources. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in the technically error-free presentation and security of the website).
Contact form
For enquiries via our contact form at /en/contact or the speaker enquiry form at /en/speaker/nilas-moellenkamp, the information you submit (name, email, optionally phone, company, message) is processed to handle your enquiry. Submissions are forwarded server-side via the workflow automation service n8n (n8n GmbH, Petersburger Str. 44, 10249 Berlin, Germany). The n8n workflow system automatically creates a contact and enquiry record in our CRM system Pipedrive based on your details and sends you a confirmation email.
The legal basis is Art. 6 (1) lit. b GDPR if the enquiry is related to the performance of a contract or pre-contractual measures. In all other cases, processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in effective processing). A data processing agreement under Art. 28 GDPR is in place with n8n GmbH. More information: n8n.io/legal/privacy.
Enquiry by email or telephone
If you contact us by email or telephone, your enquiry, including all resulting personal data, will be stored for the purpose of processing it. Data will not be passed on without your consent.
AI Advisor — Maturity assessment
On the /en/advisor page we offer an interactive self-assessment. The answers you voluntarily provide about your company profile, tool inventory and process maturity are processed to generate a report. Processing is carried out via the Anthropic API (Anthropic PBC, USA) and OpenAI API (OpenAI Ireland Ltd., Ireland) for AI-assisted analysis. Both providers process the content solely to respond to the request and not for training. Your answers are stored in our database (Supabase, EU region Frankfurt) for the duration of the session.
The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures) or Art. 6 (1) lit. a GDPR (consent). Data processing agreements under Art. 28 GDPR are in place with all processors.
5. Analytics tools and third-party providers
Google Analytics 4
With your express consent, this website uses features of the web analytics service Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics sets cookies that enable an analysis of your use of the website. We only use Google Analytics with IP anonymisation enabled (anonymize_ip: true); the IP address is generally truncated within the EU/EEA before being transferred to a Google server in the USA.
We have entered into a data processing agreement with Google in accordance with Art. 28 GDPR. For data transfers to the USA, Google relies on the EU Standard Contractual Clauses. The legal basis for processing is your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. You can withdraw your consent at any time via .
More information: policies.google.com/privacy.
Pipedrive (CRM and web forms)
We use Pipedrive (Pipedrive OÜ, Mustamäe tee 3a, Tallinn 10615, Estonia) as a CRM system for managing customer relationships and — with your consent — as embedded web forms on our contact and enquiry pages. When using Pipedrive web forms, your entries are transmitted directly to Pipedrive and stored there. Pipedrive is GDPR-compliant and hosts within the EU.
A data processing agreement under Art. 28 GDPR is in place with Pipedrive. The legal basis for embedding the web forms is your consent (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG). Without consent, we use alternative form variants without third-party cookies. More information: pipedrive.com/en/privacy.
n8n (workflow automation / contact processing)
Incoming contact form submissions are forwarded server-side to the workflow automation platform n8n GmbH (Petersburger Str. 44, 10249 Berlin, Germany). n8n processes the data exclusively to execute the defined workflows (CRM entry creation, email confirmation) and does not permanently store form contents on its own servers. No third-party cookies are set by n8n. The legal basis is Art. 6 (1) lit. b GDPR. A data processing agreement under Art. 28 GDPR is in place with n8n GmbH.
Google Fonts (local hosting)
For consistent display of typefaces, this site uses so-called Google Fonts. These are provided locally through the Next.js framework. No connection to Google servers is established when the page is loaded.
On our website, we link to profiles and content on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). When you click on these links, you will be redirected to the LinkedIn platform. In doing so, personal data may be transferred to LinkedIn. LinkedIn's privacy policy: linkedin.com/legal/privacy-policy.
External images (speaker profile)
On the speaker page /en/speaker/nilas-moellenkamp, images from the domain aightre.de may be embedded. When loaded, your IP address is transmitted to the server of aightre.de. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in an appealing presentation).