As of: July 2026
1. Controller
The controller for data processing on this website is:
Kirsten Langholz – Klangholz Consulting – Liboristraße 17 – 45327 Essen
Phone: +49 201 67 03 03 Email: kontakt@euaiact-academy.com
A data protection officer has not been appointed, as there is no legal obligation to do so.
2. Scope
This Privacy Policy applies to the website of the EU AI Act Academy. Separate data protection notices apply to the learning platform, which are provided to customers and learners within the framework of the contractual relationship or upon access to the platform.
We process personal data only to the extent necessary for the provision of this website and our content, or if you contact us. We do not use any third-party tracking or marketing services and do not integrate content from advertising networks or social networks. For reach measurement, we exclusively use self-hosted, anonymized web analytics (Section 5).
3. Hosting and Server Log Files
This website is hosted by the following provider in Germany:
Mittwald CM Service GmbH & Co. KG Königsberger Straße 4–6 32339 Espelkamp
When you access the website, the host automatically collects data in so-called server log files, which your browser transmits. These are:
- IP address of the requesting device
- Date and time of access
- Page or file accessed
- Amount of data transferred and access status
- Referrer URL (previously visited page)
- Browser type and version, as well as operating system
This data is not merged with other data sources and is not used to identify individual visitors. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technically flawless and secure provision of the website, in particular the detection and defense against attacks. The log files are automatically deleted after a short period, unless they are exceptionally required to clarify a security incident.
We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. Processing takes place exclusively on servers in Germany.
4. Cookies
This website exclusively uses technically necessary cookies. These are:
- a cookie that saves your decision in the cookie notice so that it does not reappear with every page view,
- a cookie to save your language selection (German/English),
- an opt-out cookie that saves your objection to web analytics, provided you use the opt-out according to Section 5,
- session cookies, if applicable, set by WordPress for the login area; this area is only available to us as the operator.
These cookies do not contain profiles, are not used for advertising or analysis purposes, and are not passed on to third parties. The legal basis is Section 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in the functional provision of the website. We do not use cookies requiring consent.
You can delete cookies in your browser at any time or generally prevent their acceptance. The website will then remain usable; only the language selection, the suppression of the cookie notice, and a declared objection to web analytics (Section 5) may have to be made again.
5. Web Analytics (Matomo)
We use the open-source web analytics software Matomo to record how many visitors access our website and which pages are viewed. Matomo runs exclusively on our own server in Germany (see Section 3); no data is transmitted to third parties.
Matomo is configured so that no cookies are set and no information is stored or read on your device. Your IP address is immediately shortened upon collection, so that no conclusion can be drawn about your person. Only aggregated statistics are created; individual visits are not logged, profiles of individual persons are not formed, and cross-site tracking does not take place. Your browser’s “Do Not Track” signal is respected.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the anonymized measurement of the use of our website to improve the offering as needed. Consent according to Section 25 TDDDG is not required, as no information is stored or read on your device.
Raw data is deleted after 180 days at the latest; only aggregated statistics are retained.
You can object to the collection at any time with effect for the future:
If you object, your browser stores an opt-out cookie that records your decision. If you delete your cookies, you must declare your objection again.
6. Contacting Us
If you contact us by email (e.g., for general inquiries, an initial consultation, or a webinar request), by phone, or by mail, we process the data you provide (e.g., name, email address, company, content of the inquiry) to process your request.
The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is aimed at the conclusion or execution of a contract; otherwise, Art. 6 para. 1 lit. f GDPR (legitimate interest in answering inquiries).
We delete this data as soon as it is no longer required for processing and no legal retention obligations prevent deletion. Business correspondence is subject to commercial and tax law retention periods (Section 257 HGB, Section 147 AO) and is deleted after their expiry.
7. Encryption
This website uses TLS encryption (recognizable by the lock symbol in your browser’s address bar and the address component “https://”). Data you transmit to us cannot therefore be read by third parties.
8. Recipients and Third-Country Transfer
We only pass on personal data to the extent necessary for the provision of the website (host as processor, see Section 3) or if we are legally obliged to do so. No transfer to countries outside the European Union or the European Economic Area takes place.
9. Your Rights
You have the following rights regarding your personal data:
- Information about the processed data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7 para. 3 GDPR)
To exercise these rights, a simple notification to the contact details mentioned in Section 1 is sufficient.
Right to object (Art. 21 GDPR): Insofar as we process your data on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims. You can most easily object to data collection by web analytics via the opt-out in Section 5.
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Kavalleriestraße 2–4 40213 Düsseldorf www.ldi.nrw.de
10. No Automated Decision-Making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website.
11. Changes to this Privacy Policy
We will adapt this Privacy Policy if the legal situation or data processing on this website changes. The version published here at the time of your visit applies.