Privacy Policy / Datenschutzerklärung

Who is responsible?

The controller for personal data processed through this website and our business enquiries is Rumen AI UG (haftungsbeschränkt), Mühlenstrasse 17, 58313 Herdecke, Germany, represented by Managing Director Dr. José A. Laporte Uribe.

For privacy questions or requests, email support@rumenai.com or write to the postal address above.

Website hosting and delivery

Our website is hosted by Squarespace. When you visit, technical information is processed to deliver the website, its images and videos, maintain security and diagnose errors. This can include your IP address, browser and device information, requested pages, referring pages and the time of access.

We use Squarespace hosting and content-delivery services for the legitimate interests of providing a functional, secure website under Article 6(1)(f) GDPR. Squarespace and its service providers receive technical data as part of delivering these services. See the Squarespace Privacy Policy for information about its entities, processing and international operations.

Cookies and your choices

We use essential cookies and similar technologies needed for website functions, security and remembering your privacy preferences. Access to or storage of information on your device that is strictly necessary is based on § 25(2) TDDDG. Related personal-data processing is based on our legitimate interests under Article 6(1)(f) GDPR, unless another legal basis applies.

Non-essential cookies are configured as restricted. Where consent is required, their use is based on § 25(1) TDDDG and Article 6(1)(a) GDPR. The cookie banner lets you accept, decline or manage non-essential cookies. You can change your choices through the website’s cookie preferences control. Withdrawing consent does not affect processing that was lawful before withdrawal.

You can also delete cookies through your browser. Doing so may remove saved preferences. For details about Squarespace cookies and their purposes, see its Cookie Policy.

Squarespace analytics and activity log

Squarespace Analytics and its Activity Log are enabled. These features help us understand website traffic and improve content. Depending on your consent, browser and the platform’s privacy controls, information may include visited pages, referring sources, timestamps, browser and device details, approximate location and IP-related information.

Analytics that rely on non-essential cookies or similar device access require your consent as described above. Restricted cookies do not necessarily prevent all server-side traffic statistics. Where limited technical usage data are processed without non-essential device access, we rely on our legitimate interest in understanding and maintaining the website under Article 6(1)(f) GDPR. We do not use website analytics to make decisions producing legal or similarly significant effects about you.

Video delivery

The homepage includes a video delivered through Squarespace. Playing or loading it requires technical data, such as your IP address and requested video files, to be sent to the delivery services. Where the browser needs an additional playback library, our page loads HLS.js through the jsDelivr content-delivery network. That request also discloses technical connection information to the CDN.

We use these services to provide compatible video playback, based on Article 6(1)(f) GDPR. For the CDN provider’s information, see the jsDelivr Privacy Policy.

Email enquiries

When you email us, we use your contact details, message and any attachments to respond and manage your enquiry. We use Google Gmail for email correspondence; see the Google Privacy Policy.

Processing is based on Article 6(1)(b) GDPR for contractual enquiries, Article 6(1)(f) GDPR for our legitimate interest in handling other correspondence, and Article 6(1)(c) GDPR where statutory retention obligations apply. Retention and international processing are explained below.

Procurement and external websites

Our procurement page links to documents, external procurement services and BHO Legal’s procurement email address. If you contact those organisations directly or use their services, consult their privacy information and the procurement documentation for details of their processing.

Following an ordinary external link takes you to a service operated by another organisation. That organisation’s privacy terms apply to its website.

Recipients and international processing

Data may be received by people handling enquiries for RumenAI and by the hosting, email and technical service providers described above. Data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

These services operate internationally, and data may be processed outside the European Economic Area, including in the United States. The applicable transfer arrangements depend on the provider, service and recipient. The linked provider privacy notices describe their safeguards, such as adequacy decisions where applicable and standard contractual clauses. Contact us for information about arrangements relevant to your enquiry.

How long we keep information

We retain enquiry information for as long as needed to handle the matter and any resulting business relationship. Relevant records may be retained longer where statutory obligations or the establishment, exercise or defence of legal claims require it. Information that is no longer needed is deleted, subject to applicable retention requirements.

Technical logs, analytics data, cookies and provider backups have service-specific retention periods. These depend on the provider’s settings and policies; cookie information is available through Squarespace’s Cookie Policy linked above. Contact us for information about the retention of a particular record.

Your rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may withdraw consent at any time where processing is based on consent.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may object at any time to processing for direct marketing.

Contact support@rumenai.com to exercise your rights. We may need proportionate information to verify your identity before responding.

You may also complain to a data-protection supervisory authority, including the authority in your place of residence or work. In North Rhine-Westphalia, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

Changes to this policy

We will update this policy when relevant services, data practices or requirements change. The date at the top identifies the latest revision.