inpeekinpeek
DE

Legal

Privacy Policy

Information about how inpeek AG processes personal data.

Part I: General Data Protection Information

This part applies to all visitors of this website (inpeek.ai).

1. Data Controller

The controller responsible for data processing on this website is:

inpeek AG
Bogenschützenstrasse 9
3008 Bern
Switzerland

Phone: +41 31 511 31 11
Email: info@inpeek.ch

Data Protection Officer:
inpeek AG
Dr. Andreas Ritter
Bogenschützenstrasse 9
3008 Bern
Phone: +41 31 511 31 11
Email: andreas.ritter@inpeek.ch

2. Collection of General Information When Visiting Our Website

When you access our website, information of a general nature is automatically collected. This information (server log files) includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (previously visited page)
  • Hostname of the accessing computer
  • IP address
  • Date and time of the server request

This data cannot be attributed to specific individuals. This data is not merged with other data sources. It is collected for the technical provision of the website, to ensure system security, and to optimise our online offering.

The hosting and delivery of this website are provided by Cloudflare (Cloudflare, Inc., USA), which acts as a processor on our behalf and processes the connection data mentioned above.

Legal basis for visitors from the EU:
Processing is carried out on the one hand to provide our website pursuant to Art. 6(1)(b) GDPR and on the other hand is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the technical provision of the website, system security and stability, and the prevention of threats.

Legal basis for visitors from Switzerland:
Processing is carried out on the one hand to provide our website pursuant to Art. 31(2)(b) FADP and on the other hand to fulfil our overriding interest in the technical provision of the website and system security (Art. 31(1) FADP).

Retention period:
IP addresses are deleted or anonymised after 7 days at the latest. As the collection of this data is strictly necessary for the operation of the website, there is no right to object.

3. Contact Form and Email Contact

When you contact us via the contact form or by email, the data you provide (name, email address and the content of your enquiry) is stored by us in order to process your enquiry. Providing this data is voluntary; without it we cannot respond to your enquiry.

The technical transmission of messages submitted via the contact form is handled by the service Resend (Resend, Inc., USA), which acts as a processor on our behalf in this respect.

Legal basis for visitors from the EU:
Processing is based on our legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR. Insofar as your enquiry is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

Legal basis for visitors from Switzerland:
Processing is carried out to fulfil our legitimate interests in handling your enquiry (Art. 31(1) FADP). Insofar as your enquiry is aimed at concluding a contract, processing is carried out for the performance of that contract (Art. 31(2)(b) FADP).

Retention period:
The data is deleted as soon as it is no longer required for the purposes of the communication or you ask us to delete it, unless statutory retention obligations prevent deletion.

4. No Tracking Services, No Analytics Cookies

This website does not use any analytics or tracking services (such as Google Analytics) and does not use cookies that are not technically necessary. No web tracking or profiling takes place. External content (e.g. videos or social media elements) is not embedded either. The fonts used are served locally from our server; no data is transmitted to third parties for this purpose.

5. Recipients and Disclosure of Data

In order to provide our services and operate this website, it may be necessary to disclose personal data to third parties. This concerns in particular:

  • IT service providers and hosting providers: for the technical operation of the website (Cloudflare) and the technical transmission of contact enquiries (Resend)
  • Authorities and public bodies: where there is a legal obligation to disclose

For visitors from the EU:
Where external service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. These processors are carefully selected and contractually obliged to comply with the requirements of the GDPR. Processing takes place exclusively within the EU or the EEA, in third countries for which an adequacy decision of the EU Commission exists (e.g. the USA under the EU-U.S. Data Privacy Framework), or subject to appropriate safeguards within the meaning of Art. 44 et seq. GDPR (e.g. EU Standard Contractual Clauses).

For visitors from Switzerland:
Where we engage processors, we ensure that they comply with the requirements of Swiss data protection law. When disclosing personal data to recipients abroad, we ensure that the recipient is located in a country with an adequate level of data protection (e.g. EU/EEA states, countries with an adequacy decision of the Swiss Federal Council), that appropriate safeguards are in place (e.g. EU Standard Contractual Clauses, Binding Corporate Rules), or that an exception under Art. 16 FADP applies.

6. Changes to this Privacy Policy

We reserve the right to amend this privacy policy where necessary so that it always complies with current legal requirements or in order to reflect changes to our services. The new privacy policy will then apply to your next visit.

Part II: Special Data Protection Information for Visitors from the European Union

This part applies in addition to Part I exclusively to visitors from the EU/EEA.

1. Representative in the European Union pursuant to Art. 27 GDPR

As we, as the controller, are established outside the European Union and process personal data of individuals in the European Union, we have appointed a representative in the EU pursuant to Art. 27 GDPR:

inpeek GmbH
Florian Schwager
Ida-Rhodes-Straße 1
64295 Darmstadt

Phone: +49 6151 3609662
Email: florian.schwager@inpeek.de

Significance of the representative:
The representative under Art. 27 GDPR is, in addition to our controller, a point of contact for all data protection matters relating to the GDPR. You may also contact our EU representative directly on any GDPR-related matter. The representative may be contacted by supervisory authorities and data subjects on all questions relating to processing.

2. Your Rights under the GDPR

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

2.1 Right of access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether and which personal data we process about you, for what purpose, how long it is stored, where it comes from and to whom it is disclosed. You also have the right to receive a copy of your data.

2.2 Right to rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data and the completion of incomplete personal data.

2.3 Right to erasure / “right to be forgotten” (Art. 17 GDPR)
You have the right to erasure of your personal data where it is no longer necessary for the purposes of processing, the processing was unlawful, you have withdrawn consent and there is no other legal basis, or there is a legal obligation to erase. The right to erasure does not apply insofar as processing is necessary to comply with legal obligations or to establish, exercise or defend legal claims.

2.4 Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing where the accuracy of the data is contested, the processing is unlawful, we no longer need the data, or you have objected and it has not yet been established whether our legitimate grounds override yours.

2.5 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to have it transmitted to another controller, provided that the processing is based on consent or a contract and is carried out by automated means.

2.6 Right to object (Art. 21 GDPR)
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where the processing is based on our legitimate interest (Art. 6(1)(f) GDPR). We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

2.7 Right to withdraw consent (Art. 7(3) GDPR)
You may withdraw any consent given at any time with effect for the future, e.g. by notifying the contact addresses listed below. The lawfulness of processing carried out up to the withdrawal remains unaffected.

2.8 Automated decisions including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. Note: We do not carry out any automated decision-making or profiling.

2.9 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. You may in particular contact the supervisory authority in the Member State of your residence, place of work or the place of the alleged infringement.

The supervisory authority responsible for us (due to the seat of our EU representative) is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
Phone: +49 611 1408 0
Email: poststelle@datenschutz.hessen.de

A list of all EU data protection authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en

2.10 Exercising your rights
To exercise your rights under the GDPR, you may contact any of the following:

Controller:
inpeek AG – info@inpeek.ch

Data Protection Officer:
andreas.ritter@inpeek.ch

EU representative pursuant to Art. 27 GDPR:
inpeek GmbH, Florian Schwager – florian.schwager@inpeek.de

Note: We may ask you to prove your identity. We will respond to your request within the statutory period of one month. In exceptional cases, this period may be extended by a further two months, of which we would inform you.

Part III: Special Data Protection Information for Visitors from Switzerland

This part applies in addition to Part I exclusively to visitors from Switzerland.

1. Applicable Law

Swiss data protection law applies to the processing of your personal data, in particular the Federal Act on Data Protection of 25 September 2020 (FADP, SR 235.1) and the Ordinance to the Federal Act on Data Protection (DPO).

2. Your Rights under Swiss Data Protection Law

As a data subject, you have the following rights under the Swiss Federal Act on Data Protection (FADP):

2.1 Right of access (Art. 25 FADP)
You may request information from us as to whether and which personal data we process about you, for what purpose, how long it is stored, where it comes from and to whom it is disclosed. Such access is generally free of charge.

2.2 Right to rectification (Art. 32(1) FADP)
You have the right to request the rectification of inaccurate personal data and the completion of incomplete personal data.

2.3 Right to erasure (Art. 32(2) FADP in conjunction with Art. 30 FADP)
You have the right to erasure of your personal data where it is no longer necessary for the purposes of processing, the processing was unlawful, or you have withdrawn consent and there is no other legal basis. Statutory retention obligations may prevent immediate erasure.

2.4 Right to data portability and transfer (Art. 28 FADP)
You may request that the personal data you have provided to us be handed over in a commonly used electronic format, or that we transfer it to another controller, provided that the processing is based on your consent or a contract and is carried out by automated means.

2.5 Objection and balancing of interests (Art. 30(2)(b) FADP, Art. 6(2) and (3) FADP)
You may object to the processing of your personal data where it is based on our legitimate interest. We will then examine whether compelling legitimate grounds justify continued processing. In the case of advertising, we will cease processing without delay.

2.6 Withdrawal of consent (Art. 30(2)(b) FADP)
You may withdraw any consent given at any time with effect for the future.

2.7 Right to lodge a complaint (Art. 49 et seq. FADP)
You have the right to lodge a complaint with the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC / EDÖB)
Feldeggweg 1, 3003 Bern, Switzerland
Phone: +41 58 462 43 95
Email: info@edoeb.admin.ch
Website: https://www.edoeb.admin.ch

3. Exercising Your Rights

To exercise your rights under Swiss data protection law, please contact:

inpeek AG
Bogenschützenstrasse 9
3008 Bern
Switzerland

Phone: +41 31 511 31 11
Email: info@inpeek.ch

Data Protection Officer:
andreas.ritter@inpeek.ch

Note: We may ask you to prove your identity. We will respond to your request within the statutory period of 30 days. In justified cases, this period may be extended, of which we would inform you.

Last updated: 23/07/2026