Double-click to edit this text
Privacy Policy
Last updated: April 2, 2026
1. Contact Details
Data Controller:
Johannes Marsch, Lasse Clausing, Hafiza Hajrah Rehman, Anica Hummel
Lichtenbergstraße 6
85748 Garching bei München
2. Purposes and Legal Basis of Processing
We collect and process your personal data only for specific, explicit, and legitimate purposes. Below is an overview of each processing activity and its legal basis:
Sending you a report via email We use your email address to deliver the personalized report you requested by submitting the form. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), which you give by voluntarily submitting the form.
Processing your AI agent description The description of your AI agent is processed by our internal AI product, powered by Llama 2 (via Ollama), a locally-run large language model hosted on our own infrastructure. This processing is necessary to generate the report you requested. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where applicable, contractual necessity (Art. 6(1)(b) GDPR).
We do not use your data for automated decision-making or profiling.
3. Categories of Personal Data and Recipients
Categories of data we collect:
- Email address
- Free-text description of an AI agent (as voluntarily submitted by you)
We do not knowingly collect special categories of personal data (such as health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs). Please do not include such information in your AI agent description.
Who has access to your data (recipients):
- Our internal team responsible for operating this service.
- Our email delivery service provider, acting as a data processor under a Data Processing Agreement (DPA).
- No third-party AI providers. All AI processing is performed on our own secured infrastructure using a locally-run model.
We do not sell or rent your data to any third parties.
4. Data Retention Period
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Your email address and AI agent description are retained for the duration required to generate and deliver your report, and for a maximum period of 3 months thereafter for internal record-keeping and compliance purposes.
- If you withdraw your consent or request erasure, your data will be deleted promptly, unless we are required to retain it by law.
We regularly review the data we hold and delete it when it is no longer necessary.
5. Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data:
Right to be informed: You have the right to be informed about how your personal data is collected and used, which is the purpose of this Privacy Policy.
Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure ("right to be forgotten"): You have the right to request the deletion of your personal data, particularly where consent is withdrawn or the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing: You have the right to request that we limit how we use your data in certain circumstances, for example while a dispute about accuracy is being resolved.
Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
Right to object: You have the right to object to the processing of your personal data, particularly where processing is based on legitimate interests or where your data is used for direct marketing purposes.
Right to withdraw consent: Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with your national data protection supervisory authority. In Germany, for example, this is the relevant state data protection authority (Landesdatenschutzbehörde). A list of EU supervisory authorities is available at https://edpb.europa.eu.
To exercise any of these rights, please contact us at: agentchecker@dpschool.io . We will respond within 30 days of receiving your request.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or misuse. AI processing is carried out on our own secured infrastructure. Your submitted content is never transmitted to external AI services or third-party model providers.
7. Cookies and Tracking
This landing page is hosted on Unbounce, which may set cookies for analytics and platform functionality purposes. Please refer to Unbounce's Privacy Policy at unbounce.com/privacy for details on how Unbounce handles data collected through its platform.
8. International Data Transfers
If you are located in the European Economic Area (EEA) or the United Kingdom, please note that your data may in some cases be processed or stored outside your jurisdiction. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) as approved by the European Commission.
9. Children's Privacy
This service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through this form, please contact us so we can arrange for its deletion.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be posted on this page with a revised date. We encourage you to review this policy periodically.
11. Contact
For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us at:
Remember to fill in the bracketed placeholders before publishing, particularly the data retention period in Section 4, your company details, and your DPO information if applicable. As always, it's a good idea to have a legal professional review the final version before going live.
|
en
