Privacy

Privacy Policy

How Matrix AI Academy & Business Solutions GmbH processes personal data — clearly and in line with the law.

Privacy

1.Controller responsible for data processing

Matrix AI Academy & Business Solutions GmbH, with its registered office at Neue Grünstraße 10/11, 10179 Berlin, is the controller responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR) and other data-protection laws. The protection of your personal data is of particular importance to us.

We process personal data exclusively within the framework of statutory provisions. This privacy policy informs you about the nature, scope and purpose of the collection and use of personal data on our website and in connection with the services and products we offer.

2.Controller contact details

For enquiries regarding the processing of personal data, you can reach us as follows:

  • Controller: Matrix AI Academy & Business Solutions GmbH
  • Address: Neue Grünstraße 10/11, 10179 Berlin, Germany
  • Telephone: +49 30 25745196
  • Mobile: +49 1522 6708459
  • Email: info@the-aiacademy.com

If you have questions about this privacy policy or wish to exercise your rights (see section 10: Your rights), please contact us using the details above.

3.Data protection contact

You may address data-protection enquiries, including the exercise of your data-subject rights, to the controller. No separate name of a data protection officer is published.

  • Contact: email info@the-aiacademy.com
  • Telephone: +49 30 25745196
  • Mobile: +49 1522 6708459
  • Postal address: Neue Grünstraße 10/11, 10179 Berlin, Germany

4.Types of data processed

In connection with the use of our website and related services, we process various types of personal data.

Master data

  • First and last name
  • Address (street, house number, postcode, city)
  • Date of birth
  • Gender

Contact data

  • Email address
  • Telephone number (if provided)

Contract data

  • Details of booked courses, e.g. course name and duration
  • Invoice and payment information
  • Contract terms

Usage data

  • IP address
  • Access times
  • Device information (e.g. browser type, operating system)
  • Website sections visited
  • Log-in data

Payment data

For payment processing we work with external payment service providers such as PayPal, Stripe and Bankful. These data are transmitted to the respective providers via secure connections.

  • Bank details or credit-card information
  • Transaction data such as amount, date and reference number
  • Information on the payment service provider used

5.Purpose of data processing

1. Contract performance and provision of services

We process your personal data in order to perform and settle the services you have booked, in particular our online courses. For payment processing we use PayPal, Stripe and Bankful.

2. Communication and support

To respond to your enquiries and feedback promptly and efficiently, we use app.superchat. Your personal data are processed only to the extent necessary to answer your requests.

3. Creation and personalisation of content

For the design and provision of personalised content we use AI-based platforms such as Midjourney, aitubo, leonardo.ai, ChatGPT and DALL·E. Anonymised usage data may be processed in this context.

4. Website operation and technical optimisation

Our website is hosted on the Wix platform. Wix processes data such as your IP address, browser information and access times in order to ensure the availability and security of the website.

5. Improvement of the website and user experience

To continuously improve our website, we use Google Analytics and other analytics tools. These data are anonymised and not used for personal identification.

6. Fulfilment of legal obligations

We also process your personal data in order to meet legal requirements, in particular the retention of invoices and payment records in accordance with applicable law.

6.Disclosure of your data to third parties

Your personal data are disclosed to third parties only where this is necessary to fulfil contractual or pre-contractual obligations, you have given express consent, or we are legally obliged to do so.

1. Payment service providers

PayPal, Stripe and Bankful – independent processing of your payment data in accordance with their own privacy policies.

2. Hosting provider

Our website is hosted by Wix. Wix ensures data security in accordance with the GDPR.

3. Analytics and tracking services

Google Analytics – usage data are analysed in anonymised form in order to improve our offering.

4. Social networks and platforms

  • LinkedIn: personalised advertising based on interactions
  • Pinterest: usage-behaviour data for relevant content

5. Communication services

app.superchat aggregates various communication channels (email, social media) for handling your enquiries.

6. AI-supported tools

ChatGPT, leonardo.ai, DALL·E, Midjourney, aitubo – anonymised data processing for personalised content creation.

7. Applications and careers

Application data (name, address, email, CV) are treated as strictly confidential and used solely internally for the application process.

7.Payment processing

1. PayPal

If you pay via PayPal, you are redirected to the PayPal website. PayPal processes your name, email address, delivery and billing address as well as payment and transaction data. Your payment data are transmitted in encrypted form and are not stored by us.

2. Stripe

Stripe processes credit-card payments in accordance with the PCI DSS standard. This includes the credit-card number, cardholder name and transaction data. We do not store any credit-card data or other payment information directly on our servers.

3. Encryption and security

Both PayPal and Stripe use SSL/TLS encryption to protect your payment data. Sensitive payment data are processed exclusively by the payment service providers and stored on their secured servers.

4. Purpose of processing

The processing of your payment data serves the secure settlement of your transactions, identity verification, fraud prevention and compliance with tax-related retention obligations.

8.Cookies and tracking technologies

Our website uses cookies and similar tracking technologies to improve your user experience.

Types of cookies

  • Necessary cookies: essential for basic website functions
  • Functional cookies: store your settings (e.g. language)
  • Performance and analytics cookies: anonymised evaluation of usage behaviour
  • Marketing and tracking cookies: measurement of marketing-campaign effectiveness

Third-party cookies

  • Vercel Analytics (Vercel Inc.): privacy-friendly audience measurement without cookies and without building user profiles.
  • HubSpot (HubSpot Inc.): delivery of blog articles and their image files via the HubSpot CMS.
  • Vercel Inc.: hosting and delivery of the website and storage of uploaded files (Vercel Blob).

Storage duration and management

Session cookies are deleted when you close your browser. Persistent cookies remain stored on your device for a defined period. You can manage cookies at any time via your browser settings.

Server log files

We automatically store data in server log files: anonymised IP address, date and time of access, browser type, operating system, referrer URL and pages accessed.

Newsletter and tracking

Newsletter registrations use a double opt-in procedure. We use web beacons to analyse newsletter performance. You may withdraw your consent at any time.

9.Transfer of data to third-party providers

To provide our services we work with various third-party providers who may have access to personal data. All third-party providers comply with strict data-protection policies.

Tracking and marketing services

  • Vercel Analytics (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA): aggregated page views and performance metrics. No cookies are set and no cross-device profiles are created.
  • HubSpot CMS (HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA): delivery of blog articles and the images embedded in them. When you open a blog post, your IP address is technically transmitted to HubSpot.
  • WhatsApp (WhatsApp Ireland Ltd.): if you click a WhatsApp button on this website you leave our site and WhatsApp's privacy terms apply. No data is transmitted unless you click.
  • Social networks (LinkedIn, Instagram, YouTube): we link to our profiles. No social plugins that transmit data on a plain page view are embedded.

Opt-out options

  • Vercel Analytics: measurement is cookie-free and aggregated; opting out via browser tracking-blocker add-ons is possible.
  • HubSpot: blog images load only when a blog post is opened; visiting other pages transmits no data to HubSpot.
  • Social networks: data is only transmitted once you click a link to the network concerned.

10.Your rights as a data subject

Under the General Data Protection Regulation (GDPR) you have the following rights in relation to your personal data:

1. Right of access (Art. 15 GDPR)

You have the right to learn which data we process about you, for what purpose and for how long they are stored.

2. Right to rectification (Art. 16 GDPR)

If stored data are inaccurate or incomplete, you have the right to request their rectification.

3. Right to erasure (Art. 17 GDPR)

Under certain circumstances you may request the erasure of your personal data, provided no statutory retention obligations apply.

4. Right to restriction of processing (Art. 18 GDPR)

In certain cases you may request restriction of the processing of your data.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, machine-readable format or to have them transferred to another controller.

6. Right to object (Art. 21 GDPR)

You may object to the processing of your data, in particular for direct marketing. We will then cease processing unless compelling grounds apply.

7. Withdrawal of consent (Art. 7 GDPR)

You may withdraw consent you have given at any time. Withdrawal applies to future processing.

8. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Link to the supervisory authority: www.bfdi.bund.de

11.Further information – chat, newsletter, social networks and other services

Chat function

Our website provides a chat function. In the course of communication, personal data such as your name, email address and your enquiries are collected. These data are used solely to handle your requests and are deleted after the communication has ended, unless statutory retention obligations apply.

Newsletter and consent

By subscribing to our newsletter you consent to being informed by email about our services. Registration uses a double opt-in procedure. You may unsubscribe at any time via an unsubscribe link.

Storage duration and deletion of data

Cookies are stored for a maximum of 24 months. Data relating to contract performance are stored in accordance with statutory retention obligations and then deleted.

Use of third-party software

We use third-party software for communication handling, data processing and analytics and optimisation tools. All data are encrypted securely and handled in accordance with data-protection requirements.

  • Master data (name, address)
  • Contact data (email, telephone number)
  • Communication data (chats, emails)
  • Project and course data (bookings, registrations)
  • Payment data (in the context of payment processing via third-party providers)

12.Technical services actually in use

This overview lists the services genuinely used to operate this website, together with their purpose and legal basis.

  • Hosting and delivery: Vercel Inc. — operation of the website, server log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
  • Audience measurement: Vercel Analytics — cookie-free, aggregated statistics. Legal basis: Art. 6(1)(f) GDPR.
  • Blog content and images: HubSpot Inc. — delivery of articles. Legal basis: Art. 6(1)(f) GDPR.
  • Database: MongoDB Atlas — storage of course, enquiry and application data. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps).
  • Email delivery: the hosting provider's SMTP service — confirmations and internal notifications about form enquiries. Legal basis: Art. 6(1)(b) GDPR.
  • File uploads: Vercel Blob — storage of application documents. Legal basis: Art. 6(1)(b) GDPR.
  • Fonts: Google Fonts are served from Vercel's servers; your browser does not connect to Google.

For transfers to the USA we rely on the EU standard contractual clauses or on the provider's certification under the EU-US Data Privacy Framework.

Consent for forms

The contact form and funding check can only be submitted with explicit consent to this privacy notice. The time of consent is stored as evidence (Art. 7(1) GDPR).