Privacy Policy
Last updated: 17 September 2026
1. Scope and controller
This privacy policy explains how strixx GmbH processes personal data when you visit strixx.ai, contact us by email or book an appointment through our website. It also covers the handling of enquiries and resulting business contacts.
Product demonstrations and processing carried out on behalf of customers are outside the scope of this policy.
The controller is:
strixx GmbH
Kolonnenstraße 8
10827 Berlin, Germany
Email: info@strixx.ai
2. Visiting our website
Our website is hosted by STRATO AG, Germany. STRATO processes technical connection and log data on our behalf, including IP addresses, access times, requested pages and information transmitted by your browser.
We use this data to deliver the website, maintain its security and investigate technical problems. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable website.
STRATO’s website visitor logs are retained for a maximum of seven days.
We do not use advertising trackers or website analytics services.
3. Email enquiries and business contacts
When you email us, we process your email address, any contact or company details you provide, and the content of your message and attachments. We use this information to respond to your enquiry and manage any resulting business relationship.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in responding to enquiries and communicating with business contacts. Where processing is necessary to enter into or perform a contract with you personally, Article 6(1)(b) GDPR applies.
We use the following services:
- Google Workspace, provided by Google Ireland Limited: email and business communication.
- Claude, provided by Anthropic: assistance with reviewing enquiries and preparing responses. Relevant enquiry content may be processed through this service. Its use is directed by us; replies are not sent automatically.
- Notion, provided by Notion Labs, Inc.: management of contact details and notes concerning enquiries and business relationships.
Providing information is voluntary. However, without sufficient contact details and information about your request, we may be unable to respond or arrange the requested service.
4. Booking an appointment
Our website contains a link to a Google Calendar appointment-booking page. Following this link takes you to Google’s website.
When you book, we receive the booking details you provide, such as your name, email address, appointment time and any additional information you enter. We use these details through Google Workspace to organise the appointment and communicate with you about it.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in arranging requested business appointments. Article 6(1)(b) GDPR applies where the appointment concerns entering into or performing a contract with you personally.
Google’s own privacy information also applies to processing for which Google acts as an independent controller. You can contact us by email instead of using the booking service.
5. Service providers and international transfers
The providers described above receive personal data as needed to provide their services. Where they process data on our behalf, this processing is governed by data processing agreements.
Processing by our communication and business software providers may involve countries outside the European Economic Area, including the United States.
For these transfers, we rely on applicable European Commission adequacy decisions or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, as relevant to the provider and transfer. You can contact info@strixx.ai for information about the applicable safeguards and a copy of them.
6. Retention
We retain enquiry and business contact data for the duration of the enquiry and any resulting business relationship. Once these purposes end, we delete the data unless further retention is required by law or necessary to establish, exercise or defend legal claims. In those cases, we retain only the relevant data for the applicable retention period or for as long as needed for the claim.
Appointment details are retained for arranging and following up on the appointment. Where they become part of an enquiry or business relationship, the criteria above apply.
Where retention is required by law, the legal basis is Article 6(1)(c) GDPR. Retention necessary for legal claims is based on Article 6(1)(f) GDPR: our legitimate interest in protecting our legal rights.
The retention period for website visitor logs is stated in Section 2.
7. Your rights
Subject to the applicable legal conditions, you have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability.
To exercise your rights, contact info@strixx.ai.
Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
If personal data is processed for direct marketing, you may object at any time, without giving reasons. We will stop processing it for that purpose.
Right to complain
You may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement.
The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Website: www.datenschutz-berlin.de
8. Automated decisions
For the activities covered by this policy, we do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
9. Updates
We update this policy when relevant processing activities or legal requirements change. The current version is available on this page.