mysoftwarelab

Privacy Policy

Last updated: May 2026

1. Data controller

mysoftwarelab GmbH
Am See 22, 67547 Worms, Germany
Managing Director: Andreas Indorf
Commercial register: Amtsgericht Mainz, HRB 50877 · VAT ID: DE815657645
Phone: +49 (0) 6241 984 300 0
Privacy contact: datenschutz@mysoftwarelab.com
BAFA consultant ID: #213652

2. Purpose of processing

The AI potential check is an interactive tool to prepare a paid BAFA-funded AI consulting engagement. We process the data you enter in order to provide you with a tailored use-case recommendation and a matching offer.

3. Legal basis

Processing is carried out on the basis of Art. 6 (1) (b) GDPR (pre-contractual measures) and, where separately consented to (e.g. analytics cookies), Art. 6 (1) (a) GDPR (consent).

4. Data processed

  • Company name, industry, number of employees, location (federal state)
  • Optional: contact person name and e-mail address
  • Wizard answers regarding pain points, goals, processes, tools
  • Generated use-case suggestions including estimates
  • Upon acceptance of an offer: further onboarding answers (IT stack, stakeholders, budget)
  • Technical data: IP address (only short-term in server log), browser information

5. Recipients / processors

The following service providers are involved in the pre-contractual process:

  • Vercel Inc. (USA) — hosting of the web application in the EU region (Frankfurt). DPA pursuant to Art. 28 GDPR + standard contractual clauses (SCC) are in place.
  • Neon Inc. (EU) — database hosting in eu-central-1 (Frankfurt). DPA in place.
  • Anthropic PBC (USA) — AI processing of your wizard inputs to identify use cases. SCCs in place. Inputs are NOT used for training.
  • HubSpot Inc. (USA/EU) — CRM system for lead management and offer creation. DPA in place.
  • Resend Inc. (USA) — e-mail delivery. DPA in place.
  • Calendly LLC (USA) — appointment booking for follow-up meetings, if you initiate a booking. DPA + SCC in place.

For an individual data processing agreement (Art. 28 GDPR), please contact datenschutz@mysoftwarelab.com.

6. Third-country transfer

Data is partially transferred to the USA (Vercel, Anthropic, HubSpot, Resend). Basis: standard contractual clauses (SCC) of the EU Commission and additional security measures. The database itself is located exclusively in the EU (Frankfurt).

7. Retention period

  • Wizard data without offer acceptance: max. 90 days
  • Accepted offers / mandate data: 10 years (commercial law retention)
  • Analytics data: max. 14 months, anonymised

8. AI processing (Art. 50 EU AI Act)

To identify suitable AI use cases, your wizard inputs are transmitted to Anthropic Claude. The AI is used as a tool to prepare the human consulting service and does not replace the professional assessment by the consultant. You can discard or adjust the recommendations at any time.

9. Cookies & tracking

The application stores your wizard progress in your browser's local storage so it can be restored on your next visit. Analytics cookies (e.g. PostHog for conversion analysis) are only set with your explicit consent.

10. Your rights

You are entitled at any time to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent given (Art. 7 (3) GDPR)
  • Complaint with the competent supervisory authority (Art. 77 GDPR)

Please send requests to: datenschutz@mysoftwarelab.com

11. Supervisory authority

The competent data protection supervisory authority is the state authority responsible for the controller's registered office. A list is available at bfdi.bund.de.