Privacy Policy
AI Act Checker · ai-act-checker.com
Last updated: 31 July 2026
Preamble
With the following privacy policy we inform you which types of your personal data (hereinafter also abbreviated as “data”) we process for which purposes and in which scope. This privacy policy applies to all processing of personal data carried out by us on our website ai-act-checker.com (hereinafter “online service”).
The terms used are not gender-specific.
Controller
Matthäus Pielok
Postwiesenstraße 5A
70327 Stuttgart
Germany
Email: info@thecolos.de
Overview of processing operations
The following overview summarises the types of data processed and the purposes of processing.
Categories of processed data
- Usage data (e.g. pages visited, access times)
- Meta/communication data (e.g. IP address, browser, operating system)
- Contact data (e.g. email if you contact us)
Categories of data subjects
- Users (e.g. website visitors)
- Communication partners (when contacting us)
Purposes of processing
- Provision of our online service and usability
- Information technology infrastructure and security measures
- Contact requests and communication
Legal bases for the processing
We process personal data on the following legal bases under the GDPR:
- Consent (Article 6 (1) (a) GDPR) – where you explicitly consent, e.g. to optional services.
- Legitimate interests (Article 6 (1) (f) GDPR) – e.g. to securely provide the online service, prevent abuse, and improve our offering.
Security precautions
We take appropriate technical and organisational measures in accordance with legal requirements to ensure a level of security appropriate to the risk.
SSL encryption (HTTPS): To protect data transmitted via our online service, we use SSL encryption. You can recognise encrypted connections by the https:// prefix in your browser’s address bar.
Erasure of data
We erase processed data in accordance with legal requirements as soon as consents are revoked or other permissions cease to apply. Where data must be retained for other legally permissible purposes, processing is restricted to those purposes.
Use of cookies
Cookies are small text files that store information on end devices. We use cookies only in compliance with applicable law.
Where cookies are technically necessary to operate the online service, processing is based on legitimate interests (Article 6 (1) (f) GDPR). Where we use marketing or analytics cookies, we obtain your consent beforehand.
You can configure your browser to notify you about cookies, allow them on a case-by-case basis, or block them entirely. Disabling cookies may limit the functionality of our online service.
Provision of online services and web hosting
We process user data to make our online service available. This includes processing the user’s IP address, which is necessary to deliver content to the browser.
Server log files
Access to our online service is logged in server log files. These may include pages and files accessed, date and time of access, data volumes transferred, browser type, operating system, referrer URL, and IP address. Log files are used for security (e.g. preventing attacks) and system stability. Legal basis: legitimate interests (Article 6 (1) (f) GDPR). Log data is generally deleted or anonymised after a maximum of 30 days.
Hetzner
We use storage and computing capacity from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Legal basis: legitimate interests (Article 6 (1) (f) GDPR). Further information: https://www.hetzner.com/legal/privacy-policy/
Contact
When you contact us by email, we process the data you provide (e.g. name, email address, message content) to handle and respond to your request. Legal basis: legitimate interests (Article 6 (1) (f) GDPR) or pre-contractual measures (Article 6 (1) (b) GDPR) where the request relates to a contract.
Google services
Where we use Google services, personal data may be transmitted to Google. In particular:
Google AdSense (advertising)
Where Google AdSense is used, cookies and similar technologies may be used to display advertising and measure its effectiveness. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis: consent (Article 6 (1) (a) GDPR) where required. Privacy policy: https://policies.google.com/privacy
Google Search Console
We use Google Search Console to analyse indexing and visibility of our online service in Google Search. Usage data may be processed. Legal basis: legitimate interests (Article 6 (1) (f) GDPR).
Data processing in third countries
Where we process data in a third country (outside the EU/EEA) or use third-party services, we do so only in compliance with legal requirements, in particular on the basis of EU Standard Contractual Clauses or comparable safeguards (Articles 44–49 GDPR).
Rights of data subjects
As a data subject under the GDPR, you have in particular the following rights:
- Right to object to processing based on legitimate interests and to direct marketing
- Right to withdraw consent
- Right of access to processed data
- Right to rectification of inaccurate data
- Right to erasure and restriction of processing
- Right to data portability
- Right to lodge a complaint with a supervisory authority
Changes and updates to the privacy policy
We update this privacy policy whenever changes to our data processing make this necessary. Please check regularly for the current version.