Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Email

info@8-d.ai

2. Data Protection Officer

Eighth Dimension GmbH has not appointed a Data Protection Officer. Please direct any data protection enquiries to the controller named in section 1.

3. General information on data processing

This privacy policy applies to our entire website and all functions offered through it, in particular the contact and demo booking forms. We process personal data of our visitors only to the extent necessary to provide a functioning website and our content and services, or to the extent you have consented to further processing. Below, we inform you in accordance with Art. 13 GDPR about the nature, scope, and purpose of the processing of personal data within the scope of this website.

4. Hosting and server log files

This website is provided as a statically generated application on shared hosting at Hostinger. When you visit the website, the hosting provider automatically collects and stores the following information in server log files, which your browser automatically transmits:

• IP address of the accessing device
• date and time of access
• requested URL or file
• referrer URL (the page previously visited)
• browser and operating system used (user agent)

This data is used for the technical provision, stability, and security of the website and is not combined with other data sources. The legal basis is our legitimate interest in the secure and trouble-free operation of our website, Art. 6 (1) (f) GDPR.

5. Contacting us via the forms

Our website provides two forms for contacting us:

• A contact form, through which you can submit your name, email address, phone number (optional), and your message.
• A demo booking form, through which, in addition to your name, email address, and phone number (optional), you can submit a preferred date, a preferred time, your time zone, the product areas you are interested in, and an optional message.

Where your enquiry is directed at entering into a contract or at pre-contractual measures — for example, arranging a demo appointment — processing is based on Art. 6 (1) (b) GDPR. In all other cases, such as a general enquiry, we base processing on our legitimate interest in responding to your enquiry, Art. 6 (1) (f) GDPR.

6. Consent and cookies

On your first visit to our website, you are shown a cookie notice through which you can consent to the use of Microsoft Clarity (see section 7), decline it, or customize your choice. Purely functional website settings (see section 8) are not affected by this and operate independently of your cookie decision.

Your decision is stored exclusively locally in your browser (see section 8) and is not transmitted to us. You can withdraw or adjust your consent at any time, with effect for the future, via the "Cookie Settings" link in the website footer. On withdrawal, the cookies set by Microsoft Clarity are actively deleted; if Clarity was already active at that point, the page is reloaded so that the withdrawal takes effect immediately.

7. Microsoft Clarity

With your consent, we use Microsoft Clarity, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA ("Microsoft"). Microsoft Clarity records interactions with this website — including mouse movements, clicks, and scrolling behavior — and generates session recordings and heatmaps from them, which help us understand how visitors use our website in order to improve it.

The Microsoft Clarity script is loaded only after you have explicitly consented to its use; without your consent, it is not embedded in the page. Microsoft Clarity sets the cookies "_clck" and "_clsk". Processing also takes place on Microsoft's servers in the USA; this therefore involves a transfer of personal data to a third country (see section 12). The legal basis is your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future without affecting the lawfulness of processing carried out before the withdrawal.

Further information on Microsoft Clarity and on data protection at Microsoft can be found at learn.microsoft.com/clarity/setup-and-installation/privacy-disclosure.

8. Settings stored locally

In addition to your cookie decision, our website stores two purely functional settings in your browser's local storage (localStorage):

• Your cookie decision, under the key "privacy_consent" with the value "accepted" or "declined".
• Your preferred display mode for the website (light or dark), under the key "8d-theme" with the value "light" or "dark".

Both values remain exclusively on your device, are not transmitted to us or to third parties, and serve solely to avoid asking for your cookie decision again on a repeat visit and to retain your preferred display mode. Since no personal data is transmitted to us in the process, this is a purely client-side stored, functional setting that does not require a legal basis under Art. 6 GDPR. You can delete these values at any time via your browser settings.

9. Fonts

This website uses exclusively self-hosted fonts. The font files used are delivered from our own server together with the rest of the page content. No request is made to Google Fonts or any other external font provider, so no data is transmitted to third parties when fonts are loaded.

10. Recipients and processors

In the course of operating this website, the following recipients have access to personal data:

• Our hosting provider (Hostinger), which technically provides the website and handles incoming form requests.
• Microsoft, in connection with the use of Microsoft Clarity based on your consent (see section 7).

A data processing agreement under Art. 28 GDPR is or will be in place with both providers, ensuring that processing takes place solely on our instructions and in accordance with the requirements of the GDPR.

11. Retention periods

We store personal data only for as long as is necessary for the respective processing purpose or as required by statutory retention obligations. The specific periods per data category are:

Server log files

Deleted or overwritten by our hosting provider after seven days.

Contact and demo booking enquiries

Deleted once your enquiry has been dealt with in full and no further questions arise, at the latest twenty-four months after our last correspondence with you. Where an enquiry leads to a contract, the statutory commercial and tax retention periods apply instead — six years under Section 257 HGB and ten years under Section 147 AO.

Microsoft Clarity cookies

"_clck" expires after one year, "_clsk" at the end of the browsing session. Both are deleted immediately if you withdraw your consent (see section 6).

Settings stored locally

The "privacy_consent" and "8d-theme" values have no expiry date and remain in your browser until you delete them (see section 8).

12. Transfers to third countries

When Microsoft Clarity is used (section 7), personal data is transferred to Microsoft and thus to the USA — a country outside the European Union and the European Economic Area for which there is no blanket adequacy decision by the European Commission covering the USA as a country. The transfer is instead based on the EU-U.S. Data Privacy Framework: Microsoft Corporation is self-certified under that framework, for which the European Commission adopted an adequacy decision on 10 July 2023, so transfers to Microsoft's certified U.S. entities may take place without additional authorisation. This is supplemented by Microsoft's EU standard contractual clauses, which apply to any processing outside the scope of that certification.

13. Your rights as a data subject

Under the GDPR, you have the following rights:

• the right of access to the personal data we process about you (Art. 15 GDPR)
• the right to rectification of inaccurate data (Art. 16 GDPR)
• the right to erasure of your data (Art. 17 GDPR)
• the right to restriction of processing (Art. 18 GDPR)
• the right to data portability (Art. 20 GDPR)
• the right to object to processing (Art. 21 GDPR)
• the right to withdraw consent already given at any time with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, please contact the controller named in section 1.

14. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR). The supervisory authority responsible for us is: