Legal

Privacy Policy

This page explains how personal data is processed on this website and which rights affected persons have.

1. Controller

On this page, we inform you about the type, scope, and purpose of processing personal data on our website.

The responsible person is: Aaron Röhl

2. Contact details

servrox solutions UG (haftungsbeschränkt)

Panoramastraße 26

71296 Heimsheim

Email: info@stark-ai.de

3. Purposes and legal bases

We process personal data only to the extent required to provide our website, handle inquiries, send requested content, and communicate with interested parties.

Legal bases may include, in particular, Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (pre-contractual measures), Article 6(1)(c) GDPR (legal obligation), and Article 6(1)(f) GDPR (legitimate interest).

4. Hosting and server log files

When you access our website, technically required information may be processed, such as IP address, date and time of access, pages accessed, referrer, browser type, and operating system.

Processing takes place to provide the website securely, analyze errors, and maintain system security.

Retention period: server and security logs are stored only as long as required for secure operation.

5. Forms and lead capture

If you contact us through a form or request content such as the AI readiness checklist, we process the data you enter, especially your email address and any additional voluntary information.

Processing takes place to handle your request, send the requested content, and, where you have consented, send further marketing emails.

Retention period: inquiry data is deleted once it is no longer required for the purpose and no statutory retention obligations conflict with deletion.

6. Newsletter and marketing emails

If you expressly consent, we use your email address to send the requested action plan and further information about our services, offers, and content.

You can withdraw your consent at any time with effect for the future, for example through the unsubscribe link in an email or through the contact details above.

Delivery is strictly purpose-bound to the requested checklist and further information where you have expressly consented.

7. Analytics and third-party services

This website is provided on Vercel infrastructure. Technically required connection and server data may be processed to deliver the website securely and reliably.

For reach measurement and technical analysis, we use Vercel Analytics and the external Umami Cloud service through cloud.umami.is. In particular, visited pages, referrers, browser information, device types, and timestamps may be processed pseudonymously to improve website usage and stability. On box.stark-ai.de, both services are activated on the basis of your consent only if you accept the Analytics category in privacy settings.

If you accept the Advertising and campaign measurement category on box.stark-ai.de, we load the OpenAI Ads Measurement Pixel. It measures the page view, each allowlisted product card that remains at least 50 percent visible for one second, and a successfully accepted inquiry. OpenAI may store pseudonymous attribution identifiers in first-party cookies for this purpose. After successful acceptance, the Pixel and Conversions API report the same opaque identifier derived by the server from the inquiry context. After successful acceptance, we generate one SHA-256 hash of your business email after trimming and lowercasing it and use the same hash in the browser Pixel and server-side Conversions API for matching. In the browser, this hash may also enrich later consented Pixel requests in the same open page. We do not additionally store it in browser cookies or local storage, or include it in logs or public agent responses. Through the Conversions API, we also send the timestamp, sanitized source URL and any unchanged pseudonymous OpenAI reference values. The CAPI event does not include the raw email address, other form entries, name or phone hashes, or an explicitly supplied IP-address or user-agent field. Ordinary network requests can still expose connection and request metadata to the relevant provider. Your Advertising consent covers campaign measurement and matching as well as OpenAI's possible use of event data for future user-level personalization. Automatic Advanced Matching must be disabled on the selected OpenAI data source. You can change your choice at any time through Cookie settings in the footer with effect for the future. On withdrawal, we stop browser measurement, delete known attribution cookies where possible and reload affected tabs to end the loaded Pixel and its matching context. An inquiry already submitted with valid consent may still be durably accepted and then reported once to OpenAI from the server; its browser report is suppressed after withdrawal. Newly submitted inquiries are no longer measured for advertising. Withdrawal does not automatically delete data already transmitted.

8. Recipients and third-country transfers

Depending on the consented services, recipients described here may include Vercel, Umami Cloud, and OpenAI. Under the OpenAI Ad Tools DPA, OpenAI Ireland processes EEA and Swiss data; OpenAI's specific role depends in particular on whether Restricted Processing applies to the selected service. servrox solutions UG / stark AI remains responsible for the website, consent controls, and provision of conversion data.

Personal data is shared only where required for contract performance, handling your request, legal obligations, your consent, or commissioned processing. Processing locations, roles, agreements, and appropriate safeguards for third-country transfers depend on the service actually enabled and the agreements concluded for it.

9. Your rights

Subject to statutory requirements, you have the right to access, rectification, deletion, restriction of processing, data portability, and objection to certain processing activities.

You can withdraw granted consents at any time with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

10. Cookies and consent management

Our website may use technically necessary cookies or comparable technologies. On box.stark-ai.de, consent management stores your host-scoped choice for 180 days.

On box.stark-ai.de, Analytics and OpenAI Ads, including known attribution cookies, are activated only after the matching consent. The inquiry remains usable when optional categories are rejected. Withdrawal stops subsequent browser measurement and measurement of newly submitted inquiries; known OpenAI attribution cookies are deleted where technically possible.

11. Data security

We apply technical and organizational measures to protect your data against loss, manipulation, and unauthorized access.

Our security measures are continuously adapted in line with technological development.

12. Current version

This privacy policy is updated whenever processing activities, services used, or legal requirements change.

Status: September 7, 2026