1. Controller and contact
The controller responsible for the processing described in this information is:
Nexus Events GbR
Therese-Giehse-Allee 31
81739 Munich, Germany
Email: info@ai-consulting-conference.de
Jointly represented by its partners Finn Lux and Robert Bothe.
This information explains the processing of personal data when visiting the AI Consulting Conference website, making contact enquiries and using the media available on this website. Information about event registration will be added once the specific booking process is set up.
2. Technical provision and hosting
When this website is accessed, technical connection data is processed to deliver pages and media files and ensure secure operation. This may include the IP address, time of access, requested content, amount of data transferred, status messages, browser/operating-system information and the previously visited page, insofar as transmitted.
Processing for technical provision and security is based on Article 6(1)(f) GDPR. Our legitimate interest is in a functional, secure and reliably accessible online offering.
The website is provided through [actual hosting provider with full legal name and address]. The current draft uses the Lovable platform. The exact contractual hosting chain, including additional infrastructure and CDN providers, must be entered before publication.
[Add the contractual hosting party, server locations, scope of logging, service-provider roles and actual log retention period. Confirm a data processing agreement only if one actually exists.]
Where technical logs are stored, they are deleted or anonymised after [actual period], unless a specific security incident justifies necessary further retention.
3. Contact by email
If you contact us by email, we process the contact details you provide, the content of your message and the communication data needed to handle it. This is used to respond to and organise your enquiry.
If your enquiry concerns possible attendance, a speaking contribution or a partnership, and therefore a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in communicating with interested parties under Article 6(1)(f) GDPR.
Data is deleted once the enquiry has been fully handled and no necessary further retention applies, particularly due to legal obligations or the protection of legal claims.
[Add the email provider used and any processing outside the EEA. A contact form should only be described additionally if actually used.]
4. Storage on your device
This website may use browser storage functions, for example for an expressly chosen language preference or managing your choices concerning external media. The following overview describes the storage that actually takes place:
Verified website storage: acc-lang in sessionStorage stores only your explicitly selected language (de or en) for the current visit. It is set by this website and removed when the browser tab is closed. No visitor identifier is created. YouTube permission is held only in this visit's application memory; this feature does not save a consent cookie or local-/session-storage entry. Reloading resets the permission.
[Complete the inventory of actual cookies and local-/session-storage entries, including platform services: name, purpose, provider, retention period and classification as strictly necessary or requiring consent. Have the legal classification of the language preference checked. Do not use fictitious cookie names.]
Where storage or access is strictly necessary to provide a service you expressly request, the exception in section 25(2) TDDDG may apply. For other storage or access, we obtain your consent under section 25(1) TDDDG where required. The legal basis for any related personal-data processing is additionally governed by the GDPR, particularly Article 6(1)(a) GDPR where consent applies.
5. YouTube videos
We offer a video recap of the AI Consulting Conference. The external YouTube player is only loaded once you enable the relevant external-media function. Until then, a preview image served through our website is displayed.
YouTube is a Google service. For users in the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is generally the relevant provider; other Google group companies may be involved in processing.
After the player is loaded, Google may process your IP address, technical device/browser information, the page accessed and interactions with the video. If you are signed in to Google, association with your account may be possible.
We use the privacy-enhanced embedding mode through youtube-nocookie.com. This still establishes a connection to Google after activation; this embedding method does not guarantee playback without data transmission.
Activation is based on your consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. You can withdraw your choice through “Privacy settings” in the footer. Withdrawal unloads the player and prevents further optional YouTube requests until you activate a video again. It cannot recall data already transmitted. Processing lawfully carried out before withdrawal remains unaffected. You can use the rest of the website without activation.
Further information: https://policies.google.com/privacy?hl=en
[Technically check the consent process, including an actually accessible withdrawal mechanism. Add specific third-country transfers and safeguards.]
6. Images and recordings of events
We publish selected photos and video excerpts on this website to document and present the AI Consulting Conference. Attendees, speakers and other contributors may be recognisable. The media may show impressions of talks, discussions and exchange at the event.
An appropriate legal basis is required in each individual case for recording and publication. Where consent is the basis, processing is under Article 6(1)(a) GDPR. Where publication follows a permissible balancing of interests, Article 6(1)(f) GDPR applies; the legitimate interest is documentation and public communication about the event. The interests and rights of people depicted must be considered.
If you have questions about an image or wish to exercise your rights, please contact us at the address above and describe the image as precisely as possible. Information on withdrawal and objection is also provided in section 10.
[Before using 2026 material, check consent or a substantiated balancing of interests, the original information provided to affected people, usage rights and the current organiser's authority to republish. Do not claim that all former attendance included comprehensive advertising consent. Specify publication purposes, recipients and the retention/deletion concept.]
7. Analytics and other external services
[Complete this section to reflect the actual technical setup. In particular, check Lovable visitor analytics, other statistics/marketing services, external fonts, plugins and embedded third-party content. The website's Archivo fonts are served as website assets, not requested from Google Fonts. No analytics SDK or contact form was identified in the inspected application code; this does not establish that platform-level analytics are absent.]
Optional analytics or marketing services are only used in accordance with the required legal basis and, where applicable, your consent. For each service actually used, describe the provider, data types, purposes, legal bases, storage/access mechanisms, periods and third-country transfers separately.
A statement such as “We do not use analytics tools” may only be used if checked, including hosting/platform settings. Services that are not present need not be described as actually used.
8. Recipients and processing outside the EEA
Data may be shared with service providers where required for the purposes described, such as hosting, technical delivery and email communication. Recipients and their roles depend on the service used. Authorities or other bodies receive data only where there is a legal basis.
Use of international providers may involve processing outside the European Union or European Economic Area. The relevant countries and conditions must be explained for each service. Relevant adequacy decisions or appropriate safeguards such as EU standard contractual clauses may provide a basis, where their requirements are met in the individual case.
[Add actual recipients, countries and transfer mechanisms. Do not claim exclusively European operation, a specific certification or contractual guarantee without verification.]
9. Retention periods
We store personal data only for as long as necessary for the respective purposes or where statutory retention obligations apply. Specific periods or their criteria are set out in the respective sections of this information. If deletion is not yet possible due to legal obligations or necessary pursuit of legal claims, processing is restricted to the remaining permissible purpose.
10. Your rights
Subject to the legal requirements, you have rights of access to your personal data, rectification, erasure, restriction of processing and data portability.
Withdrawal of consent: You can withdraw consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.
Objection: Where processing is based on Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to processing for direct marketing at any time.
You can use the contact details above to exercise your rights. You may also complain to a data protection supervisory authority, particularly where you habitually reside, work or suspect an infringement. The Bavarian State Office for Data Protection Supervision is generally responsible for private companies based in Bavaria: https://www.lda.bayern.de/
11. Changes to this information
We update this information when we introduce new functions or processing changes. The current version is indicated on this page.
Version: [Add the date of the actually reviewed and published version.]