carpilot.ai

Privacy policy

1. Responsible person

The controller responsible for data processing on this website is

HC Digital Services GmbH
Brüsseler Str. 6
67657 Kaiserslautern
E-Mail: info@carpilot.ai

2. Data protection officer

You can reach our data protection officer at

fox-on Datenschutz GmbH
E-Mail: dsb@fox-on.com
Telephone: 02266 9015920

3. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

When you visit our website https://carpilot.ai/, the browser you use automatically sends information to the server of our website. This information is temporarily stored in so-called log files. The following information may be collected:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access was made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer and the name of your access provider

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring a comfortable use of our website
  • Evaluation of system security and stability
  • Administration of the website

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above-mentioned purposes. Under no circumstances do we use the data collected to draw conclusions about you personally.

b) When using our contact form

We offer you the possibility to submit a demo request or general contact enquiry via a form provided on the website. It is necessary to fill in the mandatory fields (company name, first and last name, email address, product interest) so that we can assign and respond to your request. Additional notes can be provided voluntarily. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR (taking pre-contractual steps at your request) and Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in efficiently handling customer enquiries). The form is embedded on our website as a first-party form; no third-party content is loaded when the page is opened and no cookies are stored on or read from your device. Only upon your active submission are the entered data – together with the URL of the page the request was sent from and a timestamp – transmitted to and stored with our CRM service provider HubSpot Ireland Ltd. Further details about processing by HubSpot can be found under section 5 d).

4. Cookies and consent management

Our website uses cookies and similar technologies. Technically necessary cookies are set on the basis of Section 25 (2) No. 2 TTDSG and Art. 6 para. 1 lit. f GDPR (for example, storing your cookie preferences). All cookies beyond that (analytics, advertising) are only set with your consent pursuant to Section 25 (1) TTDSG and Art. 6 para. 1 lit. a GDPR. You can adjust or revoke your selection at any time via the “Cookie settings” link in the footer. A complete list of the cookies used, their providers and lifetimes can be found in the cookie banner under “Manage preferences”.

We distinguish between the following cookie categories:

  • Strictly necessary – e.g. storing your cookie preferences (cc_cookie).
  • Analytics & statistics – Google Analytics 4 (_ga, _ga_*, _gid) for reach and usage analysis.
  • Advertising – Google Ads (_gcl_*) to measure campaign conversions.

5. Services used and third-party providers

We use the following services to analyse and optimise our website and to process contact enquiries. Personal data is only transferred to these providers on the basis of your consent given via the cookie banner (Art. 6 para. 1 lit. a GDPR, Section 25 (1) TTDSG).

a) Google Tag Manager

We use Google Tag Manager by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager is a pure container tool for managing our tracking tags. Tag Manager itself does not set any cookies and does not collect personal data for analytics purposes, but it does load other tags (see below) if you have given your consent. Further information can be found in Google's terms of use: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

b) Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies and similar technologies to collect anonymised information about your use of our website (for example, pages visited, time on site, device information, truncated IP address). Your IP address is truncated by Google prior to any storage (IP anonymisation). Data retention is limited to 14 months. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. Further information: https://policies.google.com/privacy.

c) Google Ads conversion tracking

To measure the success of our advertising campaigns we use Google Ads conversion tracking by Google Ireland Limited. A cookie (_gcl_*) is set as soon as you reach our website via a Google advertisement. This cookie allows us to track whether certain actions on our website (for example, submitting the contact form) led to a conversion. No personally identifiable information is transmitted to us. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

d) HubSpot (CRM and contact form)

For our contact form and the management of contact enquiries we use HubSpot, provided by HubSpot Ireland Ltd., One Dockland Central, Guild Street, Dublin 1, Ireland. The contact form is embedded as a first-party form directly on our website; no HubSpot scripts or HubSpot cookies are loaded when the page is opened. Only upon your active submission are the entered data (company name, first and last name, email address, product interest, optional notes) transmitted – together with the URL of the page the form was sent from and a timestamp – to the HubSpot Forms API (api.hsforms.com) and stored in the HubSpot CRM for the purpose of processing your enquiry. Data processing takes place within the framework of commissioned data processing pursuant to Art. 28 GDPR (data processing agreement in place). Hosting of the form data takes place in data centres within the EU. The legal basis is Art. 6 para. 1 lit. b GDPR (taking pre-contractual steps at your request) and Art. 6 para. 1 lit. f GDPR (legitimate interest in efficiently handling customer enquiries). Since the form neither stores information on nor reads information from your device, Section 25 TTDSG is not applicable. Further information can be found in HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy.

6. Disclosure of data

Your personal data is only disclosed to third parties if necessary to fulfil the purposes mentioned. Recipients are exclusively the processors listed in section 5 (Google Ireland Limited, HubSpot Ireland Ltd.), who act for us exclusively on instructions on the basis of a contract pursuant to Art. 28 GDPR. Your data will not be disclosed to any other third parties beyond this.

7. Data transfer to third countries

Google Ireland Limited and HubSpot Ireland Ltd. are based in the EU; however, their US parent companies (Google LLC and HubSpot Inc.) may access personal data. Transfer to the USA takes place on the basis of the EU-US Data Privacy Framework (adequacy decision by the EU Commission of 10 July 2023) and supplementary EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR). Google LLC (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI) and HubSpot Inc. (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TN8pAAG) are certified under the Data Privacy Framework.

8. Rights of data subjects

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
  • in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary to fulfill a legal obligation
  • to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
  • in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time;
  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR

9. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation.

10. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the lock symbol in the address bar of your browser. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

11. Updates to this privacy policy

This privacy policy is currently valid and was last updated in April 2026. It may become necessary to amend this privacy policy as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at https://carpilot.ai/en/privacy-policy.

carpilot.ai