Legal

Privacy

Last updated: 26 May 2026.

In short. peopleIX is operated by peopleIX GmbH (Cologne, Germany). We process personal data in the EU only, encrypt it at rest (AES-256) and in transit (TLS 1.2+), never use customer data to train AI models, and give you full control over cookies via Cookiebot. Demo bookings, form submissions, and site analytics are the only ways we process your data on this website.

1. Controller

The controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:

2. Data Protection Officer

peopleIX GmbH is not legally required to appoint a Data Protection Officer under § 38 BDSG. For all data protection questions, please contact privacy@peopleix.com.

3. What we process and why

3.1 Server logs (necessary)

When you visit www.peopleix.com, our hosting provider (Vercel) automatically logs your IP address, user agent, referrer, requested URL, and timestamp. This is necessary to deliver the website, detect abuse, and ensure security.

• Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating a secure, functional website).
• Retention: 30 days, then deleted.

3.2 Site analytics (consent-based)

With your consent, we use Google Analytics 4 (loaded via Google Tag Manager) to understand which pages visitors view, which sources bring them, and how they interact with our content. We use Consent Mode v2 with all categories denied by default until you grant consent via the Cookiebot banner. IP addresses are truncated by Google Analytics before storage.

• Legal basis: Art. 6 (1) (a) GDPR (your consent), given via the Cookiebot banner. You may withdraw consent at any time via the Cookiebot widget at the bottom-left of any page.
• Retention: Google Analytics retains event and user-level data for 2 months by default. Aggregated reports remain longer.

3.3 Demo bookings via Calendly (contract initiation)

When you book a 30-minute calibrated demo via the embedded Calendly widget, you provide Calendly LLC with your name, email address, timezone, and any additional information you choose to share. Calendly forwards this data to us so we can prepare and conduct the meeting.

• Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures taken at your request).
• Retention: Demo booking data is kept for as long as your interest in peopleIX is active and you have not requested deletion. We delete inactive prospect data after 24 months unless legal retention obligations apply.

3.4 Email contact and form submissions (your request)

If you email us (e.g. privacy@peopleix.com, hello@peopleix.com, contact@peopleix.com), we process the content of your message and any contact details you provide to handle your request.

• Legal basis: Art. 6 (1) (b) GDPR if your request relates to a (potential) contract; Art. 6 (1) (f) GDPR otherwise (our legitimate interest in responding to inbound inquiries).
• Retention: 36 months from the last interaction, unless statutory retention obligations require longer.

3.5 Cookies and similar technologies

We use cookies that are strictly necessary to operate the site, plus consent-based cookies for analytics. Cookiebot manages your consent and stores a consent record (a necessary cookie itself). No marketing or advertising cookies are set on this website at the time of writing. The full, current cookie list is at the bottom of this page.

• Legal basis: § 25 (2) TTDSG (strict necessity) for necessary cookies; § 25 (1) TTDSG in conjunction with Art. 6 (1) (a) GDPR (your consent) for analytics cookies.
• Retention: See the per-cookie expiry in the cookie declaration below. Cookiebot consent records are retained for 12 months.

4. Recipients of personal data

We rely on the following processors. Each is bound by an Art. 28 GDPR data processing agreement. We disclose personal data to them only to the extent necessary for the stated purpose.

5. International data transfers

Some of our processors (Google, Calendly, Vercel) are located in the United States. Transfers to the US take place on the basis of:

• The EU-US Data Privacy Framework adequacy decision (Art. 45 GDPR), for processors certified under the DPF (Google LLC, Calendly LLC).
• EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR), supplemented by appropriate technical and organisational measures (encryption in transit and at rest, access controls).

6. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): obtain confirmation of whether we process your data and a copy of that data.
• Right to rectification (Art. 16 GDPR): correct inaccurate data.
• Right to erasure (Art. 17 GDPR): request deletion where the legal conditions are met.
• Right to restriction (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR): receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): object to processing based on Art. 6 (1) (f) GDPR (legitimate interest).
• Right to withdraw consent (Art. 7 (3) GDPR): at any time, with no effect on processing carried out before withdrawal. For cookies, use the Cookiebot widget at the bottom-left of any page.

To exercise any right, email privacy@peopleix.com. We will respond within 30 days as required by Art. 12 (3) GDPR.

7. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for peopleIX GmbH is:

8. Automated decision-making

We do not use your personal data for automated decision-making or profiling under Art. 22 GDPR on this website.

9. Changes to this policy

We may update this policy when legal requirements change or when we introduce new processing activities (for example, a new marketing tool). The current version always lives at peopleix.com/privacy and is dated above. Material changes will be communicated separately.

10. Cookie declaration

The list of cookies and processors below is generated automatically by Cookiebot and reflects the current state of cookies on this site. To change your consent, click the Cookiebot icon at the bottom-left of any page.