Privacy Policy

Last updated: July 2026

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Beyondles UG (haftungsbeschränkt) i.G.
Bahnhofstraße 44, 14612 Falkensee, Germany
Email: [email protected]
Further details are available in our Legal Notice.

2. Data protection officer

We are not legally required to appoint a data protection officer. For privacy enquiries, please contact the email address above.

3. Processing when visiting the website

When you access our website, your browser automatically sends information to our server, which is temporarily stored in server log files (including IP address, date and time of access, page accessed, volume of data transferred, referrer URL, browser type and operating system). This data serves the technical provision, stability and security of the website.

The legal basis is our legitimate interest in a secure and functional website (Art. 6 (1)(f) GDPR). Server log files are generally deleted after 30 days.

4. Founding Partner application

When you use the Founding Partner application form, we process the data you provide: name, work email address, company, role, company website, and your notes on the problem to be solved and your current AI experience.

We process this data solely to review your enquiry, contact you and prepare a possible collaboration. The legal basis is the performance of pre-contractual measures at your request (Art. 6 (1)(b) GDPR) and our legitimate interest in handling business enquiries (Art. 6 (1)(f) GDPR).

Application data is stored in our database and additionally sent to us by email (see section 6). If no collaboration results, we delete the data as soon as it is no longer required for that purpose, at the latest after statutory retention periods expire.

5. User account and sign-in

A user account is required to use the platform. During registration and sign-in we process your name, email address, an encrypted password and the contract and usage data belonging to your organisation. The legal basis is the performance of the usage contract (Art. 6 (1)(b) GDPR). For session management we set a technically necessary authentication cookie (platform-auth-token) on the .beyondles.ai domain.

6. Recipients and processors

To provide our service we use carefully selected providers that process personal data on our behalf pursuant to Art. 28 GDPR:

Where data is transferred to the USA, this is based on the EU Commission's Standard Contractual Clauses or a valid adequacy decision (EU-US Data Privacy Framework).

7. Cookies

We use strictly necessary cookies only. There is no tracking and no analytics for advertising purposes.

The legal basis for strictly necessary cookies is § 25 (2) TDDDG and our legitimate interest in a functional service (Art. 6 (1)(f) GDPR).

8. Retention

We process personal data only for as long as necessary for the respective purposes or as required by statutory retention periods (in particular commercial and tax law periods of up to 10 years).

9. Your rights

Under the GDPR you have, in particular, the following rights:

• access (Art. 15 GDPR);
• rectification (Art. 16 GDPR);
• erasure (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• objection (Art. 21 GDPR);
• withdrawal of consent with future effect (Art. 7 (3) GDPR).

To exercise your rights, an informal message to [email protected] is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

11. Changes to this privacy policy

We adapt this privacy policy whenever changes to our data processing make it necessary. The current version published on this page applies.