Data Protection
Privacy Policy
Last updated: 2nd of June 2026
Auxilius.ai GmbH ("Auxilius", "we", "us") takes the protection of personal data seriously. This policy explains what personal data we process when you visit our website auxilius.ai, contact us, subscribe to updates, or apply to work with us, and the rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). It applies to this website only; the use of the Auxilius platform by our customers is governed by separate contractual agreements with those customers.
1. Controller
Auxilius.ai GmbH
Beta-Str. 10A, 85774 Unterföhring, Germany
Represented by the managing directors Christian Hoppe and James Barnes
Email: info@auxilius.ai
2. Contact for data protection matters
Our contact for all data protection matters is Christian Hoppe ( info@auxilius.ai). Auxilius is not required to appoint a data protection officer under Art. 37 GDPR / §38 BDSG; this has been assessed and is reviewed regularly. You can contact us at any time with questions about this policy or to exercise your rights (Section 8).
3. Visiting our website
When you visit auxilius.ai, our hosting provider automatically processes technical data (IP address, date and time, browser type, operating system, referrer URL) in server log files. This is necessary to deliver the website securely and to detect abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website). Log data is deleted or anonymised.
Our website is hosted by Ploy, Inc. Where personal data is transferred outside the EEA in this context, transfers rest on an EU adequacy decision or EU Standard Contractual Clauses.
4. Contacting us and requesting a demo
If you contact us by email, form or phone, or request a demo, we process the data you provide (name, business email, company, role, message content) to respond to your enquiry and manage our business relationship. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding and in B2B business development). Enquiry data is retained as long as needed for the purpose and then deleted, unless statutory retention periods apply.
5. Newsletter and marketing communications
If you subscribe to updates from us, we process your email address (and name, if provided) to send you information about Auxilius, our product and relevant GRC topics. Subscription uses double opt-in; legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time via the unsubscribe link in every email or by contacting info@auxilius.ai. We use Sender.net as our dispatch provider under an Art. 28 data processing agreement.
We use Ploy native analysis tools to understand aggregate website usage. These tools are only activated with your consent via our cookie banner (Art. 6(1)(a) GDPR; §25 TDDDG). You can withdraw consent at any time via the cookie settings.
6. Job applications
If you apply to Auxilius, we process your application data (CV, contact details, qualifications, correspondence) to conduct the application process. We use the recruiting platform JOIN (JOIN Solutions AG) as our processor; applications submitted via JOIN are also subject to JOIN's own privacy information. In some cases, we work with recruiting partners who process candidate data under their own responsibility. Legal basis: Art. 6(1)(b) GDPR and §26 BDSG (decision on the establishment of an employment relationship). Application data of unsuccessful candidates is deleted no later than six months after the end of the process, unless you consent to a longer retention for future openings.
7. Recipients and international transfers
Within Auxilius, access to personal data is limited to those who need it for the purposes above. We share personal data only with: (a) service providers bound by Art. 28 data processing agreements (hosting, email services, newsletter dispatch, recruiting platform); (b) professional advisers where required; and (c) authorities where we are legally obliged. We do not sell personal data, and we do not use website or applicant data for automated decision-making within the meaning of Art. 22 GDPR.
We process data primarily within the EU/EEA. Where a service provider processes personal data outside the EEA, we ensure an adequate level of protection through an EU adequacy decision or EU Standard Contractual Clauses. You can request information about the safeguards in place via info@auxilius.ai.
8. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, contact info@auxilius.ai — we respond within the statutory deadlines.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Ansbach, Germany.
9. Retention
We retain personal data only as long as necessary for the purposes described above or as required by statutory retention obligations (e.g. commercial and tax law, up to 10 years for relevant records). After expiry, data is deleted or anonymised.
10. Security
We protect personal data through technical and organisational measures appropriate to the risk, including encryption in transit, access controls and managed devices.
11. Changes to this policy
We update this policy when our processing, tooling or legal requirements change. The current version is always available on this page; the date of the last update is shown above.