Privacy Policy

Information on the protection of your personal data in accordance with the GDPR

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

MBI AI Science & Application
Owner: Dr. Mühenad Bilal
Lierstraße 15
80639 Munich
Germany

Phone: 0174 689 6690
E-Mail: info@mbi-ai.de
E-Mail (personal): m.bilal@mbi-ai.de
VAT ID: DE309634897

2. Data Protection Officer

A legally mandatory data protection officer is not required for our company. For data protection questions, please contact us directly using the contact details above.

3. Website Provision and Server Logs

This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit our website, the web server automatically collects the following data:

  • IP address of the requesting computer (anonymised after a short period)
  • Date and time of access
  • Name and URL of the retrieved file
  • Volume of data transferred
  • Notification of whether retrieval was successful
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)

Purpose: Ensuring trouble-free operation and security of our website, as well as error analysis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
Retention period: Server logs are deleted after a maximum of 7 days, unless security-relevant incidents require longer retention.
Note: This data is not merged with other data sources. No individual evaluation to create user profiles takes place.

4. Contact Form

When you send us a message via the contact form on this website, the following data is processed:

  • First and last name
  • E-mail address
  • Company / organisation (optional)
  • Subject of the enquiry
  • Message text

Purpose: Processing your contact enquiry and communicating with you.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Retention period: Your data will only be stored for as long as is necessary to process your enquiry. The data will then be deleted unless statutory retention obligations apply.
Disclosure: Your data will not be passed on to third parties.

5. Cookies

This website uses only technically necessary cookies. These cookies are essential for the operation of the website and therefore cannot be deactivated.

  • CSRF cookie (csrftoken): Protects forms against cross-site request forgery attacks. Set on every page load. Expires after 1 year.
  • Session cookie (sessionid): Only set when you log in to the internal area (time tracking). Deleted when the browser is closed.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). No consent is required for technically necessary cookies.

We do not currently use any analytics, marketing or tracking cookies from third-party providers (e.g. Google Analytics).

6. Google Analytics

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to enable analysis of the use of the website.

Purpose: Analysis of user behaviour (page views, dwell time, visitor origin) to improve our services.
Legal basis: Art. 6(1)(a) GDPR (consent). Google Analytics is only loaded if you actively consent.
IP anonymisation: IP anonymisation is activated. Your IP address is truncated by Google within the EU before transmission.
Retention period: The information generated by cookies is processed on Google servers in the EU. The data is deleted after 14 months.
Opt-out: You can withdraw your consent at any time via our privacy settings (cookie banner).

Further information on data protection at Google can be found at: policies.google.com/privacy

7. SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the padlock symbol in your browser bar. When SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

8. Note on the Use of Artificial Intelligence

MBI AI Science & Application uses AI tools (currently Claude by Anthropic) to support research, data analysis and drafting. By sending us documents, you agree to this processing. The following applies:

  • Processing takes place exclusively via business accounts with contractually regulated data protection (GDPR data processing agreement).
  • Our contract with the AI provider stipulates that it acquires no rights to your documents or to the results produced.
  • Your data is not used to train AI models.
  • Access is centrally managed by us: only the members of our team involved in your project can view your documents; no disclosure to third parties.
  • Any processing outside the EU is carried out in compliance with the GDPR.
  • We develop all substantive results ourselves and take full responsibility for them; any AI-assisted content is carefully reviewed by our experts.

If you do not agree to the use of AI, please let us know before sending any documents.

9. Your Rights as a Data Subject

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR): You have the right to receive information about your personal data stored by us.
  • Right to rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete data corrected.
  • Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided no statutory retention obligations apply.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of the processing of your data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your data where processing is based on Art. 6(1)(f) GDPR (legitimate interest).
  • Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise your rights, please contact us at: info@mbi-ai.de

10. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Phone: +49 981 180093-0
E-Mail: poststelle@lda.bayern.de
Website: www.lda.bayern.de

11. Currency and Amendments to this Privacy Policy

This Privacy Policy is current as of May 2026. Due to the ongoing development of our website or changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version of the Privacy Policy can be accessed at any time on this website at mbi-ai.de/en/privacy/.