Draft — pending legal review. Items highlighted in yellow must be completed or confirmed before this site goes live, and the final text should be reviewed by a qualified lawyer. This document is not legal advice.

Privacy Policy

Version: draft, DD Month 2026 · Applies to the website raksai.com

1. Controller

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

RAKS AI GmbH i.G. (company in formation — update to "GmbH" and add register details once registered)
[Street and house number], [postal code] Troisdorf, Germany
Represented by the managing directors: Tanushree Sandhu, Rajive Gupta
Email: admin@raksai.com

2. Data Protection Officer

Our Data Protection Officer is:

[First name] [Last name]
Email: admin@raksai.com

3. Scope

This policy explains what personal data we process when you visit this website and use the contact form, on what legal basis, for how long, and what rights you have. We process personal data only as far as necessary and in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

4. Data we process

4.1 Server log files

When you access the website, our hosting provider automatically collects and stores technical information that your browser transmits, in server log files: IP address, date and time of the request, the page requested, the referring URL, and your browser type/operating system. This data is not merged with other data and is used only to ensure the security, stability, and correct operation of the site.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website).
  • Retention: log data is deleted after [retention period set by the hosting provider — typically 7–30 days].
  • Hosting provider: [hosting company name and address — to be finalized; a data processing agreement (AVV) must be in place].

4.2 Contact form

If you use our contact form, we process the data you enter: name, work email address, company (optional), and your message, including any pain-point summary you choose to include. We use this data solely to respond to your enquiry and to take steps at your request prior to entering into a contract.

  • Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(a) GDPR (your consent in submitting the form).
  • Retention: submissions are deleted after 12 months, unless a business relationship arises, in which case statutory retention periods apply.
  • Processor: the form is delivered through Formspree, operated by Formspree, Inc., 2100 Geng Road, Suite 210, Palo Alto, CA 94303, USA. Form data is transmitted to and processed by this provider on our behalf.

4.3 Fonts and icons

Before launch: fonts will be self-hosted so no visitor data is sent to Google. Once self-hosting is in place, web fonts are served from our own server and no font requests are made to third parties. Interface icons are currently loaded from the jsDelivr content delivery network (operated by a third-party CDN provider), which necessarily receives your IP address to deliver the files. Legal basis: Art. 6(1)(f) GDPR (efficient and secure delivery of the website). These icons can also be self-hosted to remove this third-party call — confirm if desired.

5. Recipients and international transfers

We share personal data only with the processors named above (hosting provider; Formspree) and the CDN provider, each strictly for the purposes described. Formspree, Inc. is based in the USA; transfers to the USA are safeguarded by the EU Standard Contractual Clauses and/or an applicable adequacy decision. Confirm the transfer safeguard with Formspree before launch. We do not sell personal data, and no data processed on this website is used to train AI models.

6. Cookies and analytics

This website does not use cookies and does not run any analytics or tracking tools. No consent banner is therefore required. If analytics is added later, this section and a cookie-consent mechanism must be added.

7. Your rights

Under the GDPR you have the right to: access your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise these rights, contact admin@raksai.com.

You also have the right to lodge a complaint with a supervisory authority. The authority competent for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Phone: +49 211 38424-0 · Email: poststelle@ldi.nrw.de

8. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website.

9. Changes to this policy

We may update this policy to reflect changes to the website or legal requirements. The current version is always available on this page.