Privacy Policy

Last updated: 26 June 2026

We appreciate your interest in our website. Protecting your personal data is important to us. This privacy policy explains what personal data we process when you visit our website fieldproven.ai or get in touch with us — and what rights you have.

This website is deliberately data-minimal: we set no cookies of our own, we run no third-party tracking, and we embed no external fonts, maps, or social media plugins.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Fieldproven AI GmbH
Schweriner Straße 16
23896 Walksfelde
Germany

Represented by the Managing Director Andy Goldschmidt
Phone: +49 151 40418560
Email: andy@fieldproven.ai

Further details about the company can be found in our Imprint.

We are not legally required to appoint a data protection officer and have not appointed one. For data protection enquiries, please use the contact details above.

2. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights vis-à-vis us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

Right to object (Art. 21 GDPR)

Insofar as we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. The supervisory authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD) — the State Data Protection Commissioner of Schleswig-Holstein
Holstenstraße 98
24103 Kiel, Germany
www.datenschutzzentrum.de

3. Hosting

This website is hosted as a static site with Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, with whom we have concluded a data processing agreement (DPA). On our behalf, Cloudflare processes in particular connection and server log data in order to ensure secure and reliable delivery of the website.

The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6(1)(f) GDPR).

A transfer of data to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, the European Commission's standard contractual clauses serve as appropriate safeguards within the meaning of Art. 44 et seq. GDPR.

Server log files

When you access our website, information is automatically collected in so-called server log files, which your browser transmits. These are typically:

• IP address of the requesting device
• date and time of access
• page or file requested
• amount of data transferred and confirmation of successful retrieval
• browser type and version used
• operating system
• referrer URL (the previously visited page)

This data is processed to ensure a smooth connection, to safeguard system security and stability, and for administrative purposes. The legal basis is Art. 6(1)(f) GDPR. We do not merge this data with other data sources, nor do we evaluate it for the purpose of identifying individual persons. The log data is deleted after a short period, unless it is needed for longer for security purposes (e.g. to investigate misuse or attacks).

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar shows “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.

5. Cookies

Our website sets no cookies of its own and uses no cookies for analytics, marketing or tracking purposes. For this reason, no cookie banner is required.

Strictly necessary cookies may in individual cases be set by our hosting provider Cloudflare, for example to ensure the security of the website and to ward off automated attacks. These cookies are necessary for secure operation; the legal basis is Art. 6(1)(f) GDPR and Section 25(2) TDDDG (the German Telecommunications Digital Services Data Protection Act).

6. Fonts (served locally)

For a consistent appearance we use the “Inter” and “JetBrains Mono” typefaces. These are served locally from our server and are not loaded from an external provider (e.g. Google Fonts). When you access our pages, no connection to third-party servers is therefore established and no data is transmitted to third parties in this respect.

7. Web analytics with Umami

We use Umami, a self-hosted, privacy-friendly web analytics tool, to evaluate the use of our website statistically and to improve our offering. Umami runs on a server operated by us in Germany; the collected data remains in the European Union and is not passed on to third parties.

Umami is deliberately data-minimal:

• No cookies are set and no information is stored on or read from your device.
• No full IP address is stored. To recognise visitors within a single day, an anonymised, daily-rotating hash value is generated from the IP address, browser identifier and domain, which does not allow any conclusions to be drawn about your identity.
• No cross-site or cross-device tracking and no profiling takes place.

What is recorded includes, for example, the pages visited, the approximate origin (country), the referring page (referrer), and the browser, device type and operating system used — in each case in aggregated, non-personal form.

The legal basis is our legitimate interest in needs-based and statistically sound optimisation of our website (Art. 6(1)(f) GDPR). Because Umami stores no information on and reads no information from your device, consent under Section 25 TDDDG is not required. You may exercise your right to object under Art. 21 GDPR at any time (see Section 2).

8. Contacting us by email

We do not offer a contact form on our website. If you contact us by email (andy@fieldproven.ai), we process the data you provide — in particular your email address, your name (if given) and the content of your message — solely to handle your enquiry and in case of follow-up questions.

The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding or performing a contract, and otherwise our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).

Our email service is operated via Google Workspace (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We have concluded a data processing agreement with Google. Processing in the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework, and standard contractual clauses additionally serve as appropriate safeguards (Art. 44 et seq. GDPR).

Your enquiry and the associated data will be deleted once your request has been conclusively dealt with, provided no statutory retention obligations prevent this.

9. Online appointment booking

To arrange a call, we link to Google's appointment scheduler (Google Appointment Scheduling / Google Calendar), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This is an external link, not an embedded feature: simply visiting our website does not transmit any data to Google. Only when you click the link and book an appointment do you leave our website, and the data you enter (e.g. name, email address, requested time and any message) is processed by Google in order to organise the appointment. We subsequently receive this appointment data as the organiser via Google Workspace.

The legal basis for booking an appointment is Art. 6(1)(b) GDPR (performance of pre-contractual measures) and our legitimate interest in straightforward scheduling (Art. 6(1)(f) GDPR). Google's own privacy policy additionally applies to the processing by Google: policies.google.com/privacy. Here too, a transfer to the USA may take place (safeguarded as described in Section 8).

10. External links and social media profiles

Our website contains links to external third-party websites, such as to our LinkedIn profile. We do not embed any social media plugins or “like” buttons; merely visiting our website therefore transmits no data to these providers.

Only when you actively click such a link are you redirected to the respective provider's site. We have no influence over their data processing; the privacy policy of the respective provider applies. For the LinkedIn profile, this is LinkedIn Ireland Unlimited Company; you can find information at linkedin.com/legal/privacy-policy.

11. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

12. Validity and changes to this privacy policy

This privacy policy was last updated in June 2026. As our website develops, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access the current version at any time on this page.