Last updated: 8 November 2026. This is a translation; the German version is authoritative.
The controller for data processing on gracefashion.ai is AI.Worx GmbH, Borsigstraße 9, 93092 Barbing, Germany, represented by its managing director Maximilian Glas. Phone: +49 9401 8845 5160.
For any privacy question, contact us at datenschutz@aiworx.ai.
We process personal data only where it is needed to run the website, answer your requests, book demo appointments and, with your consent, for statistics and ad measurement. Services that use cookies or similar technologies for statistics or marketing load only after you have agreed in the cookie banner.
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. On every page request Vercel automatically processes technical data sent by your browser: IP address, date and time, requested page, referrer, browser and operating system. This is required to deliver the website, keep it stable and protect it against attacks.
The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a secure, working website. We have a data processing agreement with Vercel. Transfers to the USA rely on the EU-US Data Privacy Framework and, in addition, the EU Standard Contractual Clauses.
Vercel's privacy policy: https://vercel.com/legal/privacy-policy.
The fonts on this website are hosted locally on our server. No connection to Google or any other font provider is made.
We manage consent with Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot stores your choice in a cookie and logs the consent with an anonymised IP address, time and settings so we can prove it.
The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (duty to demonstrate consent) and § 25(2) TDDDG for the strictly necessary cookie. You can change or withdraw your choice at any time via "Cookie settings" in the footer.
Cookiebot's privacy policy: https://www.cookiebot.com/en/privacy-policy/.
We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself sets no cookies and analyses no data. It loads the services named in this policy, and statistics and marketing services only after your consent. Loading it may transmit your IP address to Google. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in managing these services efficiently.
With your consent we use Google Analytics 4 by Google Ireland Limited. It sets cookies and records how you use the website: pages viewed, time spent, approximate location derived from the truncated IP address, device and browser data. Google Analytics 4 does not store IP addresses. We use the reports to improve the website.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Data is deleted after 14 months at the latest.
Google's privacy policy: https://policies.google.com/privacy.
With your consent we use Google Ads conversion tracking by Google Ireland Limited. If you reach our website through a Google ad, a cookie records whether a specific action follows, such as a demo booking. We only see the total number of such actions, not who performed them.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Transfers to the USA rely on the EU-US Data Privacy Framework.
With your consent we use the LinkedIn Insight Tag by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It records page views and conversions so we can measure our LinkedIn ads and build ad audiences. LinkedIn gives us aggregated reports only. If you are logged in to LinkedIn, LinkedIn may link the data to your profile.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to LinkedIn Corporation in the USA under the EU-US Data Privacy Framework.
LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
For simple audience measurement we use Vercel Web Analytics. It works without cookies and without a cross-device identifier. Visits are counted with a hash of anonymised request data that is discarded after 24 hours. We only see aggregated figures such as page views and referrers.
The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in privacy-friendly audience measurement.
When you book a demo on our website, we process the form data: name, email address, chosen time and your answers to the form questions. To manage the appointment we pass this data to Calendly LLC, 3423 Piedmont Rd NE, Atlanta, GA 30305, USA, which creates the appointment and sends you the confirmation.
The legal basis is Art. 6(1)(b) GDPR, steps taken at your request prior to a contract. We have a data processing agreement with Calendly. Transfers to the USA rely on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. We keep the data as long as needed for your request and a possible collaboration and delete it afterwards unless statutory retention periods apply.
Calendly's privacy notice: https://calendly.com/legal/privacy-notice.
If you email or call us, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering it. We delete the data once the request is settled unless retention duties apply.
We link to our profiles, for example on Instagram. These are plain links: only when you click one are you taken to the network, which then processes data under its own privacy policy.
You have the following rights regarding your personal data:
Right to object (Art. 21 GDPR): where we process data under Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds.
For any request, an email to datenschutz@aiworx.ai.
Unless a specific period is stated above, we keep personal data only as long as the purpose requires and then delete it, unless statutory retention duties apply, for example under commercial or tax law.
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. You are not obliged by law or contract to provide data. Without the details in the booking form, however, we cannot arrange an appointment.
The website is served over TLS only. We use technical and organisational measures to protect your data against loss, misuse and unauthorised access.
We update this policy when the website or the services we use change. The version published here applies.