About this policy
This policy explains how AXIS handles personal data collected through the website axisai.work and all its regional versions (the “site”). It also covers emails you send to agency@axisai.work in reply to the site or when the request form could not be sent.
The policy is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR together with the Data Protection Act 2018, and, for residents of California, the California Consumer Privacy Act (CCPA). The site is intended for businesses and is not directed at children.
Who is responsible
The controller of your personal data is:
- AXIS
- Email: agency@axisai.work
- Website: axisai.work
Questions about this policy and requests about your data go to the same email address.
Requests sent through the form
- Data: your name, an email address or phone number (including a WhatsApp number), the description of your task, the product whose button opened the form, the address of the page you sent the request from and the campaign tags (UTM) in that address.
- Purpose: to reply to your request, discuss your task and prepare an offer.
- Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR); the same provisions of the UK GDPR apply in the UK.
The form needs a name, a contact and a task: without them we cannot reply. Providing them is not required by law or by a contract. Please do not include health information, other sensitive data or details about other people in the description: we do not need them to reply.
Records of your choices
- Data: the date and time of your choice in the cookie banner or of ticking the box in the form, the choice itself, the version of these documents, the page address, your IP address, your browser’s user agent and a random browser identifier.
- Purpose: to show which choice you made and when, and to link a later change of mind to the earlier choice of the same browser.
- Legal basis: our obligation to demonstrate consent (Art. 6(1)(c) and Art. 7(1) GDPR) and our legitimate interest in keeping evidence of how a request reached us (Art. 6(1)(f) GDPR).
Website analytics
- Data: Google Analytics 4 cookies and identifiers, IP address, approximate location derived from it, browser and device information, pages viewed, the referring source and actions on the site such as opening the request form or clicking a contact link.
- Purpose: to understand which pages are read and where visitors come from, so that we can improve the site.
- Legal basis: your consent, given with the Accept button in the cookie banner (Art. 6(1)(a) GDPR and the rules on storing information on devices, such as PECR in the UK). Without your consent Google Analytics is not loaded at all. You can withdraw consent at any time in the ; this does not affect processing before the withdrawal.
Hosting, delivery and security
- Data: IP address, date and time of the request, page address, browser user agent and the server response code.
- Purpose: to deliver the site, protect it against attacks and investigate errors.
- Legal basis: our legitimate interest in a working and secure site (Art. 6(1)(f) GDPR).
The site runs on servers in Germany. Requests from the form are stored in the site’s database there and then delivered by email to agency@axisai.work.
We do not make decisions about you based solely on automated processing, including profiling.
Cookies
Technical cookies are needed for the site to work and are set without asking. Analytics cookies are set only after you click Accept in the banner.
| Cookie | Type | Purpose | Lifetime |
|---|---|---|---|
axis_consent | Technical | Stores your cookie choice and a random browser identifier | 1 year |
editor_session, editor | Technical | Sign-in for blog editors; set only after an editor signs in | 7 days |
_ga, _ga_* | Analytics | Google Analytics: tell browsers apart on repeat visits and keep the session | 2 years |
You can change your choice at any time in the ; the same button is in the site footer. After you decline, the site stops loading Google Analytics. You can also delete cookies in your browser settings.
Who receives the data
We do not sell personal data. Only the following service providers process it, on our behalf and under our instructions:
- the hosting provider of our servers in Germany;
- the provider of the mailbox that receives requests;
- Google Ireland Limited and Google LLC (Google Analytics, only with your consent).
Google may process data outside the European Economic Area and the UK, including in the United States. These transfers rely on the EU–US Data Privacy Framework and its UK extension, under which Google LLC is certified, and on the standard contractual clauses in Google’s data processing terms.
Some blog cover images load directly from Unsplash, like any external image; your browser then sends its IP address to Unsplash. We may also disclose data where the law requires it.
How long we keep data
- Requests and records of your choices are kept for 3 years from the date they are recorded and are then deleted from the site’s database by a daily check. Database backups are kept for 14 days and overwritten, so deleted data also disappears from the backups no later than 14 days after deletion.
- Emails with requests are deleted from our mailbox within the same period.
- Server logs are kept for no longer than 30 days.
- Your cookie choice is kept in your browser for 1 year; after that the banner asks again.
- Google Analytics keeps event data for no longer than 14 months.
- If you ask us to delete your data, or the purpose has been reached earlier, we delete it within one month unless the law requires us to keep it.
Your rights
Under the GDPR and the UK GDPR you have the right to:
- access the data we hold about you and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict processing;
- receive the data you provided in a machine-readable format and have it transmitted to another controller;
- object at any time to processing based on our legitimate interests;
- withdraw your consent to analytics at any time, without affecting earlier processing.
To exercise a right, email agency@axisai.work. Please include the contact you left in the request: that is how we find your data. We reply within one month; for complex requests this may be extended by two further months, and we will tell you why. Consent to analytics is withdrawn in the .
You also have the right to lodge a complaint with a supervisory authority: in the EU, with the authority of the country where you live, work or where the alleged infringement took place; in the UK, with the Information Commissioner’s Office (ico.org.uk).
Notice for California residents
This section applies to residents of California under the CCPA.
- Categories collected in the last 12 months: identifiers (name, email address or phone number, IP address, random browser identifier); professional or commercial information you write in your request; internet activity (pages viewed, campaign tags, browser information and, with your consent, analytics events); approximate location derived from your IP address by Google Analytics.
- Sources: you, when you send a request, and your browser.
- Purposes: replying to your request and preparing an offer, keeping records of your choices, running and securing the site, and, with your consent, website analytics.
- Disclosure: for these business purposes only to the service providers listed in “Who receives the data”. We do not sell your personal information and do not share it for cross-context behavioral advertising. We do not collect sensitive personal information.
- Retention: as set out in “How long we keep data”.
You have the right to know what personal information we collect, use and disclose, to access it, to have it deleted and corrected, and not to be discriminated against for exercising these rights. Since we do not sell or share personal information, there is nothing to opt out of; analytics can still be declined in the .
To exercise your rights, email agency@axisai.work. We verify a request by matching the contact you used in your original request. An authorized agent may send a request on your behalf with your written permission. We reply within 45 days; if we need more time, we will tell you, and the total period will not exceed 90 days.
Changes to this policy
We may update this policy. The current version is published on this page with its date. When the terms change, the cookie banner asks for your choice again.