Privacy Policy & Cookie Policy,

Last updated: 7 August 2026

Concept-4-You GmbH takes the protection of personal data seriously.

This Privacy & Cookie Policy explains how we collect and process personal data when you visit our website, use our contact functions, communicate with us, or interact with services integrated into the website.

Personal data is processed in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG), and other applicable data-protection requirements. The GDPR requires website operators to inform individuals, among other things, about purposes, legal bases, recipients, retention periods, and their rights. EUR-Lex

Concept-4-You GmbH
Silberblattstraße 24a
81377 Munich
Germany

Email: info@concept-4you.com
Website: https://ai-supplymanagement.com

Concept-4-You GmbH is the controller responsible for the processing of personal data through this website.

Depending on how you use our website, we may process:

• contact information, such as name, email address, telephone number and company
• professional information, such as your role, function or organization
• information contained in contact forms, chat messages, emails or other business communications
• technical data such as IP address, browser type, operating system, device information, access time and server-log information
• cookie, consent and website-usage information where applicable

We do not intentionally request special categories of personal data through this website. Please do not submit sensitive personal information unless this is necessary for a specific communication.

We process personal data where necessary to:

• provide, operate and secure the website
• respond to inquiries and business communications
• discuss potential advisory, consulting or interim-management engagements
• take steps prior to entering into a contractual relationship
• manage existing business relationships
• comply with legal obligations
• protect the website and contact functions against misuse
• analyze and improve website performance where the required consent has been provided

Depending on the processing activity, the legal basis is:

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – contractual or pre-contractual measures
• Art. 6(1)(c) GDPR – compliance with legal obligations
• Art. 6(1)(f) GDPR – legitimate interests, including secure website operation and professional business communication

Our website is created and operated using GoDaddy Websites + Marketing.

Service provider:

GoDaddy.com, LLC
100 S Mill Ave, Suite 1600
Tempe, Arizona 85281
United States

In providing website hosting, technical infrastructure and related services, GoDaddy may process technical information required to provide, maintain and secure the website.

Where GoDaddy acts as a processor, its Data Processing Addendum governs the relevant processing. GoDaddy's current DPA also addresses subprocessors and international transfers, including the use of EU Standard Contractual Clauses where applicable. GoDaddy

When you access our website, technical information may automatically be processed in order to deliver the website, maintain system security, diagnose technical problems and prevent misuse.

This information may include:

• IP address
• date and time of access
• requested page or resource
• browser and operating-system information
• device information
• referring website
• technical status and log information

Where this information constitutes personal data, processing is generally based on our legitimate interest in providing a secure and reliable website pursuant to Art. 6(1)(f) GDPR.

Our website provides a contact form through which you may send inquiries to Concept-4-You.

When you submit a contact request, we process the information entered into the form, including your message and the contact information requested by the form, in order to respond to your inquiry.

GoDaddy Websites + Marketing integrates website contact forms with GoDaddy Conversations, where contact-form notifications and responses may be stored in the unified inbox. GoDaddy

Where your inquiry relates to a potential or existing business relationship, processing is generally based on Art. 6(1)(b) GDPR. Other professional business communication may be processed on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

The information is retained only for as long as required to manage the communication, the resulting business relationship or applicable statutory retention obligations.

Our website uses the integrated GoDaddy Conversations chat functionality.

The chat allows website visitors to contact Concept-4-You directly. Messages and any contact information voluntarily submitted through the chat may be processed through the GoDaddy Conversations platform and made available to Concept-4-You for responding to the inquiry. GoDaddy confirms that Websites + Marketing includes an integrated chat widget and Conversations infrastructure. GoDaddy

Processing is based on Art. 6(1)(b) GDPR where the communication concerns a potential or existing business relationship, or Art. 6(1)(f) GDPR for general professional communication.

Where use of the chat requires access to information on the visitor's device, the applicable consent requirements under the TDDDG are observed.

Our contact form is protected by Google reCAPTCHA.

reCAPTCHA is designed to distinguish legitimate human interaction from automated abuse and thereby protect websites against spam, fraudulent activity and malicious submissions. Google for Developers

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google may process technical and interaction data in connection with reCAPTCHA in accordance with Google's applicable privacy terms.

Our purpose in using reCAPTCHA is to protect the website and its contact functions from spam and misuse.

Where the processing is necessary for security, the GDPR legal basis may be Art. 6(1)(f) GDPR. Where the technical implementation requires consent under the TDDDG or GDPR, reCAPTCHA must be activated only after the relevant consent has been obtained.

Our website uses cookies and similar technologies.

Under § 25 TDDDG, storing information on or accessing information from an end user's terminal equipment generally requires consent unless the relevant technology is strictly necessary to provide a digital service expressly requested by the user or another statutory exemption applies. Gesetze im Internet

Technologies strictly necessary to provide, secure or operate website functions may be used without prior consent where the statutory requirements are met.

Personal data subsequently processed through these technologies is processed under the applicable GDPR legal basis.

Our GoDaddy website currently has Advanced Tracking enabled.

Where consent is provided through the cookie banner, GoDaddy may collect behavioral information such as page visits or clicks for analytics and website-performance purposes. GoDaddy states that where visitors reject the cookie notice, such data is not collected and tracking tools are not loaded. GoDaddy

The legal basis for consent-based processing is Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

Consent may be withdrawn or changed at any time using the website's available cookie settings.

Concept-4-You currently does not use Google Analytics or Meta Pixel through the available GoDaddy integrations.

If these or comparable analytics or marketing technologies are introduced in the future, this Privacy & Cookie Policy and the applicable consent settings will be updated accordingly before such technologies are used where required.

Our website displays a TrustedSite trust and security badge.

Provider:

TrustedSite, LLC, doing business as TrustedSite / Halo Security
United States

TrustedSite provides website certification and trustmark services. TrustedSite states that website visits are counted using a tracking cookie and that a visit generally represents a unique 24-hour session. support.trustedsite.comTrustedSite's Privacy Policy also describes the processing of personal and technical information in connection with its services. trustedsite.com

Where TrustedSite uses cookies or comparable technologies that are not strictly necessary, those technologies may only be activated after the legally required consent has been provided.

TrustedSite also participates in mechanisms relating to international data transfers and publishes information regarding its Data Privacy Framework participation. trustedsite.com

Our website uses the consent functionality provided through GoDaddy Websites + Marketing.

Visitors can accept or reject optional tracking technologies through the cookie notice.

GoDaddy states that when visitors reject the cookie notice, applicable behavioral tracking data is not collected and tracking tools are not loaded. GoDaddy

You may change or withdraw your consent at any time through the available cookie settings. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You may also manage cookies through your browser settings. Blocking technically necessary cookies may affect website functionality.

Our website may contain links to external websites or third-party platforms, including LinkedIn.

When you follow such a link, you leave the Concept-4-You website. The relevant third-party provider is then responsible for the processing of personal data on its website or platform in accordance with its own privacy terms.

We do not sell or rent personal data.

Where necessary for the purposes described in this Policy, personal data may be processed by or disclosed to:

• GoDaddy and its authorized subprocessors
• website, hosting, IT and security providers
• Google in connection with reCAPTCHA
• TrustedSite in connection with its trust and security services
• professional advisers such as legal, tax or accounting advisers
• authorities where disclosure is legally required
• other business partners where disclosure is required for a specific engagement and is legally permitted

Where service providers act as processors, appropriate contractual arrangements are used where required.

Some service providers or their subprocessors may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the EEA, an applicable transfer mechanism is used where required, such as:

• an adequacy decision of the European Commission
• participation in the EU-U.S. Data Privacy Framework where applicable
• EU Standard Contractual Clauses
• additional safeguards where required

GoDaddy's DPA expressly addresses international transfer mechanisms, including Standard Contractual Clauses. GoDaddy

We retain personal data only for as long as required for the purpose for which it was collected.

Relevant retention periods may depend on:

• the duration of an inquiry
• the duration of a business or contractual relationship
• statutory commercial, accounting or tax retention requirements
• the establishment, exercise or defense of legal claims
• technical and security requirements

When the purpose and applicable retention obligations cease to apply, personal data is deleted or anonymized where appropriate.

Subject to the applicable statutory requirements, you have the right to:

• access your personal data
• request correction of inaccurate or incomplete information
• request erasure
• request restriction of processing
• receive applicable personal data in a portable format
• object to processing based on legitimate interests
• withdraw consent at any time with effect for the future
• lodge a complaint with a competent supervisory authority

The GDPR expressly provides these rights, including the right to lodge a complaint with a supervisory authority under Article 77. EUR-Lex

To exercise your rights, please contact:

info@concept-4you.com

You have the right to lodge a complaint with a competent data-protection supervisory authority.

For private-sector companies based in Bavaria, the competent supervisory authority is generally:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

The BayLDA supervises compliance with data-protection law in the private sector in Bavaria. LDA Bayern

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

The website is provided via encrypted HTTPS connections.

Concept-4-You does not use this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning website visitors within the meaning of Art. 22 GDPR.

We may update this Privacy & Cookie Policy where necessary to reflect legal, technical or operational changes.

The current version is always published on this website. The date of the latest revision appears at the beginning of this Policy.

For questions regarding privacy or the processing of your personal data, please contact:

Concept-4-You GmbH
Silberblattstraße 24a
81377 Munich
Germany

Email: info@concept-4you.com