Privacy policy
Last updated: 18 August 2026
1. Who is the controller
Al Saad Menden GbR, Gretescher Weg 69, 49084 Osnabrück, Germany.
Contact: contact@amdigitalintelligence.com
Because we are established in Germany, our lead supervisory authority is the data protection authority for Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany. If you are in Ireland you may instead lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (dataprotection.ie). You are free to choose either.
2. What we process, and why
| Category | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Visiting the site | IP address, date and time, page requested, browser type | Delivering the site, security | Art. 6(1)(f) GDPR (legitimate interest: running the site securely) | 7 days |
| Chat assistant | The content of the messages you type, a technical session identifier | Generating answers, improving the service | Art. 6(1)(f) GDPR (legitimate interest: demonstrating the product) | 90 days, then anonymised |
| Getting in touch | Name, email address, phone number, driving school name, message content | Dealing with your enquiry | Art. 6(1)(b) GDPR (steps prior to a contract) | 3 years after last contact |
| Business-to-business outreach | Driving school name, public business email address, website address | Introducing our service to businesses in the sector | Art. 6(1)(f) GDPR (legitimate interest), together with Regulation 13 of S.I. No. 336/2011 | Deleted after 12 months without a reply, or immediately if you object |
3. Where our outreach data comes from
As required by Article 14 GDPR, we identify our sources. The business contact details we use for outreach come from publicly available sources, namely: the Road Safety Authority's public register of Approved Driving Instructors, and driving schools' own websites (contact and legal pages). We do not buy or rent marketing lists and we do not scrape social networks.
We write to generic business addresses (info@, contact@, bookings@) wherever one is published, rather than to a named personal address, and only about your business activity.
4. The chat assistant and our processors
The assistant runs on a language model operated through Microsoft Azure OpenAI Service, in a region located in the European Union. The messages you type are sent to that service so it can generate a reply. Microsoft acts as a processor within the meaning of Article 28 GDPR and does not reuse this content to train its models.
Conversations are recorded in a database hosted by Supabase in the European Union, and on a server operated by Hostinger International Ltd. Each of these processors is bound by a data processing agreement that meets Article 28 GDPR.
Please do not type sensitive information (health, opinions, bank details) into the assistant. It is not needed for the service.
5. Cookies and tracking
This site uses no advertising cookies, no analytics trackers and no third-party analysis tools. No consent banner is therefore required under Regulation 5 of the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. No. 336/2011).
The chat assistant uses a session identifier that is strictly necessary for it to work. It is held only for the duration of the conversation, in your browser's memory. We understand this to fall within the exemption for storage that is strictly necessary to provide a service the user has expressly requested.
6. Who receives your data
Your data is not sold, rented or passed to third parties for commercial purposes. It is accessible only to the partners of the company and to the processors listed in section 4, strictly to the extent necessary.
7. Transfers outside the European Union
Our processing is configured to stay within the European Union. Should a transfer to a third country become necessary, it would be covered by the European Commission's standard contractual clauses together with supplementary measures.
8. Your rights
You have the following rights over your data:
- the right of access (Article 15 GDPR);
- the right to rectification (Article 16);
- the right to erasure (Article 17);
- the right to restriction of processing (Article 18);
- the right to data portability (Article 20);
- the right to object (Article 21) — in particular to direct marketing, which you may exercise at any time and without having to give a reason;
- the right to lodge a complaint with a supervisory authority — either the Lower Saxony authority or the Irish Data Protection Commission, as set out in section 1.
To exercise these rights, write to contact@amdigitalintelligence.com. We reply within one month. If you simply want to stop hearing from us, the quickest route is our unsubscribe page.
9. Security
Traffic to and from this site is encrypted (HTTPS). Access to the data is protected by authentication and limited to the people who need it. Backups are encrypted and kept in the European Union.
10. Changes
This policy may be updated. The date at the top of the page indicates the version in force.