Privacy
Privacy Policy
Only the German version of this privacy policy is legally binding. Translations are for informational purposes only.
Data Protection, Responsibility and Scope
We respect the privacy of our customers and other interested parties and comply with applicable laws to protect your privacy. These laws include in particular the General Data Protection Regulation of the European Union (“GDPR”) and the German Federal Data Protection Act (“BDSG”).
The following categories of data subjects are covered by this privacy notice:
- Website visitors
- Prospects and potential customers
- Employees of customers
The controller responsible for processing your personal data under this privacy notice is:
GO TO KI GmbH
Schumannstraße 17
10117 Berlin
Germany
Email: hello@gotoki.ai
Phone: +49 30 243561432
Website: gotoki.ai
The following sections explain:
- For what purposes personal data is collected and processed.
- Which categories of personal data are affected.
- The legal basis for processing personal data.
- Which third parties are involved as processors.
- To which third parties personal data is transferred.
- Further information such as storage duration, data subject rights and other relevant details.
Processing Purposes: Website gotoki.ai
Website Hosting
Our website is hosted on the Vercel platform. Vercel is a product of the US company Vercel Inc. Vercel uses Content Delivery Network (CDN) infrastructure to deliver website content quickly and securely to visitors.
Data collected and processed:
- Technical information such as IP address
- Device information
- User behavior relevant for error analysis
- Website visit data
- Browser information
- Log data
Legal basis:
- Legitimate interest based on Art. 6(1)(f) GDPR
- Data Privacy Framework
Processor involved:
Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
Testing the AI Phone Assistant
We offer a function on our website to test an AI phone assistant. After providing the necessary data, you will receive a call from our AI phone assistant. The test call is recorded and transcribed. Recordings and transcripts are used for quality assurance, analysis and improvement of our AI systems.
Data collected and processed:
- Identification data (name)
- Contact data (phone number, email address)
- Company (if provided)
- Audio data of the phone call
- Transcripts of conversations
- Information you provide verbally to the AI assistant
Legal basis:
- Consent based on Art. 6(1)(a) GDPR
- Data Privacy Framework
- Standard Contractual Clauses
Processors involved:
- Twilio Ireland Limited, 25-28 North Wall Quay, D01 H104 Dublin, Ireland
- OpenAI, L.L.C., 3180 18th St, San Francisco, CA 94110, United States
- Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, United States
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Additional information:
- By agreeing to the privacy policy in the contact form and requesting a call, you consent to recording and transcription of the call and analysis of the conversation data.
- Recordings, transcripts and associated personal data are stored for a period of 12 months, unless legal retention obligations require longer storage.
- You may revoke your consent at any time in writing (by email to hello@gotoki.ai or by post). After receipt of revocation, all stored recordings, transcripts and associated data will be deleted without delay.
Contact via Contact Form and Email
We offer a contact form and contact email address on our website through which you can contact us to request information about our services, request a quote, or provide feedback.
Data collected and processed:
- Identification data (name)
- Contact data (email address, phone number)
- Company (if provided)
- Information you send us via contact form or email
Legal basis:
- Legitimate interest based on Art. 6(1)(f) GDPR
- (Pre-)contractual obligations based on Art. 6(1)(b) GDPR
Cookies and Local Storage
Our website generally does not use cookies. In particular, we do not use third-party cookies or tracking cookies.
Further Information
Data Transfer to the USA and the Data Privacy Framework
We note that on July 10, 2023, the EU Commission issued an adequacy decision for the EU-US Data Privacy Framework under Art. 45(1) GDPR. Organizations in the USA that are registered through self-certification of the Data Privacy Framework provide an adequate level of protection for data transfers.
Standard Contractual Clauses
To enable data transfer to countries without an adequacy decision, the EU Commission has created contractual templates (Standard Contractual Clauses). These Standard Contractual Clauses obligate contracting parties to maintain a level of data protection comparable to that in the EU.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, our website uses SSL/TLS encryption. This means data you transmit via this website is generally not readable by third parties.
Storage Duration
We store your personal data only as long as necessary for the purposes described above or as contractual or legal retention periods require.
Data Sharing
We only share your personal data with third parties when required by law, when necessary for providing our services, or when you have consented. We will never sell your data to third parties without your explicit consent.
Data Subject Rights
Right of Access
You have the right to request information about your personal data stored by us at any time and to receive a copy.
Right to Rectification
If your data is incorrect or incomplete, we will correct it upon request.
Right to Data Portability
If we process your personal data with your consent or based on a contract, you have the right to request a copy in a structured, commonly used and machine-readable format.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data under certain circumstances.
Right to Erasure
You have the right to have personal data processed by us deleted, provided this is legally permissible.
Right to Object
You may object to the processing of your personal data, for example by not using certain services.
Right to Lodge a Complaint
If you believe we are not processing your personal data correctly, you can contact us. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.
All rights can be exercised via the following contact:
GO TO KI GmbH
Schumannstraße 17
10117 Berlin
Email: hello@gotoki.ai
Changes to this Privacy Notice
We will update this privacy notice from time to time. All changes will be published on this page with an updated date.
Publication date of the current version: 09.03.2026