CSRD-GPT

Privacy Policy

CSRD-GPT Back to homepage
Legal

Privacy Policy

Last updated: May 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. Simon Weihofen

Mattesohlenweg 1

46562 Voerde

Germany

Email: simon(AT)csrd-gpt.com

 

2. General information

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing regularly takes place only with the consent of the data subject, unless another legal basis applies.

This website does not use cookies for tracking or analytics purposes. No third-party analytics or advertising services (e.g. Google Analytics) are integrated.

3. Hosting

This website is hosted by: 1&1 IONOS SE, Elgendorfer Str. 57 in 56410 Montabaur

Each time our website is accessed, the hosting provider’s server automatically records information transmitted by your browser (server log files), including: IP address, browser type and version, operating system, date and time of access, URL accessed. These data cannot be assigned to specific persons and are not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

4. Early Access form

We offer a form on this website through which you can express non-binding interest in CSRD-GPT. When using this form, we collect the following data:

  • Name
  • Email address
  • Professional role
  • Interest in a particular plan
  • Description of your CSRD challenge (free text, optional)
  • Interest in connecting own documents or client data

Purpose of processing

We process this data exclusively to follow up on your enquiry (providing trial access, answering questions, sending product information). No transfer to third parties takes place.

Legal basis

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future — by email tosimon(AT)csrd-gpt.com

Retention period

We store your data for as long as required to process your enquiry, or until you object, but no longer than 24 months after your submission.

Data transmission

Form data is transmitted via Fluent Forms directly by email to us and to Brevo. Transfer to third countries outside the EU/EEA does not take place,

5. Your rights

You have the following rights with respect to your personal data:

Access (Art. 15 GDPR)
Right to obtain information about the data we process about you.
Rectification (Art. 16 GDPR)
Right to have inaccurate or incomplete data corrected.
Erasure (Art. 17 GDPR)
Right to have your data deleted, unless statutory retention obligations apply.
Restriction (Art. 18 GDPR)
Right to restrict processing under certain conditions.
Objection (Art. 21 GDPR)
Right to object to processing based on legitimate interests.
Data portability (Art. 20 GDPR)
Right to receive your data in a structured, commonly used, machine-readable format.

To exercise your rights, please contact: simon(AT)csrd-gpt.com

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 20 04 44 40102 Düsseldorf.

6. Updates to this policy

This Privacy Policy was last updated in May 2026. As our website develops or due to changes in applicable law or regulatory requirements, it may be necessary to update this policy. The current version is available on this page at all times.