Privacy Policy
This website uses no tracking cookies and no advertising trackers. Here you can read which data is processed when you visit the site or contact us, and what rights you have. The German version of this policy is legally binding.
As of: October 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Henning Solutions GmbH
Tägtmeyerstraße 10
28309 Bremen, Germany
Email: hello@ai-procurement.de
No data protection officer has been appointed, as the legal requirements for this are not met.
2. Overview: which data is processed?
- When visiting the website: technical access data (server logs) by our hosting provider.
- When using the contact form or contacting us by email: the details you provide.
No cookies requiring consent are set. A cookie banner is therefore not required.
3. Hosting and delivery of the website
This website is delivered as a static website via AWS Amplify Hosting and the content delivery networkAmazon CloudFront of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg ("AWS"). Content is stored in the AWS region Frankfurt (eu-central-1); CloudFront delivers it through globally distributed edge locations, so processing may also take place outside the EU if you access the site from there.
When you access the website, AWS automatically processes the following data in server log files on our behalf: IP address, date and time of access, requested page/file, transferred data volume, HTTP status code, referrer URL, browser type and version, and operating system.
Purpose and legal basis: providing the website, ensuring stability and security, and defending against attacks. The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Retention: access logs are deleted once they are no longer required for these purposes, unless they are needed longer to investigate a security incident.
A data processing agreement (AWS Data Processing Addendum) including the EU Standard Contractual Clauses is in place with AWS. AWS is also certified under the EU-US Data Privacy Framework.
4. Contact form
If you use our contact form, we process the details you enter: name, email address, topic, message and optionally company. The data is transmitted encrypted (TLS) to a function operated by us in the AWS cloud (AWS Lambda, Frankfurt region) and delivered to our mailbox by email (Amazon Simple Email Service, Frankfurt region). The function does not store the data; it only forwards it by email. Technical logs of the function contain no form content.
Purpose and legal basis: handling your enquiry and communicating with you. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). Where you expressly consent to processing (checkbox), the legal basis is Art. 6 (1) (a) GDPR; you may withdraw your consent at any time with effect for the future.
Retention: we store your enquiry for as long as necessary to handle it and delete it afterwards unless statutory retention obligations (e.g. in the case of contract initiation, Section 147 AO, Section 257 HGB) apply.
To prevent spam, the form contains an invisible field (honeypot); in addition, your browser automatically solves a small computational task while you fill in the form, and the result is sent with your enquiry. No cookies are set and no additional personal data is collected.
5. Contact by email or phone
If you contact us by email or phone, we process your details to handle your request (Art. 6 (1) (b) or (f) GDPR). Our email communication is handled by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany; emails are stored on servers in Germany.
6. Fonts
The font used on this website is served locally from our own web server. Loading it does not create a connection to third-party servers (e.g. Google).
7. External links
Our website contains links to external websites (e.g. LinkedIn). When you click them, you leave our website; the respective provider is responsible for data processing there. We do not embed social media plugins.
8. Recipients and transfers to third countries
Recipients of personal data are the processors named in this policy (AWS, STRATO). Transfers to third countries only take place as described above and where an adequate level of data protection is ensured by an adequacy decision, EU Standard Contractual Clauses or certification under the EU-US Data Privacy Framework.
9. Your rights
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
Right to object (Art. 21 GDPR): where we process data on the basis of a legitimate interest, you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests.
Right to lodge a complaint: you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Arndtstraße 1, 27570 Bremerhaven, Germany,datenschutz.bremen.de.
To exercise your rights, an informal message to the contact details above is sufficient.
10. Data security
The website is delivered exclusively via HTTPS (TLS). We use technical and organisational measures to protect your data against loss, manipulation and unauthorised access.
11. Changes to this privacy policy
We update this privacy policy when the legal situation or our processing changes (e.g. when audience measurement is introduced). The version published here applies.