The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR).
This privacy policy informs you about the type, scope, and purpose of the processing of personal data during your visit to our website.
This privacy policy applies to the websites score-business.com and score-agents.com as well as to the publicly accessible AI assistants offered there (“score agents”). Where we operate an assistant on behalf of a client, that company is the controller and its own privacy policy applies; we act as a processor in those cases.
score business GmbH
Brandstattweg 16
4893 Zell am Moos
Austria
E-Mail: office@score-business.com
Website: www.score-business.com
When visiting our website, the following data is automatically processed in server log files for technical reasons:
This data is processed for technical provision, system security, and error analysis.
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in operational security).
This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When visiting the website, technically necessary data (including IP address, time of access, retrieved content) is processed on Vercel's servers to ensure the delivery of the website. This may involve a transfer of data to the USA. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in secure and efficient provision).
The AI assistants and their underlying knowledge base are operated separately from this, in a data centre in Germany. See sections 8 and 9 for details.
privacy.section4_legal
For our contact form and appointment booking, we use services from HubSpot Inc. (2 Canal Park, Cambridge, MA 02141, USA). When you submit the form or book an appointment, the data you enter (e.g., name, email address, phone number, company, and message) is transmitted to HubSpot and processed and stored there on our behalf. This may involve a transfer of data to the USA. The legal basis is Art. 6 Para. 1 lit. b GDPR (processing your inquiry) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in communication).
To protect our forms from automated access, we use Cloudflare Turnstile, a service from Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Turnstile checks whether an entry is made by a human and processes technical information from your device and your browser behavior for this purpose. This may involve a transfer of data to the USA. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in defending against abuse and spam).
privacy.section6_text2
privacy.section6_legal
If you give your consent via our cookie banner, we use Google Analytics 4, a web analysis service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable an analysis of your use of the website (e.g., pages visited, length of stay, interactions). The IP address is anonymized. The information can be transmitted to Google's servers in the USA and stored there. Processing only takes place if you have given your prior consent; you can revoke your consent at any time with effect for the future via the cookie settings. The legal basis is Art. 6 Para. 1 lit. a GDPR (consent).
privacy.section7_legal
On score-agents.com, an AI-assisted chat agent answers your questions. It is provided through the botario platform (botario GmbH, a company of NFON AG) and operated in a data centre in Germany; no transfer to third countries takes place.
We process the content of your messages, the time and duration of the conversation, a session identifier and your IP address; anything you enter yourself is processed in order to handle your request. Conversations with the publicly accessible agents are evaluated in aggregated form to maintain answer quality and detect abuse. Conversation histories are deleted after 90 days at the latest and are not used to train AI models.
Details on the processing by the platform provider are set out in the privacy policy of NFON AG: https://www.nfon.com/de/rechtliches/datenschutzerklaerung/
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries and in demonstrating our services). A data processing agreement under Art. 28 GDPR is in place with the provider.
If you call the number given on our pages, an AI-assisted voice agent takes the call. You are informed of this at the start – as required by Article 50 of Regulation (EU) 2024/1689 (AI Act) – and you may ask to speak to a human at any time.
Your speech input is processed technically for speech recognition; no audio recording is created or stored. What is stored is the transcript, your phone number and the time and duration of the call – likewise for a maximum of 90 days and in the same German data centre. No automated decision within the meaning of Art. 22 GDPR takes place.
Legal basis: Art. 6 (1) (b) GDPR where the call serves the initiation or performance of a contract, otherwise Art. 6 (1) (f) GDPR.
Some of the services mentioned above (Vercel, HubSpot, Cloudflare, Google) may process personal data in the USA. The transfer takes place on the basis of suitable guarantees, in particular the standard contractual clauses of the EU Commission or – if applicable – certification of the recipient under the EU-US Data Privacy Framework.
Personal data is only stored for as long as necessary to fulfill the respective purpose or as required by statutory retention periods.
You have the right to access, rectification, erasure, restriction, data portability, and objection. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority.
This privacy policy was last updated on 11 September 2026.