promptaholix

Privacy Policy

promptaholix – AI-Powered Virtual Influencers & Social Media Marketing

Last updated: October 25, 2026

1. Data Controller

The controller responsible for the processing of personal data in accordance with the General Data Protection Regulation (GDPR) is:

promptaholix

Owner: Michael Eckard

Ostlandstr. 75

38226 Salzgitter

Germany

Phone: +49 163 5626 506

Email: See contact information on the original profile.

For questions concerning this Privacy Policy, the processing of personal data, or the exercise of your data protection rights, please contact us using the details provided above.

2. General Information on Data Protection

We take the protection of personal data seriously and process personal information in accordance with applicable European and German data protection legislation, particularly Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the German Federal Data Protection Act (BDSG).

Personal data refers to any information relating to an identified or identifiable natural person.

This may include names, email addresses, telephone numbers, IP addresses, business contact information, communication records, and identifiable images or videos.

We process personal data only where a valid legal basis exists and only to the extent necessary for specified, explicit, and legitimate business purposes.

3. Nature of Our Business Activities

promptaholix provides AI-powered virtual influencer solutions for professional brand promotion, product advertising, and commercial social media marketing.

Our services enable businesses to promote their products and brands using virtual influencers created with artificial intelligence technologies.

These virtual influencers are designed to support brand awareness, product presentation, audience engagement, and marketing campaigns across social media platforms.

Our services primarily involve:

• Development and creation of AI-powered virtual influencers.
• Generation of AI-based promotional images and videos.
• Professional product advertising and brand presentation.
• Creation of marketing materials for social media campaigns.
• Development of virtual brand ambassadors.
• Production of AI-assisted promotional campaigns for commercial purposes.

Virtual influencers may be entirely fictional characters generated through artificial intelligence and do not necessarily represent real individuals.

Our business activities are focused on professional marketing, commercial advertising, and brand communication.

4. Purposes and Legal Bases for Data Processing

We process personal data only where necessary for legitimate business operations and where permitted under applicable data protection legislation.

Depending on the circumstances, processing may be based on the following legal grounds:

Article 6(1)(a) GDPR – Consent

Where individuals have voluntarily provided their consent for a specific processing activity.

Article 6(1)(b) GDPR – Contractual Necessity

Where processing is necessary to perform a contract with an individual or to take steps at that individual’s request before entering into a contract.

Article 6(1)(c) GDPR – Legal Obligation

Where processing is necessary to comply with applicable legal or regulatory obligations.

Article 6(1)(f) GDPR – Legitimate Interests

Where processing is necessary for our legitimate business interests, provided that such interests are not overridden by the rights and freedoms of the individuals concerned.

Our legitimate interests may include maintaining secure business operations, responding to commercial inquiries, managing professional relationships, preventing misuse, and protecting our legal rights.

The legal basis for each processing activity depends on the nature and purpose of that activity.

5. Collection of Personal Data

Depending on how individuals interact with our website or services, we may process the following categories of personal data:

• Name and business contact information.
• Email address and telephone number.
• Company name and professional position.
• Information provided through business inquiries.
• Contractual and billing information.
• Communication and correspondence records.
• Technical website access information.
• Marketing project information provided by customers.
• Images or video materials containing identifiable individuals, where provided for an agreed project.

We collect only the information necessary for the respective purposes.

Where applicable, personal data may also be received from business partners or corporate customers in connection with agreed commercial services. Any processing of such data must comply with the applicable requirements of the GDPR.

6. Website Access and Server Log Files

When users visit our website, technical information may be automatically transmitted to the web server or hosting infrastructure.

This information may include:

• IP address.
• Date and time of access.
• Browser type and version.
• Operating system.
• Requested pages and resources.
• Referrer URL.
• Technical connection information.
• Server response information.

Such information may be processed to ensure the secure and reliable operation of the website, diagnose technical problems, prevent unauthorized access, and maintain system stability.

The legal basis for processing required to protect the operation and security of the website is Article 6(1)(f) GDPR.

Technical access information is retained only as long as necessary for its intended purpose, unless longer storage is required or permitted by applicable law.

7. Contact and Business Communication

If you contact us by email, telephone, or another communication channel, we may process the personal information provided during the communication.

This may include your name, email address, telephone number, company information, and the content of your inquiry.

We use this information exclusively for handling inquiries, responding to requests, communicating with customers, and managing professional business relationships.

Where processing is necessary for contractual or pre-contractual measures involving the individual concerned, the legal basis is Article 6(1)(b) GDPR.

For general commercial correspondence, processing may be based on Article 6(1)(f) GDPR.

Where consent is required and obtained, Article 6(1)(a) GDPR applies.

Personal information is retained only for as long as necessary to handle the relevant matter or comply with applicable legal obligations.

8. AI-Powered Virtual Influencers

Our business specializes in creating AI-powered virtual influencers for professional advertising, product promotion, and commercial social media campaigns.

Artificial intelligence technologies may be used to generate virtual personalities, promotional images, videos, and marketing presentations.

8.1 Virtual Influencer Creation

Our virtual influencers are artificial characters developed for commercial brand communication.

These characters may be created through AI-based image and video generation technologies.

The generation of fully fictional virtual characters does not necessarily involve the processing of personal data relating to identifiable individuals.

Where identifiable persons or personal information are included in the creation process, the processing must comply with applicable data protection requirements.

8.2 Customer-Provided Materials

Customers may provide information or materials necessary for the preparation of advertising campaigns.

Such materials may include:

• Product images.
• Brand information.
• Marketing instructions.
• Advertising concepts.
• Company information.
• Promotional reference materials.
• Images or videos of identifiable individuals, where necessary for an agreed project.

Where materials contain personal data, we process that information only for the agreed purposes and under the applicable legal basis.

Customer-provided personal information must not be used for unrelated purposes without an appropriate legal basis.

8.3 Artificial Intelligence Technologies

We may use artificial intelligence technologies to produce professional marketing content, virtual influencers, AI-generated images, videos, and promotional materials for commercial advertising and brand promotion.

Depending on the technical implementation, the use of external AI service providers may involve the transmission or processing of project-related information.

Where personal data is processed by such providers on our behalf, appropriate data processing agreements under Article 28 GDPR will be established where legally required.

We also apply appropriate safeguards regarding confidentiality, data security, and international data transfers where applicable.

8.4 Transparency of AI-Generated Marketing Content

Our virtual influencers may feature computer-generated identities, appearances, and voices.

Where required by applicable legislation, AI-generated or artificially manipulated content will be identified accordingly.

Relevant transparency obligations under Regulation (EU) 2024/1689 (EU Artificial Intelligence Act), including Article 50, will be observed where applicable.

9. Social Media Marketing

Our services involve commercial advertising and brand promotion on social media platforms.

When individuals interact with social media accounts, promotional campaigns, or published marketing materials, personal data may be processed by the operators of the respective platforms.

Such data may include:

• Public profile information.
• Usernames.
• Comments and messages.
• Engagement information.
• Interactions with published advertisements.
• Technical information collected by the respective platform.

Where we operate social media accounts or manage communications directly, we may process relevant interaction data for customer communication, campaign administration, and professional marketing purposes.

Depending on the individual processing activity, the applicable legal basis may be Article 6(1)(a), Article 6(1)(b), or Article 6(1)(f) GDPR.

Social media platforms may independently process personal data according to their own privacy policies.

Where joint controllership applies, the relevant arrangements under Article 26 GDPR must be observed.

10. Customer and Contract Management

In connection with our professional services, we may process personal data relating to customers, business partners, and authorized representatives.

This may include:

• Names and professional contact details.
• Company information.
• Contract and project information.
• Billing details.
• Business correspondence.
• Information necessary to deliver agreed marketing services.

Processing may be necessary to prepare offers, execute contractual agreements, manage commercial projects, issue invoices, and fulfill legal obligations.

The applicable legal basis may be Article 6(1)(b), Article 6(1)(c), or Article 6(1)(f) GDPR, depending on the particular processing activity.

Where customer information is processed on behalf of another controller, the applicable requirements of Article 28 GDPR must be fulfilled.

11. Cookies and Similar Technologies

Our website may use cookies or comparable technologies to support its technical operation.

Cookies are small data records stored on or accessed through a user’s device.

Depending on their function, cookies may support website functionality, user preferences, performance analysis, or other services.

Under Section 25 of the German Telecommunications-Digital Services Data Protection Act (TDDDG), storing information on or accessing information from a user’s terminal equipment generally requires consent unless a statutory exception applies.

Where consent is required, the relevant technologies will only be used after valid consent has been obtained.

Where the associated processing involves personal data, the requirements of the GDPR also apply.

Information regarding the specific cookies, service providers, purposes, and retention periods must reflect the technologies actually implemented on the website.

12. Disclosure of Personal Data

We disclose personal data to third parties only where necessary for legitimate business purposes or where legally permitted or required.

Depending on the services used, recipients may include:

• Hosting and technical infrastructure providers.
• IT service providers.
• Email and communication service providers.
• AI technology providers.
• Social media platform operators.
• Accounting and professional service providers.
• Public authorities where legally required.

Where external service providers process personal data on our behalf, appropriate contractual and technical safeguards are implemented as required by applicable law.

We do not disclose personal data to unrelated third parties without a valid legal basis.

13. International Data Transfers

Certain technical service providers or digital platforms may operate outside the European Union or the European Economic Area.

Where personal data is transferred to countries outside the EU or EEA, we comply with the applicable requirements of Chapter V GDPR.

Depending on the destination and service provider, transfers may rely on an adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR, including the European Commission’s Standard Contractual Clauses.

Additional safeguards are implemented where legally required.

Where international transfers occur, relevant information regarding the recipients, destination countries, and applicable safeguards will be provided as required by law.

14. Storage and Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal obligations.

Retention periods depend on the type of information and the relevant processing purpose.

Business correspondence, contractual records, and accounting information may be subject to statutory retention requirements under applicable German commercial and tax legislation.

Personal data that is no longer required will be deleted or anonymized unless further retention is justified by applicable law.

Where processing is based on consent, withdrawal of consent may require the termination of processing, unless another valid legal basis applies.

15. Data Security

We implement appropriate technical and organizational measures in accordance with Article 32 GDPR to protect personal data.

Such measures are intended to reduce the risk of unauthorized access, accidental loss, unlawful disclosure, alteration, or destruction.

Depending on the nature of the processing, security measures may include:

• Access controls and authentication.
• Encryption of data transmissions.
• Secure system configurations.
• Restricted access to business information.
• Technical measures against unauthorized access.
• Appropriate backup and recovery procedures.
• Regular review of security measures.

Security precautions are reviewed and adjusted where necessary, taking into account the risks associated with the processing activities.

16. Data Subject Rights

Under the GDPR, individuals have the following rights, subject to the applicable legal conditions.

Right of Access – Article 15 GDPR

You have the right to request information about whether and how your personal data is being processed.

Right to Rectification – Article 16 GDPR

You may request the correction of inaccurate personal data or the completion of incomplete information.

Right to Erasure – Article 17 GDPR

You may request the deletion of your personal data where the applicable legal conditions are met.

Right to Restriction of Processing – Article 18 GDPR

You may request restrictions on the processing of your personal data in certain circumstances.

Right to Data Portability – Article 20 GDPR

Where applicable, you may request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object – Article 21 GDPR

You may object to certain processing activities based on your particular situation.

Where personal data is processed for direct marketing, you have the right to object to that processing at any time.

Right to Withdraw Consent – Article 7(3) GDPR

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your data protection rights, please contact:

See contact information on the original profile.

17. Right to Lodge a Complaint

Under Article 77 GDPR, individuals have the right to lodge a complaint with a competent data protection supervisory authority if they believe their personal data has been processed unlawfully.

The supervisory authority generally responsible for private-sector businesses established in Lower Saxony, Germany, is:

Der Landesbeauftragte für den Datenschutz Niedersachsen

Website: https://www.lfd.niedersachsen.de

Individuals may also submit complaints to another competent supervisory authority, particularly in the EU Member State of their habitual residence, place of work, or the location of the alleged infringement.

18. Automated Decision-Making and Profiling

The creation of AI-powered virtual influencers and AI-generated promotional materials does not, in itself, constitute automated individual decision-making within the meaning of Article 22 GDPR.

Where processing activities involve automated decisions that produce legal effects concerning individuals or similarly significantly affect them, the applicable requirements of Article 22 GDPR must be observed.

Any qualifying automated decision-making or profiling must be disclosed in accordance with applicable data protection requirements.

19. Obligation to Provide Personal Data

The provision of certain personal data may be necessary to process business inquiries, prepare offers, enter into contractual relationships, or deliver agreed services.

Failure to provide necessary information may prevent us from responding to an inquiry or performing the requested service.

Where personal data is processed on the basis of voluntary consent, individuals are not required to provide such consent.

Any legal or contractual obligation to provide specific personal data, including the possible consequences of not providing it, will be communicated where required.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in legal requirements, technical infrastructure, business operations, or data processing activities.

The current version will be made available on our website.

Where changes require additional information or renewed consent, the applicable legal requirements will be observed.

Data Controller

promptaholix
Owner: Michael Eckard
Ostlandstr. 75
38226 Salzgitter
Germany

Phone: +49 163 5626 506
Email: See original profile

Last updated: October 25, 2026