Privacy policy

Controller

Management Consulting Mayr, Roman Mayr, Waldaustrasse 2, 9500 Wil, Canton of St. Gallen, Switzerland. Contact: info@x25lab.com.

Data processed

Data processed includes contact details, booking and appointment data, the selected artificial intelligence, website or shop topic, voluntary notes in the form, payment status, technical log data, and cookie and consent information.

Purposes

The data is used to provide the website, arrange and conduct appointments, process payments, create confirmations, protect IT security, prevent misuse and, after consent, perform privacy-conscious usage analytics.

Chatbot

The chatbot is enabled for your own input only after you agree to this privacy policy using the toggle. Without consent, only the introduction and prepared quick questions are displayed; input and sending remain disabled. When you use the chatbot, your message, the previous conversation required to answer it, the selected language, the current page path and technical connection data are processed. Please do not submit sensitive personal data, passwords, payment details or confidential content.

Messages and conversation context are sent to OpenAI to generate the answer. The application requests answers with provider-side storage disabled (store: false). For operation, security, abuse prevention and technical traceability, the request, response, timestamp, language, page path, IP address, approximate region derived from it, browser identifier, model, usage values and error status may be stored in technical logs or the operational database. The conversation displayed in the browser, chatbot consent and interface state are stored exclusively in the session storage of the open tab and are deleted automatically when that tab is closed. The chatbot uses no session cookie and no persistent local storage for this purpose.

You may withdraw your consent at any time using the toggle, with effect for the future. Processing already carried out and statutory or security-related retention duties remain unaffected. Access or deletion requests may be sent to info@x25lab.com.

Manually reviewed business contacts

For an exclusively internal and manual business-development process, publicly available professional information about companies, contact persons, roles and business contact addresses may be researched. OpenAI may perform a web search across public sources for this purpose. A person, role and company are accepted only when several sources are documented; email addresses are never guessed and are used only when a public source explicitly displays them.

Before any message, the jurisdiction, specific dispatch basis, sources, recipient, content and an internal test delivery are documented. External dispatch in Germany and Austria is technically blocked without documented consent or a fully evidenced statutory existing-customer exception. Swiss individual cases require an additional manual review and written rationale. There are no automated follow-up sequences or freely available bulk-mail functions.

Every external message includes an unsubscribe option. An objection immediately adds the address to the global suppression list. Dispatch records are retained for accountability, abuse prevention and compliance with objections. Data subjects may request access, correction, deletion or object by emailing info@x25lab.com; necessary suppression data and statutory evidence remain reserved.

Third-party providers

Stripe is used for credit card payments. Microsoft Teams and Microsoft Graph may be used for online appointments and email delivery. OpenAI is used to generate chatbot answers, prioritise structured audit findings and research public professional sources in the protected internal workflow. Hosting, email and technical infrastructure providers may access technical data where required for operation and security.

Cookies and analytics

Technically necessary cookies and local settings are required for operation, language, consent and security. Optional analytics are activated only after consent. Data is transmitted through this website’s own first-party endpoint. Details are provided in the Cookie Policy.

Your rights

You may request access, correction, deletion, restriction or object to processing where the statutory requirements are met. Statutory retention obligations remain reserved.

Last updated

July 2026.