Legal · by AIVantum
The AI Readiness Quick Check is a self-check. Your responses to the 30 statements are computed into an assessment in your browser. Only when you enter your email address at the end and give your explicit consent is any data transmitted to us, so that we can send you the assessment by email. We only get in touch if you also tick the box “I would like to talk about my assessment”.
| Data | Purpose |
|---|---|
| Your email address | Sending you the assessment; contacting you only if you tick the box for a conversation |
| Your results profile (overall score and scores per dimension) | Creating and sending your assessment |
| Your checkbox “I would like to talk about my assessment” | only if ticked: we get in touch to arrange a conversation about your assessment |
| Your consent: the fact that you consented, with the wording version of the form and the time | Proof of your consent (Art. 7(1) GDPR) |
Your individual responses to the 30 statements never leave your browser; only the condensed results profile is transmitted.
Providing your email address is not required by law or contract, but it is necessary to receive the assessment: without an email address, no assessment is shown or sent. You can still fill in the questionnaire itself.
We process the details you enter in the form on the basis of your consent (Art. 6(1)(a) GDPR), which you give in the form before submitting. We only get in touch if you have ticked the box “I would like to talk about my assessment”; the legal basis for this is also your consent (Art. 6(1)(a) GDPR). We store the fact that you consented together with the wording version of the form and the time, so that we can demonstrate your consent (Art. 7(1) GDPR). You may withdraw your consent at any time with effect for the future (email to jay@aivantum.com). Hosting the site and protecting the form against abuse are based on our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
| Service | What for | Location / basis |
|---|---|---|
| GitHub, Inc. (GitHub Pages) | Hosting the site; GitHub technically processes your IP address in server logs. GitHub does this as its own controller; there is no data processing agreement. The legal basis is our legitimate interest in providing the site securely (Art. 6(1)(f) GDPR) | USA: EU-US Data Privacy Framework (Art. 45 GDPR), according to GitHub |
| Cloudflare, Inc. (Cloudflare Workers) | Form endpoint: receives your details and forwards them | USA: EU-US Data Privacy Framework (Art. 45 GDPR) and Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Delivery of the results and notification emails | USA: EU-US Data Privacy Framework (Art. 45 GDPR) and Standard Contractual Clauses in the data processing agreement |
| Google Cloud EMEA Limited (Google Workspace) | E-mail mailbox where the notification about your request and your e-mails to us arrive. Incoming messages are also kept in a second Google mailbox of Jay Manuzon (Google Ireland Limited, Dublin). | Ireland; Google may also process data in the USA: EU-US Data Privacy Framework (Art. 45 GDPR) and Standard Contractual Clauses |
| Notion Labs, Inc. | Storage of your request (email, results profile, checkboxes) | USA: data processing agreement and Standard Contractual Clauses |
To prevent abuse, our form endpoint (Cloudflare Worker) briefly processes your IP address upon submission in order to limit the number of requests per time window (legal basis: Art. 6(1)(f) GDPR); it is deleted no later than one hour after your last request. Your data is not shared with any third parties beyond the service providers named above.
This website sets no cookies, stores nothing in your browser and uses no analytics or advertising services. The fonts are served from this server; loading the page creates no connection to Google Fonts.
We delete request and lead data (email, results profile, checkboxes and proof of consent) once the request has been handled and no further contact is requested, at the latest 24 months after the last contact. Upon request, we delete data earlier, unless statutory retention obligations require otherwise. According to Resend, it keeps the delivered e-mails and a log of them for up to 30 days.
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw your consent. To exercise these data subject rights, contact jay@aivantum.com. You may also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: 12 October 2026