§ 1 Use of AI-Supported Tools- The Contractor is authorized to use AI-supported tools for the preparation, performance, and follow-up of the agreed-upon consulting services. This may include, in particular, the structuring, summarization, analysis, and processing of information; the development of ideas and concepts; research support; and the creation and linguistic revision of drafts.
- AI systems are used exclusively for support purposes. The Contractor is responsible for the professional evaluation, selection, adaptation, and approval of the consulting services and work results. Decisions with legal or comparably significant effects on natural persons are not made exclusively through automated AI processes.
- The contractor does not use AI for automated personnel or recruiting decisions, social scoring, impermissible manipulative practices, biometric categorization, or emotion recognition.
§ 2 Handling of Information and Confidentiality- The parties shall comply with the principle of data minimization. The Contractor shall process in external AI systems only information that is necessary for the respective consulting purpose.
- To the extent possible and appropriate, information shall be anonymized, pseudonymized, or abstracted prior to external AI processing. Specific metrics may be replaced by ranges, orders of magnitude, or indices.
- In particular, without prior written authorization from the Client, no passwords, API keys, access credentials, complete customer databases, complete contracts, unredacted highly sensitive financial or transaction documents, special categories of personal data, or confidential information of third parties for which there is no authorization to disclose shall be entered into external AI systems.
- Trade secrets may be the subject of the consultation. External AI processing shall only take place to the extent that the Client is authorized to do so, has previously approved the processing in writing, and the information has been reduced to the necessary minimum or abstracted.
- The client warrants that they are authorized to disclose the information provided and that they are not infringing on any third-party rights or contractual confidentiality obligations.
§ 3 AI-Assisted Meeting Documentation- Recording, transcription, or AI-assisted summarization of meetings shall take place only after all actual participants have been informed in advance and only if the necessary legal basis exists in each case.
- The client shall inform participants invited by the client of the intended recording in a timely manner before the meeting begins. If a participant objects before the meeting begins, no recording will be made; the parties may agree to manual documentation.
- Recordings and transcripts will be deleted 365 days after the respective meeting, unless a statutory retention requirement or a specifically documented consulting purpose requires longer storage.
For conversations in which health data, mental health issues, therapeutic content, or other particularly sensitive personal data are expected to be discussed, no recordings or AI transcriptions will be made unless separate, explicit consent is obtained on a case-by-case basis.
§ 4 AI-Generated Content and Responsibility- AI-generated content may be inaccurate, incomplete, biased, or out of date. The Contractor shall appropriately review AI-generated content for plausibility and professional usability before disseminating it.
- The Client remains responsible for its own operational, strategic, legal, tax, financial, and personnel decisions, unless expressly agreed otherwise.
- AI-generated content does not constitute legal, tax, financial investment, medical, or psychotherapeutic advice.
§ 5 Client Access to AI Applications- If, pursuant to a separate agreement, the Client is granted access to an AI platform or AI-supported application, such use shall be at the Client’s own risk and only to the extent agreed upon.
- The Client may not enter any data for which there is no authorization to process or disclose. In particular, no login credentials, complete datasets, special categories of personal data, or confidential information belonging to third parties may be entered without the appropriate authorization.
- AI outputs must be independently and professionally reviewed before any business or other decisions are made. Supplementary terms of use and privacy notices for the specific application remain unaffected.