Our legal notice

0821 / 99 95 91-0 info@mpunkt.com

This imprint and our data protection information also apply to all social media appearances of mpunkt GmbH:

Facebook: facebook.com/mpunkt.de
Instagram: instagram.com/mpunkt_gmbh
Linkedin: linkedin.com/company/mpunkt-gmbh
Xing: xing.com/pages/mpunktgmbh

For questions about data protection this way: to the privacy policy

If you have any further questions regarding our data protection, please contact our data protection officer directly:

Attorney
Fabian Kappe
Pröllstraße 9
86157 Augsburg

Phone 0821 / 45 09 98 00 
info@rechtsanwalt-kappe.de

This document sets out mpunkt GmbH's commitment to the responsible and ethical use of Artificial Intelligence (AI) technologies in the company's internal operations. In accordance with the EU Artificial Intelligence Act (AI Act), we act as a “passive AI user” (level 3 - limited risk) and use AI tools that support our internal processes but are not considered high-risk systems.

Our goal is to use the advantages of AI while ensuring compliance with legal requirements, ethical standards and a human-centered approach.

1. Goal and basic principles
While using AI we follow the following principles:

• Responsible usage: 
  We only use AI tools that comply with best practice, come from reliable sources and don't pose an unreasonable risk. We prefer solutions that are transparent and explainable.
• Data protection and security:
  All data processed by AI Systems, is being treated in accordance with the strictest data protection and security standards, including the DSGVO and other relevant regulations. We pay special attention to the quality of the data and the avoidance of bias in training data.
• Fairness and non-discrimination: 
  We are aware of the possible biases of AI systems and make effort to minimize them. We are committed to a fair and equal treatment of all parties involved.
• Human supervision and control:
  The primary use of AI tools is to provide support. Our employees are still responsible when it comes to critical decisions and tasks. We ensure, that AI systems contain integrated boundaries and react to human interception.
• AI competence:
  We ensure, that our employees working with AI systems, have appropriate AI knowledge and are aware of the opportunities, risks and potential damage.

2. Scope of application and guidelines
This guideline applies to all software solutions or tools used or operated my mpunkt GmbH, that are supplemented by AI.

Our most important policies:

• Procurement and approval: 
  Before introducing new AI-supported tools, we carry out a thorough risk assessment, particularly in regard to the possible impact on health, safety, data protection and fundamental rights. We ensure that providers meet all relevant legal and ethical standards.
• Data processing:
  The disclosure of confidential, personal or sensitive data via AI tools is strictly forbidden, unless there is a written approval that complies with data protection regulations.
• Usage protocols:
  We develop clear protocols and procedures for the safe and responsible use of AI systems.
• Internal documentation: 
  We keep an internal register of the AI tools used, their purpose and key features.
• Feedback mechanism:
  We enable the reporting of problems, concerns or errors in connection with AI systems and follow these up effectively.
• Incident management:
  We implement effective procedures for dealing with safety incidents and malfunctions of AI systems, especially in the event of serious, unexpected events.
• Cybersecurity:
  We take appropriate technical measures to protect AI systems and the processed data against unauthorized access or manipulation.

3. Responsibilities and training
All employees of mpunkt GmbH that work with AI systems, have to understand and follow this policy. We offer regular training and information events on the responsible use of AI, risk identification and relevant legal requirements. The management is responsible for monitoring compliance and providing the necessary resources.

4. Review and compliance
This policy will be reviewed regularly to take account of legislative changes, technological developments and best practice. Violations of the policy may result in disciplinary action.