Privacy Policy

1. Data Controller

The data controller responsible for data processing on this website is:

2. Data Collection Overview

We collect personal data only when you voluntarily provide it (e.g., via the chatbot or by booking a call) or when technically necessary for the operation of this website. We process data solely on the basis of the legal provisions of the GDPR, the German BDSG, and the TTDSG.

3. Hosting and Content Delivery

This website is hosted and delivered via Cloudflare. When you visit our website, Cloudflare may process your IP address, browser type, and access times for the purpose of delivering the website and protecting against attacks. This is based on our legitimate interest in the secure and efficient provision of our website (Art. 6(1)(f) GDPR). For more information, see Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

4. Cookies

This website uses only technically necessary cookies that are essential for the functionality of the website. No tracking cookies or advertising cookies are used. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR. If consent-based cookies are introduced in the future, we will request your consent in accordance with Art. 6(1)(a) GDPR.

5. Chatbot and AI Processing

Our website includes an AI chatbot. When you interact with the chatbot, the messages you submit are sent to our backend for processing. Conversation data may be stored temporarily for the duration of your session to provide a coherent conversation experience. We do not use chatbot data for marketing purposes or share it with third parties beyond what is necessary for processing. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in providing an interactive website experience) or Art. 6(1)(b) GDPR if the chatbot interaction relates to a pre-contractual inquiry.

6. Appointment Booking (Cal.com)

We use Cal.com for appointment scheduling. When you book a call, Cal.com processes the data you provide (name, email, appointment details). Cal.com acts as a data processor on our behalf. The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures). For more information, see Cal.com's privacy policy: https://cal.com/privacy

7. Database (Supabase)

We use Supabase for backend data storage. Data stored in Supabase may include chatbot conversation logs and other operational data. Supabase acts as a data processor on our behalf and stores data in accordance with applicable data protection regulations. For more information, see Supabase's privacy policy: https://supabase.com/privacy

8. Analytics

This website currently does not use any third-party analytics tools. If analytics are introduced in the future, they will be privacy-friendly and compliant with GDPR, and this privacy policy will be updated accordingly.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, please contact us at: hello@williamjahn.net

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Chatbot conversation data is deleted at the end of each session unless otherwise required for contract performance or legal obligations.

11. Data Security

We use industry-standard technical and organizational measures to protect your data against unauthorized access, loss, or misuse. All data transfers are encrypted via TLS/SSL.

12. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available on this page. We encourage you to review this page periodically.