Privacy policy
Last updated: [date]
1. Who is responsible
[Company name] [Street and number] [Postcode and city], [Country] Email: [privacy contact email] Phone: [phone number]
[If you have a data protection officer: Data protection officer: [name], [email]]
2. What this website does
On this website you can send us a project request (for example a new project, an upgrade, an optimization or consulting). Our team uses your request to prepare a structured briefing and to get back to you.
3. Data we process
When you send a request
- Your name, email address and, if you provide it, your company
- The type of request, its title and your message
- Files you attach (PDF, Word, text, Markdown, JPG, PNG)
- The time of your request and your consent
When you visit the website
Our hosting provider processes technical data that every browser sends (IP address, date and time, page requested, browser and operating system) in server logs to deliver the website securely.
4. Purposes and legal bases
- Handling your request and preparing an offer or project — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and your consent, Art. 6(1)(a) GDPR
- Protecting the website against abuse and spam — Art. 6(1)(f) GDPR (our legitimate interest in a secure website)
- Sending you a confirmation email — Art. 6(1)(b) GDPR
You can withdraw your consent at any time with effect for the future by writing to [privacy contact email].
5. Service providers we use
We use carefully selected processors bound by data processing agreements:
- Hosting: Vercel Inc., USA — delivers the website
- Database and file storage: Supabase Inc. — data hosted in the EU (Frankfurt, Germany)
- Email delivery: Resend Inc., USA — sends the confirmation and notification emails
- AI-assisted analysis: OpenRouter Inc., USA, and the AI model providers it forwards to — when our team turns your request into a briefing, its content may be analyzed with the help of AI to identify missing information
Where data is transferred to countries outside the EU/EEA, this is based on the EU–U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses.
6. Cookies and local storage
We only use technically necessary storage: your language and display preferences (light or dark) are stored in your browser. We do not use tracking or advertising cookies.
7. How long we keep data
We keep your request for as long as it is needed to handle it and for any resulting business relationship. If no project results from it, we delete it after [e.g. 12 months] at the latest, unless statutory retention obligations require longer storage. You can ask us to delete your request earlier at any time.
8. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, write to [privacy contact email].
You also have the right to lodge a complaint with a data protection supervisory authority, for example [name and address of the competent authority].
9. Changes
We may update this privacy policy when our website or services change. The current version is always available on this page.
Last updated October 13, 2026