Privacy Policy

As of: March 28, 2026

1. Controller & Contact

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Daniel Scheffler
Ludwig-Erhard-Strasse 10
34131 Kassel
Germany
Email: daniel@sflr.net

2. General Information on Data Processing

Legal Basis

We process personal data only where a legal basis under Art. 6 GDPR applies:

• Art. 6(1)(a) GDPR – Consent
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR – Legitimate interests pursued by the controller

Data Retention

We only retain personal data for as long as necessary for the purposes described in this policy, or as required by law.

Third-Country Transfers

Some of the tools and services we use (see below) process data outside the European Economic Area (EEA), in particular in the United States. Where such transfers occur, they are subject to appropriate safeguards pursuant to Art. 46 GDPR — typically Standard Contractual Clauses (SCCs) adopted by the European Commission.

3. Hosting

This website is hosted by:

Render Services, Inc.
425 2nd Street, Suite 401
San Francisco, CA 94107
USA

When you visit this website, Render automatically collects and stores information in server log files, which your browser transmits to us. This includes:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device
• Date and time of the request
• IP address

This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free operation and optimization of the website. The data is not merged with other data sources.

As Render is a US-based service provider, data may be transferred to the United States. This transfer is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Render's Privacy Policy: https://render.com/privacy

4. Contact Form

If you send us a message via the contact form, the information you provide — including your name, email address, and message — will be stored and used solely for the purpose of processing and responding to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

This data will not be shared with third parties without your consent. We will delete the data once your inquiry has been fully resolved, unless statutory retention periods apply.

5. Website Chatbot

This website uses a custom-built AI chatbot powered by Microsoft Azure AI (Azure OpenAI Service). When you interact with the chatbot, the text content of your messages is transmitted to Microsoft's servers for processing.

The chatbot is intended to answer questions about this website and its operator. Please do not share sensitive personal data through the chatbot.

Data processor: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing an interactive user experience).

Data transferred to the United States is protected by Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Microsoft's Privacy Statement: https://privacy.microsoft.com

6. Analytics – Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies and similar technologies to analyze how visitors use our website. The information generated is generally transmitted to a Google server in the USA and stored there.

IP Anonymization

Google Analytics 4 (GA4) does not log or store individual IP addresses. IP addresses are used only to derive location data and are then deleted.

Purpose & Legal Basis

We use Google Analytics to understand how our website is used and to improve it. This processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time via our cookie settings.

Third-Country Transfer

Google may transfer your data to the United States. This transfer is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Opt-Out

You can prevent Google Analytics from collecting your data by:

• Adjusting your consent via our cookie banner
• Installing the Google Analytics Opt-out Browser Add-on

Google's Privacy Policy: https://policies.google.com/privacy
Google's Data Processing Terms: https://business.safety.google/adsprocessorterms

7. Cookies

We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device.

You can manage your cookie preferences at any time via our cookie banner or your browser settings. Note that disabling certain cookies may limit the functionality of the website.

8. Your Rights

As a data subject under the GDPR, you have the following rights:

• Art. 15 GDPR – Right of access to your personal data
• Art. 16 GDPR – Right to rectification of inaccurate data
• Art. 17 GDPR – Right to erasure ("right to be forgotten")
• Art. 18 GDPR – Right to restriction of processing
• Art. 20 GDPR – Right to data portability
• Art. 21 GDPR – Right to object to processing
• Art. 7(3) GDPR – Right to withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, please contact: daniel@sflr.net

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The authority competent for our location is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Website: https://www.datenschutz.hessen.de

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available at https://sflr.net/privacy. We recommend reviewing this page periodically.