Privacy Policy

As of: April 4, 2026

1. Controller & Contact

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Daniel Scheffler
Ludwig-Erhard-Strasse 10
34131 Kassel
Germany
Email: info@sflr.net

2. General Information on Data Processing

Legal Basis

We process personal data only where a legal basis under Art. 6 GDPR applies:

• Art. 6(1)(a) GDPR – Consent
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR – Legitimate interests pursued by the controller

Data Retention

We only retain personal data for as long as necessary for the purposes described in this policy, or as required by law.

Third-Country Transfers

Some of the tools and services we use (see below) process data outside the European Economic Area (EEA), in particular in the United States. Where such transfers occur, they are subject to appropriate safeguards pursuant to Art. 46 GDPR — typically Standard Contractual Clauses (SCCs) adopted by the European Commission.

3. Hosting

This website is hosted by:

Render Services, Inc.
425 2nd Street, Suite 401
San Francisco, CA 94107
USA

When you visit this website, Render automatically collects and stores information in server log files, which your browser transmits to us. This includes:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device
• Date and time of the request
• IP address

This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free operation and optimization of the website. The data is not merged with other data sources.

As Render is a US-based service provider, data may be transferred to the United States. This transfer is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Render's Privacy Policy: https://render.com/privacy

4. Contact Form

If you send us a message via the contact form, the information you provide — including your name, email address, and message — will be stored and used solely for the purpose of processing and responding to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

This data will not be shared with third parties without your consent. We will delete the data once your inquiry has been fully resolved, unless statutory retention periods apply.

5. Website Chatbot

This website uses a custom-built AI chatbot powered by Microsoft Azure AI (Azure OpenAI Service). When you interact with the chatbot, the text content of your messages is transmitted to Microsoft's servers for processing.

The chatbot is intended to answer questions about this website and its operator. Please do not share sensitive personal data through the chatbot.

Data processor: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing an interactive user experience).

Data transferred to the United States is protected by Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Microsoft's Privacy Statement: https://privacy.microsoft.com

6. Analytics – Google Analytics (GA4)

We use Google Analytics 4 (GA4) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to analyze use of our website.

Google may also transfer data to Google LLC, USA.

Activation only with consent

Google Analytics is activated only if you explicitly consent to the "Analytics" category in our cookie banner.
Without this consent, GA4 tracking is not loaded.

Legal bases:

• Art. 6(1)(a) GDPR (consent)
• Section 25(1) TDDDG (storing/accessing information on terminal equipment)

Data processed

If analytics consent is granted, the following data may be processed in particular:

• shortened IP/location information
• technical browser, device, and operating system information
• usage data (for example page views, scroll behavior, click paths, time on page)
• referrer information

Privacy settings in GA4

We run GA4 with privacy-focused settings, including:

• disabled advertising/personalization signals (allow_google_signals: false, allow_ad_personalization_signals: false)
• withdrawal possible at any time via the "Cookie Settings" link in the footer
• technical deactivation after withdrawal and deletion of already set analytics cookies in the browser where technically possible

Third-country transfer

A transfer of data to the USA may take place. Transfers are based on safeguards under Art. 44 et seq. GDPR, in particular:

• the EU-US Data Privacy Framework adequacy decision (Art. 45 GDPR), where applicable, or
• Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Withdrawal / Opt-out

You can withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.
Use the "Cookie Settings" link in the footer for this purpose.

Additionally, you can install the Google Analytics opt-out browser add-on:

• https://tools.google.com/dlpage/gaoptout

Further information:

• Google Privacy Policy: https://policies.google.com/privacy
• Google Analytics Data Processing Terms: https://business.safety.google/adsprocessorterms

7. Cookies

We use cookies and similar technologies. Overview of categories used:

Your choice (consent/rejection) is stored so we can honor it on future visits.
You can change or withdraw your choice at any time via "Cookie Settings".

8. Your Rights

As a data subject under the GDPR, you have the following rights:

• Art. 15 GDPR – Right of access to your personal data
• Art. 16 GDPR – Right to rectification of inaccurate data
• Art. 17 GDPR – Right to erasure ("right to be forgotten")
• Art. 18 GDPR – Right to restriction of processing
• Art. 20 GDPR – Right to data portability
• Art. 21 GDPR – Right to object to processing
• Art. 7(3) GDPR – Right to withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, please contact: info@sflr.net

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The authority competent for our location is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Website: https://www.datenschutz.hessen.de

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available at https://sflr.net/privacy. We recommend reviewing this page periodically.