Privacy policy

1. Controller

Axel Braunschweiger, RENOVO — AI Web Studio, [address as in the imprint], Germany.

Email: axelbraunschweiger@gmail.com

No data protection officer has been appointed; there is no legal obligation to do so in this case.

2. Hosting and server log files

This website is hosted by [hosting provider, address].

When you visit the site, the hosting provider automatically records technical access data in server log files: your IP address, the date and time of the request, the page requested, the referring page, and information about your browser and operating system.

Purpose and legal basis: this processing is necessary to deliver the website reliably and to detect and defend against attacks. The legal basis is our legitimate interest in the secure and stable operation of the site, Art. 6 para. 1 lit. f GDPR.

Retention: log data is deleted according to the hosting provider’s retention schedule, as a rule after no more than 30 days. It is not merged with other data sources and is not used to identify you personally.

3. Website check tool (Google PageSpeed Insights)

On our website check page you can enter the address of a website and have it analysed. The analysis is not performed by us: when you press the button, your browser sends the address you entered directly to the Google PageSpeed Insights API, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In doing so, your IP address and the technical details of your browser request are transmitted to Google and may be transferred to servers in the United States. Google may process this data according to its own privacy policy: https://policies.google.com/privacy

Purpose and legal basis: the analysis is only carried out at your explicit request, so the legal basis is your consent under Art. 6 para. 1 lit. a GDPR, given by actively starting the check. You can withdraw your consent at any time with effect for the future simply by not using the tool. Without starting a check, no data is sent to Google.

Third-country transfer: Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (adequacy decision of 10 July 2023). Google additionally relies on the European Commission’s standard contractual clauses.

We ourselves neither store nor evaluate the addresses you enter or the results of the analysis. Nothing is saved on our side.

4. Studio assistant (chat)

Our website offers a chat assistant that answers questions about the studio. It only starts when you actively open it; nothing is sent until you send a message.

When you send a message, the message and the previous course of the conversation are transmitted to our own server function and from there to Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA, which generates the reply using the Claude language model. Your IP address is processed by our server function to prevent misuse; it is not passed on to Anthropic.

Purpose and legal basis: the assistant only runs at your explicit request, so the legal basis is your consent under Art. 6 para. 1 lit. a GDPR, given by actively sending a message. You can withdraw your consent at any time with effect for the future simply by not using the assistant. In addition, we have a legitimate interest in the abuse prevention described above, Art. 6 para. 1 lit. f GDPR.

Third-country transfer: Anthropic PBC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (adequacy decision of 10 July 2023). A processing agreement under Art. 28 GDPR is in place with Anthropic.

Retention: we do not store the conversation. It exists in your browser for as long as the chat window is open and is gone when you close or reload the page. Anthropic stores inputs and outputs for a limited period for abuse detection and does not use them to train its models. Our server function stores a counter per IP address for a maximum of 65 minutes, solely to enforce a rate limit.

Please do not enter any special categories of personal data (for example health data) or other confidential information into the chat. For anything sensitive, please write to us by email.

The assistant generates its answers automatically and can be wrong. Its replies are not legally binding and no decision with legal effect for you is made on the basis of the conversation.

5. Contact by email

If you write to us, the data you provide — your email address, your name where given, and the content of your message — is processed solely in order to deal with your enquiry.

Legal basis: Art. 6 para. 1 lit. b GDPR where your message concerns the initiation or performance of a contract, otherwise our legitimate interest in answering enquiries addressed to us, Art. 6 para. 1 lit. f GDPR.

Retention: enquiries are deleted once they have been dealt with conclusively and no statutory retention obligations, in particular under commercial and tax law, prevent deletion.

Please note that email is not an encrypted means of transport by default. For confidential information, please ask us for an alternative channel.

6. Contact by WhatsApp

This site links to WhatsApp so you can reach us directly. The link only opens WhatsApp — merely loading our pages establishes no connection to WhatsApp or Meta, and we embed no WhatsApp widget or tracking pixel.

If you choose to write to us there, the conversation is processed by WhatsApp Ireland Limited and, depending on the service configuration, by Meta Platforms, Inc. in the United States. We have no influence over that processing; WhatsApp receives your telephone number and the content of your messages, and metadata about the exchange. Meta’s own privacy information applies in addition to this policy.

Legal basis: your consent, given by deliberately opening the chat and writing to us, Art. 6 para. 1 lit. a GDPR; where your message concerns the initiation or performance of a contract, also Art. 6 para. 1 lit. b GDPR.

Third-country transfer: Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (adequacy decision of 10 July 2023).

Retention: messages are deleted once your enquiry has been dealt with conclusively, unless statutory retention obligations prevent deletion. If you would rather not use WhatsApp, email reaches us just as well.

7. Fonts and other assets

All fonts, images, scripts and stylesheets are served from this website’s own server. In particular, no Google Fonts CDN, no content delivery network and no social media plugins are used. No connection to third-party servers is established when you simply browse the site.

8. Cookies, analytics and tracking

This website sets no cookies and uses no analytics, tracking, remarketing or profiling technologies. Your language preference and colour theme, if you change them, are stored locally in your browser and never transmitted to us.

9. Your rights

You have the right to obtain information about the personal data we process concerning you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to have processing restricted (Art. 18), to receive your data in a portable format (Art. 20) and to withdraw consent you have given at any time with effect for the future (Art. 7 para. 3).

Right to object: you have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR).

To exercise any of these rights, an informal email to the address above is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

11. Changes to this policy

We update this privacy policy when changes to the website or to the law make it necessary. The version published here always applies.