Privacy policy

The controller for data processing on this website is Igor Ovcharenko, Kronberg Digital, Friedensstraße 58, 61476 Kronberg im Taunus, Germany, phone +49 175 371 0464, e-mail [email protected]. You can reach me at this address with any questions about data protection and to exercise your rights. No data protection officer has been appointed, as this is not required by law.

The website runs on servers of Railway Corporation, San Francisco, USA, in the EU West data-centre region (Amsterdam). In front of it sits Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, for domain management (DNS), encryption (SSL/TLS) and protection against attacks. When you visit the website, both services process technically necessary connection data – in particular IP address, date and time, the page requested and browser type – to deliver and secure the site (Art. 6(1)(f) GDPR; my legitimate interest is secure and stable operation). Data processing agreements are in place with both providers; transfers to the USA are covered by the EU Standard Contractual Clauses (Art. 46 GDPR). Server log files are kept only briefly for troubleshooting and then deleted automatically; I do not keep a long-term log of my own.

I do not use cookies or any tracking technologies. Only two technically necessary entries are placed in your browser's local storage – and only once you use the respective function yourself: your “mute sound” setting (localStorage, until you change it or clear your browser storage) and hiding the chat hint (sessionStorage, until you close the tab). The legal basis is § 25(2) no. 2 TDDDG. The fonts are hosted on my own server; no external fonts, maps or videos are loaded.

I currently do not use any analytics or statistics tool.

If you contact me via the form or by e-mail, I process your details (name, company, industry, phone, e-mail, message) to answer your enquiry (Art. 6(1)(b) GDPR). Providing them is voluntary; without a phone number or e-mail address, however, I cannot reply. Form data is delivered to my mailbox via the e-mail service Resend (USA) acting as a processor; the transfer to the USA is covered by the EU Standard Contractual Clauses. E-mails to an @kronberg-digital.de address are forwarded by Cloudflare Email Routing to the mailbox I read. To prevent abuse, your IP address is held only briefly in the server's memory and not stored permanently. If no contract results, I delete the correspondence once the enquiry is closed, at the latest after six months. If a contract is concluded, the statutory retention periods apply (usually six years for business letters, ten years for invoices).

The website contains links to WhatsApp (wa.me). Only when you click such a link are you forwarded to WhatsApp, a service of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Data may also be transferred to third countries such as the USA; WhatsApp's privacy notice applies. If you write to me on WhatsApp, I process your message and phone number to answer your enquiry (Art. 6(1)(b) GDPR). You can also reach me by phone, e-mail or the form.

Using the chat button in the bottom-right corner you can ask an AI assistant questions. When you send a message, it is transmitted together with the conversation so far via my server to Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA, so that the AI model “Claude” can generate an answer. The purpose is to answer your questions about my services (Art. 6(1)(b) GDPR, pre-contractual enquiry, and Art. 6(1)(f) GDPR, my legitimate interest in quick answers). Anthropic processes the data as a processor under a data processing agreement; the transfer to the USA is covered by the EU Standard Contractual Clauses (Art. 46 GDPR). According to Anthropic, API inputs and outputs are deleted within 30 days, except for usage-policy violations or legal retention obligations. I do not store chat histories myself; the conversation exists only in your browser window and is gone when you close the page. To prevent abuse, your IP address is held briefly in the server's memory and not stored permanently. Please do not enter sensitive data (e.g. health or bank details) in the chat. Using it is voluntary; you can also reach me via WhatsApp, phone, e-mail or the form. The chat in the “Try it” section, by contrast, is a demo with prepared answers: those entries stay in your browser and are not transmitted.

A calendar from the service Cal.com (Cal.com, Inc., USA) may be embedded for booking the intro call. It only loads when you click “Load calendar”; your IP address and technical connection data are then transmitted to Cal.com (Art. 6(1)(a) GDPR, consent by clicking). If you book an appointment, Cal.com processes the data you enter (name, e-mail, phone number and note if given) on my behalf to arrange the appointment (Art. 6(1)(b) GDPR). Data may be transferred to the USA; the EU Standard Contractual Clauses apply. Without your click no connection to Cal.com is made.

I only pass on personal data where necessary for the purposes described – to the following service providers acting on my behalf and on my instructions: Railway (hosting), Cloudflare (DNS, encryption, protection, e-mail forwarding), Resend (sending form e-mails), Anthropic (chat answers) and Cal.com (booking, only after your click). These providers are based in the USA; the transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). I do not sell data or pass it on for advertising.

I store personal data only as long as necessary for the respective purpose or as required by statutory retention obligations. The specific periods are given in the individual sections above.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). No automated decision-making, including profiling, takes place. An informal message to [email protected] is sufficient.

Where I process data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, www.datenschutz.hessen.de.