Privacy Policy
This Privacy Policy explains which personal data is processed when you use this website and for which purposes.
Notice regarding the use of the AI chatbot
This website embeds a Conversational AI (AI chatbot) provided by ElevenLabs. It processes both text input and voice input (audio). Please do not enter or speak sensitive personal data, access credentials or other confidential information. The chatbot's responses are generated automatically and may be incomplete or incorrect.
1) Controller and contact
Controller:
Christian Kübler
Gräfin-Dönhoff-Str. 4
83024 Rosenheim
Germany
Email: gm@chris-kuebler.de
If you have questions about data protection or wish to exercise your rights, you can contact me at the email address above.
2) Principles of processing
I process personal data only to the extent necessary to provide this website, ensure its security and stability, make the embedded AI chatbot, contact form and Calendly scheduling function available, and detect or resolve technical errors or misuse.
The applicable legal basis depends on the purpose of the processing. For the secure, stable and functional operation of the website, including the embedded services, the legal basis is Art. 6(1)(f) GDPR. Where a contact request is made in connection with the initiation or performance of a contractual relationship, processing is additionally based on Art. 6(1)(b) GDPR.
3) Data processing when visiting the website
When this website is accessed, the hosting provider processes technically necessary information that your browser transmits automatically. This may include in particular:
- IP address
- Date and time of access
- Requested page or file
- Referrer URL
- Browser type and browser version
- Operating system
This processing is necessary to deliver the website technically, maintain system security and analyse technical errors.
4) Hosting and technical delivery (Netlify)
This website is provided through Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). In connection with hosting, personal data, in particular IP addresses in log files, may be processed. Netlify provides contractual data-protection terms for the processing of personal data.
5) Use of the embedded AI chatbot (ElevenLabs)
This website embeds a Conversational AI provided by ElevenLabs. If you use the chatbot, your input is processed in order to generate an automated response.
Scope of processing:
- Text input: Messages you enter into the chat.
- Voice input (audio): When using the voice function, audio data is captured and processed through speech-to-text.
- Metadata: Communication timestamps and technical connection data.
The processing takes place for the purpose of technically providing the chat and voice functionality.
6) Contact form (HubSpot)
A HubSpot form is embedded on the contact page. When the form is loaded and used, the information you enter — in particular contact details, message content and any additional form fields completed by you — as well as technically necessary connection data is processed. Form submissions are synchronised directly with the HubSpot account used for this website so that the enquiry can be processed and answered.
Where your enquiry relates to the initiation or performance of a contractual relationship, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR due to the legitimate interest in efficiently handling incoming enquiries.
Contractual data-processing terms apply to the HubSpot services. Under HubSpot's current contractual terms, HubSpot Germany GmbH is the contracting HubSpot entity for customers in Germany. HubSpot affiliates and subprocessors may also be involved in providing the service.
No additional HubSpot tracking code for general website analytics is installed on this website. Depending on the HubSpot configuration, browser information and any pre-existing HubSpot identifiers, technically necessary information or identifiers may nevertheless be processed in connection with use of the form.
7) Scheduling via Calendly
This website includes a scheduling function provided by Calendly. The provider is Calendly, LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. The Calendly script required for the popup is loaded on pages of this website. When this external script is loaded, your browser may already transmit technically necessary connection data to Calendly, in particular your IP address and browser or device information.
If you open the scheduling interface or book an appointment, Calendly processes the information required to arrange the appointment. This may include, in particular, your name, email address, telephone number, selected appointment time, time zone and any additional information you enter in the booking dialogue. Calendly processes this scheduling data on my behalf.
Where scheduling relates to the initiation or performance of a contractual relationship, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR due to my legitimate interest in providing a simple and efficient way to arrange appointments.
Calendly uses cookies and similar technologies on booking pages. According to Calendly, visitors from the EU are shown a cookie banner by default, and non-essential persistent cookies are not stored without the corresponding choice. Where consent is required for optional cookies or similar technologies, their use is based on the selection you make in Calendly's cookie banner.
Further information is available in the Calendly Privacy Notice and the Calendly Data Processing Addendum.
8) Important notes on using the AI chatbot
Use of the chatbot is voluntary. Please do not enter third-party personal data or sensitive information, such as health information or banking data. The chatbot is intended for general interaction; its responses do not replace professional advice or binding information.
9) Recipients and data processing
For technical delivery, data may in particular be transferred to the following recipients:
- Netlify: Hosting and delivery of the website.
- ElevenLabs: Provision of the AI functions.
- HubSpot: Provision and processing of the contact form.
- Calendly: Provision of the scheduling function and processing of booking data.
Where the respective providers process personal data on my behalf, this is carried out on the basis of appropriate data-processing agreements pursuant to Art. 28 GDPR.
10) Retention periods
Personal data is stored only for as long as necessary for the relevant purposes and provided that no statutory retention obligations require longer storage.
- Hosting data: Processed and deleted in accordance with the hosting provider's security and retention rules.
- Chatbot data: According to the settings and contractual terms applicable to the ElevenLabs service used.
- Contact form data: Processed for handling the enquiry. Technical retention depends on the deletion and retention settings configured in the HubSpot account and any applicable statutory retention obligations.
- Calendly booking data: Processed for scheduling and carrying out appointments. The specific retention period depends on the settings configured in the Calendly account and any applicable statutory retention obligations.
11) International data transfers
Some service providers used on this website, or their affiliates and subprocessors, may also process personal data outside the European Union or European Economic Area, in particular in the United States.
Where special safeguards are required for such transfers, the providers' contractual documentation provides for mechanisms including the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. HubSpot expressly provides for these mechanisms in its Data Processing Agreement. Calendly states that it is certified under the EU-U.S. Data Privacy Framework; the Calendly DPA provides for the EU Standard Contractual Clauses if that transfer mechanism is no longer applicable.
12) Cookies and tracking
No standalone analytics or advertising tracking code is installed for the general evaluation of website visits. However, external services are loaded for the AI chatbot and the contact form, and technically necessary data may be processed in that context.
No additional HubSpot tracking code is installed for the embedded HubSpot form. HubSpot documents that certain HubSpot identifiers may be used in connection with form submissions if they are already present as a result of the applicable configuration or a previous HubSpot interaction.
The external Calendly widget is loaded for appointment scheduling. According to Calendly's documentation, booking pages use session cookies and, depending on your choice, may also use persistent cookies or similar technologies. Calendly shows visitors from the EU a cookie banner by default so that optional cookies can be rejected or managed.
13) Data security (SSL/TLS)
When provided in production, this website uses SSL/TLS encryption. You can recognise this by the https:// address and the lock symbol in the browser. This protects transmitted data from unauthorised access.
14) Your rights
You have the following rights under the GDPR:
- Access (Art. 15)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Objection (Art. 21)
- Data portability (Art. 20)
You also have the right to lodge a complaint with a data protection supervisory authority.
15) Changes to this policy
I reserve the right to update this policy in response to technical or legal changes. The current version published on this website applies.