Privacy policy

Controller

The controller within the meaning of the GDPR is the provider named in the legal notice. You will find the contact details there.

Hosting and server logs

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, the host processes technically necessary data: IP address, date and time, page requested, browser and operating system identifiers, referring page. This data is processed to deliver the pages and to defend against attacks (Art. 6 (1) (f) GDPR) and is deleted after a short time.

Language choice

The website is available in German and English. The language is part of the address (English pages under /en); no cookies are set and no browser language preference is read or stored.

Contact by email

When you write to us by email, we process the data you provide to handle your request (Art. 6 (1) (b) and (f) GDPR). The data is deleted once the request is closed and no retention obligations apply.

Appointment booking

The "Book a conversation" button leads to appointment booking at Cal.com (Cal.com, Inc., USA). You leave our website only when you click it; Cal.com's privacy policy applies to processing there. We receive the appointment details you enter (name, email, requested time) to hold the conversation (Art. 6 (1) (b) GDPR).

Chat on the home page

On the home page you can describe a workflow and receive an answer written by an AI model. Your messages and the previous answers are sent through Vercel's AI Gateway to OpenAI (USA) for this and processed there to generate the answer. The gateway forwards them only to providers that neither store them nor use them to train models. The legal basis is answering your request (Art. 6 (1) (b) GDPR). The chat carries the name of June, an independent product by MODUS; nothing is passed to June itself.

The conversation is held only in your browser's memory and is lost when the page reloads. We store it only once you book the workshop with your email address. Please leave out names and anything that identifies a client.

Protecting the chat from abuse

Before a message or email address is processed, Arcjet, Inc. (USA) checks the request. Arcjet detects automated access and attacks, limits the number of requests per IP address, looks for attempts to redirect the model in your messages, and checks a submitted email address for deliverability. For this, Arcjet processes the IP address, request data, your messages and, where given, the email address. The legal basis is our legitimate interest in protecting the website and limiting its costs (Art. 6 (1) (f) GDPR).

Email address from the chat

If you leave your email address after an answer, we store it with the conversation, your answers in the chat, your office's location, the model's summary, the optional name of your firm and the page language in our customer management system at Attio Ltd. (United Kingdom), so that Nicolai Schmid can answer your workshop request and agree a date with you (Art. 6 (1) (b) GDPR). We do not use the address for marketing. The data is deleted once the request is closed and no retention obligations apply.

Processors

These service providers process personal data on our behalf. A data processing agreement under Art. 28 GDPR is in place with each of them; OpenAI is engaged as a sub-processor of Vercel.

Transfers to the USA rely on the European Commission's standard contractual clauses and, where the provider is certified, on the EU-US Data Privacy Framework. For the United Kingdom, an adequacy decision of the European Commission applies.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Please use the address given in the legal notice.

Version

This policy applies from 4 October 2026 and will be updated whenever the processing changes.