Privacy policy

See also: Imprint

Controller

Jaron Pfeifer, Wurmlinger Straße 10, 72108 Rottenburg am Neckar, Germany
Email: kontakt@jaron-ai.de
Phone: +49 163 258 22 32

There is no statutory obligation to appoint a data protection officer.

Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the site is accessed, technically necessary data (IP address, date and time, page requested, volume of data transferred, browser type, referrer) is processed in server logs. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). A data processing agreement under Art. 28 GDPR is in place.

Retention: server logs are deleted after 30 days at the latest.

Contact form (Formspree)

If you use the contact form, your details (name, email address, message) are transmitted to me via the service Formspree (Formspree Inc., 2100 Geng Road, Palo Alto, CA 94303, USA) and used exclusively to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR for general enquiries. A data processing agreement under Art. 28 GDPR is in place.

Providing the data is voluntary, but without it I cannot answer your enquiry.

Retention: deletion as soon as your enquiry has been fully dealt with and no statutory retention obligations apply — after 24 months at the latest. If a contractual relationship is initiated, the commercial and tax retention periods apply (6 and 10 years respectively).

Contact by email or phone

If you contact me by email or phone, I process your details (name, contact details, content of the enquiry) exclusively to deal with your request. Legal basis: Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR. Emails are processed by my provider IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany (processing on my behalf under Art. 28 GDPR).

Retention: as for the contact form.

Appointment booking (Calendly)

I use Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA) for appointment booking. The widget is only loaded once you actively click an appointment button (“click-to-load”). Only then is data transmitted to Calendly, in particular your IP address and the booking details you enter (name, email address, preferred appointment); cookies may also be set. By clicking the appointment button you consent to the widget being loaded and to information being stored on your device. Legal basis: § 25 (1) TDDG and Art. 6 (1) (a) GDPR for loading the widget, Art. 6 (1) (b) GDPR for carrying out the booking. You can withdraw your consent at any time with effect for the future by no longer calling up the widget. A data processing agreement under Art. 28 GDPR is in place.

Retention: booking data is deleted after the appointment has taken place or been cancelled, after 12 months at the latest.

Fonts

The fonts used on this website are served exclusively from my own server (self-hosting). No connection is made to third-party servers — in particular not to Google Fonts. Your IP address is not transmitted to any third party and no cookies are set.

Self-test / potential check

The self-test offered on this website runs entirely in your browser. Your answers and the result are not automatically transmitted to me or to third parties and are not stored. Up to this point no personal data is processed.

Result by email (voluntary): after the result you can optionally have the evaluation sent to you. Only if you actively enter an email address there and submit it are that address, the calculated result and the page visited transmitted to me via the service provider Formspree (Formspree Inc., 1900 Market St, Philadelphia, PA 19103, USA). Without that input nothing is transmitted. Legal basis: Art. 6 (1) (a) GDPR (consent by actively submitting) and Art. 6 (1) (b) GDPR insofar as sending it serves to initiate a contractual relationship.

Purpose and retention: the data is used exclusively to send you the requested evaluation and to handle any enquiry arising from it. No newsletter is sent and no data is passed on to third parties for advertising purposes. Deletion 12 months after the last contact at the latest, unless statutory retention periods apply. You can object to further use at any time, informally, at kontakt@jaron-ai.de.

Audience measurement (Umami)

For rough audience measurement I use Umami Cloud (Umami Software, Inc., USA). Only aggregated information is recorded: page visited, referrer, approximate country of origin, browser, operating system and device type.

No cookies, no recognition: Umami sets no cookies and stores no information on your device. There is no cross-device tracking and no profiling. Since nothing is stored on or read from your device, no consent under § 25 TDDDG is required — which is why this website has no cookie banner.

Handling of the IP address: your IP address is processed exclusively to determine the country of origin and is not stored. No individual personal profiles are created; evaluation only takes place in aggregated form.

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in a data-minimising statistical evaluation of website use. You can object to this processing at any time under Art. 21 GDPR, informally, at kontakt@jaron-ai.de.

Processing and retention: a data processing agreement under Art. 28 GDPR is in place. The aggregated statistics are kept for a maximum of 12 months. Further information: Umami's privacy notice.

Transfers to third countries

Some of the services used are based in the USA or process data there (Vercel, Formspree, Calendly, Umami). Personal data may therefore be transferred to a third country outside the EU/EEA for which there is no general level of protection meeting EU standards — in particular, access by US authorities is possible.

The transfer takes place on the basis of the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework), where the respective provider is certified under it, and additionally on the basis of standard contractual clauses under Art. 46 (2) (c) GDPR. Copies of the standard contractual clauses can be requested at the email address given above.

SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw consent given at any time with effect for the future (Art. 7 (3) GDPR). To do so, contact kontakt@jaron-ai.de.

Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for me is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
baden-wuerttemberg.datenschutz.de

Status

This privacy policy is dated August 2026. It will be updated if this website or the services used change.