Privacy Notice

1. Controller

You may use these contact details for questions about data protection or to exercise your rights.

2. Website operation and Vercel

This website is delivered via Vercel. The provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When a page is requested, data processed may include your IP address, the time and destination of the request, browser and device information, and technical status and error data. The previously visited page may also be transmitted if your browser provides this information.

This processing serves to deliver the content, maintain availability and protect against attacks. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to provide my online offering reliably and securely. Transmission of the technically necessary data is required for the website to be displayed.

Vercel uses a worldwide content delivery network to deliver static content. Selecting a European execution region for server functions does not restrict this network to Europe. For this static website, processing may therefore also take place outside the European Union and the European Economic Area, particularly in the United States.

Vercel states that it is certified under the EU–U.S. Data Privacy Framework. Where a transfer to Vercel is covered by this certification, the corresponding adequacy decision of the European Commission serves as the basis under Article 45 GDPR. For other transfers, the provider's published terms provide, in particular, for the EU Standard Contractual Clauses as safeguards under Article 46 GDPR.

Vercel processes data to provide the service and uses additional technical service providers for this purpose. Where Vercel processes data for its own security, compliance or administrative purposes, Vercel describes this processing in its own privacy notice.

Technical data is retained for as long as necessary to deliver the website, investigate errors or security incidents, and comply with legal obligations. Once these purposes cease to apply and no statutory retention obligations remain, the data is deleted or anonymised. A single retention period cannot therefore be specified for all technical data.

Further information is available in Vercel's Privacy Notice and Vercel's Data Processing Addendum. You may request information about or copies of the relevant transfer safeguards using the contact details above.

3. Domain and email at STRATO

The freemachine.ai domain and the info@freemachine.ai email account are operated through STRATO. The provider is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The website content is hosted separately through Vercel.

If you send an email to info@freemachine.ai, STRATO processes the data needed to transmit and deliver it. This includes, in particular, sender and recipient addresses, time, technical transmission data, subject, message content and attachments. Processing serves the secure provision of the mailbox and business communications. The legal basis is Article 6(1)(b) GDPR where your message concerns steps prior to entering into or performing a contract, and otherwise Article 6(1)(f) GDPR. My legitimate interest is the reliable handling of business enquiries.

Further information about processing by STRATO is available in STRATO's Privacy Policy.

4. Contact by email or telephone

If you contact me, I process the data you provide in order to respond to your enquiry and, where applicable, prepare an introductory call. This may include your name, email address or telephone number, company affiliation, and the content of your message, including any attachments you provide voluntarily. For telephone enquiries, notes may be made to handle your request.

The introductory-call buttons open your email application. There is no contact form on this website. Data is transmitted through the email services involved only when you send a message.

Where your enquiry concerns steps prior to entering into or performing a contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries and communications with contacts at a company, processing is based on Article 6(1)(f) GDPR. The legitimate interest is handling enquiries and conducting business communications. You decide what information to provide; without contact details and sufficient information about your request, it may not be possible to respond.

Emails are stored in the STRATO mailbox. I use Microsoft Outlook as an email application on my device to read and reply to messages. Outlook is not integrated into this website and does not automatically receive data merely because you visit the website or click an email link.

I delete enquiries once they have been dealt with and there is no other objective reason to retain them. If further storage is required to comply with statutory retention obligations or to establish, exercise or defend legal claims, subsequent processing is restricted to those purposes. The legal basis is then Article 6(1)(c) or (f) GDPR. The data is deleted once the reason for retention no longer applies. Technical deletion, including recovery areas maintained by the email provider, is additionally governed by the provider's documented procedures.

5. Browser storage and external content

This website is transmitted using HTTPS encryption, protecting data exchanged between your browser and the website while in transit. Email transmission may present separate security risks. Please do not send particularly confidential information by unencrypted email; a suitable transfer method can be agreed upon request.

The website's own code does not set cookies and does not store the selected language in either Local Storage or Session Storage. Your language choice applies only to the currently open page; after reloading, the page starts in German again.

The website's own code does not include visitor analytics, advertising trackers, newsletter registration, appointment booking or embedded social-media content. Images, typography and website files are provided without external font or media providers.

6. Your rights

Subject to the applicable statutory requirements, you have the right of access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17) and restriction of processing (Article 18). Where the requirements are met, you may receive data that you have provided in a structured, commonly used and machine-readable format or have it transmitted to another controller (Article 20).

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. Processing will then cease unless compelling legitimate grounds are demonstrated which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You may object to processing for direct marketing at any time without providing such grounds; your data will then no longer be processed for that purpose (Article 21).

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

You may also lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, place of work or place of the alleged infringement (Article 77 GDPR). The authority responsible for my registered place of business in Thuringia is:

I do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects in connection with this website or the handling of enquiries.