Privacy policy

Controller and contact

Website operation

Technical request information may be processed to deliver and secure the website, including IP address, browser type, operating system, requested URL, referrer and request time. The purpose is secure, reliable operation. The legal basis is our legitimate interest in operating this website under Art. 6(1)(f) GDPR. The hosting provider and log retention depend on the production deployment and must be documented when hosting is selected.

No analytics or advertising tracking

This website does not load Matomo, advertising trackers, external fonts or social-media plugins. It does not set analytics cookies. All images are served locally.

Project enquiries

When you submit the contact form, we process your name, work email, company, selected service, indicative budget and message to respond to your request and prepare a possible engagement. The legal basis for pre-contractual enquiries is Art. 6(1)(b) GDPR; for other correspondence it is our legitimate interest in responding under Art. 6(1)(f) GDPR.

We save the enquiry in protected persistent storage on our Hostinger-hosted server and forward it to the existing Kaufman AIS Google Sheet through Google Apps Script. We send an internal notification to hello@kaufman-ais.com through Mailjet, with your email as the reply address. These providers process the data to deliver these services. Processing by Google and Mailjet may involve international transfers; applicable provider agreements and transfer safeguards govern that processing.

Successful local delivery records are removed after 30 days. Pending deliveries remain stored for retry until resolved. The Google Sheet and email copies follow our enquiry and statutory retention requirements; contact us to request deletion or retention details. We do not use enquiries for advertising or profiling.

For abuse prevention we store a keyed hash of the requesting IP address and a limited browser user-agent string. Raw IP addresses are not stored in enquiry records. Rate-limit files are cleared after 24 hours. The legal basis for abuse prevention is Art. 6(1)(f) GDPR.

Email and telephone enquiries

If you contact us by email or telephone, we process the information you provide to respond to your enquiry and, where requested, prepare an engagement. For contractual or pre-contractual enquiries, processing is based on Art. 6(1)(b) GDPR; other correspondence is processed on the basis of our legitimate interest in responding under Art. 6(1)(f) GDPR. Email links open your own email application; a message is sent only when you choose to send it there.

We keep enquiry information only as long as needed for the request and applicable statutory retention duties. You can contact us to ask about retention or request deletion. Do not include passwords, access tokens or unnecessary sensitive information in your enquiry.

Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time where processing is based on consent. Withdrawal does not affect earlier lawful processing.

You may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. To exercise your rights, contact hello@kaufman-ais.com.

Secure communication

Public deployment is intended to use HTTPS. Email communication can have security gaps; please agree a suitable secure channel before sharing confidential project data.