Privacy Policy

1. Controller

Marco Erhardt
Erhardt AI
Mörikestraße 1
74597 Stimpfach
Germany
Email: [email protected]

2. Hosting

This website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the website through a global server network and protects it against attacks.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely, quickly and reliably. In this context, personal data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses of the European Commission are in place. Further information: Cloudflare’s privacy policy.

3. Server log files

When you visit the website, the hosting provider automatically processes technically necessary data transmitted by your browser: IP address, date and time of access, requested page, referrer URL, browser type and operating system. This data is required to deliver the website and to ensure its security. It is not combined with other data sources.

If connection errors occur while the website is loading, your browser may also send a technical error report to Cloudflare (Network Error Logging). It contains information such as the requested address, the type of error and the time; your IP address is also transmitted in the process. Successful page requests are not reported. Your browser stores the corresponding policy for up to seven days; this only applies to browsers that support this technology (e.g. Chrome and Edge). The reports serve to detect problems with delivering the website.

The legal basis is Art. 6(1)(f) GDPR. The data is stored only for as long as is necessary for these purposes.

4. Fonts

The fonts used are hosted locally as part of this website. No connection to external font services is established when a page is loaded.

5. Cookies and tracking

This website does not set any cookies of its own and does not use any analytics or tracking tools. No audience measurement takes place, for example via Cloudflare Web Analytics.

To protect the website against attacks, Cloudflare may in individual cases set a technically necessary security cookie, “cf_clearance”, if your browser has to pass a security check. The cookie records that the check was passed so that it is not shown again, and is currently valid for 30 minutes. It is not used for analytics or advertising purposes. The legal basis for setting it is Section 25(2) no. 2 TDDDG; the legal basis for the associated processing is Art. 6(1)(f) GDPR (protection of the website).

6. Language selection and language notice

This website is available in German and English. Your language selection is only stored if you choose a language yourself: using the “DE/EN” language switcher, using the “Switch to English” button or by closing the notice about the English version. The website then creates a single entry, “erhardt-ai:lang”, with the value “de” or “en” in your browser’s local storage. This is not a cookie. The entry is not transmitted to me or to third parties and is used neither to recognize you nor for statistics.

When you open the German homepage, the website checks in your browser whether a language selection has already been stored there and which languages you prefer in your browser settings. If English but not German is set and you have not already chosen German, a notice about the English version is displayed. This check takes place exclusively in your browser; its result is neither transmitted nor stored. You are not automatically redirected to another language version.

The entry serves solely to take your choice into account on later visits so that the notice does not appear again. It has no expiry date and remains stored until you delete it. You can change your language selection at any time using the language switcher. You can delete the entry by removing the stored site data for erhardt.ai in your browser (in many browsers under “Cookies and site data”).

The legal basis for storing and reading this information is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as this access is strictly necessary to provide the function you have requested, namely taking your language selection into account. As this information does not leave your device, no personal data is transmitted to me in the process.

7. Contact by email

If you contact me by email, I process your email address, your name, the content of your message including any attachments, the time it was received and any other information you provide. I use this data to handle and respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or to pre-contractual measures, and Art. 6(1)(f) GDPR otherwise; my legitimate interest lies in responding to your inquiry.

I use a Gmail mailbox for email, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your emails are therefore stored on Google’s servers; in this context, data may be transferred to the USA. Google is certified under the EU-U.S. Data Privacy Framework.

Your data will be deleted once your inquiry has been fully dealt with and no further communication is expected. If we start working together or statutory retention obligations apply, for example to business correspondence relevant for tax purposes, I keep the messages for the duration of those obligations.

8. Appointment booking via Calendly

To book an initial consultation, this website links to the scheduling service Calendly. The provider is Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. Calendly is not embedded in this website; data is only processed once you click the link and open Calendly’s website.

When you make a booking, Calendly processes the data you enter (e.g. name, email address, selected appointment and the information you provide about your request) and makes it available to me for preparing and conducting the meeting. The legal basis is Art. 6(1)(b) GDPR. In this context, data may be transferred to the USA; Calendly is certified under the EU-U.S. Data Privacy Framework. Further information: Calendly’s privacy notice.

9. Your rights

You have the right of access to the personal data stored about you (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Where processing is based on Art. 6(1)(f) GDPR, you may object to it on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, simply contact me by email. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).