Back to home

Privacy Policy

Controller

The controller for data processing on this website is:

Issa Hareb (Hareb Digital), Europaring 90, 53757 Sankt Augustin, Germany

Email: [email protected] · Phone: +49 1525 9559708

In short

This site runs without ad networks, without tracking pixels and without cross-site profiling. Fonts, images and videos are served from its own server and are not fetched from third parties.

Two features process more than the bare minimum, and both stay switched off until you explicitly allow them: analytics and the AI agent L.U.K.A.S. Without your consent neither is loaded and neither records anything.

Hosting and server logs

This website is hosted with Railway. When you open it, the hosting provider automatically records technical information such as IP address, date and time of access, the page requested, the amount of data transferred and the browser used (server logs).

That processing is technically necessary to deliver the site at all and to keep it secure. The legal basis is my legitimate interest in reliable and secure operation under Art. 6(1)(f) GDPR. The data is not combined with other sources and is not used to identify individuals.

Encryption

The connection to this website is encrypted end to end with TLS (the https in the address bar). What you send here cannot be read by third parties in transit.

Getting in touch

The contact options on this site are plain email and telephone links. There is no form that sends data to this website's server: a click opens your own mail or phone app.

If you then write to me, I process what you send solely to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a possible engagement, otherwise Art. 6(1)(f) GDPR. Your message is kept until the matter is closed and no statutory retention period requires otherwise.

Storage in your browser

This site stores two things locally in your browser (localStorage): the language you picked and your decision about the optional features. Both stay on your device, are never transmitted to me, and exist only so you are not asked again on every visit.

This storage is strictly necessary for the service you asked for and therefore does not require consent under § 25(2) TDDDG. You can remove it at any time by clearing this site's data in your browser.

Analytics (only with your consent)

If you allow it, an analytics tool records how this site is used: which pages are opened, how long a visit lasts, and which site you arrived from. This is used solely to see which parts of the site are worth improving. Cookies are set for this purpose.

Nothing is loaded and nothing is recorded before you agree. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw at any time with effect for the future via "Cookie settings" in the footer; the tool is then no longer loaded.

The AI agent L.U.K.A.S. (only with your consent)

L.U.K.A.S. is my own AI agent. He is only loaded once you have explicitly allowed it. You are asked in the L.U.K.A.S. section itself, just before a conversation starts. Until then nothing is requested from the agent server and no data is transmitted to it. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG.

After you agree, the agent is loaded from my agent server, hosted with Railway (EU region), so that it can answer your questions by chat or by voice. The messages you write are transmitted there so that it can reply.

If you use the voice function, your browser additionally requests microphone access and opens a direct connection to OpenAI (api.openai.com). Your microphone audio, and the transcript produced from it, are transmitted to OpenAI, Inc. in the USA (a third country) for as long as the conversation runs. Audio is only captured after you have started a voice conversation yourself.

You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer. After withdrawal the agent is no longer loaded. The lawfulness of processing carried out until then is unaffected.

Please do not enter other people's personal data, or sensitive data of your own, into the agent.

No automated decision-making

There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR. What the AI agent says is information about me and my work, not a decision about you.

Your rights

You have the right at any time to access the data held about you, and to rectification, erasure, restriction of processing, data portability, and objection to processing based on a legitimate interest. Please write to [email protected].

Consent once given can be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out until then.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

Status

These privacy notices are updated whenever something changes about the site or the services it uses. The version published here is the one that applies.