1. Data Controller
The data controller for this website is Daniele Abbattista, Hochstr. 7, 47918 Toenisvorst, Germany. Email: daniele@abbattista.de
2. Hosting
This website is hosted by Fly.io, Inc., 2261 Market Street #4990, San Francisco, CA 94114, USA. The application runs in the Frankfurt am Main (fra), EU region. When you visit the site, personal data (e.g. IP address, time of request, user agent) is processed on Fly.io servers and stored briefly in log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable hosting). Details: https://fly.io/legal/privacy-policy
3. General Information and Mandatory Disclosures
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
4. Data Collection on This Website
When you visit this website, information is automatically collected in server log files that your browser transmits automatically. This includes: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR.
5. Contact Form and Onboarding Form
If you send us inquiries via the contact form or onboarding form, your details from the form, including the contact data you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Processing of this data is based on Art. 6(1)(b) GDPR (pre-contractual measures). For email delivery, we use the service Resend (Resend, Inc.). Your data is transmitted to Resend's servers. For more information, see the Resend privacy policy: https://resend.com/legal/privacy-policy
5a. Abbi chat (AI assistant) and Abbi's voice
On this website you can ask questions to our AI assistant “Abbi”. Your input and the conversation so far are sent via our server to the OpenRouter service (OpenRouter, Inc., USA), which forwards it to the provider of the respective AI model; it is processed there and the answer is returned to you. This may involve a transfer to the USA. We have restricted routing to providers that do not store inputs or use them for training. We do not store chat content permanently; the conversation stays in your browser until you close the page. To prevent abuse, your IP address is pseudonymised on the server with a secret key. Only counters derived from it are stored, and they expire automatically after no more than 24 hours. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a helpful, secure information service) or Art. 6(1)(b) GDPR where you ask pre-contractual questions. Please do not enter personal or confidential data in the chat. Answers are generated automatically and may be inaccurate. Abbi's voice consists of pre-generated audio files loaded from our server; no data is sent to third parties. We store your sound preference in local storage. More information: https://openrouter.ai/privacy
6. Cookies and Local Storage
We store your display preference (light/dark) and your analytics choice in Local Storage. We ask for your consent choice again after 180 days. Google Analytics loads only after your explicit permission. Without permission, no analytics cookies are set and no analytics requests are sent to Google. You can change your choice and withdraw consent for the future at any time via Cookie settings in the footer.
6a. Google Analytics
With your consent, we use Google Analytics 4 (measurement ID G-W9MXTPZH4Q), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data includes page views, device and browser information, cookie identifiers and contact actions. Our custom contact events do not send names, email addresses or form messages. IP addresses are processed for transmission and regional attribution; Google states that individual EU IP addresses are not stored. Google may also process data in the United States. The legal bases are your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. We disable Google Signals and advertising personalisation. We configure analytics cookies to last 180 days; this can be refreshed when you return. Withdrawing consent stops measurement and removes this website’s analytics cookies. More information: https://policies.google.com/privacy?hl=en
7. Your Rights
You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as a right to correction, blocking, or deletion of this data. You can contact us at any time regarding this and other questions on the subject of personal data.
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
8. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is: Landesbeauftragte fuer Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Duesseldorf, Germany.