Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information on data processing

As a matter of principle, we process our users' personal data only to the extent necessary to provide a functioning website as well as our content and services. Processing regularly takes place only with the user's consent or where a legal basis permits it. We do not pass on your data for advertising purposes and we do not use any tracking or analytics services.

3. Hosting

This website is hosted by an external service provider (processor):

The servers are located in Germany or in the European Union. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the provider. When the website is accessed, the host processes technically necessary access data (in particular IP address, date and time of access, file retrieved, volume of data transferred) in order to ensure the operation, security and stability of the website. The legal basis is our legitimate interest in secure and trouble-free operation pursuant to Art. 6 (1) (f) GDPR. This data is stored only for as long as is necessary to achieve these purposes.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption (HTTPS, certificate issued by Let’s Encrypt). You can recognise an encrypted connection by the padlock symbol in your browser's address bar.

5. Contact form and e-mail contact

If you contact us via the contact form or by e-mail, we process the data you transmit in order to handle your enquiry. In the case of the contact form, this is:

• Name
• E-mail address
• Your message
• IP address (to prevent spam and abuse)

This data is transmitted exclusively by e-mail to our mailbox (mail@schatzkammer.shop); your e-mail address is set as the reply address. It is not stored in a database. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at concluding a contract, otherwise our legitimate interest in responding to enquiries pursuant to Art. 6 (1) (f) GDPR. We delete the data as soon as it is no longer required to achieve the purpose for which it was collected; statutory retention obligations remain unaffected.

6. Live demo / AI assistant

On our demo page you can test an AI-supported assistant. The messages you enter in the chat are transmitted to our processor in order to generate a reply and are processed there by an AI language model:

This constitutes a transfer to a third country (USA). The transfer is safeguarded by the EU Standard Contractual Clauses (SCC) concluded as part of the Data Processing Addendum with Anthropic (Art. 44 et seq. GDPR). The contents of the demo chat are not stored on our servers. Your inputs are not used by the provider for training purposes. The legal basis is our legitimate interest in providing an interactive product demonstration pursuant to Art. 6 (1) (f) GDPR.

7. Voice demo / phone assistant

On the phone assistant page you can hold a telephone conversation with an AI assistant. The call only starts once you press the button and your browser asks you for microphone permission. Without that permission no audio is transmitted. For the duration of the call, your voice recording, the transcript generated from it and the assistant’s replies are transmitted to the following processors:

This constitutes a transfer to a third country (USA), safeguarded by the EU Standard Contractual Clauses in the respective data processing agreements (Art. 44 et seq. GDPR). The call is technically limited to three minutes and ends automatically; you can hang up at any time before that. Neither the audio recording nor the transcript is stored on our own servers; we only hold your IP address briefly in memory in order to limit the number of demo calls (abuse prevention). A call record is created at the provider Vapi for billing purposes. The legal basis is our legitimate interest in providing an interactive product demonstration pursuant to Art. 6 (1) (f) GDPR; in addition, the microphone is only activated by your explicit action.

8. Fonts

This website uses locally embedded fonts that are delivered from our own server. There is no connection to servers operated by Google or other third parties, and your IP address is not transmitted to third parties for this purpose.

9. Local browser storage, cookies

We do not use any tracking, analytics or marketing cookies and we do not create user profiles. To save your language selection we use your browser's local storage (localStorage). This information remains exclusively in your browser, is not transmitted to us or to third parties, and is technically necessary for the function you requested (§ 25 (2) no. 2 TDDDG). No consent is required for this.

10. Your rights

As a data subject you have the following rights:

• Access to the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of a consent given, with effect for the future (Art. 7 (3) GDPR)

An informal message to the contact details given above is sufficient to exercise your rights.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is:

12. Validity and amendment of this privacy policy

This privacy policy is currently valid. As our website develops further, or due to changed statutory or regulatory requirements, it may become necessary to amend this privacy policy.