Privacy policy

About this translation

This English version of our privacy policy is provided for convenience. In case of any discrepancy, the German version prevails.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Paul Miedl
Hauptstraße 27
82266 Inning am Ammersee
Germany
Email: ai-connect@paulmiedl.de

You will find more details in the legal notice.

Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Our server functions, including the analysis feature, run in Vercel's Frankfurt am Main region (fra1). Static pages are delivered through Vercel's worldwide server network, usually from a location close to you.

When you visit the website, Vercel processes technically necessary connection data, in particular:

• IP address
• date and time of the request
• requested page or file and amount of data transferred
• referrer URL (the previously visited page), if your browser sends it
• browser type, operating system and HTTP status code

This data is needed to deliver the website, keep it stable and secure, and fend off attacks. Vercel keeps these logs for a limited period only. In our own application logs we do not record IP addresses or full URLs, only technical details such as request type, host name of the analysed page, duration and error code.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide the website securely and reliably.

We have concluded a data processing agreement with Vercel under Art. 28 GDPR. Vercel is certified under the EU-U.S. Data Privacy Framework. Where data is transferred to the USA, this is based on the European Commission's adequacy decision for the Data Privacy Framework and, additionally, on the Commission's standard contractual clauses.

SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar. This means that data you send to us, such as the URL you enter, cannot be read by third parties.

No cookies

We do not set cookies and do not store any personal data in your browser's storage (such as localStorage). Fonts, images and scripts are loaded exclusively from our own server, not from third parties. There is no advertising, no social media plugins and no cross-site tracking.

Because we do not store or read anything on your device that is not strictly necessary to provide the website (§ 25(2) TDDDG, the German Telecommunications Digital Services Data Protection Act), there is no need for a cookie banner either.

Vercel Web Analytics

To understand how many people use the website and which pages are popular, we use Vercel Web Analytics (provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA). The service works without cookies and runs through our own domain.

It collects aggregated information such as the page visited, referrer, country, browser, operating system and device type. To count visits, Vercel derives a hash from characteristics of the request; it changes daily and is discarded after 24 hours. This makes it impossible to recognise you across days or across other websites. We only see totals, never individuals.

We also count a few events in the tool, likewise without cookies and without personal reference: that a boost was started, whether it succeeded (with type SEA or SEO, language, duration or error code) and which section was copied. The URL you enter and the results are not part of this.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to measure the reach of the website and improve it. The information on data processing and transfers to the USA under "Hosting" applies accordingly.

The analysis feature (SEA Boost and SEO Boost)

When you enter a URL and start a boost, this is what happens:

• Fetching the page: the URL you enter is sent to our server. Our server retrieves the public page at that address. The target site sees our server, not your IP address.
• Processing by Google Gemini: our server sends the URL, the public content extracted from the page (title, meta texts, headings and visible text), the chosen language and the type of boost to Google's Gemini API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA, may be involved as a sub-processor). If our server cannot retrieve the page itself, for example because the site blocks automated requests, we may ask Gemini to read the public page via its URL. In that case Google retrieves the page. We never pass your IP address on to Google.
• Result: our server sends the generated copy straight to your browser. We store neither the URL you entered nor the results. They only exist in your browser window and are gone as soon as you close or reload it.
• Abuse prevention: to limit the number of requests per user, our server keeps your IP address in memory for a short time, no longer than about ten minutes. It is not written to disk and not logged.

We use the paid tier of the Gemini API. According to Google, prompts and responses are not used to train or improve its AI models in that case. According to Google, they are stored only for a limited period to detect abuse and meet legal obligations. Google processes the data as a processor under Google's data processing terms. Transfers to the USA are covered by Google LLC's certification under the EU-U.S. Data Privacy Framework and by standard contractual clauses.

Please only enter URLs of publicly accessible pages, not addresses of internal or password-protected pages, and no pages or URLs that contain personal data (such as names or email addresses in URL parameters).

The legal basis for the analysis is Art. 6(1)(b) GDPR, because you explicitly request the feature. Where the analysed page contains personal data of third parties, and for limiting requests, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the feature and preventing abuse.

Contacting us by email

If you email us, we process your email address and the information in your message to handle your request. We delete the data as soon as it is no longer needed, unless statutory retention obligations apply.

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR. Our legitimate interest is answering your request.

Links to other websites and share links

This website contains plain links to other websites, for example to LinkedIn or to the contact form on paulmiedl.de, as well as share links for WhatsApp, LinkedIn and X. These are ordinary links, not embedded plugins: as long as you do not click them, no data is sent to these providers.

Only when you click a link does your browser open the provider's page. From then on, that provider's privacy policy applies.

Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)

An informal email to ai-connect@paulmiedl.de is all it takes. Because we store hardly any personal data, in many cases there will simply be nothing we can link to you.

Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

You can object informally, most easily by email to ai-connect@paulmiedl.de.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Changes to this privacy policy

We update this privacy policy when the website, the tool or the legal situation changes. The version published here always applies.