Privacy Policy
1. General Information
This website serves as a portfolio and only collects necessary data. Protecting your personal data is an important concern for us. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.
2. Hosting
This website is hosted via Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When visiting the website, technical access data (e.g., IP address, browser, time) is automatically recorded in server logs. This is done based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in the secure and efficient operation of the website). Logs are deleted after a maximum of 30 days.
3. Contact Form
When you use the contact form on this website, the following data is collected: name, email address, project description, problem statement, and optionally: AI tools used and timeline. The form is transmitted via a Google Cloud Function currently operated in the us-central1 region (USA). This data is then stored in Google Firestore (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and forwarded as a notification to the website operator via the Telegram service (Telegram Messenger Inc.). The legal basis is Art. 6 Para. 1 lit. b GDPR (pre-contractual measures). Data will be deleted once your inquiry has been fully processed or upon your explicit request.
4. Analytics, Cookies & Local Storage
This website uses Umami Analytics (Umami Software, Inc., USA), a privacy-friendly web analytics service. No cookies are set, no IP addresses are stored, and no personal data is collected. Only anonymized usage statistics are captured (e.g., pages viewed, device type). The anonymized data is processed on servers of Umami Software, Inc. (USA). The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in improving the website). No cookie consent is required. This website does not use any tracking cookies. Only one technically necessary entry (i18nextLng) is stored in the browser's local storage to remember the user's language preference. This storage is technically required and is based on § 25 Para. 2 No. 2 TDDDG. No consent is required for this.
5. AI Chat Assistant
This website provides an AI-powered chat assistant. Your messages are transmitted to the Anthropic API (Anthropic, PBC, 548 Market Street, San Francisco, CA 94104, USA) for processing and response generation. Anthropic acts as a data processor in accordance with Art. 28 GDPR. Messages are not permanently stored on our servers. If you share personal contact details (email address, phone number, WhatsApp) in the chat, the full chat history will be forwarded to the website operator via the Telegram service (Telegram Messenger Inc.) for the purpose of follow-up contact. The legal basis is Art. 6 Para. 1 lit. b GDPR (pre-contractual measures).
6. Radar Newsletter
On the Radar page of this website, you can subscribe to the free Radar newsletter. Only your email address is collected. It is transmitted via webhook to the self-hosted automation service n8n, which runs on a server provided by DigitalOcean, Inc. (USA). Newsletter emails are sent via Resend (Resend Inc., 2261 Market Street #5496, San Francisco, CA 94114, USA). The legal basis for processing is Art. 6 Para. 1 lit. a GDPR (consent). Registration uses a double opt-in procedure: after entering your address you first receive a confirmation email. Your address is only added to the distribution list once you click the link it contains. Until confirmation, your address is stored only temporarily in order to match the confirmation link; if no confirmation follows, it is never added to the list. You may withdraw your consent at any time with effect for the future (Art. 7 Para. 3 GDPR) — via the unsubscribe link at the end of every email, or informally to hello@webchemist.io. The lawfulness of processing carried out before the withdrawal remains unaffected. Your email address is stored at Resend for the administration of the distribution list; after a withdrawal it is deleted there.
7. Transfers to Third Countries
Some of the services used process data in the USA. This concerns firstly Google: input from the contact form and the AI chat is processed by Google Cloud Functions in the us-central1 region (USA) before being stored in the EU. It also concerns Umami Analytics (Umami Software, Inc.), the Anthropic API (Anthropic, PBC), the delivery service Resend (Resend Inc.) and DigitalOcean, Inc. as the server operator for the automation service n8n. Where these providers are certified under the EU-U.S. Data Privacy Framework, the transfer takes place on the basis of the European Commission's adequacy decision pursuant to Art. 45 GDPR. Otherwise, the transfer is based on the European Commission's Standard Contractual Clauses pursuant to Art. 46 Para. 2 lit. c GDPR. Notifications forwarded via the Telegram service are based on the details you provide voluntarily; a level of data protection equivalent to European law cannot be guaranteed in every case with Telegram. Despite these safeguards, access to the transmitted data by US authorities cannot be entirely ruled out.
8. Processing on Our Behalf
Where external service providers process personal data on our behalf, we have concluded data processing agreements with them pursuant to Art. 28 GDPR. This concerns in particular Google Ireland Limited (hosting and database), Resend Inc. (newsletter delivery and list management), Umami Software, Inc. (reach measurement), DigitalOcean, Inc. (server operation of the automation service n8n) and Anthropic, PBC (AI chat assistant). These providers process the data exclusively according to our instructions and are contractually obliged to comply with data protection requirements. Individual functions — in particular the confirmation and unsubscribe pages of the Radar newsletter — are served via the subdomain n8n.webchemist.io, where technical access data is likewise recorded in server log files.
9. Storage Duration
We store personal data only for as long as is necessary for the respective purpose. Enquiries via the contact form or the chat are deleted once they have been dealt with. If an enquiry leads to a contractual relationship, the resulting documents are subject to the statutory retention periods under § 257 HGB and § 147 AO of six and ten years respectively; deletion then only takes place after those periods have expired. Server log files are deleted after 30 days at the latest. Newsletter addresses are stored until consent is withdrawn.
10. Your Rights
You have the right to access, rectification, erasure, and restriction of processing of your data in accordance with the GDPR. You also have the right to data portability and the right to lodge a complaint with a supervisory authority. Competent authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany.
11. Right to Object (Art. 21 GDPR)
Where we process personal data on the basis of legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR — in particular the server log files of the hosting provider and anonymised reach measurement — you have the right to object to that processing at any time on grounds relating to your particular situation (Art. 21 Para. 1 GDPR). We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. An objection can be sent informally to hello@webchemist.io.
12. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar switching from http:// to https://. When encryption is active, the data you transmit to us cannot be read by third parties.
13. No Automated Decision-Making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place. The AI chat assistant does not create user profiles and does not make decisions that produce legal effects concerning you or similarly significantly affect you.
14. Responsible Party
Viktor DiubarievBahnhofstraße 14, 53783 Eitorf
E-Mail: hello@webchemist.io
Last updated: August 2026