Privacy Policy

1. Controller

Martin Marcinko, sole proprietorship (Einzelunternehmen), Planegger Str. 40, 82110 Germering

Email: kontakt@bayreno.de · Phone: +49 176 7091 1464 (English) · +49 176 6415 1890 (German)

2. Overview of processing

This website processes personal data in particular in the following cases:

— Use of the callback request form (getting in touch)

— Use of the chat assistant (AI-supported instant answers, including storage of chat transcripts)

— Visiting the website (hosting, server log files, web analytics where enabled)

3. Callback request form

When you use our callback form, we process the data you provide (name, phone number, preferred time, topic of your request, optional message and company details) to handle your request and call you back.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measure) and/or Art. 6(1)(a) GDPR (your consent via the form's checkbox).

Your request is delivered to us as an email notification via the delivery service Resend (Resend, Inc., USA) acting as a processor. A data processing agreement is in place with Resend; transfers to the USA are based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. Details: https://resend.com/legal/privacy-policy.

If your enquiry does not lead to a contract, we delete it at the end of the third year following the year in which we received it. That period reflects the standard three-year limitation period under §§ 195, 199 of the German Civil Code, so that any claims connected with the enquiry can be examined and defended. If a contract is concluded, the statutory commercial and tax retention periods apply to the contract and invoice records (§ 147 AO, § 257 HGB).

4. Chat assistant (AI) and storage of chat transcripts

This website offers its own chat assistant that answers general questions about our services, packages and terms. Please do not enter sensitive personal data in the chat — for specific matters, use the callback form.

To generate replies, your chat inputs are transmitted to Anthropic PBC (USA) as a processor (Claude API). Transfers to the USA are based on the EU Standard Contractual Clauses. Details: https://www.anthropic.com/legal/privacy.

For quality assurance and to improve our services, we store chat transcripts (session ID, timestamp, language, page visited and message history) in a database operated by Neon (Neon Inc.; database region: eu-central-1, Frankfurt am Main, Germany). No account or customer data is linked to the chat; you can only be identified if you enter identifying details into the chat yourself.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in fast, low-barrier availability and in improving our information services).

Chat transcripts are deleted no later than twelve months after the last contact.

4a. Voice input and speech output in the chat

The chat assistant optionally offers a voice function. It only becomes active if you click the microphone button yourself and confirm your browser's microphone prompt. Without that explicit action no microphone is activated and no audio is recorded.

For speech recognition and speech output we use the browser's built-in Web Speech API. We do not operate our own speech service and do not integrate any additional provider. Please note: depending on your browser, the browser vendor (e.g. Google for Chrome or Apple for Safari) processes the speech recording on its own servers in order to convert it into text. We have no influence over that processing by the browser vendor; their privacy terms apply.

We ourselves receive only the finished text of your voice input — exactly as if you had typed it. That text is treated like any other chat message and stored as described in section 4. We neither receive nor store any audio recording.

The legal basis is Art. 6(1)(a) GDPR (your consent by actively starting voice input). You can simply not use the voice function and type your question instead at any time.

5. Hosting (Vercel)

This website is hosted by Vercel Inc. (USA). When you visit the website, Vercel processes technically necessary connection data (including IP address, date and time of access, page visited, browser identifier) in server log files in order to deliver the website securely and reliably.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). A data processing agreement is in place with Vercel; transfers to the USA are based on the EU Standard Contractual Clauses. Details: https://vercel.com/legal/privacy-policy.

6. Cookies & analytics

This website does not use cookies for marketing or tracking purposes. The chat assistant keeps the conversation history exclusively in your browser's session storage (sessionStorage), which is deleted when you close the browser tab.

The only technically necessary cookie is NEXT_LOCALE, which stores your language choice (German or English) so that you stay in the selected language as you browse. It contains no personal data and is not used for analytics. The legal basis is § 25(2)(2) TDDDG (strictly necessary) in conjunction with Art. 6(1)(f) GDPR.

We use Vercel Analytics (Vercel Inc.) to measure reach. The tool works without cookies and without recognising individual people: it collects only aggregated metrics such as pages viewed, referring page, approximate region at country level, device type and load times. No cross-device profiles are built and no data is passed to advertising networks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-preserving reach measurement and in the technical optimisation of this website). Because no information is stored on or read from your device, no consent under § 25 TDDDG is required. Details: https://vercel.com/legal/privacy-policy.

We do not use Google Analytics or comparable tracking services.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to the processing of your personal data (Art. 15–21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.

8. Withdrawing your consent

You may withdraw any consent given (e.g. for processing your callback request) at any time with effect for the future, e.g. by email to kontakt@bayreno.de.

Last updated

21 August 2026