Privacy notice
1. Controller
Orion Intelligence Systems LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, represented by Felix Schmidt. Contact for all privacy matters: felix@wirstartenki.de.
2. What this site does with your data
WirStartenKI.de is a communication site: it presents our consulting offer, publishes articles, sends a weekly newsletter and lets you book a call. There is no advertising pixel and no third-party analytics service. We run our own, first-party reach measurement (section 11). Optional cookies are set only with your consent (see Cookies).
3. Hosting and server logs
The site is delivered through Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) as edge network and runs on Microsoft Azure (Microsoft Ireland Operations Ltd., One Microsoft Place, Dublin 18, Ireland) in the regions West Europe and North Europe, where our database and image storage live. Both providers process the connection data needed to deliver the page (IP address, time, requested URL, user agent, referrer). Server logs are kept for a short period for operation and security. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a reliable and secure site. Transfers to the USA (Vercel) rest on the EU-US Data Privacy Framework and standard contractual clauses.
4. Newsletter
When you subscribe you give us your e-mail address (name optional). We send a confirmation e-mail; only after you click the link is the subscription active (double opt-in). We store the address, the confirmation time and the IP address of the confirmation as proof of consent. E-mails are sent through SendGrid (Twilio Inc., 101 Spear Street, San Francisco, CA 94105, USA) under standard contractual clauses; SendGrid reports delivery events (delivered, bounced, complained) back to us. Legal basis: Art. 6 (1) (a) GDPR. You can unsubscribe any time via the link in every e-mail; we then keep the address on a suppression list so that we do not write to you again.
5. Booking a call
The "Open the calendar" button leads to a Google Calendar booking page (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). The data you enter there (name, e-mail, message) is processed by Google on our behalf and appears as an appointment in our calendar; Google's privacy policy applies to the booking page itself. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps at your request).
6. Contact by e-mail
If you write to us, we process your message and address to answer it (Art. 6 (1) (b) or (f) GDPR) and delete the correspondence when it is no longer needed and no retention duty applies.
7. YouTube and external links
The landing page shows the thumbnail of our latest YouTube video. The image is fetched by our server and served from our own domain, so your browser does not contact Google when you view the page. Only when you click the card do you leave for youtube.com; from then on Google's terms apply. The same holds for links to LinkedIn and go-rocket.ai.
8. Blog images
Article images are stored in our own Azure Blob Storage (West Europe) and served from there.
9. User accounts
Accounts are used for the shared sign-in with go-rocket.ai. For an account we store e-mail address, name (optional), a password hash, verification status and the sign-up origin. Legal basis: Art. 6 (1) (b) GDPR. Accounts can be deleted on request by e-mail.
10. Error monitoring
To detect faults we use Sentry (Functional Software Inc., 45 Fremont Street, San Francisco, CA 94105, USA) under standard contractual clauses. Error reports contain technical context and, for signed-in users, a pseudonymous user id, never the e-mail address. Legal basis: Art. 6 (1) (f) GDPR.
11. Reach measurement (first party)
To understand which pages, articles and referrers work, our own server records page views and a few interactions (newsletter sign-up, booking click, links to YouTube and go-rocket.ai). Without your consent this is cookieless: the record holds the page, the referrer domain, the language, the country if the edge network provides it, the device class and a short hash of IP address and browser string that changes every day, so visits cannot be linked across days and no IP address is stored (Art. 6 (1) (f) GDPR). If you accept optional cookies in the banner, a random identifier (wsk_vid, 12 months) lets us recognise returning visits and measure the funnel over time (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can change your choice any time under "Cookie settings" in the footer. Nothing is shared with third parties; records are deleted after 13 months.
12. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to withdraw consent at any time with effect for the future. You may lodge a complaint with the data protection supervisory authority of your place of residence or work.
13. Encryption and retention
All connections use TLS. Personal data is kept only as long as the purpose requires or statutory retention periods demand.