Data controller
Daniel Frank
Hermann-Köhl-Straße 20 1/4
86159 Augsburg
Germany
hello@derkiarchitekt.de
Hosting and server logs
When you visit this website, the hosting provider processes technically necessary connection data, including your IP address, time of access, requested resource, referrer and browser information. This processing supports the secure and stable operation of the website.
Hosting provider: Vercel Inc., USA; Ausführungsregion Frankfurt (Deutschland); weitere Verarbeitung durch Unterauftragsverarbeiter möglich.
Language and appearance
The website stores the most recently used language in the dka-locale cookie for up to one year. An explicitly selected appearance is stored in the dka-theme cookie for up to one year and in your browser’s local storage. The local storage entry remains until you delete it or change your selection.
An explicitly selected animation preference is stored under dka-motion in your browser’s local storage and remains until you delete the entry or change your selection.
These settings support language selection and appearance. They are not used for advertising or usage analytics.
Contact enquiries and email
The form processes your name, email address and selected topics. You may also provide a description and details about your company, budget and the applications involved. These details are used to respond to your enquiry and contact you. Resend sends a notification to DerKIArchitekt and an acknowledgement to your email address. Replies to the acknowledgement go to the project inbox.
Resend processes the recipient address and message content. The selected sending region is Europe; according to the provider, stored data is processed in the United States. Information about data processing agreements, transfer mechanisms and retention is available in Resend’s privacy information. Resend states a retention period of 30 days for email and log data on its Free, Pro and Scale plans.
Retention at DerKIArchitekt: Nicht zu einem Auftrag führende Anfragen werden nach sechs Monaten gelöscht. Für Vertrags- und Abrechnungsunterlagen gelten die jeweils anwendbaren gesetzlichen Aufbewahrungsfristen.
Protected enquiry storage
Your enquiry is stored on the server in the existing Supabase project in Ireland. The provider is Supabase Inc., USA. Public browser access has neither read nor write permissions for this data. Storage supports reliable handling and prevents an enquiry from depending entirely on email delivery. Further information about processing agreements and transfer mechanisms is available in Supabase’s data processing agreement.
Protection against abusive enquiries
The Supabase database limits enquiry volume and prevents duplicate sending. It stores neither form text nor plain email addresses for this purpose, but identifiers derived using a secret key. Enquiry counters expire within ten minutes; retry records containing a hash and timestamp expire within two days. An hourly cleanup removes expired entries.
Optional audience analytics
Optional usage analytics is currently disabled. No usage events are sent to PostHog.
Legal bases and international transfers
Processing technically necessary for operation and abuse prevention is based on Article 6(1)(f) GDPR. Enquiries preceding a potential contract are handled under Article 6(1)(b) GDPR; other contact enquiries under Article 6(1)(f) GDPR. Optional analytics and the browser storage they use require your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Refusing consent does not affect your use of the website. Withdrawal applies to future processing.
US providers may transfer data to third countries despite using European server regions, for example for support or subprocessors. The applicable data processing agreements and appropriate safeguards under Articles 44 et seq. GDPR govern these transfers, particularly EU Standard Contractual Clauses where applicable.
Providing your information
Contact details are necessary for me to handle and answer your enquiry. Optional information may be omitted. Your enquiry is not subject to solely automated decision-making or profiling within the meaning of Article 22 GDPR.
Your rights
Within the statutory limits, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a competent data protection supervisory authority.
Last updated
October 2026