Privacy notice

1. Controller and contact

Wolfgang Sender
Oehretalstraße 14
98693 Ilmenau
Deutschland
Email: better@life-in-germany.de
Telephone: +49 178 8096241

No data protection officer has been appointed because there is currently no legal obligation to do so.

2. Website provision, hosting and security logs

The website is provided using Cloudflare infrastructure, including Cloudflare Workers and D1. To deliver the site securely and reliably, technical information such as IP address, date and time, requested page, browser and device information, response status and error data may be processed in server logs. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, stable and abuse-resistant website operation.

Cloudflare acts as a processor where applicable. Processing may also involve countries outside the EEA. Appropriate safeguards are used where required, in particular contractual safeguards and/or an adequacy decision under Article 45 GDPR.

3. Contact and implementation requests

When you submit a request, we process the selected solution or project reference, name, email address, optional company, message and—if requested—telephone number and preferred callback time. We use this data to respond to the enquiry, assess a potential project and prepare pre-contractual steps. The legal basis is Article 6(1)(b) GDPR where the request relates to a possible contract and otherwise Article 6(1)(f) GDPR.

Providing these data is voluntary. Without the mandatory fields we cannot answer the request. Data are retained only for as long as required to handle the enquiry and any resulting contractual relationship, unless statutory retention duties require longer storage.

4. AI solution finder and voice input

When you deliberately submit a description in the AI solution finder, we use it to match your request with the public Hits7 catalogue. If AI analysis is available, the submitted text and a limited catalogue context are transmitted to OpenAI to generate recommendations. The legal basis is Article 6(1)(b) GDPR for the expressly requested recommendation service and otherwise Article 6(1)(f) GDPR. The request is processed with API storage disabled in the application configuration.

OpenAI may process data outside the EEA. Where required, the transfer is protected by appropriate safeguards, such as EU standard contractual clauses and/or an adequacy decision. Do not enter special-category, confidential or unnecessary personal data. Voice input is started only by you; speech recognition is provided by your browser or operating-system vendor under its own privacy terms.

5. Aggregate usage measurement and research console

We record a limited set of first-party events, such as a page or solution view, use of the solution finder, opening the contact form and successful submission. The stored record contains the event, page path, time, optional campaign parameters and, where available, the referring website's host name. It does not contain a visitor identifier, full referrer URL, form content or IP address. When a solution area is selected, the area may also be counted in aggregate. We do not use these data to build individual visitor profiles. Event records are deleted after 13 months. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is measuring whether content and contact paths work and improving the catalogue.

The password-protected Research Console is for authorised internal users only. It uses Supabase for research records and controlled source jobs. It is not part of the public visitor service.

6. Cookies, local storage and external services

hits7 does not use advertising or marketing cookies, marketing pixels or third-party web fonts. Aggregate usage events are transmitted without a cookie or visitor identifier. The site uses only your device's system font. The privacy notice acknowledgment is stored locally under the key hits7_privacy_notice and contains no personal identifier. This access is strictly necessary to remember that the notice has been shown and is based on section 25(2) TDDDG.

Links to external websites open only when you select them. From that point, the privacy policies of the respective provider apply.

7. Recipients, retention and safeguards

Recipients may include hosting and database providers, OpenAI for the expressly requested AI finder, and service providers that are necessary for secure operation. We use processors only where legally appropriate and restrict access to what is necessary. We delete or anonymise personal data when the stated purpose no longer applies, subject to statutory retention obligations.

8. Your rights and complaints

Subject to the legal conditions, you have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on Article 6(1)(e) or (f) GDPR. You may withdraw consent at any time with effect for the future. To exercise your rights, contact us using the details above.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany, https://www.tlfdi.de/.

9. Updates and accessibility contact

We update this notice when services or legal requirements change. If you encounter a barrier while using this website, please contact us at better@life-in-germany.de and describe the page and issue so we can review it.