Tippel.ai
Legal

Privacy Policy

What this website processes, why, and for how long, is explained here. Analytics (Google Analytics) runs only if you actively consent. This English version is provided for convenience; the German version prevails.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Lukas Friedrich — Tippel (sole proprietorship)
Kampweg 4, 34369 Hofgeismar, Germany
Email: info@tippel.ai · Phone: +49 178 5879849

A data protection officer is not appointed, as the statutory thresholds for a mandatory appointment (Art. 37 GDPR, Sec. 38 BDSG) are not met. Your contact for all privacy matters is the controller himself.

2. The essentials at a glance

  • Visiting this website generates only technically necessary server log data (section 4).
  • Google Analytics runs only with your consent via the cookie banner — before that, no connection to Google is established and no cookie is set (section 7).
  • Fonts and all other resources are served from our own server; without your consent, loading a page establishes no connection to third-party providers (section 8).
  • Personal data is only processed when you actively provide it — via the contact form, by email or by phone (section 5).

3. Legal bases

Unless stated more specifically below, processing is based on: Art. 6(1)(b) GDPR (contract and pre-contractual steps), Art. 6(1)(c) GDPR (legal obligations, such as commercial and tax retention duties) and Art. 6(1)(f) GDPR (legitimate interest, such as the secure and stable operation of this website). Where processing is based on consent (Art. 6(1)(a) GDPR), you may withdraw it at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing before withdrawal remains unaffected.

4. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS; processing takes place in data centres in Germany.

When you access the website, your browser technically transmits the following data, which is stored in server log files: IP address (shortened/anonymised where supported by the hoster), date and time of access, requested page or file, transferred data volume, HTTP status code, browser type and version, operating system, and the referring page (referrer URL).

This processing serves the delivery of the website, technical security (such as defence against attacks) and error analysis. Legal basis: Art. 6(1)(f) GDPR. Log files are deleted after 7 days at the latest, unless a specific security incident requires longer retention of individual entries. No merging with other data sources and no marketing analysis takes place.

5. Contact

Contact form

If you use the contact form, I process the data you provide: name, email address, optionally company, the selected topic and your message. The data is transmitted by email to my mailbox and used solely to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR where your enquiry aims at or concerns a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The form contains an invisible field for automated spam prevention (honeypot); no additional personal data is collected by it.

Your data is deleted once your enquiry has been dealt with conclusively and no statutory retention duties apply. If the enquiry leads to a business relationship, the periods in section 10 apply.

Email and phone

If you contact me by email or phone, I process the resulting data (sender address or phone number, content of the communication) for the same purposes and on the same legal bases as for the contact form. Email is sent via the hosting provider’s mail server; end-to-end encryption does not take place without separate arrangement — for confidential documents we agree on a secure transfer channel where needed.

6. Cookies and local storage

This website sets analytics cookies exclusively after your consent via the cookie banner (section 7). Without consent, no cookies are set.

Independently of this, two technically necessary values are stored in your browser’s local storage: your language choice (German/English) and your cookie decision itself — the latter so the banner does not reappear on every visit. This storage is necessary for the service you request within the meaning of Sec. 25(2) No. 2 TDDDG, remains on your device and can be deleted at any time via your browser settings.

7. Google Analytics (only with your consent)

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics is loaded only after you have consented via the cookie banner. Until then, no connection to Google is established and no cookie is set (Google Consent Mode, default “denied”).

With your consent, Google Analytics processes information about your use of this website — pages visited, dwell time, approximate region, device and browser information — and sets cookies for this purpose. IP addresses are not logged or stored by Google Analytics 4. Legal bases: your consent under Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG.

Personal data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; EU standard contractual clauses apply in addition. The retention period for analytics data at Google is limited to 14 months.

Withdrawal: You may withdraw your consent at any time with effect for the future — via the (also linked in the footer of every page) or by deleting this website’s data in your browser.

8. Locally served fonts and resources

All fonts (Source Serif 4, Inter) as well as all scripts, stylesheets and images are served from our own server. Accessing this website establishes no connection to Google Fonts, content delivery networks or other third-party servers; your IP address is not transmitted to any third party as a result.

9. External links

This website links to external services, in particular LinkedIn and the products KomplAI and Foliovo. When you click such a link, you leave this website and the privacy notices of the respective provider apply. Merely displaying these links transmits no data to the linked providers.

10. Processing in the course of business relationships

If a business relationship is initiated or concluded, I process the data required for it concerning contact persons (name, business contact details, role, contract and billing data, communication content). Legal bases: Art. 6(1)(b) GDPR (contract performance), (c) (legal obligations) and (f) (communication with contact persons of legal entities).

Business records are subject to commercial and tax retention duties (Sec. 257 HGB, Sec. 147 AO) and are deleted upon their expiry. Where I process personal data on behalf of a client in a project, this is done under a data processing agreement pursuant to Art. 28 GDPR, available on request.

11. Recipients and third-country transfers

Recipients of personal data are: the hosting provider of this website (section 4), Google where you have consented (section 7), and — where required by law — tax advisors and fiscal authorities. Transfers to third countries outside the EU/EEA take place only in the context of Google Analytics (section 7). No automated decision-making including profiling (Art. 22 GDPR) takes place.

12. Data security

This website is delivered exclusively over a TLS-encrypted connection (HTTPS). In addition, I apply technical and organisational measures pursuant to Art. 32 GDPR to protect processed data against loss, misuse and unauthorised access, and adapt these measures to the state of the art on an ongoing basis.

13. Your rights

  • Access (Art. 15 GDPR) to the data processed about you,
  • Rectification (Art. 16 GDPR) of inaccurate data,
  • Erasure (Art. 17 GDPR), where no retention duties apply,
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Withdrawal of consent (Art. 7(3) GDPR) with effect for the future.
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, an informal message to info@tippel.ai is sufficient.

Right to lodge a complaint: You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for Tippel is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), P.O. Box 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de. You may also contact the supervisory authority of your habitual residence.

14. Validity and changes

This privacy policy is currently valid. I will adapt it when the website, the procedures used, or the legal situation change; the version published here applies in each case.

As of: August 2026