Privacy policy
This is a translation. The German version is legally binding. This notice describes the current static website, which offers an optional AI chat and uses no web analytics, advertising tracking or non-essential cookies.
1. Controller
ObenLotos GmbH
Karlsruher Str. 42
70771 Leinfelden-Echterdingen
Deutschland
Email: info@obenlotos.com
2. Hosting and server log files
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. To deliver the website and maintain technical security, Netlify may process data including the IP address, time of access, requested file, referring page, browser and operating system. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Data may be processed in the United States. Netlify’s data processing agreement includes the EU standard contractual clauses. Access logs are retained in accordance with the hosting provider’s standard retention policy for no more than 30 days. We have not configured any additional log exports and do not retain separate access logs ourselves.
3. Contact by email or WhatsApp
If you contact us, we process the details you provide in order to deal with the enquiry and any next steps. Depending on the content, the legal basis is Art. 6(1)(b) GDPR for steps prior to entering into a contract or performance of a contract, or Art. 6(1)(f) GDPR for appropriate business communication.
4. Cookies, analytics and external content
This website does not currently use analytics or advertising services and does not set non-essential cookies. Images, fonts, scripts and brand assets are loaded locally from this website.
5. Storage period
Personal data is retained only for as long as necessary for the relevant purpose, a contractual relationship or statutory retention obligations.
6. Your rights
Where the statutory conditions are met, you have the rights of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You also have the right to lodge a complaint with a data protection supervisory authority.
7. Status
18 October 2026. This notice will be updated if the website’s functionality or hosting arrangements change.
8. AI customer chat
The chat is clearly identified as an AI assistant, and complex questions can be referred to an adviser. To answer business enquiries, record your requirements and follow up, we process the page from which you opened the chat, the conversation, the summary and any contact details you choose to provide. No cookies are set; session credentials are stored in the browser’s sessionStorage. For rate limiting, we store only a salted hash of the IP address. The legal bases are steps prior to entering into a contract under Art. 6(1)(b) GDPR and legitimate interests in service and security under Art. 6(1)(f). Depending on the configuration, the conversation content needed to provide a reply is processed through the Anthropic or OpenAI API; emails are processed through Brevo, Resend or a configured SMTP relay; communication with advisers uses Telegram; and hosting and storage are provided by Netlify. Data may be processed outside the EU. This processing is governed by the applicable data processing agreements and safeguards for international transfers. Sessions and summaries are deleted automatically after 90 days. General answers that have been reviewed by a person and stripped of personal data are retained in our service knowledge base and can be deleted by an administrator. A request is sent to an adviser only after you preview and confirm it. A confirmed email address may also be used for a later reply from an adviser. We do not use conversations to train models. Providers’ use of data and any restrictions on model training are governed by their applicable terms and the selected configuration. Closing the window stops polling for new replies. To exercise your data protection rights, contact us at info@obenlotos.com.
