Privacy notice.

Who is responsible?

The controller is Stefan Friedrich, Leipziger Str. 6, 94315 Straubing, Germany. You can contact him at hello@t3nd.ai or through the contact form.

Visiting this website

We use Firebase Hosting and Google Cloud to deliver the website and operate the contact form. These services process technical information such as IP addresses and request details to deliver requests, maintain reliability and prevent abuse. This processing is based on our legitimate interests in providing and securing the website under Article 6(1)(f) GDPR.

We do not use website analytics, advertising trackers or a mailing-list signup.

Sending a request

The contact form requires your email address and message. Your name and robot or model details are optional. We use the information you provide to review your request, respond and manage related follow-up. Please leave out passwords and sensitive personal information.

Requests are sent through Google Cloud to the Microsoft 365 mailbox used for T3nd within Flowerbox’s email environment. The information is processed by these providers to operate the service and deliver and store the email.

Where your request concerns entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. For other inquiries, it is our legitimate interest in handling correspondence and responding to requests under Article 6(1)(f) GDPR. Sending a request does not subscribe you to marketing.

Protecting the form

We use a hidden spam field and temporary counters derived from IP addresses to limit automated or excessive submissions. These checks serve our legitimate interest in keeping the form available and preventing misuse under Article 6(1)(f) GDPR. The application does not write your message or form fields into its logs.

How long information is kept

Contact emails are kept for as long as needed to handle your request and related follow-up. Information may be kept longer where legal retention requirements apply or where needed to establish, exercise or defend legal claims.

Firebase states that its hosting service retains IP data for a few months. Further information is available in Firebase’s privacy documentation.

The contact service’s request logs are kept in a Google Cloud log bucket configured for 30 days. The application logs a random request reference and mail submission status, not the contents of your form. Temporary abuse-prevention counters expire within 24 hours; duplicate-request markers expire within 10 minutes.

International processing

The contact service is deployed in Frankfurt, Germany. Google and Microsoft also operate international infrastructure, and service or support processing can involve countries outside the European Economic Area.

The providers’ data-processing terms describe safeguards for international transfers, including EU standard contractual clauses where applicable. These terms are available in the Google Cloud Data Processing Addendum and the Microsoft Products and Services Data Protection Addendum. You can contact us for information about the safeguards relevant to your request.

Your rights

Subject to the applicable conditions, you can request access to your personal data, correction, deletion, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation.

To exercise your rights, contact hello@t3nd.ai. You also have the right to complain to a data protection supervisory authority. In Bavaria, you can contact the Bavarian State Office for Data Protection Supervision (BayLDA).