Privacy policy

This translation is provided for convenience; the German version is legally binding. (Datenschutzerklärung, German version)

This website does not set cookies and shows no advertising. External servers are contacted only if you use the contact form (see “Cloudflare Turnstile”). This policy explains which data arise.

Controller

Martin Felux, sole proprietorship “KI-Xellenz”
Ötztaler Str. 15, 13187 Berlin
Email: kontakt@ki-xellenz.com

Visiting the website

The website is hosted on servers of Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Zypern. When a page is requested, the server processes technically necessary data: IP address, date and time, the address requested, the amount of data transferred, the page visited before, and details of the browser and operating system. The upstream proxy server writes the requests to log files to ensure the operation and security of the website. These logs are deleted after 14 days at the latest, the logs of the contact form and the mail server after 7 days at the latest.

The legal basis is Art. 6(1)(f) GDPR (DSGVO). My legitimate interest lies in the secure and error-free operation of the website. The host processes the data on my behalf.

No cookies, no analytics or advertising services

The website itself does not set cookies and does not load content from external servers when a page is requested. Fonts are loaded from the site’s own web space. There are no analytics or advertising services. The only exception is the security check in the contact form, which is loaded only when you use the form.

Contact by email

If you write to me, I process the data you provide in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR (DSGVO) where your enquiry concerns an engagement, and otherwise Art. 6(1)(f) GDPR (DSGVO). Messages are deleted once the enquiry has been dealt with and no statutory retention obligations apply. Emails to the address kontakt@ki-xellenz.com are delivered to my mailbox through the forwarding service Cloudflare Email Routing (Cloudflare, Inc.); for transfers to the USA, the same applies as described under “Cloudflare Turnstile”. I send my replies from this address through the email delivery service Brevo (Brevo SAS, 17 rue Salneuve, 75017 Paris, France); in doing so, Brevo processes your email address and the content of my message as a processor under Art. 28 GDPR (DSGVO). The data processing agreement is part of Brevo’s terms of use. Brevo processes the data mainly in the EU (France, Belgium); where sub-processors outside the EU are used, Brevo states that it safeguards the transfer through the European Commission’s standard contractual clauses or the EU-U.S. Data Privacy Framework. Further information is in the Brevo privacy policy.

Contact form

In the contact form I ask for your name, your email address, your enquiry and your message; the office or company is optional. The details are delivered to me as an email through a dedicated mail server on the host’s server, solely to deal with your enquiry (Art. 6(1)(b) GDPR (DSGVO) where your enquiry concerns a contract or an engagement, and otherwise point (f)). Neither your message nor your details are stored on the web server. A short acknowledgement of receipt, without the content of your message, is sent to the email address you give.

To prevent abuse, non-reversible check values of your IP address and your email address are held in the working memory of the form server for no more than 24 hours in order to limit the number of requests (Art. 6(1)(f) GDPR (DSGVO), legitimate interest in protection against abuse). I delete the messages once the enquiry has been dealt with and no statutory retention obligations apply.

Cloudflare Turnstile

The contact form is protected against automated requests by “Turnstile” from Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). The script is loaded from challenges.cloudflare.com only when you use the form, not when the page is merely viewed. In this process Cloudflare processes data such as your IP address and device and browser characteristics in order to check whether the request comes from a human; the check may use browser storage. The legal basis is Art. 6(1)(f) GDPR (DSGVO) (legitimate interest in protecting the form against abuse). According to Cloudflare, it also uses these data under its own responsibility to improve the detection of automated access. Cloudflare may transfer data to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023, Art. 45 GDPR); in addition, Cloudflare’s data processing agreement contains the European Commission’s standard contractual clauses (Art. 46 GDPR). Further information is in the Cloudflare privacy policy. Without the security check you cannot submit the form; you can write to me by email instead.

Your rights

You have the right of access to the data stored about you (Art. 15 GDPR (DSGVO)), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on legitimate interests (Art. 21). A message to the address given above is sufficient.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

As of: November 2026