Privacy Policy

Allgemeine Hinweise

Die folgenden Hinweise geben einen einfachen Überblick darüber, was mit Ihren personenbezogenen Daten passiert, wenn Sie diese Website besuchen. Personenbezogene Daten sind alle Daten, mit denen Sie persönlich identifiziert werden können.

Datenerfassung auf dieser Website

Wer ist verantwortlich für die Datenerfassung auf dieser Website?
Die Datenverarbeitung auf dieser Website erfolgt durch den Websitebetreiber: Lexbeam Software, Inhaber Werner Plutat, Speditionstraße 15A, 40221 Düsseldorf. E-Mail: info@lexbeam.com

Datenschutz

Die Betreiber dieser Seiten nehmen den Schutz Ihrer persönlichen Daten sehr ernst. Wir behandeln Ihre personenbezogenen Daten vertraulich und entsprechend den gesetzlichen Datenschutzvorschriften sowie dieser Datenschutzerklärung.

Hinweis zur verantwortlichen Stelle

Server-Log-Dateien

Der Provider der Seiten erhebt und speichert automatisch Informationen in so genannten Server-Log-Dateien, die Ihr Browser automatisch an uns übermittelt. Dies sind:

• Browsertyp und Browserversion
• Verwendetes Betriebssystem
• Referrer URL
• Hostname des zugreifenden Rechners
• Uhrzeit der Serveranfrage
• IP-Adresse

Eine Zusammenführung dieser Daten mit anderen Datenquellen wird nicht vorgenommen. Grundlage für die Datenverarbeitung ist Art. 6 Abs. 1 lit. f DSGVO.

Kontaktformular

Wenn Sie uns per Kontaktformular Anfragen zukommen lassen, werden Ihre Angaben aus dem Formular inklusive der von Ihnen dort angegebenen Kontaktdaten zwecks Bearbeitung der Anfrage und für den Fall von Anschlussfragen bei uns gespeichert. Diese Daten geben wir nicht ohne Ihre Einwilligung weiter. Grundlage ist Art. 6 Abs. 1 lit. b DSGVO.

Scope and Purpose of Processing

The AI demos may include the following functions:

• Processing your text inputs to generate AI responses (chat/assistant function)
• Abuse protection (e.g. rate limiting)
• Simple, aggregated usage counting (e.g. visit counting without user profiles)
• Sending result reports via email (only for certain demos and only when you voluntarily provide your email address)
• Storing technical UI preferences in the browser (LocalStorage)

There are no user accounts, no login, no payment processing, and no personalized advertising. We do not use cookies for marketing or tracking purposes.

Legal Basis

Where we process personal data, this is based on the following legal grounds depending on the function:

• Art. 6(1)(b) GDPR (contract/pre-contractual measures), insofar as processing is necessary to provide the demo function you requested.
• Art. 6(1)(f) GDPR (legitimate interests), in particular to ensure IT security, prevent abuse (rate limiting), and provide stable, reliable services.
• Art. 6(1)(a) GDPR (consent), where you voluntarily provide an email address in certain demos.

Processing of Chat Inputs via OpenAI

When you enter text in an AI demo, it is transmitted to the OpenAI API (data processor) to generate a response. Under the OpenAI API terms, customer data submitted via the API is not used for model training.

OpenAI is based in the USA. The transfer is based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or, additionally, on Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR.

Abuse Protection and Technical Storage via Upstash (Redis, Frankfurt Region)

For technical provisioning, we use Upstash Redis (server location: Frankfurt am Main, EU) for IP-based rate limiting, aggregated visit counting, and technical status tracking. Legal basis: Art. 6(1)(f) GDPR.

Email Delivery of Reports via Resend (Certain Demos Only)

In certain demos, you may optionally provide your email address to receive an assessment report via Resend (sender: report@mail.lexbeam.com). Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR.

Local Browser Storage (LocalStorage)

For convenience features, we store local preferences in your browser via LocalStorage (e.g. whether a notice banner has been dismissed). No chat content or personal data is stored.

Hosting / Infrastructure (Vercel and Railway)

The demo web applications are hosted on Vercel (mentioned above) or Railway (Railway Corporation, San Francisco, USA), depending on the application. These providers process server log data (IP address, timestamp, URL, user agent). For US-based providers, transfers are based on an adequacy decision (Art. 45 GDPR) or appropriate safeguards (Art. 46 GDPR, in particular SCC).

Data Retention

• Chat/input data is generally not stored permanently.
• Rate limit entries (Upstash): automatically deleted after 24 hours at most.
• Aggregated counters may be stored indefinitely (without personal reference).
• Server logs: according to standard retention periods of the hosting providers.

AI Output Transparency

The AI demos generate responses automatically. Outputs may be inaccurate. There is no automated decision-making within the meaning of Art. 22 GDPR. The content does not constitute legal advice.

Data Subject Rights (Art. 15–21 GDPR)

You have – where legal requirements are met – the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You may revoke any consent at any time with future effect (Art. 7(3) GDPR).

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence.