Back to homepage

Privacy Policy

Last updated: March 2026

1. Controller

Stefano Cassola
Hettenleidelheim, Germany
Email: stefano.cassola@web.de

2. Overview

This website is a personal portfolio with an integrated AI chatbot. Below I inform you about the processing of personal data in accordance with the General Data Protection Regulation (GDPR) and German data protection law (BDSG).

3. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit the website, technical data is automatically collected (IP address, timestamp, requested URL, browser type). This is technically necessary to operate the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating the website). Vercel processes data under Standard Contractual Clauses (SCCs) for third-country transfers.

4. AI Chatbot

4.1 How it works

The chatbot on this website uses the API of Anthropic Inc. (548 Market St, San Francisco, CA 94104, USA) to process messages. When you use the chatbot, your messages are transmitted to Anthropic's servers to generate a response.

4.2 Data processed

  • Chat messages you enter
  • IP address (for rate limiting only, not stored persistently)
  • No registration or personal identification required

4.3 Chat logging

Chat conversations may be logged to improve this website and analyze the types of questions asked. Logging is done without association to your identity (no IP addresses, no user accounts). Only message content is stored.

Legal basis: Art. 6(1)(a) GDPR (consent). You are informed about logging before using the chatbot and can freely decide whether to use the chat.

4.4 Retention period

Chat logs are retained for a maximum of 90 days and then automatically deleted.

4.5 Data transfer to Anthropic

Your chat messages are transmitted to Anthropic Inc. (USA) for processing. Anthropic processes data according to their privacy policy and retains API requests for a limited period. The transfer is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR).

5. Local Storage

This website stores your language preference (English/German) in your browser's localStorage. This is not cookie-based storage and contains no personal data. You can delete this data at any time through your browser settings.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in usability).

6. No Cookies

This website uses no tracking cookies and no analytics tools (such as Google Analytics). There is no tracking of your usage behavior.

7. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR) — what data is stored about you
  • Right to rectification (Art. 16 GDPR) — correction of inaccurate data
  • Right to erasure (Art. 17 GDPR) — deletion of your data
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR) — at any time with future effect

To exercise your rights, please contact me at: stefano.cassola@web.de

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Rhineland-Palatinate is:

Der Landesbeauftragte f\u00fcr den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
Phone: +49 (0) 6131 8920-0
Email: poststelle@datenschutz.rlp.de