Privacy notice

1. Controller

Matthias Engelmann
Engelmann AI – Special Purpose AI Agents
Siedlungsweg 6
38889 Blankenburg
Deutschland

Email: kontakt@engelmann.ai

You can also find us on LinkedIn.

2. Website and media

This website presents Engelmann AI services, in-house developments and work examples. You can read the content without registering. Images, fonts, PDF files, and audio and video recordings are loaded from the same website address.

The Lessy page shows recorded conversation examples. Audio and video start only after you select them. This website offers no live access to Lessy, no microphone access, and no transmission of your input to an AI model. Separate applications may have other functions and their own privacy notices.

3. Hosting and technical connection data

We operate this website through OpenAI ChatGPT Sites. For providers in the European Economic Area, the Sites Data Processing Addendum names OpenAI Ireland Limited as the contracting party. OpenAI processes visitor data on our behalf to provide, maintain and support the website. Cloudflare infrastructure is used to deliver and secure it.

When you access the site, data collected includes your IP address, time, requested page or file, and technical browser and device details. This data is needed to deliver content, investigate errors, and prevent abusive access. The legal basis for these purposes is Art. 6(1)(f) GDPR; our legitimate interest is an accessible and secure website.

Recipients are the providers responsible for hosting and security and their subprocessors. Further information is in the Sites Data Processing Addendum and the OpenAI Privacy Policy.

4. Cookies and platform statistics

The website code we created uses neither Google Analytics nor Meta Pixel and sets no cookies of its own or entries in local browser storage. The hosting platform’s functions are separate. Sites automatically records visitor and page-view counts and shows them to us as statistics.

The following cookies were found on this website during the review on 14 September 2026. Their lifetimes describe the observed or documented state and may be extended by subsequent access.

__cf_bm · Cloudflare

Used for bot detection. According to Cloudflare, it expires after 30 minutes of continuous inactivity.

cf_clearance · Cloudflare

Stores the result of security checks. During the review, the set lifetime was about one year.

__Host-appgarden-visitor · Sites platform

A visitor identifier was set without a prior choice. The observed lifetime was about 90 days.

Section 25(2) no. 2 TDDDG may apply to access to end-user devices that is strictly necessary for the service. Non-essential access requires prior consent under Section 25(1) TDDDG; the subsequent processing of personal data also requires a legal basis under the GDPR.

Cloudflare explains its cookies in the cookie documentation. You can delete or block cookies through your browser; this may affect security checks and website availability. This browser function does not replace any consent that may be required.

5. Contact by email

We use kontakt@engelmann.ai for email enquiries. If you write to us, we process your sender and contact details, message content, and any attachments to handle your request.

The email service is provided through Google / Gmail. Google processes email content and technical communication data for this purpose. For users in the European Economic Area, Google’s Privacy Policy names Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details are in the Google Privacy Policy.

If your enquiry is directed toward entering into a contract with us, it is handled under Art. 6(1)(b) GDPR. For other business enquiries, the basis is Art. 6(1)(f) GDPR; our interest is to respond appropriately to your message. Providing the data is voluntary. Without a way to contact you, we cannot reply.

Retention depends on the processing status, any resulting contractual relationship, statutory retention duties and, where applicable, the establishment or defence of legal claims. Messages must be deleted when these purposes and duties no longer apply. The provider’s information applies to data Google processes for its own purposes.

6. Booking appointments with Calendly

Our booking links lead to Calendly, LLC, USA. Calendly is not embedded in this website. Your browser connects to Calendly only when you open the booking page.

When you book an appointment, we process in particular your name, email address, chosen time, and details you provide to prepare. The purpose is to arrange and prepare for the conversation. Art. 6(1)(b) GDPR applies to pre-contractual enquiries; Art. 6(1)(f) GDPR applies to other business appointment arrangements. Calendly processes appointment details on behalf of its customers and certain platform data under its own responsibility.

Retention depends on conducting and following up on the appointment and any subsequent engagement. Further information about data processing, cookies and transfers is provided in the Calendly Privacy Notice. You can also contact us by email. Preparing with our AI assistant is not a prerequisite for the initial conversation.

7. Other linked services

Links to LinkedIn, the COCOS website, and the incident report prototype are provided. When you open a link, the relevant provider processes technical connection data. The privacy notices published by those services apply. If you contact us through LinkedIn, we handle your message for the purposes and on the legal bases described under “Contact by email”; LinkedIn also processes data under its own terms.

8. Processing outside the EEA

Processing by the international providers used may take place in particular in the USA. Processing exclusively in the European Economic Area is not promised.

For transfers from the EEA to affiliates and other recipients outside the EEA, the Sites Data Processing Addendum provides for standard contractual clauses or an adequacy decision. Google describes its transfer mechanisms under Data transfer frameworks. Calendly identifies the EU-US Data Privacy Framework and standard contractual clauses in its Privacy Notice.

Information about the relevant safeguards is available in the linked provider documents. You can also contact us about this. The links describe the providers’ published terms; they do not promise storage exclusively in Europe.

9. Your rights

Subject to statutory requirements, you have the right to access, rectification, erasure, restriction of processing, and data portability. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of prior processing.

Objection: You may object to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation. You may object at any time to processing for direct marketing.

To exercise your rights, contact us using the details above. You may also lodge a complaint with a data protection supervisory authority, in particular where you live, work, or where the alleged infringement occurred. The State Commissioner for Data Protection of Saxony-Anhalt is responsible for our registered office.

We do not make decisions through this website based solely on automated processing that produce legal or similarly significant effects for you. Technical security checks by the hosting platform are distinct from this.

10. Changes to this notice

This notice will be updated if the website, the services used, or the applicable requirements change. The date stated above indicates the last revision.