Privacy Policy
This website is deliberately lean: it sets no cookies, embeds no third-party content and uses no advertising or tracking services. Below you will find which personal data is nevertheless processed when you visit it, and why.
Controller
The controller responsible for data processing on this website is:
Paul Miedl
Hauptstraße 27
82266 Inning am Ammersee
Germany
E-mail: ai-connect@paulmiedl.de
Hosting and Server Log Files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open the website, your browser automatically transmits technical data that is processed by Vercel in order to deliver the website: IP address, date and time of the request, the page requested, referring URL, browser type and version, and operating system. This data is not merged with other data sources and is only kept for a short period to ensure operation and security, after which it is deleted.
Purpose and Legal Basis
The processing is based on our legitimate interest in a secure, stable and efficient delivery of our website pursuant to Art. 6 Para. 1 lit. f GDPR. We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. Data may be transferred to the USA. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR); in addition, the EU Standard Contractual Clauses apply.
Further Information
https://vercel.com/legal/privacy-notice
SSL/TLS Encryption
This website uses TLS encryption for security reasons and to protect the transmission of content, such as your messages to the AI chat. You can recognize an encrypted connection by “https://” in the address bar and the lock symbol in your browser.
No Cookies
This website does not set any cookies and does not store any information on your device (e.g. in local storage). Therefore, no cookie banner is required. Fonts, images and the audio CV are delivered from our own server; no connection to third-party servers such as Google Fonts or YouTube is established.
Vercel Web Analytics
Type and Scope of Processing
We use Vercel Web Analytics from Vercel Inc. for the statistical evaluation of visits to our website. It sets no cookies and stores no information on your device. Only aggregated, anonymous data is recorded, such as the page visited, time, referring website, approximate location (country/region), device type, operating system and browser. Visitors are told apart by a hash of the incoming request that is discarded after 24 hours and does not allow conclusions about your person.
Purpose and Legal Basis
The use of Vercel Web Analytics is based on our legitimate interest in analysing and improving our website pursuant to Art. 6 Para. 1 lit. f GDPR.
Further Information
https://vercel.com/docs/analytics/privacy-policy
AI Chat (“AI Clone”)
Type and Scope of Processing
On our website you can optionally use an AI chat that answers questions about our services and projects. The chat is only active once you open it and send a message. The text you enter, together with the previous messages of the current conversation and the selected language, is transmitted via our server to the Gemini API of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA), where the answer is generated. Your IP address is not forwarded to Google, as the request is sent by our server.
We do not store the chat history. It only exists in your browser for as long as the page is open and is lost when you reload or close it.
Please do not enter any sensitive personal data (e.g. health data, account details) into the chat. For a personal enquiry, please use e-mail.
Purpose and Legal Basis
The processing serves to answer your questions and is based on our legitimate interest in providing interactive information about our services pursuant to Art. 6 Para. 1 lit. f GDPR and, where your enquiry concerns a possible collaboration, on Art. 6 Para. 1 lit. b GDPR. Data may be processed in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR).
Storage Duration and Further Information
We use the paid version of the Gemini API. Google processes the chat content as our processor on the basis of a data processing agreement pursuant to Art. 28 GDPR and does not use it to improve its products. Google only stores the content for a limited period to detect misuse. Further details can be found in Google’s terms for the Gemini API: https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy.
Contact by E-mail
If you contact us by e-mail, we process the data you provide (e.g. name, e-mail address, content of your message) to handle your enquiry. The legal basis is Art. 6 Para. 1 lit. b GDPR if your enquiry relates to the conclusion or performance of a contract, otherwise our legitimate interest in answering enquiries pursuant to Art. 6 Para. 1 lit. f GDPR. We delete the data as soon as it is no longer required, unless statutory retention obligations (e.g. under commercial or tax law) apply.
Links to Other Websites
Our website contains links to external websites (e.g. LinkedIn or our project websites). These are simple links, not embedded content: data is only transmitted to the respective provider once you click on a link. The privacy policy of the respective provider applies there.
Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
To exercise your rights, an informal message to the e-mail address above is sufficient.
Right to Object (Art. 21 GDPR)
Where we process data on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Last updated: October 2026