Privacy

Controller

Alondra Butuc Bismarckstr. 104 63065 Offenbach am Main Deutschland

Email for privacy requests: datenschutz@unterhaltsplan.de

AI Orchestrator is a product and brand name of Alondra Butuc. The controller within the meaning of the GDPR is Alondra Butuc.

Overview

This website is a largely static information and product site. There are no user accounts, no comment features and no newsletter. Personal data is processed only as far as necessary to operate the website, keep it secure, handle contact requests, process purchases and send transactional emails.

Hosting and server logs (Vercel)

The website is hosted by Vercel Inc. (USA) and delivered through its content delivery network. When you visit the site, Vercel processes technically necessary connection data, in particular IP address, time of access, requested URL, referrer and browser/device identifier (user agent). These server and security logs are used to deliver the website, analyse errors and defend against attacks.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, reliable operation). Logs are kept only for a short time. Processing may take place in the USA, safeguarded by the mechanisms provided for this purpose (EU standard contractual clauses or certification under the EU-US Data Privacy Framework, where applicable).

No cookies, no external fonts

• This website sets no cookies — including no marketing or tracking cookies.
• No external fonts are loaded; all fonts are served by this website itself.
• Your theme preference (light/dark/system) is stored only locally in your browser (localStorage) and is never sent to a server.

Usage statistics (analytics)

No usage analytics is currently active. If analytics is used in the future, it will be a cookie-less, privacy-friendly setup (Umami) that sets no cookies, builds no profiles and collects no names, email addresses or content; this policy will be updated accordingly.

Purchase processing (Stripe)

Purchases are processed by the payment provider Stripe (Stripe Payments Europe, Ltd., Ireland; where applicable involving Stripe, Inc., USA). Payment takes place on a payment page hosted by Stripe. Payment data (such as card details), billing and address data and your email address are collected and processed directly by Stripe; we never receive full payment data.

Within the payment session we store purchase-related metadata: the purchased product and version, the time of purchase, the version of the contract terms and the status of your two declarations regarding immediate delivery (see "Record of the withdrawal declarations" below). No name, postal address or payment data is stored there.

Legal bases: Art. 6(1)(b) GDPR (performance of the contract), Art. 6(1)(c) GDPR (statutory commercial and tax retention duties) and Art. 6(1)(f) GDPR (fraud prevention and security checks). Incoming payment events from Stripe are cryptographically verified before processing.

Contact form and support requests

When you use the contact form, we process your email address, the selected topic, your message, confirmation that you have read this privacy policy and — if you provide it voluntarily — your name. Please do not send passwords, full payment details or other information that is not needed to handle your request.

The details are used to handle and respond to your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns steps before entering into a contract or performance of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in handling business and general enquiries).

The request is received server-side through Vercel and transmitted through Resend to the controller’s mailbox. The website does not store contact requests in a separate database. The message is stored in the email mailbox and deleted when the request has been completed unless statutory retention duties require otherwise.

Transactional email (Resend)

We use the service Resend (Resend, Inc., USA) for transactional email processing. Resend is used only for purchase/delivery confirmations with download links, access-restore emails, transmission of your contact request to the operator mailbox and replies to your request. In particular, your email address and the content of the respective message are processed for this purpose.

There is no newsletter and no advertising email; no marketing permission is collected. The legal basis is Art. 6(1)(b) GDPR. The safeguards described above apply to processing in the USA.

Download delivery

• Download links are short-lived and signed; they expire automatically.
• Product files are stored privately (Vercel Blob); there are no publicly accessible file URLs.
• Before every delivery the purchase is re-verified with the payment provider; without a confirmed purchase there is no access.

Restore access

On the "Restore access" page you can request a fresh download link with your purchase email address. The address you enter is used solely to look up existing purchases and, where applicable, to send an email with a new link. The page deliberately always answers with the same neutral message so third parties cannot probe whether a purchase exists for an address. The frequency of requests is technically limited. Legal bases: Art. 6(1)(b) and (f) GDPR.

Record of the withdrawal declarations

During the purchase you make two declarations: the express request that delivery of the download begins before the withdrawal period ends, and the acknowledgement that your right of withdrawal expires once delivery begins. Both declarations are stored together with their timestamp and the version of the contract terms as metadata of the payment session.

This record serves as the statutory evidence (cf. § 356(5) of the German Civil Code, BGB) and documents the conclusion of the contract. Legal bases: Art. 6(1)(b) and (c) GDPR. The data is retained for as long as required for this evidence and the statutory retention duties.

Retention

Server and security logs are kept only for a short time. Contact requests are deleted once they have been handled unless statutory retention duties require otherwise. Purchase, billing and evidence data is subject to statutory commercial and tax retention duties and is deleted, or restricted in processing, once those periods end. Beyond that, we store personal data only as long as it is needed for the purposes described here.

Your rights

• Access to the personal data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise your rights, an email to datenschutz@unterhaltsplan.de is sufficient. You also have the right to lodge a complaint with a data-protection supervisory authority — for example the authority responsible for our registered location in Hesse, Germany.