Privacy notice

1. Controller

Robert Kremer
Klosengartenstr. 80
50374 Erftstadt, Germany
Phone: +49 151 17269957
Email: info@ki-scale.de

We generally process personal data only insofar as this is necessary to provide a functioning website and our content and services. The legal basis is Art. 6 (1) (a), (b) and (f) GDPR.

2. Server log files

Each time our website is accessed, our hosting provider automatically collects information that your browser transmits to our server (server log files): IP address, date and time of the request, time zone difference to Greenwich Mean Time, content of the request, access status/HTTP status code, amount of data transferred, referrer and browser and operating system information. This data is technically necessary to display the website and is stored for a limited period to ensure stability and security (Art. 6 (1) (f) GDPR).

3. Hosting

This website is operated via Lovable Cloud. According to Lovable’s documentation, the contractual partner is Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden. Lovable Cloud uses the infrastructure of Supabase (Supabase Inc.) in the background to provide hosting and database services. Lovable states that it uses further service providers; the published list of Lovable’s sub-processors is available at trust.lovable.dev/subprocessors.

The fonts used on this website are delivered together with the website by our web hosting. Your browser does not connect to Google Fonts for this purpose.

4. Purchase of digital books

Paid digital books and PDF products can be purchased via MyFreedomAI. The controller is Robert Kremer (see section 1).

During the ordering and purchasing process, the following data in particular may be processed: name, email address, billing information (including the country of the billing address and the country of residence you state before checkout), payment and transaction data, the product ordered, order number, time of purchase, download entitlement and information on the use of the download access. In addition, the declarations made in connection with the immediate provision of digital content are documented.

Evidence of your location for VAT purposes: To determine the correct VAT treatment, we store the country of residence you state, the country of your billing address and the issuing country of your payment card as reported by your bank, together with the result of the automatic comparison of these countries. Only country codes are stored for this purpose; we do not store your IP address in connection with your order. The legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 24b and 24f of Council Implementing Regulation (EU) No 282/2011 (evidence of the customer’s location) and Art. 6 (1) (b) GDPR.

Manual review of orders: If these countries do not match, your order is reviewed manually before the payment is charged. We inform you of this by email and may ask you for suitable evidence of your place of residence. Our decision, the reason, the country determined and the time are stored in a review log. The legal basis is Art. 6 (1) (b) and (c) GDPR. There is no automated decision based solely on the card country or the location of your internet connection.

The processing is carried out to perform and process the contract, to process payments, to provide the digital product, to comply with statutory documentation and retention obligations and to handle customer enquiries.

Storage period: Personal data is generally only stored for as long as necessary for the respective processing purposes or as long as statutory retention obligations exist. Data subject to commercial or tax retention obligations is retained in accordance with the applicable statutory periods.

Payment processing via Stripe: Payment is processed by the payment service provider Stripe Payments Europe, Limited via an embedded Stripe payment form. The data required to carry out the payment is transmitted to Stripe. The legal basis is Art. 6 (1) (b) GDPR insofar as the processing is necessary for the performance of the purchase contract. As part of payment processing, Stripe may also process personal data outside the European Economic Area. According to Stripe, it uses appropriate transfer mechanisms for this, in particular the standard contractual clauses (SCCs) adopted by the European Commission and – where applicable – the EU-U.S. Data Privacy Framework. Further information can be found in Stripe’s privacy policy.

Download provision: For the protected download, a personal, randomly generated access key is stored and the number of downloads is counted.

Consent to immediate delivery: Your express consent to the immediate start of the provision of the digital content, including your acknowledgement of the loss of the right of withdrawal (§ 356 (5) BGB), is stored together with the time and the order and repeated in the order confirmation sent by email.

Transactional emails: The purchase confirmation with your personal download link is sent to the email address provided. These emails are necessary for the performance of the contract and are not advertising; the legal basis is Art. 6 (1) (b) GDPR. Purchase confirmations and personal download links are sent via the email service provided by Lovable (Lovable Labs AB, Stockholm).

Data transfers to third countries: As a safeguard for data transfers outside the European Union, Lovable names EU standard contractual clauses in its documentation. This only describes the form of safeguard stated by Lovable; it is not claimed that each specific data export has been individually verified to be based on it. For payment processing, the information under “Payment processing via Stripe” applies.

4a. Electronic withdrawal function

If you declare your withdrawal via our electronic withdrawal function, we store your name, the order reference, your email address, any additional information you provide, the wording of the declaration and the time of receipt, and send you a confirmation of receipt by email. The legal basis is Art. 6 (1) (c) GDPR in conjunction with § 356a BGB and Art. 6 (1) (b) GDPR.

4b. Cookie settings and Google Analytics

Your choice in the cookie banner (“Necessary only” or “Allow statistics”) is stored in your browser’s local storage so that the banner is not shown again on every page. This storage is strictly necessary (§ 25 (2) no. 2 TDDDG).

Only if you choose “Allow statistics” do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure page views and which pages lead to sign-ups. Google Analytics uses cookies and similar technologies; we have activated IP anonymisation. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

5. Anonymous visitor counter

For the book pages, we use an internal, anonymous visitor counter for internal statistical evaluation and to improve the sales page. Only the page path, the calendar day, the number of page views on that day and the number of clicks on the purchase button on that day are stored. No IP addresses are stored, no cookies are set and no local browser storage is used. Individual visitors are not recognised; the data cannot be attributed to any person.

6. Referral system

We work with affiliates who recommend products via a personal link (e.g. /understanding-your-body?ref=CODE). Alternatively, a referral code can be entered voluntarily during the ordering step. Purpose: attributing purchases to affiliates and settling affiliate commissions. For a purchase, only the valid referral code and the commission rate applicable at the time of purchase are stored. The code is transmitted to Stripe together with the payment and assigned to the order after payment has been confirmed. Without your consent, the code is only used during the current page visit; only if you have chosen “Allow statistics” in the cookie banner is it kept in your browser’s local storage for 30 days so that a later purchase can be attributed (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). Affiliates do not receive any information about buyers from us, only aggregated figures. Legal basis: our legitimate interest in correct settlement with our affiliates (Art. 6 (1) (f) GDPR).

7. Your rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to info@ki-scale.de is sufficient.

8. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. This means that data you send to us cannot be read by third parties.

Version: November 2026