Privacy policy

1. Controller

The controller is the natural or legal person who determines the purposes and means of processing personal data.

2. General information

Personal data is information that can identify a person directly or indirectly. This policy explains what data is processed when you visit this website, why it is processed and what rights you have.

Data transmission over the internet may have security vulnerabilities. Complete protection against access by third parties is technically impossible.

3. Hosting, domain and technical access data

This website is provided through OpenAI Sites. Cloudflare infrastructure may be used for technical delivery. When the site is accessed, data such as the IP address, time and requested page, referrer URL, browser and operating-system information, and security and routing data may be processed.

The ki-kennzeichnen.com domain is registered with STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany; STRATO provides domain connection and DNS management. Domain and account data as well as technically necessary data related to domain resolution may be processed. Under the current configuration, the website and selected image files are not hosted by STRATO.

Processing is necessary to deliver the website, ensure stability and security, and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Technical data is deleted or anonymised when it is no longer needed for these purposes and no statutory obligations require otherwise.

Where data is processed outside the European Economic Area, this takes place under the safeguards described by the respective provider, including adequacy decisions or EU standard contractual clauses.

OpenAI EU Privacy Policy

4. Local image processing

When you select an image, the web application processes the file using browser functions and HTML canvas technology. The image remains on your device. Adding a label and creating the download file also take place locally. There is no server-side image analysis, permanent storage, advertising use or training of AI models with your images.

Local processing starts only after your active selection. Closing or reloading the page discards the current edit. No user account is created.

5. Cookies, consent and browser storage

The application does not store images or editing settings in local storage. Technically necessary cookies or local browser storage may be used to provide and secure the service and to remember your cookie choice. Your “Accept” or “Reject” decision is stored locally on your device so that the banner does not reappear on every page view. The legal basis is § 25(2) no. 2 TDDDG in conjunction with Article 6(1)(f) GDPR.

Cloudflare sets the technically necessary “__cf_bm” cookie to detect automated access and mitigate malicious bot traffic. It contains encrypted information used to calculate a bot score, is not linked to a user identifier in our application and expires after 30 minutes of continuous inactivity.

Optional analytics cookies and comparable storage access by Google Analytics are activated only after your consent. The legal bases are § 25(1) TDDDG and Article 6(1)(a) GDPR. You can change or withdraw consent at any time for the future through “Cookie settings”. Rejecting analytics has no adverse effect on use of the image tool.

Cloudflare cookie information

6. Contact

If you contact us by email or telephone, the data you provide is processed to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for contracts or pre-contractual measures and otherwise Article 6(1)(f) GDPR. Data is deleted once the enquiry has been completed, unless statutory retention duties or legitimate interests require longer storage.

7. Google Analytics and Google Search Console

Google Analytics 4 is technically planned but is not currently active. No Analytics measurement ID is embedded and this website does not currently load Google Analytics tracking code.

If Google Analytics is activated in the future, it may be loaded only after you expressly consent by selecting “Accept”. The legal bases would be § 25(1) TDDDG and Article 6(1)(a) GDPR. Consent must remain withdrawable for the future at any time through “Cookie settings”.

Before activation, the data actually processed, recipients, third-country transfers and the configured retention period will be reviewed and this privacy policy will be updated accordingly. The provider of Google Analytics is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its affiliated company is Google LLC in the United States.

We use Google Search Console to evaluate indexing, search performance and the technical visibility of the website. Search Console loads no analytics tracking code on this website and therefore sets no additional visitor cookies; analysis takes place in our Google account using search data supplied by Google.

Google Privacy Policy

8. Recipients and transfers

Recipients of technically necessary access data may include service providers used for hosting, delivery and security. Data is disclosed to other recipients only where permitted or required by law or where you have consented. Image files are not affected because they do not leave the browser.

9. Your rights

Subject to the statutory requirements, you have in particular the following rights:

• Access to your personal data (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure of your data (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing based on legitimate interests (Article 21 GDPR)
• Withdrawal of consent with future effect (Article 7(3) GDPR)

info@ki-kennzeichnen.com

10. Right to lodge a complaint

Under Article 77 GDPR, you have the right to complain to a data protection supervisory authority. The authority responsible for the controller’s registered office is in particular:

Online complaint to the supervisory authority

11. Encryption

The website is delivered over an encrypted HTTPS connection. This protects transmitted content while it is in transit.

12. Updates to this policy

This privacy policy will be updated when functions, services used or legal requirements change. The version published on this page is authoritative.