Last updated: May 2026
Convenience translation. This website is operated from Germany. The German version of this privacy policy (Datenschutzerklärung) is legally binding.
The protection of personal data is taken seriously. This privacy policy explains what data is collected when you visit this website, how it is used and what rights you have.
Personal data is processed exclusively in accordance with the General Data Protection Regulation (GDPR, in German: DSGVO) and the German Federal Data Protection Act (BDSG).
This website is hosted by:
Strato AGThe use of Strato is based on Art. 6(1)(f) GDPR. A data processing agreement (DPA, in German: AVV) has been concluded. Strato processes data exclusively on servers in Germany.
When you access this website, the hosting provider automatically stores the following data in server log files:
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and optimization of the website). The data is deleted after 7 days at the latest.
If you contact us by e-mail, the transmitted data (name, e-mail address, message content) is stored to process your inquiry. It is not passed on to third parties.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). The data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent this.
For security reasons, this site uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” in the address bar and the lock icon in your browser. When encryption is enabled, data you transmit cannot be read by third parties.
This website does not set any cookies itself. The hosting provider Strato may set session cookies as part of technical operation, which do not process personal data.
Personal data is not passed on to third parties unless this is necessary for the performance of a contract or required by law.
The implemented AI systems run entirely locally (on-premise) on the customer's own infrastructure. No sensitive data is uploaded to a cloud or to external servers.
Since the systems are merely installed and maintained, a data processing agreement (DPA) pursuant to Art. 28 GDPR is concluded with every customer. This serves as a legal safeguard in case technical access to system components becomes necessary during maintenance work.
In projects for the development and specialization of AI models, it may be necessary for data to be made available.
Type of data: Specialist documents, internal texts, transcripts or other materials as the basis for model development. In individual cases these may contain personal data.
Purpose: Creation and curation of training data, expert annotation, development and evaluation of the target model in accordance with the project assignment.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). For special categories of personal data: Art. 9(2)(a) GDPR (explicit consent).
Place of processing: Exclusively on own hardware in Germany. No data transfer to third countries.
Storage period: Project data is deleted after completion of the project and handover of the model files, unless statutory retention obligations prevent this. The specific period is agreed in the project contract.
DPA: For every project in which personal data is processed, a data processing agreement pursuant to Art. 28 GDPR is concluded.
Recommendation: Where possible, provide anonymized or pseudonymized data. This reduces the data protection effort on both sides and is generally fully sufficient for model development.
The model developed in the project and all associated weights remain your property and are handed over to you in full after project completion. No copy is retained, and your data or the model are not used for own purposes.
As part of the linguistic-cognitive analysis reports (service 03), information about the AI system to be examined is processed. This includes in particular system descriptions, configuration details and, where provided by the customer, example dialogues.
Where these materials contain personal data (e.g., chat logs from customer service), the same principles apply as under 7.2: processing exclusively on own hardware in Germany, conclusion of a DPA, deletion after project completion. The resulting analysis report contains no personal data.
You have the following rights against the controller regarding your personal data:
To exercise your rights, please contact: info@wesselmeier.com
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent supervisory authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)This privacy policy is adjusted as needed. The current version is available on this page. Last updated: May 2026.