Privacy notice

1. Data controller

Daniel Pestow
Berlzop, sole proprietorship
Steinkauterweg 21
56112 Lahnstein
Germany
E-Mail: kontakt@berlzop.de

2. Hosting

This website is hosted on our own server in Germany. When you visit, the server records technical information automatically transmitted by your browser in server log files:

  • Browser type and version
  • Operating system
  • Referring URL
  • Host name of the accessing device
  • Time of the server request
  • IP address

This data is not combined with other data sources. Collection is based on Article 6(1)(f) GDPR: our legitimate interest in a technically reliable and secure website.

3. Contact by email

If you contact us by email, we store the details you provide, such as your name, email address and enquiry, to handle your request. The legal basis is Article 6(1)(b) GDPR for pre-contractual steps or Article 6(1)(f) GDPR for our legitimate interest in handling enquiries. Data is deleted when it is no longer needed for that purpose, unless statutory retention requirements apply.

We store support enquiries locally on our server. Their automatic forwarding to AI providers is currently blocked. This remains blocked until a provider with a data processing agreement and the required safeguards for transfers to third countries is connected. A human reply remains possible. The public AI information chat described below is a separate service; chat messages already sent there are not covered by this support block.

The public product website does not embed Telegram chats or customer mailboxes. The following section also covers account sign-in and our Telegram bot. New paid website contracts and automatic AI handling of new support cases are not enabled yet. Further account connections and their data processing are explained separately before setup.

Telegram and account

When you message @BERLZOPbot, we receive and store your Telegram user and chat identifiers, the profile details transmitted, messages, file references and timestamps on our server. This lets us match requests and replies correctly and connect your account at your request. Confirming an account does not place an order or grant additional permissions. The legal bases are Article 6(1)(b) GDPR for services you request and Article 6(1)(f) GDPR for secure sign-in and protection against misuse.

For sign-in you initiate, berlzop.de sets a technically necessary secure session cookie restricted to the account area. The sign-in link is valid for ten minutes; after confirmation, the session lasts up to 24 hours. Signing out ends that browser session. Expired sign-in records are cleared when a new sign-in begins. This does not delete the account, messages or open support cases. These remain for handling your requests and secure operation; when that purpose ends, we review erasure and any statutory retention required. You can request access or erasure at kontakt@berlzop.de. The account area does not use website analytics.

Telegram acts as an independent controller for message transport. Bot conversations are not end-to-end encrypted secret chats. Telegram processes data under its own privacy policy; deletion by us does not automatically delete Telegram’s copies. You can contact us by email instead. The block on automatic AI processing described above also applies to support received through the bot. Telegram privacy policy

Chat with Berlzop

Opening the chat creates a temporary chat session. Only when you send a message do we transmit your question, a limited conversation history and public product information to the MiniMax API (Nanonoble Pte. Ltd., Singapore) to generate the requested answer. Mailbox contents, calendars, browser credentials, payment details and internal operator documents are not attached automatically.

The chat provides the information you request about the offer or your process. Do not submit passwords, payment details or particularly confidential documents. MiniMax may process data outside the EU. Its processing is covered by its own notices; we do not promise immediate deletion or EU-only processing by MiniMax. MiniMax privacy notice.

Your visible conversation is stored on our server and remains available for up to 30 days after the last message, including after a restart or a later visit. We use a protected random session identifier for this. Browser session storage remembers whether the chat window is open. These functions provide the chat you requested (Section 25(2)(2) TDDDG). Daily usage counters are kept without message text for no more than three calendar days.

If you expressly request contact in the chat and provide a contact address, we store that request with the conversation excerpt supplied for it separately and forward it to our support team. This handoff record is kept for up to 180 days. The regular conversation and quality log retain their respective shorter periods. Further handling follows the information about contact enquiries; required business correspondence and accounting records may be subject to statutory retention duties.

To operate and review the quality of this chat, we store sent questions, replies and any incomplete replies on our server in Germany. Records include a random conversation reference, time, language, website and chat area, model and prompt version, response time, usage counts and technical error codes. Access is restricted to the operator and authorised operations tools. The logs help identify incorrect answers, fix faults and improve conversations. The basis is our legitimate interest in the quality and reliability of the chat (Article 6(1)(f) GDPR). We do not link the text to website analytics. Review does not automatically forward a support request or train a model on our behalf.

Logging is part of this product chat and cannot be switched off in the chat window. “New conversation” only resets the active history; the internal quality log remains. Entries are deleted after 30 days in the next one-minute cleanup cycle. For access, objection or erasure requests, contact kontakt@berlzop.de. Include the conversation reference displayed in the chat if possible; it helps us locate the records. We review your request under the applicable legal requirements. Opt-outs chosen in the previous chat version remain effective until the original expiry of that session. Deletion by us affects our logs, not data already sent to MiniMax.

4. Optional website analytics

If you choose “Allow analytics”, we use Umami on our own server in Germany. Only then do we record pages visited and their language, referring domains, browser and device categories, clicks on contact options and time spent with the page visible and the browser window active. For enquiry forms, we count steps such as starting and preparing a draft. Field contents, preferred addresses, email text and URL parameters are not included. There are no session recordings.

Umami processes the technically transmitted IP address and browser characteristics to create temporary visit identifiers and approximate geographic information. The IP address itself is not stored in the Umami database. These identifiers do not reliably count individual people across multiple days. They are not linked to customer accounts or mailbox data.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can turn measurement off at any time using “Analytics settings” at the bottom of the page. The website works without consent too. “Do Not Track” and “Global Privacy Control” are respected.

We do not use cookies for this. Your choice is kept in local browser storage for 180 days so that we can respect it on later visits. Storing this privacy preference implements your choice under Section 25(2)(2) TDDDG. Recorded analytics data is deleted after 90 days during the next automatic cleanup, no later than 93 days.

Only with analytics consent, we also remember the first entry page visited (first website, AI agents or existing AI chat) in browser session storage for up to 30 minutes. This fixed category accompanies analytics through to the contact page, including language changes. It contains no message, contact address, account or payment identifier and is not an affiliate attribution. We remove it on withdrawal; once expired, it is discarded on the next page visit. It is not created without consent or when Do Not Track or Global Privacy Control is enabled.

Only with your new analytics consent, we also take a fixed channel name from a correspondingly labelled link (Bluesky, YouTube, Telegram or X). Other URL parameters are not stored or sent. The first channel name stays in session storage for up to 30 minutes, including language changes and visits to the contact page. Withdrawal and browser opt-out remove it; once expired, it is discarded at the next analytics call. Links can be shared or changed: this label does not establish a person’s origin, a purchase or an affiliate attribution. Previous consent does not enable this extension; previous refusal remains in effect.

Analysis helps make content clearer and contact options easier to use. Clicking an email link does not prove that an email was sent. A prepared draft is not a received enquiry. Analytics includes only consenting visits and may be incomplete because of browser filters.

5. Fonts

Fonts are served locally from our own web server. No external fonts are loaded from Google Fonts or similar services.

6. Recipients and processors

Personal data is shared with third parties only where necessary to perform a contract or meet a legal obligation. We use processors where needed to operate the website, for example for server hosting.

7. Transfers to third countries

This public website does not embed external fonts or tracking services that trigger a transfer to a third country when a page is loaded.

8. Data security

The website uses TLS encryption, indicated by “https://” in the address bar. We take appropriate technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised access (Article 32 GDPR).

9. Your rights

You have the following rights regarding your personal data:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Objection (Article 21 GDPR)

If you believe the processing of your data breaches data protection law, you may complain to a supervisory authority (Article 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Germany.