Auto-translated. This page was machine-translated from German with Claude Code and has not been editorially reviewed — the German version is authoritative. Read the German original →
// Privacy

Privacy policy

The German version of this page (/datenschutz) is legally binding. This is a machine translation for convenience.

kenaro GmbH operates this website (promptarchitect.de) and the „Prompt Architect" offering. We respect the protection of your privacy and observe the statutory data protection rules. Below we explain how we handle your personal data.

1. Controller

The controller within the meaning of data protection law is:

kenaro GmbH
Paul-Gruner-Str. 6
04107 Leipzig, Germany
Email: inbox@kenaro.com
Phone: +49 341 600150990
Managing director: Ingo Karstein
Registry court: Local court Leipzig, HRB 31878

2. Collection of general information

When you access our website, general information is recorded automatically (server log files): the name and version of the browser used, the operating system, the domain name of your internet provider, the accessing IP address and similar technical data. This information serves technical delivery and security and, on its own, does not allow conclusions about your person. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

3. Hosting

This website is operated as a static site on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in a data centre in Germany. During delivery, the server log files mentioned in section 2 are generated. A data processing agreement (Art. 28 GDPR) is in place with the hosting provider.

4. Cookies & consent

By default this website uses only technically necessary means. Cookies or comparable technologies for analytics/reach measurement are only set after you have actively consented via our cookie banner. We do not use advertising/marketing cookies. Your choice is stored locally in your browser. You can change or withdraw your consent at any time via „Cookie settings" in the footer.

5. Google Analytics 4

This website uses — only after your consent — Google Analytics 4, a web analytics service of Google Ireland Limited („Google"). It is embedded directly via the Google tag (gtag.js). A Google Tag Manager container is connected to the Google tag but currently contains no additional active tags (in particular no advertising/marketing tags). Google Analytics uses cookies that enable an analysis of the use of the website (e.g. pages visited, approximate origin, device type). In Google Analytics 4, IP addresses are not logged by Google and not stored permanently. A transfer of data to third countries (in particular the USA) cannot be ruled out; where this occurs, it relies on appropriate safeguards — the EU Commission's adequacy decision (EU-US Data Privacy Framework) where the provider is certified, otherwise standard contractual clauses (Art. 46 GDPR).

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, Google Analytics is not loaded and no analytics cookies are set. You can withdraw your consent at any time via „Cookie settings" in the footer. You can additionally prevent collection via the browser add-on at tools.google.com/dlpage/gaoptout.

6. Google Consent Mode v2

We use Google Consent Mode v2. When you visit the site, all analytics and advertising storage is set to „denied" by default. Only when you consent to analytics in the cookie banner is analytics_storage set to „granted". The advertising-related signals ad_storage, ad_user_data and ad_personalization remain permanently „denied" — we do not use any advertising/marketing services. Without consent, Google services operate in a restricted mode without cookies.

7. YouTube videos

We embed videos in „enhanced privacy mode" via youtube-nocookie.com and load them only after a click (two-click solution). Before the click, no data is transmitted to YouTube or Google. Only on playback does Google process data in accordance with its privacy policy; the provider is Google Ireland Limited.

8. Newsletter (delivered via Brevo)

On our website you can subscribe to our newsletter. This requires your email address. Subscription uses the double opt-in procedure: after entering your address you receive an email with a confirmation link; only after clicking it is your subscription active. This ensures that nobody can subscribe you with a third-party address. To document your consent, we log the time of subscription and confirmation.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time and withdraw your consent with effect for the future — via the unsubscribe link in every newsletter email or by message to inbox@kenaro.com. After unsubscribing, your email address is removed from the distribution list.

For delivery and management we use the service Brevo (Sendinblue GmbH). Your subscription and newsletter data are processed on Brevo's servers within the EU; Brevo acts on our behalf (data processing agreement, Art. 28 GDPR). Brevo also analyses statistically whether newsletters are opened and contained links clicked, so that we can improve our content. Details can be found in Brevo's privacy policy.

To protect our forms against automated abuse (bots) — namely the newsletter subscription, the comment function and access to the live demo — we use Cloudflare Turnstile, a service of Cloudflare, Inc. Turnstile checks, based on technical characteristics (including IP address, browser information and interaction patterns), whether the request comes from a human, and works without classic cookies. The legal basis is our legitimate interest in abuse-free operation (Art. 6(1)(f) GDPR). This may involve a transfer of data to Cloudflare, including to the USA; where this occurs, on the basis of appropriate safeguards (EU-US Data Privacy Framework or standard contractual clauses, Art. 46 GDPR). Further information can be found in Cloudflare's privacy policy.

9. Comment function (blog)

Under our blog posts you can leave comments. We process: the name you provide (shown with the published comment), your email address (used only for moderation or queries — it is not published), your comment text, and, for abuse/spam prevention, your IP address and the timestamp. Comments are moderated before publication.

The legal basis for publishing your comment is your consent (Art. 6(1)(a) GDPR); for abuse/spam prevention our legitimate interest (Art. 6(1)(f) GDPR).

For the technical implementation we use: Cloudflare Turnstile as bot protection (see section 8); the moderation team is notified via our self-hosted chat service (RocketChat, chat.kenaro.com) running on our own infrastructure in the EU — transmitting name and comment text, not your email address; approved comments are stored in a non-public repository at GitHub (GitHub, Inc., a Microsoft company) — your email address is stored there as well, but not displayed publicly. With GitHub, a transfer to third countries (including the USA) may occur; where this occurs, on the basis of appropriate safeguards (EU-US Data Privacy Framework or standard contractual clauses, Art. 46 GDPR).

You can request deletion of your comment and the associated data at any time at inbox@kenaro.com.

10. Getting in touch

If you contact us by email, your details are stored and processed for the purpose of handling the enquiry (Art. 6(1)(b) or (f) GDPR). We do not pass on this data without your consent.

11. Storage period

We observe the principles of data minimisation. We store personal data only as long as is necessary to achieve the respective purpose or as legally required. Guidance per purpose:

  • Server log files: only briefly for security/operational purposes, then deleted.
  • Google Analytics 4: according to the retention period configured in Google Analytics (by default up to 14 months).
  • Newsletter: until you unsubscribe/withdraw; the record of consent is kept beyond that for documentation.
  • Comments: until a deletion request; rejected/unpublished comments are removed promptly.
  • Email contact: until your enquiry has been fully handled, unless statutory retention periods apply.

12. Your rights

You have the right at any time to information about your stored personal data as well as to rectification, erasure, restriction of processing, data portability and objection. You can withdraw a given consent at any time with effect for the future. To do so, contact inbox@kenaro.com. You also have the right to lodge a complaint with a data protection supervisory authority — for us this is the Saxon Data Protection and Transparency Commissioner (Dresden).

13. Changes to this policy

We reserve the right to adapt this privacy policy to reflect changes in the legal situation or in our services. The version current at the time applies to your renewed visit.