Privacy Policy

Controller

The controller within the meaning of the GDPR is:

Prometheus KI GmbH (haftungsbeschränkt)
Tal 44, 80331 Munich, Germany
Represented by: Vincent Halasz
Email: [email protected]

Hosting

This website is hosted on servers located within the European Union. No transfer of your data to third countries takes place.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

Server Log Files

With every page request, the web server automatically collects and stores information in server log files. This includes: requested URL, date and time of access, amount of data transferred, browser type and version, and operating system. IP addresses are anonymised before storage and cannot be used to identify individuals.

Log data is automatically deleted after a maximum of 7 days.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting against misuse and for error diagnosis).

Web Analytics – Umami

This website uses Umami, a privacy-friendly web analytics tool. Umami sets no cookies and collects no personal data. Only anonymised, aggregated usage statistics are recorded (e.g. page views, country of origin, device type). Identification of individual persons is not possible.

Umami is operated on our own servers within the EU. No data is transferred to third parties or to third countries.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in analysing and improving our website).

You can object to data collection by Umami by enabling a "Do Not Track" header in your browser. Umami respects this setting.

Google Ads Conversion Tracking

This website uses Google Ads Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Conversion tracking allows us to determine whether an advertisement placed via Google Ads has led to an appointment booking on our website.

Google Ads sets cookies to record conversions. The tracking script is therefore only loaded after you have given your consent via our cookie banner. Without consent, no Google tracking takes place.

No personal contact data is transmitted to Google during conversion tracking. Google receives the information that a user clicked on an advertisement and subsequently performed a specific action (booking) on our website. Google may be able to associate this data with a Google account.

Google may transfer data to the USA. Google Ireland Limited is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time by declining cookies via our cookie banner or by clearing your browser cache.

In addition, you can disable personalised advertising in your Google account settings or prevent the storage of cookies through your browser settings.

Appointment Booking – Cal.com (self-hosted)

This website provides an embedded appointment booking feature for scheduling an initial consultation. It uses a self-hosted instance of the open-source software Cal.com, operated on our own servers within the EU.

When making a booking, the following data is processed: name, email address, and the chosen appointment slot. This data is used solely for the preparation and conduct of the consultation.

No data is transferred to Cal.com Inc. or any other third party.

The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures).

Booking data is deleted after the initial consultation has taken place, provided no further contractual relationship is established.

Contact by Email

If you contact us by email, we process your email address and the content of your message solely for the purpose of responding to your enquiry.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in handling enquiries) or Art. 6(1)(b) GDPR where the enquiry relates to entering into a contract.

Your data is deleted once the enquiry has been fully processed and no statutory retention obligations apply.

Consent Storage (Local Storage)

This website displays a notice banner on your first visit. Your decision (accept or decline) is stored exclusively in your browser's local storage (localStorage). No cookies are set and no data is transmitted to our servers.

You can reset your preference at any time by clearing your browser cache.

Your Rights

You have the following rights regarding the personal data we hold about you:

• Access (Art. 15 GDPR): You may request information about the personal data we store about you at any time.
• Rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete data corrected.
• Erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided no statutory retention obligations apply.
• Restriction of processing (Art. 18 GDPR): You may request restriction of processing where the accuracy of the data is disputed or the processing is unlawful.
• Data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
• Objection (Art. 21 GDPR): You may object at any time to the processing of your data on the basis of Art. 6(1)(f) GDPR.
• Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, please contact us at: [email protected]

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for Prometheus KI GmbH is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de

Currency of this Policy

We reserve the right to update this privacy policy to ensure it remains compliant with current legal requirements or to reflect changes to our services. The current version is always available on this page.

Last updated: March 2026