Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Wisniewski IT Consult, Inhaber Manfred Wisniewski Helmstedter Str. 38 39112 Magdeburg Germany

E-mail: manfred@witconsult.de Phone: +49 177 7467 433

No data protection officer has been appointed; there is no obligation to appoint one pursuant to Art. 37 GDPR in conjunction with § 38 BDSG.

2. General information on data processing

We process personal data only to the extent necessary to provide this website and to respond to inquiries. With the exception of the processing described under "Matrix chat and AI assistants", processing takes place exclusively on servers in Germany. This website does not use tracking or analytics tools, does not embed external fonts, maps or videos, and does not set cookies for visitors.

Data transmission to this website is encrypted (TLS). Backups of website data are stored in encrypted form.

3. Legal bases for processing

Personal data is processed on the basis of:

  • Art. 6 (1) lit. f GDPR (legitimate interest) — for the technical operation of the website, in particular server log files for security and troubleshooting. Our legitimate interest lies in the stable and secure operation of this service.
  • Art. 6 (1) lit. b GDPR (contract or pre-contractual measures) — for handling inquiries aimed at a contractual relationship, and for providing the Matrix chat.

4. Provision of the website and server log files

When you visit this website, the web server automatically records information in so-called server log files:

  • IP address of the requesting device
  • Date and time of access
  • Page and file requested
  • Referrer URL (previously visited page)
  • Browser and operating system used (user agent)

Processing is based on Art. 6 (1) lit. f GDPR. Log files are deleted after 14 days at the latest. This data is not merged with other data sources.

Hosting: This website is operated on a server of netcup GmbH (Germany, data center Nuremberg). A data processing agreement pursuant to Art. 28 GDPR is in place with netcup.

5. Cookies

This website sets no cookies for visitors and does not use comparable technologies (local storage, fingerprinting, etc.).

A technically necessary session cookie (payload-token) is only set when editors log in to the administration area; this does not affect the visitor area and does not require consent under § 25 (2) TDDDG.

6. Contact options

Contact form

If you send us an inquiry via the contact form, we process your name, e-mail address and the content of your message. An optional phone number may be provided.

The data is stored on our own server and transmitted to us by e-mail. The legal basis is Art. 6 (1) lit. b GDPR where the inquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) lit. f GDPR.

Inquiries are deleted after final processing, but no later than 12 months, unless statutory retention obligations apply.

E-mail and telephone

If you contact us by e-mail or telephone, we process the data you transmit (e-mail address, name, content, phone number where applicable) to handle your inquiry on the basis of Art. 6 (1) lit. b or lit. f GDPR. E-mails are operated on our own mail server in Germany; calls are not recorded.

7. Matrix chat and AI assistants

Customers and employees can use our chat server matrix.witconsult.de (Matrix protocol) to communicate with AI assistants (bots). The chat server is operated by us on infrastructure of netcup GmbH in Germany.

Account and usage data: When using the service we process your username, display name and the content of your messages, which are stored on our server to provide the chat history. The legal basis is Art. 6 (1) lit. b GDPR; for employees § 26 BDSG. Messages are deleted as soon as they are no longer required for the chat history, at the latest upon deletion of the account.

AI assistants: When you write to an AI assistant, the content of your message is transmitted to OpenRouter (OpenRouter, Inc., USA) and the respective model provider for answering. This data is not used to train the models; depending on the provider, short-term retention for abuse monitoring may apply. The transfer to the USA takes place only under the safeguards required by Art. 44 ff. GDPR.

Please note: Conversations with AI assistants are readable by the assistant and therefore not end-to-end encrypted. Please do not submit particularly sensitive data (e.g. health data) in requests to AI assistants.

8. Social media presence

We are present on LinkedIn: https://www.linkedin.com/in/manfred-wisniewski

No social media plugins are embedded on this website — no data is transmitted to LinkedIn unless you actively follow the link. When you visit our LinkedIn profile, LinkedIn Ireland Unlimited Company processes personal data (in particular your IP address and usage data) as an independent controller. For details, see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

The legal basis for operating this presence is Art. 6 (1) lit. f GDPR (legitimate interest in public relations and customer communication).

9. Recipients of data

Personal data is transferred to third parties only to:

  • netcup GmbH (hosting of the website and the Matrix chat server, data processing agreement pursuant to Art. 28 GDPR)
  • Hetzner Online GmbH (encrypted backups, data processing agreement pursuant to Art. 28 GDPR)
  • OpenRouter, Inc. and the respective model provider (only when using the AI assistants in the Matrix chat, see section 7)

No further disclosure of data to third parties takes place unless we are legally obliged to do so.

10. Data processing outside the EU

With the exception of the transfer described under "Matrix chat and AI assistants" (USA: OpenRouter and model providers, under the safeguards of Art. 44 ff. GDPR), no personal data is transferred to third countries.

11. Your rights as a data subject

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6 (1) lit. f GDPR (Art. 21 GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

Right to object

Where we process data to protect legitimate interests (Art. 6 (1) lit. f GDPR), you may object to this processing at any time on grounds relating to your particular situation.

12. Withdrawal of your consent

Where you have given us consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für den Datenschutz Sachsen-Anhalt Otto-von-Guericke-Straße 34a 39104 Magdeburg, Germany https://datenschutz.sachsen-anhalt.de

14. Currency and amendment of this privacy policy

This privacy policy is current as of October 2026. The further development of this website or changes in legal or regulatory requirements may make it necessary to amend this privacy policy.