Last Updated: [Date]
1. General Information
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data within our online service "workshops." and its associated websites, functions, and content. The controller responsible for data processing is [Your Company Name], [Your Address]. You can find our full contact details in our Imprint.
2. Your Rights as a Data Subject
Under the GDPR, you have the right to: request information about your personal data processed by us (Art. 15); request the correction of incorrect data (Art. 16); request the erasure of your personal data (Art. 17); request the restriction of processing (Art. 18); data portability (Art. 20); and to object to processing (Art. 21). You also have the right to lodge a complaint with a supervisory authority (Art. 77).
3. Processing of Personal Data
a) Visiting our Website
When you access our website, our hosting provider automatically collects server log files, including your IP address, browser type, and time of access. This is based on our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the security and stability of our service. This data is not merged with other data sources.
b) Registration and User Account
To use our services, you must register an account. We process the data you provide (e.g., email address, password) to create and manage your account and to fulfill our contractual obligations (Art. 6(1)(b) GDPR).
c) Using Our Services
When you create and save workshops or methods, this data, including any text you input into the AI generator, is stored and processed on our servers to provide the service to you (Art. 6(1)(b) GDPR). We treat this content as confidential.
4. Third-Party Services and Data Transfer
We use trusted third-party services to operate our platform. This may involve transferring data to servers outside the EU, for which we ensure a legal basis (e.g., Standard Contractual Clauses).
a) Hosting and Database (Supabase)
Our backend infrastructure, including database and authentication, is provided by Supabase, Inc. (USA). User data, including account information and workshop content, is stored with Supabase. Data transfer is secured by Standard Contractual Clauses.
b) AI Model Provider ([e.g., OpenAI, Anthropic, Google])
To power our workshop generator, we send the prompts you provide to our AI model provider, [e.g., OpenAI, L.L.C.]. We do not send personal user account data with these prompts. Data transfer is secured by their respective data processing agreements and transfer mechanisms.
c) Payment Processing ([e.g., Stripe])
For paid plans, payment processing is handled by Stripe, Inc. We do not store your full credit card details. Stripe processes your payment data to execute transactions.
5. Cookies
We use technically necessary cookies to enable core functionalities like user login sessions. We do not use non-essential tracking or advertising cookies without your explicit consent.
6. Data Retention
We store your data for as long as your account is active or as needed to fulfill our legal or contractual obligations. You can delete your account and associated data at any time through your account settings.