Privacy policy

Controller

The controller for data processing on this website is K. Nadeem Arif, trading as SpotFan, Breslauer Str. 1a, 64521 Groß-Gerau, Germany. Email: info@spotfan.ai. No data protection officer has been appointed, as the legal requirements for this are not met.

Principles and legal bases

We process personal data only where necessary to operate the website and for the purposes described here. The legal bases are Art. 6 (1) (a) GDPR (consent), (b) (contract or pre-contractual steps), (c) (legal obligation) and (f) (legitimate interest). Where we rely on a legitimate interest, we name it in the respective section.

No data is transferred to countries outside the EU or the EEA. No automated decision-making or profiling under Art. 22 GDPR takes place.

Hosting and server logs

This website is hosted by Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany, in a data centre in Europe. A data processing agreement under Art. 28 GDPR is in place with Host Europe. Details: Host Europe privacy policy (German).

When you open a page, your browser automatically transmits data that is stored in server logs: IP address, date and time, page requested, amount of data transferred, status code, previously visited page (referrer), browser type and operating system. The purpose is to deliver the page and to keep operation secure and stable. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and trouble-free operation of the website. Logs are deleted or anonymised after seven days, unless longer retention is required to investigate a security incident.

Fonts, images, films and scripts are served from our own server. No content is loaded from third parties, in particular no web fonts, no videos from external platforms and no maps.

No cookies, no tracking, one browser storage entry

This website sets no cookies. It uses no analytics or tracking tools, no advertising networks and no embeds from social networks. A cookie banner is therefore not required.

The only exception: when you switch between German and English, the site stores your chosen language in your browser’s local storage so that it can show you the right language version on your next visit. This entry is strictly necessary for the function you requested (Section 25 (2) no. 2 TDDDG), contains no personal data and is not transmitted to us. You can delete it at any time via your browser settings.

Waitlist

If you sign up for the waitlist, we process your email address, the language of the page, the page on which you signed up, campaign identifiers from the address bar (UTM parameters) if present, and the date and time of sign-up and confirmation.

After signing up you receive an email with a confirmation link. Only the click on it puts you on the list (double opt-in). This ensures that nobody signs up someone else’s address and documents your consent. We send you news about the launch of SpotFan and practical tips on winning customers via LinkedIn.

The legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with Section 7 (2) no. 2 of the German Unfair Competition Act (UWG). You can withdraw your consent at any time, with one click on the unsubscribe link in every email or by emailing info@spotfan.ai. The lawfulness of processing carried out before withdrawal remains unaffected. After withdrawal we delete your address from the list; we keep the record of your consent and withdrawal for as long as necessary to meet our duty of proof under Art. 7 (1) GDPR.

Emails are sent via Brevo (see section 07). By default, Brevo records whether an email was opened and which links in it were clicked. If you do not want this, please unsubscribe; we do not offer a separate opt-out from this measurement.

Contact form and email contact

Through the contact form at the end of every page you send us your name, email address and message, and optionally the address of your LinkedIn profile. If you email us directly, we process the details from your message. We use this data solely to handle and answer your request.

The legal basis is Art. 6 (1) (b) GDPR where your request is aimed at a contract, otherwise Art. 6 (1) (f) GDPR; our legitimate interest is answering requests addressed to us. We delete the data once your request has been fully dealt with and no statutory retention obligation applies, at the latest twelve months after the last contact.

Brevo as processor

The waitlist and the contact form are handled via the Brevo service. The provider is Brevo GmbH (formerly Sendinblue GmbH), Köpenicker Straße 126, 10179 Berlin, Germany. Data is stored on servers in Germany or the EU. We have concluded a data processing agreement with Brevo under Art. 28 GDPR; Brevo processes your data only on our instructions and not for its own purposes. Details: Brevo privacy policy.

Only the details from the respective form and the date and time of sign-up, confirmation and unsubscription are stored at Brevo. An invisible trap field in the forms protects against automated submissions; it stores nothing and sets no cookies.

The demo at demo.spotfan.ai

The demo is a test version of SpotFan with invented sample data. It needs an account. You sign in with LinkedIn, Google or your email address. For that we store your name, email address, sign-in method, date, language and, if you give it, your country.

After sign-in the demo sets a session cookie that applies only to demo.spotfan.ai and becomes invalid when you sign out. It is needed for the sign-in (Section 25 (2) no. 2 TDDDG). The demo sets no other cookies.

For each account we log which pages and buttons you use in the demo, with time and tokens used. We do not store the text of your chat questions unless you expressly allow it with a separate checkbox.

The chat in the demo answers with a Claude model from Anthropic. Your question and the passages found for it in the sample data go through our server to Anthropic Ireland, Limited, Dublin. Anthropic acts as a processor under Art. 28 GDPR. Anthropic processes on servers in the United States, covered by the EU standard contractual clauses. Anthropic deletes inputs and outputs within 30 days and does not train models on them.

You do not upload your own LinkedIn data to the demo today. Once that is possible, it stays in your browser. No file goes to our server.

You delete your account yourself: in the demo under Settings, “Delete account”. You read the full privacy notice for the demo at your first sign-in and at any time inside the demo.

Links to other websites

This website links to LinkedIn and other external sites. When you click such a link you leave spotfan.ai; the respective operator is responsible for data processing there. Content from these providers is not embedded in our pages, so merely visiting spotfan.ai sends no data to them.

Your rights

You have the right to obtain information about the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3)). Please contact info@spotfan.ai for this.

Right to object under Art. 21 GDPR: where we process data on the basis of a legitimate interest, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de. You may also contact the supervisory authority where you live.

The SpotFan app

This policy applies to the website spotfan.ai. The SpotFan app runs on your own computer and stores your data there. There is no SpotFan server holding your data. What the app passes to an AI model is governed by your own access with the respective provider. We will publish a separate privacy policy for the app with the first version.

Changes

We update this policy when the website, the services used or the legal situation change. The version published here applies; the date of the current version is shown above.