Privacy Policy

This privacy policy describes how data is handled on this website. It reflects the setup that is actually in use today.

Controller

Sunny D. Markus, Rosenbrunnenstraße 18, 70771 Leinfelden-Echterdingen, Germany. Email: hello@pluck-ai.de

Website hosting

This website is hosted on the Lovable platform (lovable.dev), which delivers the site through a content delivery network. The hosting provider processes data on our behalf so that the website can be delivered to your browser.

Server and log data

When you open the website, technical access data such as IP address, time of access, requested page, browser and operating system is processed by the hosting infrastructure. This is necessary to deliver the site and to keep it secure and stable. Such data is not merged with other data sources by us and is not used to identify visitors.

Contact form

If you use the contact form, we process the details you enter: name, company (optional), business email, your goal, an optional message and the starting point you select. Submissions are stored in a private database table in Lovable Cloud (technically based on Supabase). The table is not publicly readable; only server-side code with elevated credentials can access it. For spam prevention we additionally store a one-way hash of your IP address and your browser user agent. Submissions are not currently forwarded to any mailbox or third party; we read them in the stored form.

Email communication

If you write to us at the address shown on this website, we process your email address and the content of your message in order to handle your enquiry and any follow-up correspondence.

Purposes of processing

Delivering and securing the website, preventing spam and abuse of the contact form, responding to enquiries, initiating and delivering projects, and meeting legal obligations.

Legal bases

Delivery of the website, log data and spam prevention rest on our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). Handling contact form and email enquiries rests on pre-contractual steps or the performance of a contract (Art. 6(1)(b) GDPR), and otherwise on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). Where a legal obligation applies, Art. 6(1)(c) GDPR applies.

Data retention

We keep data only for as long as it is needed for the purpose it was collected for. Contact enquiries are kept while the enquiry and any resulting business relationship are being handled, and are deleted afterwards unless statutory retention obligations apply. Technical log data and spam-prevention data are kept only for the short period needed to operate and protect the website.

Recipients and processors

The hosting and database services described above are the only external providers that receive data through this website, and they act as processors on our behalf. There is no other disclosure to third parties unless we are legally required to do so.

International data transfers

Where processing by the providers named above involves a transfer outside the EU or EEA, it takes place on the basis of the safeguards permitted by the GDPR, in particular the EU Standard Contractual Clauses.

Cookies, analytics and tracking

This website uses no analytics services, no tracking services and no marketing or advertising cookies. Your language choice is stored locally in your browser so the site remembers it; this stays on your device and is not transmitted to us.

AI-related processing

No personal data is sent to AI services through this website. In client projects, AI services are used only after explicit agreement, and the providers, models and data flows involved are documented for that project.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection to certain processing. Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise these rights, contact us using the details above.

Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work, or where the alleged infringement took place.

Security measures

The website is delivered over encrypted HTTPS connections. Contact form submissions are stored in a database table that is closed to public access and reachable only by server-side code with elevated credentials. Access to that data is limited to the controller.

Scope of our services

PLUCK. advises on and implements AI systems. We do not provide legal, tax or other regulated professional advice. Legal assessments should be made with qualified advisors.

If our setup changes, for example if analytics or email forwarding is introduced, this policy will be updated before the change goes live.