Privacy Policy

1. Data controller

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:

The AI Studio – by JK (Einzelunternehmen)
Junkyung Kim
Moltkestraße 29
23564 Lübeck
Deutschland
Email: junkyung02@gmail.com

2. Contact for data protection matters

For questions about data protection or to exercise your rights, please contact the email address above with the subject line “Data protection”.

3. Hosting and server log files

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit the website, technical usage data is processed, in particular IP address, date and time of the request, requested URL, referrer URL, browser type, and operating system (server log files). This data is technically necessary to deliver the website and ensure stability and security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).

Retention period: Log data is stored by Vercel only as long as necessary for operation and security (typically a few weeks).

Transfer to third countries: Vercel may process data in the USA. Transfer is based on the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). More information: Vercel Privacy Policy.

4. Database (booking data)

We store booking data in a PostgreSQL database hosted by Supabase Inc. in the EU region (Frankfurt, Germany), as configured for this project.

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures or a contract).

A data processing agreement (DPA) under Art. 28 GDPR is in place with Supabase.

5. Email delivery (Resend)

We use Resend Inc. (USA) to send contact and booking confirmations. The data required for delivery (e.g. name, email address, message content, appointment details) is transmitted to Resend.

Legal basis: Art. 6(1)(b) GDPR (handling your inquiry or scheduling) and Art. 6(1)(f) GDPR (reliable email operation).

Transfer to third countries: Transfer to the USA is based on Standard Contractual Clauses. A data processing agreement under Art. 28 GDPR is in place with Resend.

6. Contact form

When you use the contact form, we process the data you provide: name, email address, company, selected industry, selected bottleneck, and your message.

Purpose: Handling and responding to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication with prospects).

Retention period: We store inquiries as long as needed for correspondence, but no longer than the statutory retention periods (typically 6 years after the end of the calendar year under German commercial and tax law, if a contractual relationship arises).

Obligation to provide data: Providing your contact details is required to process your inquiry. Without this data, we cannot respond.

7. Appointment booking (intro call)

When you book an appointment, we process your name, email address, optionally your company, and the start and end time of the selected slot. This data is used to schedule the call, carry it out, avoid double bookings, and send you a confirmation by email.

Booking emails may contain links to add the appointment to an external calendar (e.g. Google Calendar or Outlook). These links are only activated if you click them; the linked provider's own privacy policy applies.

Signed RSVP links may also be used in confirmations and invitations to let you accept or decline without a separate login.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or carrying out the agreed call).

Retention period: Booking data is deleted 12 months after the appointment, unless longer retention is required for tax or commercial law reasons.

8. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can tell whether a connection is encrypted by looking at your browser's address bar (“https://” or the padlock icon).

9. Fonts

For consistent typography we use the Geist and Geist Mono fonts. These are bundled into the website at build time via the Next.js framework and served from our own server — your browser does not load font files from external CDN services.

10. Cookies and local storage

We do not use tracking or any audience measurement (no Google Analytics, no Meta Pixel, or similar). A cookie consent banner is therefore not required.

The following technically necessary storage is used:

• localStorage (color mode): Stores your preference for light or dark mode. Legal basis: Art. 6(1)(f) GDPR.
• Session cookie (admin area): An httpOnly session cookie is set exclusively after login in the password-protected admin area. This area is not intended for website visitors.

11. No automated decision-making

We do not use your personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Your rights

You have the following rights with respect to your data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7(3) GDPR), where processing is based on consent

To exercise your rights, simply send a message to junkyung02@gmail.com.

13. Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
https://www.datenschutzzentrum.de

14. Changes to this privacy policy

We reserve the right to update this privacy policy whenever our website, the services we use, or the legal situation changes. The current version is always available on this page.