This privacy policy informs you about the type, scope, and purpose of the processing of personal data on our website. Personal data is any data that can be used to personally identify you.
1. Controller
Klarspur
Owner: Kevin Labetzsch (sole proprietorship)
Halebüller Weg 7
25813 Husum
Germany
Email: info@klar-spur.de
2. Hosting
Hosting provider
Our website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. There is a data processing agreement (DPA) with the provider pursuant to Art. 28 GDPR.
On every visit to our website, the hosting service automatically records information in so-called server log files:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Browser used and operating system
- Referrer URL (previously visited website)
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in the secure and stable provision of the website). This data is automatically deleted after 7 days.
3. Contact form (Formspree)
We provide an online form on this website for contact requests. The data you enter (name, email address, optional phone number, subject, and message) is processed for delivery to us via the Formspree service operated by Formspree, Inc. (USA). Formspree receives the form data and forwards it to us by email. The optional sending of your Digital Check result (five yes/no questions on the state of digitalisation in your business) works the same way: if you choose to have the result emailed to you, your answers and the email address you provide are also transmitted to us via Formspree.
The legal basis for the processing is your consent, which you grant by submitting the form and confirming the consent declaration (Art. 6(1)(a) GDPR), as well as the initiation or performance of a contract and our legitimate interest in answering your enquiry (Art. 6(1)(b) and (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Formspree. As the data may also be processed on servers in the USA, the transfer is safeguarded by the EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Your data is deleted as soon as your enquiry has been fully processed and no statutory retention obligations apply (usually after 3 years). You can withdraw your consent at any time with effect for the future.
4. Fonts (Google Fonts)
This website uses fonts that are stored locally on our server. There is no connection to external Google servers. No personal data (in particular no IP addresses) is transferred to Google.
5. Cookies
Our website uses only technically necessary cookies and local browser storage (localStorage) required for the operation of the website – for example, to remember your language preference. These do not require consent under § 25 (2) TDDDG. No marketing, tracking, or analytics cookies are used.
You can configure your browser not to store cookies. Please note that this may affect the functionality of the website.
6. Analytics and tracking
This website does not use any web analytics tool (such as Google Analytics, Matomo, etc.). No usage data is collected or shared for analytics or marketing purposes.
7. Your rights
You have the following rights against us regarding your personal data:
- Right of access (Art. 15 GDPR): You have the right to obtain information about the data we have stored.
- Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no statutory retention obligation exists.
- Restriction of processing (Art. 18 GDPR): You can request the restriction of processing.
- Right to object (Art. 21 GDPR): You can object to the processing of your data based on legitimate interests.
- Data portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
- Withdrawal of consent (Art. 7 (3) GDPR): You can revoke given consents at any time with effect for the future.
To exercise your rights, please contact info@klar-spur.de – or by post: Klarspur, Owner Kevin Labetzsch, Halebüller Weg 7, 25813 Husum, Germany.
8. Right to lodge a complaint
You have the right to complain to the competent data protection supervisory authority. The competent authority depends on the registered office of the controller:
Independent State Centre for Data Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz, ULD), Holstenstraße 98, 24103 Kiel, Germany — www.datenschutzzentrum.de
9. AI-assisted chat (Lisa)
We offer an AI-assisted chat ("Lisa") on this website that answers questions about our services (digitalisation consulting, websites, SEO management, Google reviews, custom software). The chat is only started after your explicit consent (Art. 6(1)(a) GDPR). Your input is transmitted to our AI service provider Anthropic PBC (USA) for the purpose of generating a reply. Anthropic processes the content to produce the model response and not for model training (Standard Contractual Clauses pursuant to Art. 46 GDPR).
If you contact us via the chat (name, email, optionally phone), we store these details together with the conversation transcript in our database in order to process your enquiry (Art. 6(1)(b) GDPR). The data is deleted once your enquiry has been processed and no statutory retention obligations apply. You can withdraw your consent for the future at any time by contacting us at info@klar-spur.de.
To prevent misuse, we limit how many messages and requests can be sent from one connection within a certain time. For this, we derive a non-reversible check value from your IP address. It is held only in our server’s working memory, for at most 24 hours, and is not stored together with your request. The legal basis is our legitimate interest in operating the chat securely and at a reasonable cost (Art. 6(1)(f) GDPR).
10. Website check
On the “Website check” page you can enter the address of a website. Our server (Hetzner, Germany, see section 2) then fetches the robots.txt and the publicly available home page of that website – without cookies, without JavaScript and without subpages – and evaluates it according to fixed rules. If the robots.txt forbids such automated requests, we do not fetch the home page. We keep the entered address and the result in the server’s memory so that you can retrieve the result – for at most 60 minutes after the check has finished; after that they are deleted. We do not store them in a database.
To prevent abuse, we limit the number of checks per IP address. For this we derive a non-reversible check value from the IP address, which stays in memory for at most 24 hours; the IP address itself is not stored for this purpose. Our application logs contain only technical information about a check (e.g. duration and result code), not the checked address. The legal basis is carrying out the check you requested and our legitimate interest in offering it securely and without abuse (Art. 6(1)(b) and (f) GDPR).
For the short assessment in words, we transmit the measurements (points and short findings) and shortened excerpts from the title, description and main heading of the checked home page to our AI service provider Anthropic PBC (USA), as described in section 9 (standard contractual clauses pursuant to Art. 46 GDPR). We do not transmit the website address, your IP address, or web and email addresses and longer digit sequences from the excerpts; they are removed beforehand. If the AI assessment is not available, a standard text is shown instead. Nothing is passed on to Google or analytics services.
If you request a personal assessment after the check, we transmit your details (name, email address, optionally phone number, topic and note) together with the checked address and the result to us via Formspree, as described in section 3. Legal bases, withdrawal and deletion follow section 3.
11. Data security
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://".
We take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorised access.
12. Currentness and changes
This privacy policy is currently valid and dated October 2026. Due to the further development of our website or due to changed legal or regulatory requirements, it may become necessary to adapt this privacy policy. You can access the current privacy policy at any time on this page.
Status: October 2026