Privacy Policy

1. Controller

Edhem Sivac
Schellingstraße 109A
80798 München
Phone: 0160 2980734
Email: [email protected]
Website: www.ki-fit.com

2. General Data Protection Information

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection regulations, in particular the General Data Protection Regulation (GDPR) for EU citizens and the California Consumer Privacy Act (CCPA) for users from California (USA).

This privacy policy informs you about the type, scope and purpose of the collection and use of personal data by us, as well as your rights as a user.

3. Collection and Processing of Personal Data

Personal data is any information that relates to an identified or identifiable natural person, e.g. name, email address, IP address.

The use of our website is generally possible without providing personal data. However, if you contact us or use our services (e.g. newsletter, CRM system), we process the data you provide to us.

4. Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact information you provide, will be stored for the purpose of processing the request and in the event of follow-up questions. We do not share this data without your consent.

5. Hosting and Server Locations

Our website is delivered via Cloudflare Pages. When the website is accessed, technically required access data such as IP address, time of access, requested URL, and browser and device information are processed to deliver the website securely and reliably.

If service providers use servers outside the EU/European Economic Area (EEA), we ensure appropriate data protection measures such as EU standard contractual clauses.

6. Local Storage and Consent

We store necessary settings locally in the browser, e.g. language, theme, and your consent decision. This storage is required for a user-friendly and legally compliant website experience.

We load Google Analytics 4 and Cloudflare Web Analytics only if you allow analytics and external services. Google Maps is loaded after that consent or if you actively open the embedded map. If you select “Necessary Only”, these services are not loaded automatically. You can change your choice at any time via “Cookie settings” in the footer.

7. Cloudflare Web Analytics

With your consent, we use Cloudflare Web Analytics provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. This allows us to evaluate aggregated page views, referring pages, countries, device and browser types, and technical website performance metrics.

According to Cloudflare, the service does not use cookies, local storage, or fingerprinting to track individual visitors across websites. When the analytics script is retrieved and measurement data is sent, technical information including the IP address, user agent, referrer, requested page, and time is transmitted to Cloudflare.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. The analytics script is not loaded without your consent. You can withdraw your consent at any time with future effect via “Cookie settings” in the footer.

Further information: Cloudflare Privacy Policy

8. Google Analytics 4

With your consent, we use Google Analytics 4 to analyse page views and use of our website. We record successfully submitted contact enquiries as events; we do not send names, email addresses, phone numbers or message content to Analytics for this purpose. Google may process the page address, approximate location, and browser and device information. Google Analytics uses cookies such as “_ga” to distinguish visits and sessions.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. We do not load the Google Analytics script without your consent. You can withdraw your consent at any time with future effect via “Cookie settings” in the footer.

Further information: Google Privacy Policy

9. AI Assistant

Our website offers an AI-powered chat assistant. Responses are generated by artificial intelligence and may contain errors or inaccuracies. Use of the AI assistant does not constitute legal, tax, or other professional advice. KI-Fit assumes no liability for the accuracy, completeness, or timeliness of AI-generated responses.

Our public AI chat uses Julian (ElevenLabs, see below). Chat history is saved locally in your browser. You can delete individual conversations in the history. When resuming a Julian conversation, a limited excerpt of the history is sent as context. Older conversations with the previous assistant remain read-only locally and are not automatically transferred. Please do not enter sensitive personal data into the chat.

9a. Julian – AI Assistant on the Website and by Phone

Julian is KI-Fit's AI assistant powered by ElevenLabs. In the chat, a connection to ElevenLabs is established only when you send a message, select a suggested topic or start a voice conversation. In particular, your IP address and browser data are then shared with ElevenLabs. During a conversation, ElevenLabs processes your text or voice inputs to answer your questions. Your microphone is used only after browser permission. Phone calls also involve Twilio as the telephony provider.

If you arrange an appointment, the necessary details (in particular your name, email address and appointment details) are processed in our Google Calendar. After the conversation, ElevenLabs sends conversation data including the transcript to our Convex backend to identify confirmed bookings and send an internal notification via Mailgun. This notification process does not store the transcript; it stores confirmed appointment details and delivery status. This statement does not cover possible storage by ElevenLabs or Twilio. The services involved may process data outside the EU, particularly in the USA.

Please do not share sensitive data with Julian. You can alternatively contact us personally by phone or email at any time. More information: ElevenLabs · Twilio

10. Google Maps

On the contact page, we embed Google Maps. If you have allowed analytics and external services, the map is displayed automatically. Without this consent, we first show a local placeholder and only load Google Maps after your active click.

When Google Maps is loaded, data such as IP address, browser and device information, referrer URL, usage data, and depending on settings also location information may be transmitted to and processed by Google.

Further information: Google Privacy Policy

11. External Profiles and Links

Links to external profiles or websites are ordinary links. They do not load social plugins or tracking scripts from those providers on our website. The respective provider's privacy policy applies only after you open such a link.

12. Legal Basis for Data Processing

We process personal data in particular on the basis of the following legal grounds:

Consent (Art. 6(1)(a) GDPR)

Contract fulfilment (Art. 6(1)(b) GDPR)

Legal obligations (Art. 6(1)(c) GDPR)

Legitimate interest (Art. 6(1)(f) GDPR), e.g. for website operation, IT security, advertising

13. Disclosure of Data to Third Parties

Your data is only passed on to service providers that we need to operate the website or fulfil our services, e.g. hosting, CRM, analytics, AI, and email providers.

These service providers are contractually obligated to comply with data protection.

14. Data Transfer to Third Countries

Due to the use of services with servers outside the EU (e.g. USA), data is transferred to third countries. We ensure that the legal requirements are met through appropriate protective measures (e.g. standard contractual clauses).

15. Your Rights

As a user, you have the following rights:

Information about stored data

Rectification, deletion or restriction of processing

Objection to processing

Data portability

Withdrawal of granted consent

Right to lodge a complaint with a supervisory authority

In addition, consumers from California (USA) have further rights under CCPA, e.g. the right to information about data sold or shared and the right to object to sharing.