Privacy Policy

1. Controller

Klartakt Limited, Office 2, 12A Lower Main Street, Lucan, Dublin, K78 X5P8, Ireland
Email: [email protected]. Represented by Director Andre Classen.

2. General Principles

This website is deliberately designed to minimise data collection. We do not use cookies, tracking or advertising services; reach is measured with a cookieless, self-hosted analytics tool without user profiles (see section 4). Personal data is only processed where technically necessary to operate the website, when you contact us, book an appointment with us or request our guide.

3. Hosting and Server Log Files

This website is provided via Cloudflare Pages (Cloudflare, Inc., USA, and Cloudflare data centres within the EU). When you access the website, the hosting service automatically processes technically necessary access data (including IP address, date and time of access, page requested, amount of data transferred, referrer, and browser/device information). This data is used to deliver the page, and to ensure security and stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Cloudflare may also process data in the USA; this is based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

4. Reach Measurement (Umami)

We measure the reach of this website with Umami, an open-source web analytics tool that we operate ourselves on our own server. Umami sets no cookies, does not store full IP addresses, does not create user profiles and does not pass data to third parties. We only see aggregated figures such as page views, visitors, referring sites and the pages viewed. Legal basis is our legitimate interest in measuring the reach of our website (Art. 6(1)(f) GDPR). No consent banner is required because no cookies or comparable identifiers are used. On the personal page of a letter (klar-takt.de/b/…) Umami only counts the page /b/ and the clicks on booking, questions and objection, without the letter code.

5. Fonts

Fonts are served locally from our own server. No connection is made to third-party servers (e.g. Google Fonts).

6. Contact

If you contact us by email, we process the data you provide (email address, message content) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) (legitimate interest in responding to enquiries). Your data is deleted once it is no longer required and no statutory retention obligations apply.

7. Appointment Booking (Cal.com)

To book an intro call, this website links to the external scheduling service Cal.com (Cal.com, Inc., USA). Simply visiting this website does not transfer any data to Cal.com; the link only opens Cal.com once you click it. If you book an appointment there, Cal.com processes the data you enter (name, email address, chosen date and time, and any notes) on our behalf as a processor under a data processing agreement, so that we can hold the appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Cal.com is based in the USA and processes data there; transfers are based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. Booking data is deleted once the appointment has been dealt with and no statutory retention obligations apply. Your use of the Cal.com website is governed by Cal.com's own privacy policy: cal.com/privacy.

8. Guide and Email Series

If you request our guide at klar-takt.de/leitfaden/, we process your email address, your first name and, if given, your company to send you the guide and up to seven emails with practical steps and examples on AI visibility over five weeks. The legal basis is your consent (Art. 6(1)(a) GDPR). We use double opt-in: only after you click the link in our confirmation email do we send the guide and the series. As evidence we store the times of sign-up and confirmation and the version of the consent text; we do not store IP addresses for this. Unconfirmed sign-ups are deleted after 30 days. The series ends after the seventh email or as soon as you book an appointment or reply to us. We delete your data 30 days after the series has ended.

You can withdraw your consent at any time via the unsubscribe link in every email or by writing to [email protected]. After you unsubscribe we delete your data and keep only a non-reversible check value (hash) of your address so that we do not write to you again. Sign-up and sending run on our own server; the emails are sent via our email provider mailbox.org. We do not track opens; links in the emails only carry an identifier of the respective email, which appears as the source in our cookieless reach measurement (section 4).

To protect against automated sign-ups the form uses Cloudflare Turnstile (Cloudflare, Inc., USA). The page loads a script from Cloudflare that checks technical characteristics of your browser; Cloudflare processes your IP address among other data. The legal basis is our legitimate interest in protecting the form against misuse (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

9. Advertising by Letter to Businesses

We write to businesses by post and show them whether AI assistants such as ChatGPT, Gemini, Google and Copilot mention them for typical customer questions. We write to incorporated companies (for example GmbH, UG, AG), to sole traders (for example e.K.) and to partnerships (for example OHG, KG, GbR) under their business name, addressed to the management or the owner. We do not read or store names of owners or managers; a person’s name appears only where it is part of the business name. We process the business name, business address, web address, publicly visible information from the website (for example how current it is, its size, whether advertising analytics are embedded) and the result of our queries to AI assistants as to whether the company is mentioned. The data comes from Google Maps and from the company’s website. Our queries to AI assistants contain no company data, only general customer questions such as “Which estate agent in Düren do you recommend?”.

The purpose is advertising our services. Where business details are personal data (sole traders, partnerships, or a business name that contains a person’s name), we rely on our legitimate interest in direct marketing (Art. 6(1)(f) GDPR, Recital 47). We use only details the business itself publishes for business purposes (imprint, Google Maps), write at most one letter and one follow-up, and the content concerns the business itself: how AI assistants mention it, compared with others in the area, with a proposal for improvement. In letters to other businesses we only ever name incorporated companies, never sole traders. Recipients are Pingen GmbH, Badenerstrasse 47, 8004 Zurich, Switzerland, which prints and posts the letters via its print partners, and Bright Data Ltd., Netanya, Israel, which retrieves the public Google Maps listings for us. The European Commission has adopted adequacy decisions for Switzerland and Israel. Each letter carries a code. Under klar-takt.de/b/ followed by the code, the recipient sees the same survey as in the letter (business name only for incorporated companies), can book an intro call and object with one click. There the recipient may voluntarily leave up to ten questions their customers ask; we store them with the letter on our own server and use them only for the measurement and the intro call (Art. 6(1)(f) GDPR, after a booking Art. 6(1)(b)). For the measurement we put the questions verbatim to the AI assistants ChatGPT, Gemini, Google and Copilot via Bright Data Ltd.; if a question contains the name of the business or of a person, it is transmitted as well. They are deleted with an objection, without a booking together with the page, after a booking six months after the appointment, and with an order together with the customer records. The page is available for 90 days after the last letter; we count calls of the page per code on our own server without IP addresses and delete these counts with an objection, with the business record, at the latest after 24 months.

Details of sole traders and partnerships we do not write to are deleted no later than 90 days after our assessment. We store the details of businesses we write to while we are in contact and delete them no later than 24 months after the last letter if no business contact has resulted; after that we keep only a check value (hash) of the web address and the company name so that we do not write again. Encrypted backup copies are overwritten after twelve months at the latest. You can object to the use of your data for advertising at any time without giving reasons (Art. 21(2) GDPR), informally to [email protected] or by post to the address in section 1. We will then not write to you again; as a block marker we keep only the web address and check values (hashes) of the business name and, for sole traders and partnerships, of the business address.

10. Disclosure to Third Parties

Data is disclosed to third parties only where necessary to provide the website (hosting), to handle an appointment you have booked (Cal.com), to send emails you have requested (mailbox.org), to protect the sign-up form (Cloudflare Turnstile), to print and post advertising letters (Pingen) or to retrieve public company listings and to run measurements with AI assistants (Bright Data, section 9), or where we are legally required to do so.

11. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority. Please contact: [email protected].

12. YouTube API Services

Klartakt Limited uses YouTube API Services to manage its own YouTube channels. Through these services we upload our own videos, maintain their metadata and retrieve statistics for our own channels; we also read publicly available video data (title, view count, publication date) to plan our own content. Use of these services is subject to the YouTube Terms of Service (youtube.com/t/terms) and the Google Privacy Policy (policies.google.com/privacy).

No personal data of YouTube users is collected, stored or disclosed to third parties. Access credentials for our own channels (OAuth tokens) and statistics of our own channels are stored exclusively on servers of Klartakt Limited in the EU; stored channel statistics are refreshed or deleted after 30 days at the latest. Access that has been granted can be revoked at any time via the Google security settings page (security.google.com/settings/security/permissions). Questions about this can be sent to the contact address given in the Imprint.

13. Currency

Last updated: October 2026. We will update this notice if the legal situation or our processing activities change.