Privacy notice

1. Controller and contact

The website operator responsible for the processing described below is:

E-Mail: andre.bonne@olymp.services

Further provider information is available in the legal notice.

Data protection officer

Andre Bonne
Domgasse 2, 15517 Fürstenwalde
andre.bonne@olymp.services

2. Scope and data sources

This notice covers bonne.services, its German and English pages, and the Shild, Data Hub and agent demos. Actual customer portals and separately agreed services are not part of these website demonstrations.

Technical access data arise when a page is requested. We receive contact details only when you communicate them to us. The demonstrations use fictional examples and placeholders.

3. Website delivery, hosting and access data

When pages, images, fonts and scripts are requested, the serving infrastructure receives your IP address and the requested resource. Other technical request information may include the time, browser, operating system and referring page. This supports delivery, troubleshooting and website security.

The legal basis for necessary website delivery arranged by us is Article 6(1)(f) GDPR. Our legitimate interest is an available, stable business website protected against abuse.

Draft assumption: hosting on GitHub Pages. The actual hosting setup remains to be confirmed.

GitHub states that Pages visitors’ IP addresses are logged and stored for security, including visitors who are not signed in. GitHub Pages information.

GitHub identifies GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam, Netherlands, and GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, as controllers for its own processing.

[Hosting provider’s contractual role, applicable data-protection agreement and transfers to be supplied]

The provider’s privacy statement describes its own processing.

4. Local features, cookies and consent

The website code sets no cookies and stores no preferences in localStorage or sessionStorage. The page URL determines the language. This version contains no analytics tools, advertising pixels, embedded external videos, maps or social widgets. Images and the Manrope font are served with the website from the same host.

Where a function you explicitly request needs to store or access information on your device, this is limited to that function under § 25(2)(2) TDDDG. Additional non-essential storage or access would require separate consent; such features are not implemented.

Browser features such as caching, history and automatic form restoration can retain data independently of the website code. Your browser and device settings determine that storage.

5. Inquiry drafts and email contact

The inquiry form processes your name, email address, chosen package and message locally in the open browser. “Prepare my inquiry” creates a draft only. There is no form backend, and the website does not submit these inputs to us or to a form service.

“Open email app” passes the recipient, subject and message to your email application or configured mail service. That service may already save or synchronise drafts. We receive the message through our email provider only if you send it.

We process your message, sender and contact information, any attachments and associated communication data to respond. Article 6(1)(b) GDPR applies to requests concerning a potential or existing contract with you. Other inquiries and communication with a company’s representatives rely on Article 6(1)(f) GDPR; our interest is handling and following up your inquiry appropriately.

Our email provider: [Provider to be supplied]

[Email recipients, processing locations and any international-transfer safeguards to be supplied]

Contacting us is voluntary and is not required to browse the website. Without a message and a usable reply channel, we cannot meaningfully respond. Required form fields apply only to preparing the draft; you may also email us directly.

6. Clipboard, downloads and demos

Copy buttons write the displayed inquiry draft or agent prompt to your clipboard only after you click. The website code does not read your existing clipboard. Copied content may remain there or be synchronised by device features until you replace or clear it.

Shild and Data Hub only rearrange local placeholders. The SEO/GEO walkthrough uses fixed fictional examples; it makes no requests to AI providers, customer backends or publishing systems. Demo downloads are generated locally in the browser. Your browser or device retains downloaded files until you delete them.

7. Recipients and international transfers

Incoming inquiries are accessible to the people responsible for handling them and the email provider named in section 5. Technical access data reach the hosting infrastructure. Legally required disclosures, for example to authorities, rely on the applicable legal basis.

GitHub describes international processing, including in the USA, and identifies standard contractual clauses and the EU-US Data Privacy Framework as transfer mechanisms. The arrangement for our hosting is described in section 3. GitHub’s international-transfer information.

You can request information and, where applicable, a copy of the safeguards relevant to our processing using the contact in section 1. Email-provider arrangements are described separately in section 5.

8. Retention and deletion

The website does not persist inquiry drafts or demo settings in its own storage. Closing the inquiry dialog does not automatically erase its inputs. Browser restoration, the clipboard, downloads and your email application may retain content independently.

GitHub does not specify a fixed period for Pages IP logs; retention depends on purpose and legal obligations.

Received inquiries: [Actual retention and deletion rules to be supplied]

Where statutory retention duties apply, continued storage relies on Article 6(1)(c) GDPR. Retention necessary to establish, exercise or defend specific legal claims may rely on Article 6(1)(f) GDPR. Data are deleted when the relevant purpose and applicable obligations no longer require retention.

9. Your data-protection rights

Subject to the applicable legal conditions, you may exercise the following rights:

• Access to your personal data (Article 15 GDPR).
• Correction of inaccurate and completion of incomplete information (Article 16 GDPR).
• Erasure or restriction of processing (Articles 17 and 18 GDPR).
• Data portability for automated processing based on consent or a contract (Article 20 GDPR).
• Withdrawal of consent for the future (Article 7(3) GDPR), without affecting the lawfulness of earlier processing.

Use the contact in section 1. Where necessary to identify the request, we may ask for proportionate identity-confirmation information. We normally respond within one month and explain any legally permitted extension.

10. Right to object under Article 21 GDPR

11. Complaints to a supervisory authority

Under Article 77 GDPR, you may complain to a data-protection supervisory authority, particularly in the EU member state of your habitual residence, workplace or the alleged infringement. This does not affect other administrative or judicial remedies.

Contact details of German data-protection supervisory authorities

12. Security, automated decisions and changes

Access this website over HTTPS. An encrypted website connection protects transport between your browser and the web host; it does not provide end-to-end encryption for email communication.

We do not use this website for solely automated decisions with legal or similarly significant effects under Article 22 GDPR, or related profiling. The agent demo does not evaluate visitors.

We update this notice when functions, providers or processing purposes change. The stated date relates to the website version described here.

13. Legal setup workflow

The optional legal setup workflow lets you enter facts about your own business: operator, address, contact, applicable representative and register details, professional information, hosting and email providers, and processing activities. It organises these facts locally and, at your request, prepares a configuration and AI brief for download. Providing this feature relies on Article 6(1)(f) GDPR; our interest is a usable demonstration of structured business workflows.

The website code does not send these entries to Olymp or an AI provider, put them in the URL, or store them in cookies, localStorage or sessionStorage. Entries are processed in the current tab. Reset clears the form and previews. Browser restoration and previously downloaded files may retain data independently. Use is voluntary; missing facts are marked as open questions.

An external agent or service receives the files only if you choose to share them yourself. Review the content and recipient before doing so. The form itself does not call an agent or publish content.