Version of 23 August 2026. This policy describes what actually happens on deepwraite.de — verified against the source code of the live site, not taken from a template.
1. Controller
L&L Kommunikationskonzepte GmbH
Entensteig 6, 14552 Michendorf, Germany
Represented by the managing directors: Iris Löhde, Kai-Uwe Löhde
Registered office: Düsseldorf · Amtsgericht Düsseldorf, HRB 38588
Email: info(at)deepwraite(dot)de
Deepwraite® is an offering of L&L Kommunikationskonzepte GmbH. No data protection officer has been appointed; in our assessment the statutory conditions requiring one are not met.
2. What does not happen on this website
We keep this website deliberately data-frugal. So that you do not have to take our word for it, here is what does not happen:
- no web analytics and no audience measurement — neither Google Analytics nor Matomo nor any comparable service
- no advertising or retargeting pixels, no social media plugins, no embedded third-party videos
- no user accounts, no registration, no comment function
- no newsletter
- no fonts from third-party servers — every typeface is served from our own server
What does happen is set out in the sections below. All of it.
3. Hosting and server log files
This website is operated at Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany. Host Europe processes the data solely on our behalf and on our instructions.
When you open a page, your browser transmits technically necessary data which the server records in log files: IP address, date and time of access, the file requested, the volume of data transferred and the status message, browser type and version, operating system and, where applicable, the page previously visited.
Purpose: technical operation, stability, security and troubleshooting.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the secure and uninterrupted operation of the site.
Retention: we do not evaluate this data on a personal basis. Log files are deleted after four weeks at the latest.
4. Cookies and consent
We use a consent banner. It stores your decision in a cookie on your device so that we do not have to ask you again on every page. These cookies are set by our own domain; no data is transmitted to third parties.
In addition, a technical cookie belonging to our multilingual system remembers which language you are reading the site in. This cookie also stays on our domain and contains nothing beyond your language choice.
Legal basis: Section 25(2) no. 2 TDDDG for storing the decision itself, together with Art. 6(1)(c) GDPR for our obligation to demonstrate consent.
You can change or withdraw your consent at any time via “Einwilligung verwalten” in the footer. Withdrawal takes effect for the future.
5. Contact form
You can reach us through the form on our contact page. We process the details you enter there — depending on the field, first name, last name, email address, company, telephone number and your message — together with the time of submission.
Purpose: handling your enquiry and the communication that follows from it.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in answering enquiries.
The message is delivered to our mailbox and kept there as part of our business correspondence; a copy is additionally stored in the website database so that no enquiry is lost. We delete enquiries once they have been dealt with, unless commercial or tax retention periods apply.
The form is protected by an invisible spam trap — a field that only automated programs fill in. No data is transmitted to third parties and nothing is stored on your device.
6. AI chatbot “Wraight”
An AI assistant is available on our website. It is identified as artificial intelligence and introduces itself as such — Article 50 of the AI Act requires it, and we consider it the bare minimum.
How it works technically. The chat window is our own lightweight script on our own server. It sets no cookies, uses neither local storage nor session storage, and loads no resources from third-party servers. Your input goes solely to an interface on our own server; from there it is passed to the language model that generates the reply.
Language model used: Anthropic (Claude). A data processing agreement is in place with the provider.
What is stored. Conversation histories are stored without technical identifiers. We store neither your IP address nor any persistent identifier that would make you recognisable. The session identifier exists only for the duration of the conversation and is meaningless once you close the page.
This is not anonymisation, and we say so plainly: if you volunteer information about yourself during the conversation — your name, your company, a specific set of facts — then personal data sits inside the content, even though no identifier is technically attached to it. Therefore: you may request access to a conversation history and its deletion, provided you tell us the approximate time or some of the content, so that we can identify the conversation.
Please do not enter sensitive data into the chat — no health information, no credentials, no confidential business secrets. The assistant does not ask you for contact details; for anything concrete it refers you to a personal conversation.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in answering questions about our own services and in improving the assistant. Conversation histories are deleted after four weeks at the latest.
7. Self-assessment and research tools
We provide several tools, among them the AI Self-Check, the AI Governance Check and the FundingFinder.
These tools run entirely in your browser. Your answers are not transmitted to us and are not stored by us. There is no sign-up. If you save a result as a file, that file is created on your own device — no data reaches us in the process either.
8. Website security
The connection to this website is encrypted throughout using TLS. Beyond that we employ protective measures against attacks and automated login attempts.
These include a security plugin (Wordfence), which inspects requests to the website and blocks suspicious access. IP addresses are processed in the course of this and transmitted to the provider Defiant, Inc. (USA) for comparison against current threat data. In addition, we limit the number of failed login attempts; the IP addresses concerned are stored temporarily for that purpose.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in repelling attacks and in secure operation.
9. Email communication
If you write to us by email or use the contact form, delivery is handled through our host’s mail infrastructure. We process the content of your message and your sender details in order to deal with your request. Please note that the transmission of email over the internet is not always end-to-end encrypted.
10. Links to other websites
Our pages link to third-party websites — among them partners, a credential on Credly, posts on LinkedIn and publications of the European Commission. The respective provider is responsible for data processing there. Nothing is requested until you click the link; no content from these providers is loaded in the background.
11. Who receives your data
- Host Europe GmbH, Cologne — processor: hosting, server log files, email delivery
- Anthropic — processor: language model behind the chatbot
- Defiant, Inc. (USA) — threat data for the security plugin
Beyond that we do not pass your data on, and in particular not for advertising purposes.
12. Your rights
Under the GDPR you have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Any consent you have given may be withdrawn at any time with effect for the future (Art. 7(3)).
Please contact us at the address given in section 1.
13. Complaint to a supervisory authority
You may lodge a complaint with a data protection supervisory authority at any time. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
Telephone: +49 33203 356-0
Email: Poststelle(at)LDA(dot)Brandenburg(dot)de
14. Changes to this policy
We update this policy whenever our processing changes — for instance when a new service is added or an existing one falls away. The version published here is the one that applies.