Privacy policy

This is a translation. The German version is legally binding.

1. At a glance

This website sets no cookies, uses no analytics or advertising services and loads nothing from third-party servers when you visit: no fonts, maps, videos or social media buttons. It loads content from Google only when you open the booking calendar with a click (see section 8). Personal data is processed only when your browser requests a page, when you use the contact form or the AI assessment, book an appointment or send me an email.

2. Controller

Florian Fürst / fuerst.ai
Kaiserstraße 61
60329 Frankfurt am Main
Phone: +49 172 6011458
Email: florian@fuerst.ai

3. Hosting

This website is delivered through the Cloudflare network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). In the process, Cloudflare processes technically necessary connection data such as your IP address in order to deliver the page quickly and securely and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in secure and reliable provision of the website. For transfers to the USA, Cloudflare relies on the EU-US Data Privacy Framework and standard contractual clauses.

4. Server log files

When you request a page, your browser automatically transmits information: browser type and version, operating system, referrer URL, time of the request and IP address. This data is not combined with other data sources. Cloudflare keeps the request logs for at most seven days; after that they are deleted automatically. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is running the website securely and finding errors.

5. Cookies

This website sets no cookies and does not access information on your device. That is why there is no cookie banner either. Section 8 explains what applies when you load the Google calendar with a click.

6. Contact form

If you use the contact form, I process your name, email address, optionally your company, and your message in order to answer your request. I need your name, email address and message to be able to reply; providing them is voluntary. The form sends this information to an automation built with n8n that I run myself on a server in the EU (n8n.fuerst.ai). The server is located in a data centre of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in Falkenstein, Germany, and is managed through the Elestio service (Elestio Limited, 29 Merrion Square, Dublin 2, D02 RW64, Ireland). The automation checks the information, records the request in my customer management (see section 7) and sends you a confirmation of receipt by email via Google Workspace (see section 9). A field that people cannot see is used to detect automated spam submissions; such submissions are not stored. The legal basis is Art. 6(1)(b) GDPR if your request is aimed at a contract, otherwise Art. 6(1)(f) GDPR; my legitimate interest lies in answering your request. I delete the information once your request has been dealt with, unless retention periods prevent this.

6a. AI assessment (website agent)

On the home page you can describe a process and get a first assessment straight away. It comes from an AI model, not from me; the answer is marked as an AI answer. I process your text, your email address, optionally your company, the page you send it from and, technically, your IP address. The information goes to the same n8n automation as the contact form (see section 6). For the assessment it sends your text to an AI model in the Adacor private cloud (Adacor Hosting GmbH, Emmastraße 70a, 45130 Essen, Germany), operated in data centers in Frankfurt am Main, not on a public AI service. Your email address is not passed to the model. I store the request and the assessment in my customer management (see section 7) and receive them by email (see section 9), so that I can get back to you in person if needed. To prevent abuse, the automation counts how often an email address or IP address uses the service; these counters are deleted after 24 hours at the latest. A field invisible to people detects automated spam submissions; these are not stored. The legal basis is Art. 6(1)(b) GDPR, because you are requesting an assessment, and Art. 6(1)(f) GDPR for abuse prevention; my legitimate interest lies in operating the service securely. Please do not enter trade secrets or personal data of third parties into the field.

7. Customer management with Notion

I manage requests from the contact form and the AI assessment (section 6a) as well as information about prospects and customers in Notion (Notion Labs, Inc., 685 Market Street, San Francisco, CA 94105, USA). My Notion workspace stores the data in the EU. This covers name, email address, company, your message (for the AI assessment also the generated assessment), where the request came from and how far it has been handled. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise Art. 6(1)(f) GDPR; my legitimate interest lies in handling requests in an orderly way. Because Notion is a US company, access from the USA cannot be ruled out; for this, Notion relies on the EU-US Data Privacy Framework and standard contractual clauses. The entries are kept for as long as a business relationship exists or is being prepared. If none comes about, I delete them as soon as no further contact is expected. Data on orders is kept for as long as commercial and tax law requires (up to ten years).

8. Appointment booking and payment

For appointments I use the appointment booking of Google Calendar, part of Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The calendar only loads when you click “Show free slots” or “Show coaching slots”; before that, no data is sent to Google.

By clicking, you consent to the Google calendar being loaded into this page (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google then receives technical data such as your IP address and may use cookies or similar technologies; I have no influence on this. You can withdraw your consent at any time by reloading the page: the calendar is then hidden again.

Google processes the information you enter when booking (for example name and email address) in order to create the appointment and send you a confirmation. The legal basis is Art. 6(1)(b) GDPR. Where Google processes data for its own purposes, Google is responsible for it; Google’s privacy policy then applies (policies.google.com/privacy). Google may also process data in the USA (Google LLC); for this, Google relies on the EU-US Data Privacy Framework and standard contractual clauses.

You pay for coaching when you book. The payment is handled by Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Google passes your payment details, such as your card number, directly to Stripe; I do not receive them. I only learn that payment was made, the amount and the booking details. Stripe also processes payment data under its own responsibility, for example to prevent fraud and to meet legal obligations; Stripe’s privacy notice applies to that. The legal basis is Art. 6(1)(b) and (c) GDPR.

9. Email

If you write to me, I process your message and the information it contains in order to deal with your request. I run the mailboxes on Google Workspace (Google Ireland Limited, address in section 8); the confirmation from the contact form is sent this way too. Google may also process data in the USA; for this, Google relies on the EU-US Data Privacy Framework and standard contractual clauses. The legal basis is Art. 6(1)(b) or (f) GDPR.

10. Links to other websites

If you follow a link to another website, for example to LinkedIn or Zeitgeist, the privacy policy of the respective provider applies there.

11. Storage period

Unless a more specific storage period is stated above, personal data remains stored until the purpose of the processing no longer applies, unless statutory retention periods prevent deletion.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). To exercise them, write to florian@fuerst.ai.

There is no automated individual decision-making, including profiling (Art. 22 GDPR).

Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.

13. Encryption

This website uses TLS encryption. Emails cannot be fully protected against access by third parties.

Last updated: October 2026