Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Daniel Steuer, Beyond Prompt AI Studio, Haasestraße 8, 10245 Berlin, Germany, email: kontakt@beyondprompt.de.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes technically necessary server log data (e.g. IP address, time of access, page requested) to deliver the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning and secure website). Any transfer of data to the US is based on Standard Contractual Clauses.

If you use the contact form, the data you enter (name, email, company, project type, short description, preferred timeframe, budget range if provided) is processed to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent).

Sending is handled technically via the email provider Resend (Resend Inc., USA). Resend is certified under the EU-US Data Privacy Framework and is contractually bound to comply with GDPR requirements (Data Processing Agreement under Art. 28 GDPR). Data is deleted once your request has been fully processed and no statutory retention obligations apply.

If you use the Readiness Assessment and enter your contact details at the end to unlock the report, your details (name, email, optionally company) as well as your answers and the resulting evaluation are processed. The purpose is to create and send your personal report and to get in touch for follow-up. The legal basis is Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (pre-contractual measures).

The evaluation itself happens without storage in a database; the report and answers are sent by email via the provider Resend (Resend Inc., USA). Resend is certified under the EU-US Data Privacy Framework (Data Processing Agreement under Art. 28 GDPR). Until you submit the form, your answers do not leave your browser. The details are deleted once they are no longer needed for the stated purpose and no statutory retention obligations apply.

For specific projects we provide individual discovery questionnaires at an address that is not publicly linked, accessible via a personal access token. We process the project details you enter as well as the contact details you provide at the beginning (name, role, email address, and phone number where applicable). The purpose is to capture and clarify the requirements for your project. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract).

While you fill it in, your entries are stored only locally in your browser (localStorage) so that you can pause and continue later. Until you click submit, your answers do not leave your browser. You can remove the saved progress yourself at any time by clearing the site data in your browser.

On submission, your answers are transmitted to Beyond Prompt by email via the service provider Resend (Resend Inc., USA). Resend is certified under the EU-US Data Privacy Framework (data processing agreement pursuant to Art. 28 GDPR). No storage takes place on our server or at the hosting provider - the answers exist only in that email and in your browser. Server logs record solely the timestamp, status code and a shortened identifier of the access token, never the content of your answers. The submitted information is deleted as soon as it is no longer needed for the project and no statutory retention obligations apply.

To book an appointment we link to an external scheduling service (Cal.com, Inc.). If you follow this link, Cal.com's own privacy policy applies on the booking page; the data you enter there (e.g. name, email, preferred time) is processed by Cal.com. This is a plain link, not an embedded widget – no Cal.com cookies are set or data transferred on this website unless you follow the link.

On the "Comparisons" page, select entries (currently: Claude by Anthropic) link out via an affiliate/referral link. The link is clearly marked "Affiliate link" right next to the button - not just on the methodology page at /vergleiche/methodik. This is a plain link, not an embedded widget - no additional cookies are set or data transferred on this website unless you follow the link. The destination page's own privacy policy applies. The affiliate link only changes which link is behind the button and has no influence on the editorial rating.

Apart from technically necessary cookies (see section 2), this website does not set any cookies before you have given your consent. On your first visit, a cookie banner appears where you can accept or decline the use of Google Analytics. You can withdraw or change your decision at any time via the "Cookie Settings" link in the footer.

If you consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses cookies that allow an analysis of your use of this website (including pages visited, time spent, approximate location, device used). Your IP address is anonymized in the process. The legal basis is exclusively your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

We use Google Analytics in "Consent Mode": without your consent, no personal data is transmitted to Google and no analytics cookies are set. Data processing only begins once you have given consent.

As part of this use, data may be transmitted to Google servers in the USA. Google is certified under the EU-US Data Privacy Framework; in addition, we have entered into a data processing agreement with Google under Art. 28 GDPR (Google Ads/Analytics Terms of Service, including the Data Processing Terms). Event and user data is stored in Google Analytics for 14 months and automatically deleted afterwards.

You can additionally prevent data collection by Google Analytics by installing the browser add-on to disable Google Analytics: https://tools.google.com/dlpage/gaoptout.

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

This privacy policy is a template and does not replace legal advice. It should be reviewed by a lawyer and adapted to the services actually in use before publication.