AI Act Content Signer EU AI Act · Art. 50

Privacy Policy

Last updated: September 2026. This is a courtesy translation of our German privacy policy. In case of discrepancies, the German version (Datenschutzerklärung) is the authoritative one.

The protection of your personal data matters to us. This policy informs you, in accordance with Articles 12 and 13 of the General Data Protection Regulation (GDPR), in a precise, transparent and intelligible form about the data processed when you visit this website. On this preview site we process only the data that is technically necessary or that you actively send us.

1. Controller

The controller responsible for data processing within the meaning of the GDPR is:
TOTEMA – Prozesse. Neu gedacht.
Owner: Slaveyko Kirilov Nikolov
An der Leite 19
96193 Wachenroth
Germany
E-mail: contact@aiactcontentsigner.de

The controller within the meaning of the GDPR is the natural person named above as the owner of the sole proprietorship. "AI Act Content Signer" is an offering of TOTEMA.

2. Data Protection Officer

The requirements for an obligation to appoint a Data Protection Officer (Art. 37 GDPR, § 38 BDSG) are currently not met. Please direct any data protection questions to the contact details given in section 1 and section 18.

3. Subject matter and scope of this policy

This privacy policy applies to the website aiactcontentsigner.de in its current form: a purely informational preview site before launch.

This website offers no registration, no customer account, no payment processing and no processing of content for detection or signature purposes. The following sections therefore describe only the processing that takes place when this website is accessed and when contact is made via the e-mail addresses provided. Once the service launches, this policy will be extended to cover the processing added at that point (section 17).

4. General information

This website is deliberately operated without tracking, analytics services, advertising or external third-party services (e.g. Google Fonts, YouTube, Matomo). No content is loaded from third-party servers when you visit it.

Personal data means any data with which you can be personally identified. We process as little data as possible (data minimisation, Art. 5(1)(c) GDPR).

5. Hosting and server log files

This website is hosted by the European provider Scaleway (data centre within the European Union). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When the website is accessed, the web server automatically stores information in server log files that your browser transmits: browser type and version, operating system used, referrer URL, hostname of the accessing computer, IP address (IPv4 and IPv6) and the time of the server request. This data is not used to identify individuals and is not combined with other data sources. Purpose: technically error-free provision of the website, evaluation of system security and stability, and defence against and investigation of attacks. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of this website. Retention: the log files are deleted after 30 days.

To defend against attacks on the web server, the IP address may be processed briefly in an in-memory counter (rate limit). This information is not stored permanently and is not passed on to third parties (Art. 6(1)(f) GDPR).

6. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://". With encryption enabled, the data you transmit to us cannot be read by third parties.

7. Launch notification

On this site you can ask to be notified once when the service launches. For this we process your e-mail address and the content of your message in order to send you this single launch notification (currently planned for 1 October 2026).

Clicking the notification link does not establish a connection to our server: the message is created solely in your e-mail client and sent by you. We only process your address once you have sent that message. Because you send us the message yourself, no additional confirmation of your address (double opt-in) is required – your message also serves as evidence of your consent.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 7(2) UWG; you give this consent by sending us the message containing the relevant notice. Retention: we store your address until this notification is sent and delete it immediately afterwards, unless statutory retention obligations prevent this. Withdrawal: you may withdraw your consent at any time with effect for the future (Art. 7(3) GDPR) – a short informal message to contact@aiactcontentsigner.de is enough.

Your address will not be used for other advertising purposes or for a newsletter, and will not be passed on to third parties.

8. Contact by e-mail

If you contact us by e-mail – for example via one of the addresses given or via one of the contact links provided – we process your e-mail address, the content of the message, the time of the message and the technical transmission data. Purpose: handling and answering your enquiry. Legal basis: Art. 6(1)(b) GDPR insofar as your enquiry is aimed at entering into or performing a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

E-mail sending and the mailboxes are operated by a service provider in the European Union acting as a processor pursuant to Art. 28 GDPR (see section 10).

9. Cookies and local storage

This website sets no tracking or analytics cookies and no advertising or personalisation cookies.

In your browser's local storage we store only the language you selected (German/English) and – if you use the service's login area – the session information. This storage is necessary to provide the function you explicitly requested and therefore requires no consent under § 25(2) TDDDG. No tracking or analytics data is collected. A cookie banner is therefore not required.

10. Recipients and categories of recipients

We use service providers to operate this website. They process data exclusively within the framework of a data processing agreement pursuant to Art. 28 GDPR and only on our instructions:

Your data is not passed on for any other purpose or to any other third parties.

11. Transfers to third countries

We process your data for this website within the European Union. No personal data is transferred to third countries (outside the EU or the EEA) for the operation of this website.

Should processing with a third-country connection become necessary for the later service, we will inform you in advance in this policy and state the legal basis for the transfer (in particular standard contractual clauses pursuant to Art. 46(2)(c) GDPR).

12. Retention periods

We store personal data only for as long as is necessary for the purposes stated in this policy or as required by statutory retention periods.

13. Your rights as a data subject

Under the GDPR you have the following rights:

To exercise your rights, a short informal message to contact@aiactcontentsigner.de is sufficient. We may request proof of identity in order to prevent unauthorised access requests. Such verification is only carried out to the extent necessary to prevent unauthorised access requests (proportionality, Art. 5(1)(c) GDPR).

14. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

15. No obligation to provide data

You are not obliged to provide us with personal data. This website can be used without providing any personal data. However, a launch notification or a contact enquiry requires you to give us your e-mail address; without it we cannot reply to you.

16. Right to lodge a complaint with a supervisory authority

In the event of data protection infringements you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

17. Currency and scope of this policy

This privacy policy is currently valid and last updated in September 2026. It applies to the preview website described above. Before the service launches it will be extended to cover the processing added at that point – in particular account and API keys, processing of submitted content for detection and signature, the verification and audit log, and payment processing and invoicing. These additional processing activities will only take place after the updated privacy policy has been published. We may need to amend this policy as our service develops or as statutory or regulatory requirements change.

18. Contact

If you have any questions about the collection, processing or use of your personal data, or about access, rectification, blocking or erasure of data, please contact:

TOTEMA – Prozesse. Neu gedacht.
Owner: Slaveyko Kirilov Nikolov
An der Leite 19
96193 Wachenroth
Germany
E-mail: contact@aiactcontentsigner.de

← Back to home