Privacy Policy
Responsible handling of your data — explained in plain language, without fine print.
1. Controller
The controller responsible for data processing on this website is:
Rudolf Latikan
Dennhäuser Str. 116
34134 Kassel, Germany
Phone: +49 152 060 879 40
Email: info@latikan.de
Competent supervisory authority:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
2. Introduction
Protecting your personal data is important to me. This policy informs you about what data is collected when you visit this website, what it is used for, and what rights you have. Personal data is only collected to the extent necessary to operate this website and to process your enquiries.
3. Hosting
This website is hosted with Hostinger. When you access the website, the hosting provider automatically collects technical server log files transmitted by your browser. These include: IP address, date and time of the request, the page accessed, referrer URL, browser type and version, and the operating system.
This data is technically necessary to deliver the website securely and reliably, and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website). Log files are automatically deleted after 7–14 days, unless they are needed to clarify a specific security incident.
4. Contacting Us
If you use the contact form on this website or write to me by email, I process the data you provide (name, email address, company, message text) in order to process your enquiry and get in touch with you. The legal basis is Art. 6(1)(b) GDPR (measures to initiate a contract at your request).
5. AI-Assisted Processing of Enquiries
To process your enquiry more quickly, we use AI services (language models). In doing so, the content of your enquiry (name, email address, message text) may be transmitted to the following providers: Anthropic (Claude API), OpenAI (API), Google (Gemini API).
These providers process the data as processors on the basis of a data processing agreement (Art. 28 GDPR). Insofar as data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 45, 46 GDPR).
The AI only creates suggestions (e.g. draft replies, summaries); every response and every decision is reviewed personally by us. No decision is made based solely on automated processing within the meaning of Art. 22 GDPR.
Legal basis: Art. 6(1)(b) GDPR (processing your enquiry) and Art. 6(1)(f) GDPR (legitimate interest in efficient processing).
6. Cookies and Consent Management
On your first visit to this website, a cookie banner appears where you can decide whether to consent to the use of analytics and marketing cookies or to use only technically necessary functions. Your choice is stored locally in your browser (localStorage); analytics and marketing scripts (see point 7) are only loaded after you have given explicit consent.
To document your consent (Art. 7(1) GDPR), we log your selection without any personally identifiable information (no name, no IP address) in a central consent log. You can withdraw or change your decision at any time via the "Cookie Settings" link in the footer (Art. 7(3) GDPR); upon withdrawal, any tracking cookies already set are actively deleted.
7. Analytics and Marketing
Google Analytics 4 (GA4). To analyse usage behaviour, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Pseudonymised usage data is collected (e.g. pages visited, time spent, device type); the IP address is shortened (IP anonymisation). Purpose: reach measurement and improvement of our offering. Legal basis: § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act, consent to setting cookies) in conjunction with Art. 6(1)(a) GDPR. Cookie lifetime: up to 14 months. Transfer to the third country USA takes place on the basis of the EU-US Data Privacy Framework.
Meta Pixel. To measure the success of campaigns, we use the Meta Pixel (Meta Platforms Ireland Limited), which records interactions with our ads. Purpose: ad performance measurement and audience building. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Cookie lifetime: up to 90 days. Transfer to the USA is based on the EU-US Data Privacy Framework. Meta and we are joint controllers for the operation of the Pixel within the meaning of Art. 26 GDPR (cf. CJEU "Fashion ID", case C-40/17); the allocation of responsibilities is set out in Meta's "Controller Addendum", which Meta makes publicly available.
LinkedIn Insight Tag. To measure the success of LinkedIn campaigns, we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company). Purpose: campaign performance measurement and retargeting. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Cookie lifetime: up to 180 days. Transfer to the USA is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Here too: LinkedIn and we are joint controllers for data collection via the Insight Tag under Art. 26 GDPR pursuant to LinkedIn's "Page Insight Tag Addendum".
All three services are only loaded after your consent via the cookie banner; without consent, no analytics or marketing cookies are set.
8. Google Fonts
This website embeds fonts (Fraunces, Space Grotesk, Manrope) directly from Google's servers (Google Fonts). When you access a page, your browser loads the required fonts from Google's servers into your browser's cache; in doing so, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a fast, technically reliable display of consistent fonts). The transfer to the third country USA is based on the EU-US Data Privacy Framework. Further information: Google's privacy policy.
9. Retention Period
Enquiries received via the contact form or by email are deleted once they have been fully processed, but no later than 12 months if they do not result in an order. Invoices and other accounting documents are retained for 8 years pursuant to § 147(3) of the German Fiscal Code (AO). Commercial correspondence (e.g. quotes, order confirmations) is retained for 6 years pursuant to § 257 of the German Commercial Code (HGB). After these periods expire, the data is routinely deleted, unless there is a statutory obligation for further retention.
10. Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to withdraw consent already given at any time (Art. 7(3) GDPR). Please contact me informally using the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular with the HBDI (address see point 1).
Right to object (Art. 21 GDPR). You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR. Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time to such processing without giving any reason; this also applies to any related profiling.
Last updated: September 23, 2026