Privacy information

This information explains personal-data processing on the websites described in the scope section and when you contact us.

Updated: 11 October 2026

1. Controller and contact

Gunnar Schlüter · VFM.agency
Moorchaussee 100
21683 Stade · Germany
Email: info@vfm.agency
Phone: +49 1573 3712546

Scope

These privacy notices apply to this website and to other websites and microsites operated by Gunnar Schlüter that explicitly link to these notices as their privacy information in their “Privacy” section. This applies to both separate domains and subdomains.

They describe our information websites hosted through ChatGPT Sites, any local browser tools available on the respective website, and contact enquiries. Information about a particular feature applies only to websites that offer that feature.

Additional or different processing, for example through contact forms, appointment booking, newsletters, analytics tools or AI services, requires supplementary privacy information on the respective website. These supplements are accessible there in the “Privacy” section or directly alongside the relevant feature and take precedence over the general statements in these notices for the processing they describe.

Websites operated by others are governed by their own privacy information. An ordinary link to this page does not bring those websites within this scope.

2. Hosting and technical access data

The information websites covered by these notices are provided through ChatGPT Sites. The hosting contracting party in the European Economic Area is OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. The ChatGPT Sites Data Processing Addendum governs processing of hosted visitor data on our behalf.

Access generates technical data, including IP address, requested pages or files, access time, and browser and device information. This enables delivery, maintenance, fault investigation and security. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing an accessible, reliable information service protected against misuse. Transmitting the technical request information is necessary to retrieve the pages.

Recipients may include OpenAI and service providers used for hosting, infrastructure, security and support. Details are available in the OpenAI sub-processor list. Processing outside the European Economic Area, including in the United States, is possible. The processing agreement provides for adequacy decisions or EU Standard Contractual Clauses and includes further information about these safeguards.

OpenAI’s separate processing relating to an OpenAI account is described in its European privacy policy. Our website applications require no visitor account of their own and use no OpenAI profile data for the checks.

3. Cookies and external content

The website applications we provide set no cookies of their own and use no persistent browser storage for your inputs. They embed no analytics tools, advertising pixels, remote font files, maps or videos. External websites are opened when you follow their links.

The hosting platform separately processes technical identifiers and may set platform cookies, including the OpenAI identifier __Host-appgarden-visitor. Cloudflare documents __cf_bm for bot detection and cf_clearance for storing a passed security check. __cf_bm expires after 30 minutes of continuous inactivity; the duration of a clearance cookie depends on the platform configuration.

Further information is available in the Cloudflare cookie documentation and OpenAI cookie policy. You can view, delete or restrict cookies in your browser settings. Restrictions may affect access to the platform or its security checks.

Storage or access strictly necessary for a service you explicitly request is governed by section 25(2)(2) TDDDG. We process personal technical data for delivery and security under Article 6(1)(f) GDPR. Our website applications have no optional analytics or advertising services enabled.

4. Inputs, self-checks and downloads

The local self-checks, prompt generators and enquiry aids evaluate your choices in the browser. They query no AI platforms and crawl no websites. PLANORM, Interim Manager Product Costing and WPOnly prepare an enquiry text from your inputs. Mandate Matching and Manager Branding may generate a conversation summary or an email draft.

The Product Costing & AI Visibility competence matrix processes up to twelve local rows. The AI Visibility Method checks and calculator use inputs from the open page only. Public Markdown worksheets are available as downloads.

The website applications do not send your inputs to Gunnar Schlüter, a database or an AI provider. Processing takes place in the open browser page. Your browser may restore a previous page state when you navigate back. Content you save, copy, export or print remains under your control.

A copy action writes to your clipboard when you click the relevant control. A download creates a file on your device; printing or saving a PDF uses your browser’s print facility. A prepared email link opens your email application. Only you send the message from that application. Processing by your email provider or a browser assistant you choose to use is additionally governed by that provider’s privacy information.

5. Contact enquiries

If you contact us by email or phone, we process contact details, message content and information you voluntarily provide to handle the matter. Contractual or pre-contractual enquiries are processed under Article 6(1)(b) GDPR. Other communications are processed under Article 6(1)(f) GDPR; our legitimate interest is responding to enquiries addressed to us. Recipients may include the email and IT service providers used for this purpose.

Providing information is voluntary. We need a means of contact and information about your enquiry to respond. Using a check or following a link does not subscribe you to a newsletter.

6. Retention

Our applications do not persist browser inputs. We delete enquiries once the matter is handled and further retention is unnecessary. Statutory duties relating to business or tax correspondence and necessary retention to assert or defend legal claims remain applicable.

Technical hosting data is processed according to its purpose for delivery, maintenance, security and legal obligations. The hosting agreement governs processing during its term and return or deletion on instruction after termination, unless statutory retention is required. Cookie expiry and server-side retention are different processes.

7. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw consent for the future.

For processing based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to direct marketing at any time. To exercise your rights, contact info@vfm.agency.

You may complain to a data protection supervisory authority. The authority for our place of business is the State Commissioner for Data Protection of Lower Saxony.

The self-checks and planning tools make no automated decisions with legal or similarly significant effects. Their outputs are optional guidance.