1. What data we process
We only process the data that is really necessary for the operation of the platform:
- Registration details: Email address, optional name.
- Workspace contents: Knowledge entries, conversations with your assistant, calendar slots, bookings, invoices and all other data you actively enter.
- Technical data: IP address at the time of access (stored in the server logs for a maximum of 30 days, then automatically deleted), browser identifier (user agent) for troubleshooting.
- Consumption data: Number of replies from your assistant per billing period — for your own overview in the dashboard and for the billing logic.
The legal basis is Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract) for platform use and Article 6 Paragraph 1 Letter f GDPR (legitimate interest) for operational security and troubleshooting.
2. Cookies & Browser Storage
We useonly technically necessary cookies(Section 25 Paragraph 2 No. 2 TDDDG - no consent required):
landki_session— signed login cookie (HttpOnly, Secure, SameSite=Lax). Login is not possible without this cookie.landki_csrf— Security token against CSRF attacks on form submissions.landki_visitor_id— anonymous visitor ID (UUID) to preserve chat history between page changes. LinkednoneAccount and does not contain any personal information.landki_public_locale— stores the language you explicitly choose (de, en or ar) for one year. It is used only for language selection, not for advertising.- Browser storage (no cookie): Theme selection, sidebar preference and your choice for optional measurement. This data does not leave your browser.
Optional measurement (Google Ads) — If requested, we measure whether contact requests or assistant leads were successfully completed (conversion tracking). This will be the caseGoogle Ads about Google Ireland Limited is used. Google scripts and requests will only with your express consent loaded via “Cookie Settings” (Consent Mode v2). We do not send any measurement data to Google without your consent.
The legal basis for the optional measurement is your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. Technically necessary cookies remain unaffected.
After consent, Google can, among other things, Set or read the following memories (depending on your browser and Google account): _gcl_aw , _gcl_dc and comparable conversion/ads cookies. There will be noneNames, email addresses or telephone numbers transmitted to Google (no enhanced conversions). The measurement is carried out using an anonymous lead ID (transaction_id ).
Google Analytics (GA4) is not integrated. The integration is only active when a valid Google Ads ID is stored in the company; No Google requests will be sent without an identifier.
3. AI processing
Your requests to the LandKI assistant are processed by AI models that we obtain from major providers:
- OpenAI Ireland Ltd. (GPT models) — data processing under OpenAI DPA, with opt-out from training use.
- Anthropic Ireland UC (Claude models) — Data processing under Anthropic DPA, with opt-out from training use.
Contents gonotin providers’ training datasets. Both providers can be reached at a European branch in accordance with Art. 28 GDPR.
4. Comments in the LandKI guide
Registered, active and email verified users can submit comments on published advice articles. For this purpose, we store the comment text, the internal user ID, creation and modification time as well as moderation status, moderation time and the internal ID of the person moderator. The email address will not be published in the comment section.
Comments will be reviewed before publication. Only approved posts with the display name stored in the account appear publicly. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in a secure, factual exchange and the prevention of misuse). Unapproved and deleted comments are only stored for as long as necessary for moderation, proof and protection against abuse.
5. Hosting & Server Location
The LandKI platform is hosted on servers in Germany (currently Hetzner Online GmbH, Gunzenhausen). Data transmission to the AI providers is encrypted (TLS) and only to their EU branches. Your data does not leave the European Union.
There is an data processing agreement (AVV) with the hosting provider in accordance with Art. 28 GDPR.
6. Your rights
According to the GDPR you have the following rights at all times:
- Access to your data (Art. 15) - we will tell you all the data stored about you.
- Rectification (Art. 16) — we correct incorrect data immediately.
- Erasure (Art. 17) — You can have your workspace and all associated data deleted at any time.
- Data portability (Art. 20) — You can export your data in a machine-readable format (JSON / CSV).
- Objection (Art. 21) — You can object to the processing at any time.
- Complaintwith the responsible supervisory authority (Hessian Commissioner for Data Protection and Freedom of Information - headquarters of the person responsible in Fulda, Hesse).
Send your request to [email protected] — we will respond within 7 working days.
7. Storage period
- Guide comments: approved comments until the comment or account is deleted; Moderation data only as long as it is necessary for proof and protection against misuse.
- Login details: as long as your account is active; removed immediately after deletion.
- Workspace content: as long as you want to keep them; completely removed upon account deletion.
- Server logs: maximum 30 days; then automatically overwritten.
- Activity audit: 10 years (tax retention requirement for business transactions such as invoices - see HGB / AO).
8. Exali Liability Seal
The liability seal of exali AG, Franz-Kobinger-Straße 9, 86157 Augsburg, is embedded on this website. The seal graphic is loaded from exali AG servers. For the technical transmission of the graphic to your browser, your IP address in particular is processed.
When you click on the seal, you will leave our website and will be redirected to LandKI's public liability profile on exali AG's servers. The purpose of the integration is to provide transparent evidence of existing professional liability insurance. The legal basis is Article 6 Paragraph 1 Letter f GDPR; Our legitimate interest lies in the transparent and attractively presented fulfillment of our information obligations.
Further information can be found in the Exali privacy policy (opens in a new tab) .
9. Changes to this Statement
We update this data protection declaration if anything changes to the processing (new providers, new functions, changed legal bases). You can find the current status at any time at landki.de/de/datenschutz .