← AI Timecheck

Privacy Policy

Last updated: October 2026

This is a translation for your convenience. In case of any discrepancy, the German version is legally binding.

Protecting your personal data matters to me. In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), this privacy policy explains which data I process when you visit this website and use the request form, for what purposes, on what legal basis, and what rights you have.

1. Controller

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:

No data protection officer has been appointed, as the legal requirements for doing so are not met. If you have any questions about data protection, please contact me directly at the address above.

2. Summary

• No cookies. This website does not set cookies and does not store anything in your browser.
• No third-party tracking. There are no advertising trackers, no social media plugins and no embedded third-party content.
• Anonymous statistics on my own server. I count visits with Umami, without cookies and without storing your IP address (see section 4).
• No external fonts. All fonts are served by this website itself; no connection is made to Google Fonts or similar services.
• Local calculation. The estimate of hours per year is calculated entirely in your browser. Your entries are only transmitted when you actively submit the form.
• No sale of data. Your data is neither sold nor passed on to third parties for advertising purposes.

3. Hosting and server log files

This website runs on a server that I operate myself and rent from Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany ("Hetzner"). The server is located in a data centre in Germany. All content of this website is delivered directly from this server; no content delivery network (CDN) or other third-party service is placed in between.

When you access this website, the server automatically processes information that your browser transmits and may store it in log files (server log files). This includes in particular:

• the IP address of the requesting device,
• the date and time of access,
• the page or file requested and the amount of data transferred,
• the HTTP status code (e.g. whether the request was successful),
• the referrer URL (the previously visited page), if transmitted,
• browser type, browser version and operating system (user agent).

This data is not combined with other data sources and is not used to identify individual visitors. The processing is technically necessary to deliver the website to you and serves the stability and security of its operation, in particular the prevention of attacks and misuse.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing this website securely, reliably and efficiently. Insofar as information on your device is accessed in the process, this is strictly necessary within the meaning of § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Server log files are stored for a maximum of seven days and then deleted automatically. If an attack or misuse is detected within this period, I retain the affected entries until the incident has been resolved. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner. Hosting does not involve any transfer to countries outside the EU.

4. Visitor statistics with Umami

To understand how this website is used and to improve it, I use the open-source software Umami. Umami runs on my own server at Hetzner in Germany (see section 3). The data is not passed on to any third party.

Umami is configured to collect as little data as possible:

• No cookies and no data stored in your browser.
• Your IP address is not stored. It is only used at the moment of access to determine your approximate location (country, region, city) and to distinguish visits, and is then discarded. To distinguish visits, Umami creates a pseudonymous identifier from the IP address, the browser identifier and a value that changes monthly; the IP address cannot be derived from it. Repeat visits from the same browser can therefore be linked within one calendar month; after that, and across other websites, you are not recognised.
• No profiling and no combination with other data, in particular not with information from the request form.
• "Do Not Track" is respected: if this setting is enabled in your browser, no measurement takes place.

Data collected: the page visited (without URL parameters) and its title, the referrer URL (the previously visited page), browser type, operating system, device type, screen size, browser language, approximate location (country, region, city), and the date and time of access. I only see this data in aggregated form, for example "120 visits last week, 30 of them via LinkedIn"; I cannot identify you from it.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in measuring the reach of this website and improving what it offers. I delete the collected data after twelve months at the latest.

Objection: you can object to the measurement at any time by enabling "Do Not Track" in your browser, by blocking the script from stats.ki-zeitcheck.de with a content blocker, or by sending me an informal email (see also right to object).

5. Request form

When you request a free AI Timecheck using the form, I process the data you enter in order to review your task, send you a written assessment and clarify any questions about it with you.

Data processed

• Required: description of the task, your name, your email address and your consent.
• Optional: frequency of the task, software involved, hours per week, number of people involved, company and team size.
• Added automatically: the language of the page from which you send the request, and the date and time of your consent (as proof pursuant to Art. 7(1) GDPR).

Please do not include any customer data, passwords or confidential business information in the task description. A general description is sufficient for the Timecheck.

Process

After you submit the form, your information is transmitted to the server in encrypted form, checked there and delivered as an email to my mailbox via the email delivery service Resend. There is no database in which your request is stored on the website. To protect against automated spam, the form contains a field that is invisible to humans; no additional data about you is collected through it.

Legal basis

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the box before submitting. Insofar as your request is aimed at concluding a contract, the processing is additionally carried out to take steps at your request prior to entering into a contract pursuant to Art. 6(1)(b) GDPR.

You can withdraw your consent at any time with effect for the future, for example by email to hello@necmigueler.com. The lawfulness of processing carried out before the withdrawal remains unaffected. After a withdrawal, I delete your request unless I am legally obliged to retain it.

Obligation to provide data

You are not legally or contractually obliged to provide me with any data. Without the required information, however, I cannot process your request.

6. Use of AI services

To prepare my assessment, I may analyse the description of your task with the help of an AI service (Claude by Anthropic). No personal data is transmitted in the process. Before each use, I remove your name, your email address, your company and any other information that could allow conclusions to be drawn about you, your company or other people. Only an anonymised description of the task reaches the AI service.

I use Claude with settings under which inputs are not used to train AI models. There is no automated decision-making: every assessment is reviewed and written by me personally.

7. Contact by email

If you send me an email or reply to my assessment, I process your email address, your name and the content of your message in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your message relates to a contract or its initiation, and otherwise Art. 6(1)(f) GDPR. My legitimate interest lies in answering your enquiry.

8. Recipients and processors

Your data is only received by the following service providers, who act on my behalf and according to my instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with each of them.

• Hosting: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (see section 3).
• Email delivery: Plus Five Five, Inc. ("Resend"), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend delivers the content of the request form as an email to my mailbox and stores the sent email for up to 30 days so that delivery problems can be traced; it is then deleted automatically.
• Mailbox: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace), where my mailbox is hosted.

Beyond this, I only pass on your data if I am legally obliged to do so (for example to public authorities) or if you have expressly consented.

9. Transfers to third countries

This website itself is hosted exclusively in Germany. A transfer to third countries only takes place if you use the request form or send me an email: Resend is based in the USA. Google Ireland Limited is based in the EU but may also have data processed by Google LLC in the USA. For the USA, the European Commission has adopted an adequacy decision (EU-U.S. Data Privacy Framework), Art. 45 GDPR. Resend and Google LLC are certified under this framework. In addition, the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) have been agreed with these providers, which would also apply should the adequacy decision cease to apply.

10. Retention periods

• Timecheck requests are deleted six months after I send my assessment or after our last contact, whichever is later, or earlier if you withdraw your consent or request deletion.
• If a contract is concluded, I retain the related correspondence for as long as statutory retention obligations apply (in particular under § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO), generally six to ten years).
• At the email delivery service Resend, the email containing your request is deleted automatically after 30 days (see section 8).
• Server log files are deleted automatically after seven days at the latest (see section 3).
• Statistics data (Umami) is deleted after twelve months at the latest (see section 4).

11. Your rights

You have the following rights against me at any time and free of charge:

• Access to the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability in a common, machine-readable format (Art. 20 GDPR),
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR),
• objection to processing (Art. 21 GDPR, see next section).

An informal email to hello@necmigueler.com is sufficient. I will respond to your request without undue delay and within one month at the latest.

12. Right to object

13. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for me is:

I would, however, appreciate it if you contacted me directly first.

14. Further information

Encryption

For security reasons, this website uses TLS encryption (recognisable by "https://" in the address bar). Your entries in the form therefore cannot be read by third parties.

No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changes to this privacy policy

I update this privacy policy whenever the data processing on this website or the legal situation changes. The version published here applies.

AI TimecheckImprintPrivacyDatenschutzerklärung auf Deutsch