Privacy policy
Last updated: October 2026 · Draft, not yet reviewed by a lawyer. The German version is the authoritative one.
This policy describes which personal data we process on nordclean-ai.de, why, and for how long.
1. Controller
Josiane Guimbang, sole proprietorship trading as “NordClean AI Solutions”
Franz-Mehring-Straße 5, 17489 Greifswald, Germany
Email: nordclean-ai@kelon-ai.com · Phone: +49 170 8820611
No data protection officer is appointed, as there is no legal obligation to do so.
2. In short
- We use no advertising or tracking cookies and build no user profiles.
- Fonts and images load from our own website, not from Google.
- The calendar, the chat and the AI assistant demo come from third parties and load only when you press the button for them.
- We do not sell data.
3. Visiting the website (hosting)
The website is served by Cloudflare (Cloudflare, Inc., USA; in the EU: Cloudflare Germany GmbH). When you visit, Cloudflare processes technically necessary data: IP address, date and time, page requested, browser and device type, referrer.
Purpose: delivering the website, keeping it stable and secure.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Retention: Cloudflare keeps log data only briefly.
A data processing agreement is in place with Cloudflare. Transfers to the USA are possible; they rely on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.
4. Booking a call (GoHighLevel)
The booking calendar loads only when you press “Show the calendar” or open it in a new tab. It is provided by GoHighLevel (HighLevel Inc., USA). When it loads, GoHighLevel receives your IP address and technical data about your browser.
When you book a call, we process what you enter in the form (for example name, email address, phone number, time) to arrange, prepare and hold the call.
Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract at your request); for loading the calendar, Art. 6(1)(a) GDPR and § 25(1) TDDDG (your choice to load it).
Retention: 12 months after the call unless a business relationship follows. If it does, statutory retention periods apply.
Our GoHighLevel access is provided through the agency Shiney.ai Solutions, which manages the account technically and may have access to the data stored there.
5. Chat (GoHighLevel)
The chat window loads only when you press “Start chat”. It is also provided by GoHighLevel. We process the messages and contact details you enter there to answer your enquiry.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG for loading; Art. 6(1)(b) or (f) GDPR for answering.
Retention: 6 months after the last contact unless a business relationship follows.
6. AI assistant demo (buildmyagent.io)
The demo loads only when you press the button. It is provided by buildmyagent.io. When it loads, the provider receives your IP address and technical data about your browser; whatever you type or say in the demo is processed by the provider and an AI language model. Please do not enter confidential information there.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.
7. Calling our AI phone assistant
If you call +49 1556 2882794, an AI assistant talks to you. The call is processed to answer your question and, where relevant, arrange an appointment.
Legal basis: Art. 6(1)(b) or (f) GDPR.
8. Contact by email or phone
If you write to us or call, we process your details to deal with your request. Our mailbox is provided by Google Workspace (Google Ireland Limited).
Legal basis: Art. 6(1)(b) or (f) GDPR.
Retention: until your request is settled, then according to statutory retention duties.
9. Recipients and service providers
| Provider | Task | Seat |
|---|---|---|
| Cloudflare | Website hosting | USA / EU |
| GoHighLevel (HighLevel Inc.) | Calendar, chat, customer records | USA |
| buildmyagent.io | AI assistant demo | |
| Google (Google Workspace) | Mailbox | Ireland / USA |
For providers based in the USA, transfers rely on the EU-US Data Privacy Framework where the provider is certified, otherwise on the EU Standard Contractual Clauses.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)).
Write to nordclean-ai@kelon-ai.com. We reply within one month.
You can also complain to a supervisory authority, for example:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Schwerin, www.datenschutz-mv.de
11. Automated decisions
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
12. Security
The website is transmitted only over encrypted connections (HTTPS).
13. Changes
We update this policy when the website or the law changes. The version published here applies.