Privacy policy
The German version of this document is the legally binding one.
1. Controller
The controller for data processing on this website and in our services is:
- Bergfrieden Consulting LLC
- Camino Fatima 9008, 4470 La Colmena / Paraguarí, Paraguay
- Registered office: 5830 E 2nd St Ste 7000, Casper, WY 82609, USA
- Represented by: Peter Thommen
- E-mail: office@bergfrieden.consulting · WhatsApp: +1 320 322 8558
We answer data protection questions at office@bergfrieden.consulting. We have not appointed a data protection officer because the legal requirements for doing so are not met.
2. Scope and principles
This policy covers this website, the AI assistant (AI-Advisor) and our services (AIoffice, consulting, setup, operations, own infrastructure).
Where the General Data Protection Regulation (GDPR) applies to a processing activity, we follow it; otherwise we comply with the applicable data protection rules of Paraguay and the United States.
We process as little personal data as possible. We do not sell data, we do not build advertising profiles and we do not use your content to train AI models.
3. Processing in detail
3.1 Server log files
When you visit our pages, technically necessary information is recorded: IP address, date and time, requested address, amount of data transferred, status code, browser type and operating system. The purpose is to deliver the pages, to keep operations secure, to diagnose errors and to defend against attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). We delete or anonymise this data after no more than 30 days.
3.2 Getting in touch
If you contact us through the contact form, by e-mail, via WhatsApp or by phone, we process your name, your contact details and your request in order to answer you. The legal basis is the preparation or performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (point f). We delete enquiries once they are dealt with; business correspondence is retained for the statutory periods.
3.3 Contracts, subscriptions and invoices
When you place an order we process company name or personal name, address, e-mail address, the package booked, the term as well as invoices and payment records. The purpose is to perform the contract (Art. 6(1)(b) GDPR) and to comply with statutory retention duties (point c). We keep invoices and accounting records for up to 10 years; other contract data is deleted after the contract ends once no duties prevent this.
3.4 AI assistant on this website (AI-Advisor)
We process your question and the answer generated from it in order to reply. We do not store the conversation in a database: it stays in your browser and disappears when you leave the page. To answer, your question and matching sections of our content are passed to a language model operated by a provider within the European Union (Scaleway, France). We do not create profiles and we do not take automated decisions in individual cases with legal effect (Art. 22 GDPR). The legal basis is the handling of your enquiry (Art. 6(1)(b) or (f) GDPR). Technical logs of errors and status codes are deleted after no more than 30 days.
3.5 AIoffice and knowledge bases
When you use AIoffice we process access data (user name, encrypted password), usage data (time and number of requests, token volume consumed for billing) and the content you enter into the assistant or provide as a knowledge base. The purpose is to provide, operate and bill the service (Art. 6(1)(b) GDPR). Your knowledge base and your conversations are used only for your installation, are not passed to third parties and are not used to train models. Data of different customers is kept separately. After the contract ends we delete your content within 30 days unless retention duties prevent this; on request we provide an export beforehand.
3.6 Cookies and local storage
We use strictly necessary cookies only: one for the session (login, forms) and one for the chosen language. There are no analytics, advertising or tracking cookies and no scripts from advertising networks; that is why we show no consent banner. You can delete or block cookies in your browser at any time – the website remains usable.
4. Recipients and processors
We use carefully selected service providers, in particular for infrastructure, e-mail operation and model operation. We have contracts with processors under Art. 28 GDPR. Only parties that need your data to provide the service receive access to it. We do not pass data on for advertising and we do not sell data. On request we name the sub-processors we use and conclude a data processing agreement.
5. Transfers to third countries
Operating this website, the AI chat and our services does not involve any transfer to third countries.
Exception: if you contact us via WhatsApp, your messages and the associated metadata are processed by WhatsApp Ireland Ltd. and the Meta group, in part also in the United States. We have no influence on this. If you wish to avoid it, please use e-mail or the contact form.
6. Retention
We store personal data only as long as necessary for the respective purpose or as long as statutory retention duties require. The periods are stated for each processing activity in section 3.
7. Your rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You may withdraw any consent you have given at any time.
An e-mail to office@bergfrieden.consulting is enough to exercise these rights. We answer promptly, as a rule within 30 days.
You may lodge a complaint with a data protection supervisory authority – in the European Union with the authority at your place of residence, in Paraguay with the competent body.
8. Data security
We transmit all content encrypted via HTTPS/TLS. Access to our systems is limited to a small number of people and is logged. Data is kept separately for each customer and backed up regularly. If a data protection incident occurs, we inform the individuals concerned and the supervisory authorities as soon as the legal requirements are met.
9. AI results and automated decisions
Answers from our AI assistant are suggestions, not binding advice. We do not take decisions with legal effect exclusively by automated means. Please review AI results before using them – we are glad to support you.
10. Changes to this policy
We update this policy when our processing changes. The version published here applies in each case.
Last updated: 24 September 2026