Privacy policy
Find out how data is processed when you visit our website, make an enquiry or use the separate AI event advisor. You can also contact us by email or telephone without using AI advice.
Last updated: 9 October 2026
1. Controller and contact
The controller for www.pink-panta.de and the Pink Panta AI advisor is Marcel Maus & Pablo Ludwig GbR, Dörriesstraße 2, 53894 Mechernich, Germany, represented by Marcel Maus and Pablo Ludwig. You can reach us at kontakt@pink-panta.de or by telephone on +49 (0) 170 32 78 316 and +49 (0) 2484 919 66 07. You can also send privacy requests to this address.
These notices cover pink-panta.de, including www.pink-panta.de, the linked AI advisor and its private test copy. The older website pink-panta-band.de is a separate website; its own forms and integrations are not described by this policy.
2. Hosting through ChatGPT Sites, netcup domain and technical access data
Our website and separate AI advisor are provided through ChatGPT Sites by OpenAI. Cloudflare Workers delivers the applications; the AI advisor also uses a Cloudflare D1 database for session data. Requests involve processing IP addresses, access times, requested URLs, HTTP status and browser and device information. The basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure operation of our online services.
OpenAI processes personal data collected through our published websites as a processor. Hosting is governed by the data processing addendum incorporated into the ChatGPT Sites Terms; OpenAI Ireland Ltd. is the contracting party for EEA customers. The addendum also governs subprocessors. This hosting processing is separate from AI requests made through the OpenAI API.
OpenAI and Cloudflare provide hosting and security; Cloudflare operates infrastructure for ChatGPT Sites. Separately, the AI advisor uses Cloudflare Turnstile for security checks. Processing outside the European Economic Area, particularly in the US, is possible. Current provider information does not offer assured regional data residency for ChatGPT Sites. Exclusive storage in Germany or the EU is therefore not guaranteed. Technical access and security logs and backups follow separate provider retention periods; “Delete details” does not remove them. We do not have a confirmed uniform retention period covering all logs and backups in this hosting environment.
The domain pink-panta.de is managed through netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. Domain management is separate from website hosting through ChatGPT Sites. Where netcup provides the DNS services in use, technical query data may be processed when resolving the domain name. Necessary technical provision is based on Article 6(1)(f) GDPR. Domain registration alone does not transmit form contents or chat messages to netcup.
The website and AI advisor are separate applications within ChatGPT Sites. Opening or loading the advisor produces its own connection and session data. The AI advice sections describe processing and deletion of your chat and voice data. Merely visiting a website page does not send its contents to the OpenAI API as a consultation request simply because of its hosting.
3. Contact, quotes and contracts
When you contact us, we process your contact details, messages and event information, such as date, location, guest count, budget and requested services. Article 6(1)(b) GDPR applies to processing your own booking enquiry; other business correspondence is based on our legitimate interest under Article 6(1)(f) GDPR. Required fields are marked. Without necessary information, we may be unable to process your enquiry.
When you submit a website form, your details are transmitted through our form endpoint to Resend (Plus Five Five, Inc.) for delivery to kontakt@pink-panta.de; a receipt confirmation is also requested for the email address you provide. The processing includes your name, email address, optional telephone number, event details, message and technical delivery data. The receipt confirmation is neither a binding offer nor a booking confirmation. Filling in the form alone does not send it.
We retain enquiries as needed to handle them, perform a resulting contract or protect specific legal claims. Once an enquiry without a booking is completed, its handling purpose ends; further retention requires a separate reason, such as an applicable statutory retention obligation or a specific legal dispute. This does not permit blanket permanent retention of all enquiries. Required business and tax records are retained under Article 6(1)(c) GDPR: depending on the applicable provision, in particular six years for business or commercial correspondence, eight years for invoices and accounting vouchers, and ten years for books and annual accounts. These periods generally start at the end of the relevant calendar year; statutory extensions may apply. They cover the required records, not automatically every chat or form entry. The relevant data must be deleted when all lawful retention grounds cease.
Unsent form entries remain only in the open browser window. After ten minutes without input, when closing the enquiry dialog or leaving the page, fields and previews are cleared. A browser crash may prevent the close event; fields are also cleared when the page is restored. This does not recall enquiries or emails already transmitted. Please provide only necessary event details; a telephone number is optional in the enquiry form. An enquiry or address verification is not consent to marketing emails.
The email address is added to a Resend contact segment to allocate website enquiries. New contacts are marked as unsubscribed from marketing; existing settings remain unchanged. An enquiry is not a newsletter subscription. Contacts, messages and delivery records are separate from unsent browser entries and are not deleted when the form closes. There is currently no automatic contact deletion routine. You can contact us to request deletion, subject to statutory retention obligations.
Our mailbox kontakt@pink-panta.de is operated by netcup GmbH. Receiving, storing and sending correspondence involves processing sender and recipient addresses, message contents, any attachments and technical delivery and connection data. Within our business, access is limited to the people handling your enquiry. The basis is Article 6(1)(b) GDPR for your own contractual enquiry, otherwise Article 6(1)(f) GDPR for business correspondence; statutory retention obligations are based on Article 6(1)(c) GDPR. Messages follow the retention criteria above; provider logs and backups are processed separately. The available data processing agreement specifies Germany as the processing location for the netcup mailbox. This concerns the mailbox; Resend delivery and website hosting have separate processing locations. Email addresses contained in stored messages are also mailbox data.
To protect website forms against automated or repeated submissions, the application checks technical request data and limits sending attempts. The current form application uses a temporary IP-based counter with a ten-minute window; expired entries are cleared on subsequent requests. This counter does not store form contents. The basis is our legitimate interest in preventing abuse under Article 6(1)(f) GDPR.
Resend is provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Customer data, including message content and delivery logs, is stored in the US. Selecting a European sending region does not change that storage location. Resend’s data processing terms govern international transfers, in particular through EU Standard Contractual Clauses.
Resend acts as a processor for the contact and message data we submit. Its terms incorporate a data processing addendum, including provisions on international transfers. The stated deletion within 90 days after account termination is not an automatic 90-day retention limit for individual contacts while the account remains active. Our contact records are subject to the purposes and retention criteria described above.
Resend states a retention period of 30 days for email content and logs on Free, Pro and Scale plans; Enterprise may have different periods. The provider states that backups persist for seven days. Contact records are separate: removing an address from a segment deletes neither the contact itself nor messages already delivered to the netcup mailbox.
4. Cookies, local storage and your choices
The website stores your choices for Google Analytics, Google Ads and YouTube in your browser. Storage strictly necessary for expressly requested functions is based on section 25(2)(2) TDDDG; additional storage or access to your device generally requires consent under section 25(1) TDDDG. Subsequent processing of personal data also requires a GDPR basis.
Google Analytics, Google Ads and YouTube are optional and off by default. You can allow them separately, accept all available optional services or reject them with “Necessary only”. Consent under Article 6(1)(a) GDPR and section 25(1) TDDDG can be withdrawn prospectively at any time through “Cookie settings” in the footer. Closing the banner does not grant consent. AI advice, email delivery and voice are started separately by you. The separate AI advisor does not itself embed Analytics or Ads measurement tags.
4a. Google Analytics
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse visits to and use of our main website. Data may include page views, interactions, device and browser information, and cookie identifiers. The legal bases are your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. Google may also have data processed by companies in the USA. See the international-transfer section below and Google’s information.
On pink-panta.de and www.pink-panta.de, Google Analytics 4 loads only after Analytics consent. It records page views, acquisition sources, scrolling, use of permitted embedded videos, successfully submitted enquiries, and views, start mode and visible usage time of the embedded AI advisor. Technical device and browser data and approximate location information such as country and city are also processed. Automatic measurement of form interactions, site search terms, outbound link clicks, file downloads and additional page changes through browser history is disabled.
Our measurement integration does not send names, email addresses, telephone numbers, form fields, event details, chat or audio content to Google as event parameters. URL fragments and unnecessary query parameters are removed; Google’s automatic redaction of detected email addresses is also enabled. Campaign parameters may be retained for attribution; advertising click identifiers require additional advertising consent. Do not include personal information in campaign links.
This integration does not load Google measurement tags on the separate hosting and test addresses. Google Signals and user-provided data collection are not enabled in the Analytics property. Use of Analytics data for personalised advertising is disabled in every region, as is personalisation in the Google Ads link. Optional account-wide data sharing for Google products and services, contribution and business-insight models, technical support and recommendations is disabled.
Analytics cookies expire after at most 180 days without automatic renewal. Separately, our Analytics property retains other event data for two months and user data, including associated key-event data, for 14 months. New user activity restarts the retention period for the user identifier. Expired data is removed in Google’s monthly deletion cycle. These settings do not limit retention of standard aggregated reports. You can withdraw consent at any time through cookie settings; this does not automatically delete data already transmitted.
4b. Google Ads (formerly AdWords)
We use Google Ads from Google Ireland Limited for advertising. Optional website conversion measurement associates ad clicks with resulting visits or enquiries. This may send advertising identifiers, cookie identifiers, device information and events to Google, including processing in the USA. Measurement requires your separate advertising consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. Personalised advertising and sending contact details for enhanced conversions are not enabled in this integration.
Our Analytics property is linked to our Google Ads account. Successfully submitted enquiries are sent to Analytics as “generate_lead” and imported into Google Ads through the configured “Pink Panta – Kontaktanfrage (neue Website)” conversion action. Advertising attribution in this integration requires both Analytics and separate advertising consent. Advertising consent alone does not load a measurement tag. Without advertising consent, advertising storage and advertising data transmission remain denied in Google consent mode. No additional standalone Ads tag is loaded.
This enquiry conversion uses an attribution window of 90 days after an ad click and three days after an engaged video view. These are advertising attribution windows, not a promise that all data is deleted when the window ends. The import is currently a secondary conversion. Enhanced conversions and enhanced conversions for leads are disabled in the Google Ads account; contact details are not transmitted for that matching. The website integration does not permit personalised advertising.
4c. Google Search Console (Webmaster Tools)
Google Search Console helps us evaluate our website’s visibility in Google Search and technical indexing issues. Ownership verification alone, for example through a DNS record or meta tag, loads no visitor tracker and sets no visitor cookies. It therefore has no separate consent switch. Any additional Analytics or Ads integration is handled independently according to your choices.
The provider is Google Ireland Limited. We use search performance and indexing reports to maintain our website, based on our legitimate interest under Article 6(1)(f) GDPR. A verification file, meta tag or sitemap contains no chat or enquiry data. Search Console is neither a contact form nor a separate visitor tracker on our website.
The verified Search Console property for https://pink-panta.de/ is linked to the website data stream in Google Analytics. This allows search-performance reports and Analytics reports to be viewed together. The account link adds no extra tracker to your device and does not replace consent to Google Analytics.
4d. Enquiry attribution and AI advisor measurement
With Analytics consent, “pp-visit-attribution-v1” in session storage records the first observed landing page, acquisition source and timestamp. Attribution is tab-specific and is no longer reused after 30 minutes without an update. Withdrawal removes this entry. The purpose is to understand which content and sources lead to enquiries, based on Article 6(1)(a) GDPR and section 25(1) TDDDG.
A submitted website enquiry contains the enquiry page and channel so our office can allocate it. If collected with Analytics consent, the landing page and acquisition source are also included in the enquiry email. These additional fields do not contain a separate copy of the chat history. The actual enquiry can be handled without Analytics or advertising consent.
With Analytics consent, the advisor embedded on pink-panta.de reports only predefined events to the surrounding website: view, text or voice start, visible usage time and, where applicable, a successfully sent enquiry. This does not record the screen or conversation. Without consent these events are not sent to Google. The standalone advisor and private test copy do not themselves load Google measurement tags.
5. YouTube videos and external links
Our video preview images are served locally. The youtube-nocookie.com player is embedded only when you allow YouTube or expressly load a video after the notice. Google then receives information including your IP address, browser details and the page visited. Privacy-enhanced mode does not mean that no data is processed or stored on your device.
For the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Embedding is based on your consent under Article 6(1)(a) GDPR and, where device access is involved, section 25(1) TDDDG. Processing outside the EEA is possible. Google provides information about recipients, retention and transfers.
Google reviews, ProvenExpert and our social networks appear as links or locally displayed content. Merely viewing these links does not load the respective profile widget. If you open an external link, the relevant provider’s privacy information also applies.
6. AI advice: purpose, content and limits
The separate event advisor is an AI system, not a human employee. It helps you plan the band, DJ, equipment and event schedule. Responses can contain errors. Advice and calculated summaries are non-binding; bookings and binding terms are agreed personally. No solely automated decision with legal or similarly significant effects within Article 22 GDPR is made.
The service processes your messages, event details, the resulting plan, responses and technical session data. Longer conversations may be summarised. The application uses curated band information and your own session; it is not connected to the operator’s private ChatGPT history or other visitors’ conversations.
Please enter only information needed for your event. Do not enter health data, payment details, identity documents or confidential information about third parties. Requested pre-contractual advice is based on Article 6(1)(b) GDPR; general business questions on Article 6(1)(f) GDPR. You can contact us personally instead at any time.
Marcel Maus & Pablo Ludwig GbR provides and operates the AI advisor offered under the Pink Panta brand. Its underlying AI models are supplied by OpenAI. The advisor’s text and synthetic voice are AI outputs, even when they sound natural. An automated response is not a personal review by our team. For binding information and bookings, contact kontakt@pink-panta.de.
7. OpenAI as the AI provider
For responses and structured processing of your request, the advisor sends text and relevant context to the OpenAI API from our server. An explicitly started voice conversation also transmits audio. Under the standard terms for EEA customers, the contracting party is OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Affiliates and subprocessors may process data, including in the United States. The deployed configuration does not guarantee EU-only processing.
Personal advice data submitted through the API is governed by the data processing addendum incorporated into the OpenAI Services Agreement. For this processing, OpenAI acts as a processor on our instructions. The linked terms describe safeguards, subprocessors and protections for international transfers.
Text requests use “store:false”. This does not mean no retention: OpenAI describes standard abuse-monitoring retention of up to 30 days, subject to possible legal exceptions. Depending on the model, technical prompt caching may also last up to 24 hours. Under the provider’s terms, API content is not used for model training without a separate opt-in. A special Zero Data Retention configuration has not been established for this account. Provider retention is separate from our session expiry.
8. Voice and microphone
Live conversation starts only after consent via the start button and browser microphone permission. The full notice is available in the start dialog. Voice input is sent through our server to OpenAI. We do not create a permanent audio file. Automatic transcripts are used temporarily for processing and display and may contain recognition errors. Structured event details, advice cards and reviewed AI replies may form part of the temporary session. Raw voice transcripts are not stored as a separate conversation history in the advice database or included in offer emails. Optional voice processing relies on consent under Article 6(1)(a) GDPR; text remains an alternative.
Your browser’s dictation feature is separate. Depending on the browser, its speech recognition may use an external service; entirely local processing is not guaranteed. You can review the recognised text before sending it. Normal text input remains available as an alternative.
The real-time voice is artificially generated. In the advisor, permission can be withdrawn under Privacy using the voice-permission withdrawal button; typing remains available. The time and version of permission for starting a voice conversation are recorded for the session and deleted with it.
Microphone transmission pauses during input dialogs, video playback and manual pauses. This does not automatically end the entire realtime connection. End the live conversation or withdraw voice consent under Privacy to close the connection. The private test copy is currently limited to text tests.
9. Security and Cloudflare Turnstile
The advisor uses Cloudflare Turnstile to prevent automated access. This processes information including the IP address, browser and technical device signals and verification results. Cloudflare, Inc., USA, processes data as a processor to provide the security check and describes its separate controllership for improving bot detection.
Security processing relies on our legitimate interests in preventing automated access, overload and abusive costs under Article 6(1)(f) GDPR. Device access strictly necessary to provide the secure advice service you request falls under section 25(2)(2) TDDDG. This check is not used for our advertising or visitor analytics. Cloudflare explains its own processing to improve bot detection in the linked notice.
We also use keyed IP-derived values (HMAC), counters and timing data. These are pseudonymous, not anonymous. They limit the public advisor to 30 live starts overall per day, 20 connected live minutes per internet connection per day, and a 30-minute text window from the first text request per connection per day. Days follow German local time. Shared connections can affect several people. The private test copy is exempt from these daily and time quotas; other security limits remain.
These allowances are kept separately from chat content and are not reset by deleting details, reloading or restarting. Access counters become eligible for deletion after their respective time window plus one hour and are removed at the next cleanup. Cleanup runs on API requests and is additionally scheduled hourly; technical delays can postpone actual deletion. Section 11 describes separate delivery controls. Access counters contain no plain-text IP address; hosting and security providers may still process the connection IP address.
Where Cloudflare acts as our processor, its data processing addendum forms part of its self-service terms. Cloudflare explains its separate processing for improving Turnstile in the Turnstile Privacy Addendum.
The Turnstile result generated in the browser is also checked with Cloudflare on our server when a session starts. Pre-clearance is not enabled for this check. Reporting periods displayed in Cloudflare describe the availability of statistics, not confirmed deletion periods for all Turnstile data. The linked provider information does not specify a single retention period in days covering all such data.
10. Location checks and travel distances
For location matching, the server queries the Photon service at photon.komoot.io with the recognised place name or postcode. Travel distances are queried through routing.openstreetmap.de using place coordinates. The chat history, name and email address are not sent for this purpose; the services receive technical connection data from our server. The basis is preparation of your requested event service under Article 6(1)(b) GDPR.
Photon is an OpenStreetMap project run by komoot; the OSRM routing service is operated by FOSSGIS e. V. Route requests may appear in its technical server logs. No embedded map is loaded and no GPS location is requested from your device.
The city is sufficient for advice. Do not enter names, contact details or a private address into the location field: such free text could otherwise become part of a location query. Verified distances to the city centre are reused in a lasting city catalogue separate from conversations. It stores city and region details, distances, source and verification time, without a visitor identifier or chat history. Deleting your session does not remove this general route catalogue.
10a. Google Sheets and Google Cloud as the price source
The AI advisor reads our approved service prices and pricing rules server-side through the Google Sheets API. A Google Cloud service account has read-only access to the private price spreadsheet. The browser does not load a Google Sheets widget and does not set additional Google cookies for this function.
Price requests do not transmit chat messages, names, email addresses, event details or visitor IP addresses from the application to the spreadsheet. Google processes technical connection, authentication and request data from our server. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; other Google entities may be involved depending on the service and agreement. The purpose is to provide current prices; necessary personal technical data is processed on the basis of our legitimate interest under Article 6(1)(f) GDPR. Technical provider logs follow Google’s terms; possible international transfers are described in section 13.
The private test copy currently uses a separate pricing snapshot. Advice there does not write customer data to the shared Google pricing spreadsheet.
11. Email from the AI advisor
Sending an offer summary directly from the AI advisor is currently disabled, including in the private test copy. A normal enquiry through the website form remains independent and follows section 3. The following information describes the prepared delivery flow and any existing delivery controls; using advice alone does not send an offer email.
A verification code is sent to your email address only at your request. It is valid for ten minutes. The displayed offer summary is sent only after address verification and an explicit send action. The configured sender and office copy address is kontakt@pink-panta.de. The office receives only the offer summary with your address as a blind copy, never the chat history or verification code. Resend processes the necessary recipient addresses, subject, message and delivery metadata.
The office copy is received and stored in the netcup mailbox kontakt@pink-panta.de to handle your enquiry. Deleting a chat session does not remove correspondence already delivered. Section 3 explains our mailbox and retention criteria.
Delivery requested by you and handling your own booking enquiry are based on Article 6(1)(b) GDPR; other business correspondence uses Article 6(1)(f) GDPR. The internal office copy serves the same enquiry. The office may ask a relevant follow-up question. This does not subscribe you to newsletters or advertising campaigns. Address verification alone is not a marketing opt-in; marketing requires a separate lawful basis.
To prevent repeated sending, there is a total limit of ten offers per verified email address and ten delivery operations per IP address per calendar day in the Europe/Berlin time zone, including verification codes. Reserved attempts with uncertain delivery status may also use the allowance. Resend stores the verified address, an offer counter and technical delivery identifiers in a delivery-control segment. The application additionally keeps pseudonymous HMAC checks and delivery identifiers; the IP address is not stored in plain text in this counter. This separate control is based on our legitimate interest in preventing abuse under Article 6(1)(f) GDPR.
Existing delivery controls remain separate from the chat and are not removed by chat deletion. There is currently no automatic deletion deadline for the address-level total counter; contact us to request deletion or review. Updating this notice does not activate the disabled delivery feature. Already sent emails and legally required records follow the criteria in section 3.
The prepared IP-based daily email counters have a technical expiry two days after creation. They are removed at the next cleanup after that expiry plus one hour. Cleanup runs on API requests and is additionally scheduled hourly; technical delays are possible. This period differs from the verification code’s ten-minute validity and from the address-based total counters.
12. Conversation storage and deletion
The conversation, event plan, cached AI context, email address and verification code are associated with the active server-side session. The session ends after 20 minutes without active input, and in all cases 30 minutes after it begins, even during continued use. Whichever limit is reached first applies. The open chat then clears its contents and requests deletion. Closing or leaving the chat also sends a deletion request. A newly opened window does not restore the previous consultation.
If the deletion request fails because of a network interruption or browser termination, the expired session is no longer usable on the server. In addition to cleanup on API requests, independent server-side cleanup is scheduled hourly. Delays or technical failures are possible. Session expiry therefore does not promise simultaneous physical deletion across all systems. Provider logs and backups are separate.
You can specifically delete the session using “Delete details”. “Restart” retains details only within the active session. This does not automatically delete emails already sent, separate delivery controls, lawfully retained business records or provider logs. For access or further deletion requests, contact kontakt@pink-panta.de. Restarting within the same session does not extend its maximum duration of 30 minutes. Separate daily quotas remain in effect.
Session-related delivery-status data is removed during cleanup of expired sessions. An additional cleanup rule covers delivery-status data created more than 30 days earlier. These rules run on API requests and through the additional hourly scheduled cleanup. Thirty days is therefore not a guaranteed maximum until actual deletion. Verification codes are valid for only ten minutes and are deleted during a subsequent cleanup. Section 9 covers access counters and section 11 covers separate delivery controls. None of these periods replaces separate provider retention or the retention of required business records.
13. Recipients and international transfers
Access is given to the people handling your enquiry and the hosting, AI, security and delivery providers required for the relevant service. Some providers may process data outside the EEA. The actual company, region and subprocessors depend on the agreements and account configuration.
Transfers to third countries are subject to Articles 44 et seq. GDPR. The OpenAI API and ChatGPT Sites data processing addenda provide for standard contractual clauses or an applicable adequacy decision for transfers from the EEA. Cloudflare and Resend also address required transfer safeguards in their data processing addenda. These contractual safeguards do not mean that all data is stored exclusively in the EU.
The data processing addenda mentioned above are incorporated into the respective standard terms for the OpenAI API, ChatGPT Sites, Cloudflare and Resend. Acceptance of the Google Ads Data Processing Terms has been confirmed for our Google Analytics account. Contact kontakt@pink-panta.de with questions about the recipients and transfer grounds in use or to request a copy of the applicable safeguards.
14. Your rights
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw consent at any time for the future; processing before withdrawal remains lawful. Withdrawal may mean that the optional feature can no longer be provided.
Where processing relies on legitimate interests, you may object for reasons relating to your particular situation. You can object to direct marketing at any time without giving reasons. Contact kontakt@pink-panta.de to exercise these rights.
You may complain to a data protection supervisory authority, particularly where you usually live or work or where the suspected infringement occurred. For our existing registered address, a contact is the North Rhine-Westphalia data protection authority: Postfach 20 04 44, 40102 Düsseldorf, Germany, telephone +49 211 38424-0.