← Back to home

Privacy policy

Last updated: 24 April 2026 · Website: boneai.de

In short: we process personal data only to operate this website, handle your contact request, and — if you consent — load privacy-friendly web analytics. We share data with third parties only as described here or when legally required.

1. Controller

Controller under the UK GDPR / EU GDPR (as applicable):
Fred Bone, trading as BONE AI, Dortmund, Germany
Email: fred.bone@boneai.de

2. Hosting

This site is hosted by Vercel Inc. (USA / global CDN). When you visit, technically necessary data (e.g. IP address, timestamp, user agent, requested resource) may be processed to deliver and secure the site. Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure operation). See Vercel’s privacy policy: vercel.com/legal/privacy-policy.

3. Contact form (Resend)

If you use the contact form, we process the data you enter (name, email, optional company, message) to respond. Email delivery uses Resend (may involve processing outside the EEA; appropriate safeguards such as EU Standard Contractual Clauses may apply). Legal bases: Art. 6(1)(b) GDPR (pre-contract / communication) and/or Art. 6(1)(f) GDPR. Data is deleted when no longer needed unless statutory retention applies.

4. Third-party content

5. Web analytics (Vercel Web Analytics) — only after consent

Vercel Web Analytics helps measure aggregated usage. The script is only loaded if you choose “Accept analytics” in the cookie bar. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent by clearing site data for this domain (key boneai_consent_v1) and reloading; see cookie information.

6. Cookies and local storage

We use essential mechanisms and optional analytics only with consent. Details: cookies & local storage.

7. Retention

We keep personal data only as long as necessary for the purposes described or as required by law.

8. Your rights

Where applicable, you may have rights including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.

9. Visitors outside the EEA

Access from outside the European Economic Area may involve transfers to third countries. Where required, we rely on appropriate safeguards under Art. 44 et seq. GDPR.

Legal notice · GDPR (FR) · Cookies