Privacy Policy

Data processing in accordance with the GDPR · Last updated August 2026

Controller

Robin Winkelewski

Operating under the business name RootVector

Urbanstraße 71, 10967 Berlin, Germany

Email: robin@rootvector.ai

Hosting

I operate this website on infrastructure supplied by an EU-based hosting provider. To provide and secure the website, the server processes the following log data:

  • IP address
  • Browser type and version
  • Referrer URL
  • Time of request

Legal basis: Art. 6 (1) (f) GDPR, based on the legitimate interest in operating this website securely and reliably. Log data is deleted after 14 days. All data remains within the EU.

Contact

When you use the contact form or send an email, your name, email address, company name, and message content are processed to respond to your inquiry.

Legal basis: Art. 6 (1) (b) GDPR for contractual and pre-contractual inquiries, and Art. 6 (1) (f) GDPR for other inquiries. Data is processed on infrastructure within the EU and deleted after the inquiry is fully processed, typically no later than six months after the last correspondence, unless a resulting business relationship or a legal obligation requires longer retention.

Booking and Live Calls

When you book or join a call, the information you provide, booking details, and technical connection data are processed to arrange and conduct the call. During live calls, audio, video, screen shares, messages, and files may be processed.

Calls are not recorded by default. Recording, transcription, or summarisation occurs only with the prior consent of all participants.

I operate the booking and call systems on EU-hosted infrastructure. Legal basis: Art. 6 (1) (b) GDPR for contractual and pre-contractual calls, Art. 6 (1) (f) GDPR otherwise, and Art. 6 (1) (a) GDPR for recording, transcription, or summarisation. Data is deleted when no longer required, subject to legal retention obligations.

Usage Statistics

Usage and interaction data, including data generated through website interactions, are processed to understand and improve the website and services, ensure security, and prevent misuse. The analysis is performed using cookieless software that I operate on EU-hosted infrastructure; it sets no cookies and does not transmit data to external analytics providers. The only cookie this site sets is rv-rollout-affinity, a strictly necessary load-balancing cookie that keeps your browser on one server while a new version is being deployed; it is not used for tracking and expires with your browser session.

For website submissions, contact details may be linked to the analytics session to understand how inquiries arise.

  • Page views and referrer URLs
  • Device type and screen size
  • Browser and operating system
  • Approximate geographic region (country level)

Legal basis: Art. 6 (1) (f) GDPR, based on legitimate interests in understanding and improving the website and services, ensuring security, and preventing misuse. Usage data is deleted when it is no longer required for these purposes. The load-balancing cookie is exempt as strictly necessary under § 25 (2) TDDDG.

Your Rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21).

Contact robin@rootvector.ai to exercise these rights. You also have the right to complain to a data protection authority about how your personal data is handled.