Legal information
Privacy notice for the questionnaire
1. Controller
Caspar Feld GmbH
Raabestraße 6
10405 Berlin, Germany
Email: welcome@caspar-feld.de
2. What data do we process?
The answers to the six questions are initially processed in your browser to display an immediate rule-based assessment. No email address is required. Only if you request optional email delivery are your answers, email address and consent transmitted to the server to send the results to the specified address. Caspar Feld receives a visible copy (CC) at welcome@caspar-feld.de. When the website is accessed, technically necessary access data may also be processed in server logs. To protect against automated misuse, pseudonymised verification keys are generated from technical characteristics and the recipient address. The questionnaire answers are not stored in this security database.
3. Purpose and legal basis
The immediate assessment is generated locally in your browser. Optional email delivery takes place only at your request. You can voluntarily book a conversation using the Google Calendar booking link; the privacy notices shown there apply. Email delivery does not trigger automatic personal follow-up. Processing for email delivery is based on your consent under Article 6(1)(a) GDPR. Consent is voluntary and may be withdrawn at any time with effect for the future. The short-lived verification keys used to prevent spam and repeated submissions are processed on the basis of our legitimate interest in secure and reliable operation in accordance with Article 6(1)(f) GDPR.
4. Recipients and hosting
The website is operated using ChatGPT Sites by OpenAI. Technical delivery and the short-lived security database also use Cloudflare components. Emails are sent through Google Workspace. Caspar Feld receives a visible copy (CC) at welcome@caspar-feld.de. Technically, the sent message remains in the Sent folder of the Google Workspace sender account. The email address is not used for newsletters and is not passed on for advertising purposes.
5. Retention period
The answers are not additionally stored in a separate questionnaire database. After delivery, they remain in the email inboxes involved and are retained only for as long as necessary for the requested delivery and any resulting communication. Without email delivery, the answers are not transmitted to the server; reloading the page clears the answers in the browser. As a rule, they are deleted no later than six months after the last contact relating to the diagnosis or, if there is no further contact, six months after delivery, unless statutory retention obligations apply. The pseudonymised verification keys are used for security decisions for no more than 24 hours and are deleted during the next processing run.
6. Automated decision-making
No automated decision-making or profiling within the meaning of Article 22 GDPR takes place. The immediate assessment and optional email contain a rule-based orientation. It uses the selected response levels and evidence check to identify the strongest foundation, a key opportunity and a suggested next step. This is not an individual professional assessment and has no legal or similarly significant effect.
7. Rights and withdrawal of consent
Data subjects have, in particular, the right of access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint with a data protection supervisory authority. Consent may be withdrawn informally at any time by emailing welcome@caspar-feld.de.
Data Protection Officer
GDS – Gesellschaft für Digitales Steuern mbH
represented by Sebastian Heger
Regina-Protmann-Str. 16, 48159 Münster, Germany
Phone: +49 (0)251 28078990
Email: info@gds.ms
The general privacy policy on caspar-feld.de also applies.