Privacy notice
My name is Mara Lindenfluss. I audit AI visibility for Strasbourg and cross-border businesses, working alone from the Strasbourg Eurométropole — clinics, translators, legal-support offices, logistics desks and specialist professional offers on both sides of the Rhine. This page stays short because the practice is: one form, one inbox, one purpose. Below, plainly, is what the form sends me, how I use it, and what you may ask of me about your own data.
Who handles your data
The data this page describes belongs to me. I, Mara Lindenfluss, am the sole auditor running geo-strasbourg.com, with no partner and no internal department — one person reads every message that arrives. Under the General Data Protection Regulation (GDPR), I am its controller. For any question, or to exercise a right, write to hello@geo-strasbourg.com.
What is collected
There is a single path to me: the form. It asks for three things and nothing beyond them —
- A name, so my reply can address you properly.
- An email address, so the reply has somewhere to land.
- A free-text message, where you describe the case — the AI answer that worries you, the query that produced it, the page or listing involved, the bilingual pair of pages whose French and German versions disagree.
That is all of it. No account, no login, no payment details entered here, no profile assembled behind the scenes. The message lands in an inbox and stays a message. Against automated submissions, the timestamp is kept with a salted SHA-256 hash of the sending IP; the IP itself in readable form, browser fingerprints and device traits are never stored.
What is not collected
It is worth naming what this site deliberately refuses:
- No tracking cookies, in any form. Visits are counted by a self-hosted, cookie-free, privacy-respecting analytics, served through a first-party proxy on this domain; nothing is shared across sites and no visitor is singled out.
- No advertising pixels, no remarketing tags, no marketing-automation trackers.
- No automated profiling, and no automated decision producing a legal effect on you.
- No selling, renting or sharing of personal data: there is no commercial machinery here for that to feed.
Why the law allows this
When you send the form, the handling of your name, email and message rests on Article 6(1)(b) of the GDPR — steps taken at your request before any agreement. The IP hash protecting the form against abuse rests instead on legitimate interest under Article 6(1)(f). Should payment-status data ever appear for a paid engagement, the contractual basis would cover it.
How long it is kept
- Form messages and the email exchange that follows: kept during the engagement, then for 24 months to preserve the history of the exchange, and deleted afterward. A message that leads to no engagement is kept 12 months and then deleted.
- IP hashes: kept 90 days, enough to recognise abusive patterns, then deleted.
- Any payment records: if a paid engagement produces them, they are kept only as long as tax and accounting rules require, then deleted.
Your rights
Over the data you send me, the GDPR gives you a right of access, correction, erasure, portability, restriction and objection. One email to hello@geo-strasbourg.com is enough to set any of them in motion, and you will have an answer within a month. If you believe your data has been mishandled, you may also complain to the data-protection supervisory authority of the country where you live.
Where the data is held
The servers behind geo-strasbourg.com sit in European Union (Germany). On the rare occasion that an additional processor (email provider) operates outside the European Union, the transfer relies on standard contractual clauses and on whatever further safeguards that party publishes.
Changes to this notice
If the way data is handled changes in a way that matters, this page is revised to say so, and the "Updated" date at the top moves accordingly. A change of real weight stays flagged on the home page for 30 days, so any returning visitor notices it.