Our website offers an AI-powered chat (“Studio Concierge”). You are not writing to a human being there but to a language model. It answers questions about our studio and our work and can — if you want it to — prepare a contact conversation. Answers produced by an AI can be incomplete or wrong; binding information is given by us in person.
Rainbow Unicorn – A. Niedhart, C. Reich GbR
Gerichtstr.52
13347 Berlin
**When you use the chat**
– your messages and the AI’s replies
– a randomly generated session identifier (not linked to you as a person)
– your IP address – only briefly and in hashed form, in order to limit abuse and overloading of the service (rate limiting)
The conversation is held in a server-side cache for **30 minutes** and is then discarded automatically, unless you send us a contact request.
We also keep **anonymous statistics** about which topics are asked about in the chat. These contain derived values only: the detected language, the topic categories matched, the *number* of search terms (not the terms themselves), the number of results and the step reached in the conversation.
**Neither your messages nor your search terms are stored, and no identifier is stored that could link several entries to each other or to you.** These entries are therefore not relatable to you; they are deleted after 90 days.
**If you want to book an appointment**
If you click the appointment booking in the chat, we store:
– the conversation and the answers you gave to the multiple-choice questions (e.g. type of project, budget range)
– **no name and no email address** – we only learn those through your booking with Calendly, not through our chat
The conversation is stored **encrypted** (AES-256) in our database.
**If you send us a contact form**
In that case we additionally store your name, your email address and your message, along with the time at which you gave your consent. This information is held in our content management system (WordPress) and is protected there by access restrictions; these fields are not additionally encrypted.
| Purpose | Legal basis |
|—|—|
| Operating the chat, answering your questions | Your consent, Art. 6(1)(a) GDPR – given via the confirmation shown before the first chat |
| Handling your contact request, preparing a conversation | Art. 6(1)(b) GDPR (steps prior to entering into a contract) and your consent to the storage |
| Protection against abuse and overloading (rate limiting) | Art. 6(1)(f) GDPR (legitimate interest in stable, abuse-free operation) |
| Demonstrating that consent was given | Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR |
**Anthropic PBC** (San Francisco, USA) operates the language model that produces the answers. For that purpose your chat messages are transmitted to Anthropic’s application programming interface and processed there. This constitutes a transfer to the **USA**.
**Calendly LLC** (USA) is used for arranging an appointment
Beyond that we do not pass your data on. Our hosting provider processes data solely on our instructions and on our behalf.
– **Conversation without a contact request:** 30 minutes, then deleted automatically.
– **If you want to book an appointment:** when you click the appointment booking, we store the conversation together with your multiple-choice answers – **without name and without email address** – for **30 days**, so that we can match an incoming booking to the conversation. If no booking materialises, this entry is deleted automatically.
– **Contact requests and confirmed bookings:** we delete the stored request data automatically **12 months** after it reaches us – both in the chat database and the request generated from it in our content management system. Deletion is permanent, not into a trash folder.
– Where statutory retention obligations exist, or where the request has turned into a contractual relationship, the corresponding longer periods apply.
You have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) as well as a right to object to processing based on legitimate interests (Art. 21 GDPR).
**You can withdraw consent at any time with effect for the future** – informally, to . The lawfulness of the processing carried out up to that point is unaffected.
You also have the **right to lodge a complaint with a supervisory authority**, for example with the the Berlin Commissioner for Data Protection and Freedom of Information.
Do not enter any **special categories of personal data** into the chat (e.g. health or religious data), no credentials and no confidential information about third parties. We do not need any of that in order to answer you.
Using the chat is voluntary.
Gerichtstr. 52
13347 Berlin