Privacy notice

1. Controller

CHnet Solutions Plus UG (haftungsbeschränkt), represented by managing director Christian Holbein. Bahnhofstr. 2, 37339 Breitenworbis, Germany. Contact: hello@chnet.solutions.

2. Hosting

This website is hosted on Amazon Web Services (region eu-west-1, Ireland) and delivered through Amazon CloudFront (edge locations worldwide; for German visitors typically Frankfurt). A data processing agreement is in place with AWS. On request, technical server logs (IP address, timestamp, user-agent, path) are kept in CloudFront and S3 logs for at most 90 days, exclusively for security and diagnostics purposes.

3. Cookies & local storage

The site does not set any optional cookies unless you explicitly consent.

4. Web analytics (Google Analytics 4)

Where enabled, the site uses Google Analytics 4 (Google Ireland Ltd.). IP anonymisation is enabled. The legal basis is your consent under Art. 6 (1)(a) GDPR / § 25 (1) TTDSG. You can withdraw consent at any time.

5. Search Console

The domain is verified for Google Search Console. A verification meta tag is added to the HTML response; this entry does not set cookies.

6. Contact form

If you use the contact form, your data (name, email, subject, message) is transmitted to an AWS Lambda endpoint in eu-west-1. Submissions are stored in a DynamoDB table in the same region and forwarded by email to hello@chnet.solutions. Retention: 12 months, then automatic deletion. Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in efficient request handling).

7. Chatbot

The chatbot embedded on this site answers questions about Christian Holbein and CHnet Solutions via an AWS Lambda endpoint in eu-west-1 that calls Amazon Bedrock (Anthropic Claude, EU inference profile). Conversations are stored in a DynamoDB table in the same region. When you use the chatbot, in addition to the conversation content we also store the IP address and User-Agent of the calling browser for 90 days. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in spam-/abuse-detection); this data is not shared with third parties and is automatically deleted after 90 days.

8. Chatbot lead submission

If your conversation with the chatbot turns into a concrete project inquiry, the bot can — only after explicit, on-the-record confirmation from you — forward a qualified summary into the same inbox that receives the contact form. The bot is required to summarise the planned submission first and to wait for your unambiguous “yes” before any data leaves the chat.

• Data categories: the request text (a qualified summary of the planned project, rough size, timeline, optionally tech stack), and optionally name and email address if you provided them in the conversation.
• Purpose: forwarding to Christian Holbein for initial contact and proposal preparation.
• Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures taken at the request of the data subject).
• Storage location: AWS DynamoDB table chnet-contact-submissions in eu-west-1 (Ireland). No third-country transfer.
• Retention: up to 365 days after receipt, then automatic deletion. You can request earlier deletion at any time via privacy@chnet.solutions (alternatively hello@chnet.solutions).
• Recipient: Christian Holbein, owner of CHnet Solutions Plus UG. No further parties receive this data.

9. Bot insights & quality control

To improve the chatbot’s answer quality, a nightly Lambda in eu-west-1 reads the conversations of the past 24 hours from the DynamoDB table mentioned in section 7 and uses AWS Bedrock (EU inference profile) to classify them automatically for recurring weaknesses, comprehension gaps or missing vita content.

• Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in improving service quality).
• Bedrock inference: transient — conversation content is only handed to the model for the duration of the classification call; AWS does not train on or persist this data. No third-country transfer.
• Storage of the analysis: results land exclusively in a private internal DynamoDB table in eu-west-1. If the analysis surfaces recurring weaknesses, a purely technical GitHub issue may be created with anonymised tags — conversation content or personal data is never embedded in those issues.
• No additional personal data: beyond what is already described in section 7, no further data is collected.

10. Email

Email to hello@chnet.solutions is processed via Microsoft Exchange Online (Microsoft Ireland Operations Ltd.) under the Microsoft data processing agreement.

11. Your rights

You have the right to information, correction, deletion, restriction of processing, data portability and objection at any time (Art. 15-21 GDPR). Please direct any requests to hello@chnet.solutions or privacy@chnet.solutions.

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority is the Thuringian Commissioner for Data Protection and Freedom of Information (registered office of the controller: Breitenworbis, Thuringia).

13. Changes

This privacy notice will be updated when the technical setup or applicable law changes. Last revision: May 2026.