Imprint & Privacy

Responsible for content

Responsible for the content pursuant to Section 18 (2) of the German Interstate Media Treaty (MStV): Jakob Ehe, address as above.

Consumer dispute resolution

I am neither willing nor obliged to take part in dispute-resolution proceedings before a consumer arbitration board within the meaning of the German Consumer Dispute Resolution Act (VSBG).

Liability for content

As a service provider I am responsible for my own content on these pages in accordance with general laws pursuant to Section 7 (1) DDG. Under Sections 8 to 10 DDG, however, I am not obliged to monitor transmitted or stored third-party information, or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general laws remain unaffected. Any liability in this respect is only possible from the point in time at which a concrete infringement becomes known. Upon becoming aware of such violations, I will remove the content in question without delay.

Liability for links

This website contains links to external third-party websites over whose content I have no influence. I therefore cannot accept any liability for this external content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking; no unlawful content was identifiable at that time. Permanent monitoring of the content of linked pages is not reasonable without concrete evidence of an infringement. Upon becoming aware of legal violations, I will remove such links without delay.

Copyright

The content and works created by the site operator on these pages are subject to German copyright law. Duplication, editing, distribution and any kind of exploitation beyond the limits of copyright require the prior written consent of the respective author or creator. Where content on this site was not created by the operator, the copyrights of third parties are respected and such content is identified as third-party content. Should you nonetheless become aware of a copyright infringement, please let me know and I will remove the content in question without delay.

01 · Controller

Who is responsible

The controller responsible for the processing of personal data on this website within the meaning of the GDPR is: Jakob Ehe · Richard-Strauss-Straße 36 · 81677 Munich · Germany. Email: mail@jakobehe.com

02 · General notes

Scope & principles

Personal data is any information relating to an identified or identifiable natural person. I process such data only in accordance with the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This website is deliberately kept data-minimal: it uses no cookies and no cross-site tracking, and you receive email from it only if you request the playbook or expressly opt in. The only processing that takes place is described in the sections below.

03 · Hosting

Hosting via Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). Vercel processes the technical data required to deliver the website to your browser (see “Server log files” below). The site is served from Vercel’s Frankfurt (Germany, fra1) region, so requests are processed on servers within the EU where possible.

Because Vercel is a US company, personal data (in particular your IP address) may also be transferred to or accessed from the United States. Appropriate safeguards for such transfers are provided in particular by the EU Standard Contractual Clauses pursuant to Art. 46 GDPR — and, where applicable, Vercel’s certification under the EU–U.S. Data Privacy Framework. A data-processing agreement pursuant to Art. 28 GDPR has been concluded with Vercel.

04 · Server log files

Access data

When you visit the site, the hosting infrastructure automatically collects and stores information that your browser transmits, in so-called server log files: browser type and version, operating system used, referrer URL, host name / requesting page, date and time of the server request, and IP address. This data is not merged with other data sources and is used only to ensure the technically error-free operation, security and optimisation of the website.

05 · Analytics

Vercel Web Analytics (cookie-less)

This website uses Vercel Web Analytics, a privacy-friendly, cookie-less analytics feature provided by Vercel. It does not use cookies and stores no information on your device, uses no persistent identifiers, and does not track you across websites or over time. To produce aggregate statistics (such as page views, referrers, approximate region/country derived from the IP address, device type and browser) Vercel processes technical request data. Your IP address is used only transiently; unique visits are counted using a non-reversible, regularly rotated hash that is discarded (typically within 24 hours).

06 · Contact

Getting in touch

When you use the listed email address, the details you provide (your email address, your message and any information you choose to include) are processed solely in order to handle your enquiry and any follow-up. No data is used for advertising or shared beyond what is necessary to respond to you. Legal basis: Art. 6 (1)(b) GDPR where your request relates to a (pre-)contractual measure, otherwise Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries). This data is deleted once it is no longer required, unless statutory retention periods apply.

07 · Playbook

Requesting the Product Validation Playbook (by email)

On the page /playbook you can request the “Product Validation Playbook” as a PDF. To send it I process your email address, your first name if you chose to give it, the time of the request, the page it was made on and — where present — the referring page and campaign parameters in the address (utm parameters). Your IP address is not stored with the request.

This data is passed to the email service that sends the playbook: Brevo, operated by {BREVO CONTRACTING ENTITY AND ADDRESS — take these from your data-processing agreement}. A data-processing agreement pursuant to Art. 28 GDPR is in place with that provider; where it processes data outside the EU, the transfer rests on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR and, where applicable, its certification under the EU–U.S. Data Privacy Framework.

Only if you tick the optional box do you additionally receive occasional emails with thoughts on product strategy and validation, notice of new publications, and information about the services of Jakob Ehe Studio. That consent is voluntary, is not required to receive the playbook, and is confirmed by double opt-in. Without it, your address is used to send you the playbook and for nothing else. You can withdraw it at any time via the unsubscribe link in every email or by writing to me; the lawfulness of processing up to that point is unaffected. I keep a record of when you consented and of the exact wording you consented to, as evidence.

If you did not tick the box, your email address is deleted once the playbook has been sent and any questions about it are settled, and after twelve months at the latest. If you did tick it, the address is kept for as long as you receive those emails; after you unsubscribe it is replaced by a suppression entry whose only purpose is to stop you being written to again. The record of your consent is kept for as long as it can still matter legally. Statutory retention periods remain unaffected.

08 · Workflow Check

The Workflow Check and the booking request (/workflow)

On /workflow/check you can describe a recurring business process and receive an assessment of whether it is a candidate for an AI-supported product. To produce it I process your answers to the questionnaire and the description you type in — and, once you ask to see the assessment, your first and last name, business email address, company, phone number and, if you give them, website and role. If you then request a Workflow Sprint, I additionally process your answers to the four qualification questions. With each request I also record the time, the page it was made on and, where present, the referring page and campaign parameters in the address (utm parameters). Your IP address is not stored with the request.

Your progress through the questionnaire is kept in your browser’s local storage, so that you can continue where you left off. It never leaves your device, is removed when you start a new check, and can be deleted at any time by clearing the site data in your browser. This storage is strictly necessary for the service you asked for (Section 25 (2) No. 2 TDDDG); no consent is required.

The assessment is produced in two steps. A fixed set of rules on my server scores your answers. In addition — only while this feature is switched on — your answers and your description, and nothing about you as a person (no name, no address, no company), are sent to Anthropic, PBC, San Francisco, USA (“Anthropic”), whose Claude model writes the interpretation. Anthropic processes this input solely to provide the service and, under its commercial terms, does not use it to train its models. Anthropic processes data in the United States; the transfer rests on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR and, where applicable, Anthropic’s certification under the EU–U.S. Data Privacy Framework. A data-processing agreement pursuant to Art. 28 GDPR is in place.

Every completed check, every follow-up request (sprint, review, written assessment) and every booking request from /workflow/gespraech reaches me as an email sent through Brevo, the email service named under “Playbook”, under the same data-processing agreement. Only when you expressly ask for it is the written assessment, or a confirmation of your request, also sent to your own address. None of this signs you up for a newsletter or advertising.

The data is kept for as long as it takes to handle your request and any follow-up, and deleted once that purpose no longer applies, unless statutory retention periods require otherwise. The booking itself takes place with Calendly, under that provider’s own privacy policy, only once you choose to open the calendar.

09 · Web fonts

Self-hosted fonts

This website uses the Newsreader, Schibsted Grotesk and Caveat typefaces. The font files are self-hosted and served directly from this website’s own domain; no request is made to Google or any third-party font server when a page loads, and no data (in particular your IP address) is transmitted to Google for the purpose of displaying fonts.

10 · Encryption

SSL / TLS

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar. When encryption is active, the data you transmit to this site cannot be read by third parties.

11 · Your rights

Rights of data subjects

Within the scope of the applicable law you have, at any time, the right to:

• 15information about your stored data (Art. 15 GDPR);
• 16rectification of inaccurate data (Art. 16 GDPR);
• 17erasure of your data (Art. 17 GDPR);
• 18restriction of processing (Art. 18 GDPR);
• 20data portability (Art. 20 GDPR);
• 21object to processing based on Art. 6 (1)(f) GDPR (Art. 21 GDPR);
• 7·3withdraw any consent given, with effect for the future (Art. 7 (3) GDPR).

To exercise any of these rights, an email to mail@jakobehe.com is sufficient. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for me is: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

12 · Storage duration

How long data is kept

Unless a more specific period is stated above, your personal data remains with me only until the purpose for its processing no longer applies. If you assert a justified request for erasure or withdraw your consent, your data is deleted — unless I have other legally permissible reasons for storing it (e.g. statutory tax or commercial retention periods), in which case deletion takes place once those reasons cease to apply.

13 · Updates

Changes to this policy

I reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to reflect changes to my services. The current version applies to your next visit. Last updated · October 2026.